last executing test programs: 5m1.562763836s ago: executing program 1 (id=687): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x61c0, 0x780) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000140)={0xb, 0xfffffffc, 0x0, 0x95, 0x3, "5bb0fa7fb1d9d91cf7a20776f6e4764a7beda0"}) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000300), 0x4000, 0x0) 5m1.488673367s ago: executing program 1 (id=688): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x109942, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000600)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) unshare(0x20000400) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) write(r1, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file2\x00', 0xa00010, &(0x7f0000008940), 0x21, 0x4bf, &(0x7f00000009c0)="$eJzs3U9vVF0ZAPDn3nbon7fv26Is1KggomgIM+0AlbDCjcYQEiNx5QJqOzRNZzpNZ4q0sijfwUQSV7rwA7gwcWHCyr073bnBhQkq0VATF2PmzhQKnSlF2s6b3t8vObn33DOd5zyd3HPaM+2cAHLrXERsRcSpiLgXEZPd60m3xM1OaT/u5YtH89svHs0n0Wrd+UeStbevxa6vafuo+5yjEfGD70b8ONkbt7GxuTxXrVbWuvVSs7ZaamxsXl6qzS1WFisr5fLszOz09SvXyoeW69nab55/Z+nWD3//uy89++PWN3/a7tZEt213Hoepk3rhVZy24Yi4dRTBBmCom8+pQXeE/0saEZ+JiPPZ/T8ZQ9mrCQCcZK3WZLQmd9cBgJMuzdbAkrQYUeicp2mx2FnDOxPjabXeaF66X19fWeislU1FIb2/VK1Md9cKp6KQtOsz2fnrevmt+pWIOB0RPxsZy+rF+Xp1YZA/+ABAjn30ev7P3gv490hn/gcATrjRQXcAADh25n8AyB/zPwDkj/kfAPLH/A8A+WP+B4D8Mf8DQK58//btdmltdz//euHBxvpy/cHlhUpjuVhbny/O19dWi4v1+mL2mT21dz1ftV5fnbka6w9LzUqjWWpsbN6t1ddXmnezz/W+WykcS1YAwH5On3365yQitm6MZSV27eVgroaTLR10B4CBGRp0B4CBsdsX5Jff8YEeW/S+ofMnQmN7G54cTX+Ao3fx89b/Ia+s/0N+Wf+H/LL+D/nVaiX2/AeAnLHGDxzs/f8evP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAjk1kJUmL3b3AJyJNi8WIjyNiKgrJ/aVqZToiPomIP40URtr1mUF3GgD4QOnfku7+XxcnL0y83Xoq+c9IdoyIn/zizs8fzjWbazPt6//sXP/WWMST7vXyIPoPAHk09F6P3pmnd+bxHS9fPJrfKYffx/6ef7uzuWg77na3dFqGYzg7jkYhIsb/lXTrHcl7Z97b1uOI+Fyv/JNsbWSqu/Pp2/HbsT8+1vjpG/HTrK1zbH8vPnsIfYG8edoef272uv/SOJcde9//o9kI9eF2xr/tPeNf+mr8G+oz/p07SICxX0dc/cP3+sZ/HPGF4V7xk1fxkz7xLxwwx7988cvn+7W1fhlxMXrH3x2r1Kytlhobm5eXanOLlcXKSrk8OzM7ff3KtXIpW6Mu7axU7/X3G5c+2S//8T7xR9+R/9cOmP+v/nvvR1/ZJ/43vtr79T+zT/z2nPj1A8afG/9t3+272/EX+uT/rtf/0gHjP/vr5sIBHwoAHIPGxubyXLVaWRv0yU6HPi39ceIk1yeDHZeAo/f6ph90TwAAAAAAAAAAAAAAgH6O49+JBp0jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ9f/AgAA//9gOtV4") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x20200, 0x0, 0xfe, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00') 5m1.382077209s ago: executing program 1 (id=690): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a00002"], &(0x7f0000000280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x3, 0x0, &(0x7f0000044000)) syz_clone(0x6a000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) 5m0.980076087s ago: executing program 1 (id=707): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000046, &(0x7f0000000940)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@resgid}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nomblk_io_submit}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x553, &(0x7f0000000a40)="$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") utime(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff4a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r1}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 5m0.471790067s ago: executing program 1 (id=704): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESOCT=0x0], 0x48) semget(0x2, 0x2, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x21, 0x2, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = shmat(0xffffffffffffffff, &(0x7f0000ff8000/0x6000)=nil, 0x3000) shmdt(r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) 5m0.280737181s ago: executing program 1 (id=708): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0xa) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m0.280509811s ago: executing program 32 (id=708): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) madvise(&(0x7f00003ff000/0x2000)=nil, 0x2000, 0xa) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.995356802s ago: executing program 4 (id=4620): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, 0x0}, 0xe}], 0x1, 0x20000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$packet(0x11, 0xa, 0x300) lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000250c0000000000000100000008234000f9753543184b000005000000000000000000000085000000690000009500000000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000000000070f0000f8ff1600b803000008000000b70400000200000085000000820000008297180010000000182000"/76, @ANYBLOB="0000000009000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffff", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x24, &(0x7f0000000300)=""/36, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0xf, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000100)='device_pm_callback_end\x00', r2, 0x0, 0x100}, 0x18) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$packet(0x11, 0xa, 0x300) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000340), 0x610000, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000daedfc2a4ccbf9877b8f9ee2d04d204d51cda2eea07861dd52d0ec5d83c5cbd0d2a84fe1d798db5751035d90009c8a098e8aa904858f7dc43e0283df659267e4d342e579b3c4b1185f2580bc9d6c8ff8e87870c6ab5ddcbf7a062e4510937d28fc29e1000000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1}, 0x6d) 4.547478941s ago: executing program 0 (id=4637): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) 3.6126388s ago: executing program 0 (id=4630): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @empty}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000040000000000000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xd2b}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010328bd7000fedbdf251c0000000c00018008000100", @ANYRES32], 0x20}}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x7, 0x48081) listen(r1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) clock_gettime(0x0, &(0x7f0000000500)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00000005c0)={{r7, r8+60000000}}, 0x0) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) accept$inet6(r1, 0x0, 0x0) 3.61205636s ago: executing program 4 (id=4631): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0xffffffff}, 0x118920, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) write$tun(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0000080001050700030080"], 0x1011) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a030400000000000000000a0000050900010073797a3100000000500004804c0001800b00010074617267657400003c00028024000300733900000455afb9fdd672bad09dfb78c7699c74e891a0c7000000000000000008000240000000000c00010052415445455354000900020073797a32"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 3.494935742s ago: executing program 2 (id=4632): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 3.364162454s ago: executing program 3 (id=4634): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000018c0)={'team0\x00'}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2400c080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000200000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(r6, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000280)=[{0x2, 0x2, {0x0, 0xc25ecb9d809030cb, 0x4}, {0x1}, 0x2}, {0x3, 0x2, {0x1, 0xf0, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0x1}, {0x2, 0x2, {0x1, 0x0, 0x1}, {0x0, 0xff, 0x4}, 0x0, 0x1}, {0x1, 0x2, {0x0, 0x0, 0x3}, {0x1, 0x1}, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x3}, {0x2, 0xff, 0x2}, 0x2, 0xff}], 0xa0) socket$vsock_stream(0x28, 0x1, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x1800, &(0x7f0000000240)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0x101, 0x70bd25, 0x100000, {0x0, 0x0, 0x74, r1, {0xa, 0x9}, {0xb, 0xfff3}, {0xffff, 0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0xc4) 3.132718509s ago: executing program 4 (id=4635): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x103400, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x300) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000000140), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {}, {0x8, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x44}}, 0x0) modify_ldt$write2(0x11, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000080), &(0x7f00000000c0)={'L+', 0x6}, 0x16, 0x3) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.03935081s ago: executing program 3 (id=4636): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000380), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x10b601, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000040)=@known='system.posix_acl_default\x00') 2.628943579s ago: executing program 0 (id=4640): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000300)=ANY=[@ANYBLOB="14000000000000f6ffffffff00000000010005000000000b18000000000000000000000007000000830725e00000020077047c03d10ba5c118053101b98f2a75e87a0d5216a5558805b4dfc23812cba6ea7538189681e19f92149cff81778674cd8e24e7056b1a4626d8eb23c16a2ad3877ada4d915ebf697985505d4c6b591130bec76e1f814e71aeff6f0cf431e922705c9c09a6e50301dd38a7ae611db3d4be29b73c4e4534e6ad8cde58237a0c4282bf49701e7851b77cf82c0740afe8c4642691"], 0x30}, 0x5) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), r3) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000800)={0x34, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x10, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}]}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x400089c}, 0x4000080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x16, &(0x7f0000000400)={[{@grpjquota}, {@block_validity}, {@auto_da_alloc_val}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@user_xattr}, {@noblock_validity}, {@bh}, {@nolazytime}, {@grpid}, {@nogrpid}], [{@hash}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}, 0x0, 0x4f0, &(0x7f0000000640)="$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") r6 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=@newtfilter={0x88, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0xfff, 0x0, 0x200, 0xa}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.601756259s ago: executing program 0 (id=4642): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.52818866s ago: executing program 2 (id=4644): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x101000) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001940)={0x4c, 0x14, 0x905, 0x50bd25, 0x25dfdbfc, {0xa, 0x6, 0x0, 0x0, {0x4e26, 0x4e23, [0x224e, 0x7, 0x6, 0x5], [0xfffffffe, 0x1, 0x4], 0x0, [0x7fffffff, 0xfffffffc]}, 0x8, 0xfffffffd}}, 0x4c}}, 0x4814) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0xffa8) pipe2$watch_queue(&(0x7f00000001c0), 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 'queue0\x00', 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000200)='io_uring_link\x00', r5}, 0x18) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x1, 0x1, 0x0, 0x0, 0xa}}) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYRESDEC, @ANYRES64], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[@ANYBLOB="442300003b0007010100000000000000017c00000400fc802b2301"], 0x2344}, 0x1, 0x0, 0x0, 0x4000091}, 0x4c000) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x4, 0x0, 0x1}, {0x2, 0x1, 0x1}}], 0x10) 2.404332073s ago: executing program 2 (id=4646): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x1, 0x0, 0x10000202, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x9, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, 0x81, 0xfffffffd, 0x10, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1b, 0xfffffffc, 0x3, 0x0, 0x7, 0x0, 0xb97, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffd, 0x3ff, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x81, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440000, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x2, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x0, 0x6, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x8d4}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 2.312243565s ago: executing program 5 (id=4650): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x1b, 0x0, 0x0) setsockopt$llc_int(r2, 0x10c, 0x8, &(0x7f0000002440)=0xffffffff, 0x4) setpriority(0x2, 0xffffffffffffffff, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) getsockname$packet(r4, 0x0, &(0x7f00000004c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 2.278265435s ago: executing program 5 (id=4651): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(0x0, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) umount2(0x0, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x20000000000000f4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r4 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) 2.260050146s ago: executing program 2 (id=4652): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b1000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1034}, 0x18) truncate(0x0, 0x1000) r0 = fsopen(&(0x7f0000000000)='ramfs\x00', 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000480), 0x20080001, 0x100802) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r3 = dup3(r1, r2, 0x0) ioctl$MON_IOCG_STATS(r3, 0xc0109207, &(0x7f00000001c0)) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='rootcontext', &(0x7f0000000300)='--^$-\x00', 0x0) wait4(0x0, 0x0, 0x20000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000001c0)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x6000, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 2.232433986s ago: executing program 5 (id=4653): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x3, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x200000}, 0x50) socket$inet6_sctp(0xa, 0x801, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x24004004) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, 0x0, &(0x7f0000000240)=r0}, 0x20) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000540)={0x18, 0x0, {0x2, @empty, 'bridge0\x00'}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001000), r3) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x40) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000182"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x0) 2.229985527s ago: executing program 2 (id=4654): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 2.208375627s ago: executing program 5 (id=4655): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) writev(r0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, 0x0, 0x20000010) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0xa0}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r3, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c000280"], 0x58}, 0x1, 0x2}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.207501127s ago: executing program 4 (id=4656): socket$inet6_tcp(0xa, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000240)='#:#*-+((-}%$#\x00', 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000000)=@encrypted_update={'update ', 'ecryptfs', 0x20, 'user:', 'GPL\x00'}, 0x1a, 0x0) 1.960671302s ago: executing program 3 (id=4657): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x801}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 1.216303197s ago: executing program 0 (id=4658): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0xffffffffffffffff, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffe, 0x700, @empty, 0x4}, {0xa, 0x0, 0x0, @loopback, 0xfffffffc}, r3, 0x400}}, 0x48) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, r3, 0x30, 0x1, @ib={0x1b, 0x8000, 0x3, {"3f8c0d6cf777eaa6ace6d3ec00ed4771"}, 0x500e, 0x0, 0xf}}}, 0xa0) fgetxattr(r1, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x2ca}, 0x18) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYRESDEC=0x0, @ANYRES64=r1], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffa5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r7}, 0x3d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.215516016s ago: executing program 5 (id=4659): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x400}, 0x100002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendfile(r0, r0, 0x0, 0x800000009) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x27, 0x510, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0xfffffff8, 0x1, 0x10000, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000080)='./bus\x00', 0x147c7c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x24, 0x0, 0x53) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1000004, &(0x7f0000000340)=ANY=[], 0x1, 0x380, &(0x7f0000000940)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x7a22, 0xc000, 0x7, 0x337}) r2 = openat$ptmx(0xffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$TIOCCONS(r2, 0x541d) 1.110651719s ago: executing program 4 (id=4660): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e0001"], 0x28}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pi6 \x00'}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="63174800", @ANYRES16=r2, @ANYBLOB="07000000000000000000050000001c00038008000400000080000800020020000000080005007180bbda180001801400020073797a5f74756e000000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0x0, 0x130}, 0x1, 0x0, 0x0, 0x8080}, 0x4040800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x800000101, 0x7, 0x0) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x0) dup(0xffffffffffffffff) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x401, 0x8}]}) 1.106601699s ago: executing program 2 (id=4661): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x4, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000126abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3acb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={&(0x7f00000009c0)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x48000) 1.105794409s ago: executing program 3 (id=4662): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) 903.392582ms ago: executing program 4 (id=4663): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffd}, 0x94) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x20, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xc00, 0x0, 0x1, 0x0, 0x10000202, 0xfff, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x272, 0xb, 0x0, 0x9, 0x3, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x7, 0x4, 0x0, 0x0, 0x0, 0x81, 0xfffffffd, 0x10, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1b, 0xfffffffc, 0x3, 0x0, 0x7, 0x0, 0xb97, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0xfffffffd, 0x3ff, 0x0, 0x80003, 0x0, 0x0, 0x1, 0x0, 0x400, 0x0, 0x0, 0xffffffff, 0x40, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x81, 0x20, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0xffff, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x440000, 0x0, 0x2, 0x800000, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xae, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x2, 0x0, 0x0, 0x100001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x0, 0x6, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xff, 0x0, 0x0, 0x0, 0x0, 0x8d4}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 810.799944ms ago: executing program 0 (id=4664): perf_event_open(0x0, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000340)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = memfd_create(0x0, 0x5) fsetxattr$security_selinux(r1, 0x0, &(0x7f00000004c0)='system_u:object_r:hwdata_t:s0\x00', 0x1e, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0xfecc) fallocate(0xffffffffffffffff, 0x0, 0x6, 0x2000402) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 107.581058ms ago: executing program 3 (id=4665): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001340)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB], 0x88}}, 0x0) close(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0xc0) 510.551µs ago: executing program 5 (id=4666): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = gettid() rt_sigqueueinfo(r2, 0x1e, &(0x7f00000001c0)={0x30, 0x36, 0xffffffc3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1d, 0x8, &(0x7f00000037c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2}, 0x10}, 0x94) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r4}, 0x10) nanosleep(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x556, &(0x7f0000000280)="$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") openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) 0s ago: executing program 3 (id=4667): r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@orlov}, {@sysvgroups}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x51}}, {@nogrpid}]}, 0xfa, 0x489, &(0x7f0000000840)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000180)={{0x1, 0x0, 0x3, 0x3}, 0x8, 0xffffffffffffffff}) memfd_secret(0x80000) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00') socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa230180c20000000800450000b0000000000011907800000000ffffffff00004e20009c907801000000000000007b4b143b746115787b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424dbcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = open$dir(0x0, 0x400401, 0x80) name_to_handle_at(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYRESHEX=r0], &(0x7f0000000000), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x204600) kernel console output (not intermixed with test programs): [ 265.375796][ T29] audit: type=1400 audit(1759195939.660:22228): avc: denied { prog_load } for pid=13431 comm="syz.2.3506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 265.396082][ T29] audit: type=1400 audit(1759195939.660:22229): avc: denied { lock } for pid=13431 comm="syz.2.3506" path="socket:[34626]" dev="sockfs" ino=34626 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=0 [ 265.422139][ T29] audit: type=1400 audit(1759195939.850:22230): avc: denied { map_create } for pid=13426 comm="syz.4.3504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 265.625232][T13444] netlink: 'syz.2.3511': attribute type 27 has an invalid length. [ 265.640763][T13444] ip6tnl0: left promiscuous mode [ 265.647142][T13444] ip6tnl0: left allmulticast mode [ 265.655266][T13444] .`: left promiscuous mode [ 265.663945][T13444] wg2: left promiscuous mode [ 265.668559][T13444] wg2: left allmulticast mode [ 265.675983][T13444] geneve0: left allmulticast mode [ 265.686222][T13444] bridge4: left promiscuous mode [ 265.692661][ T8788] lo speed is unknown, defaulting to 1000 [ 265.708183][T13446] 8021q: adding VLAN 0 to HW filter on device .` [ 265.716737][T13446] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.725686][T13446] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 265.742595][ T8788] lo speed is unknown, defaulting to 1000 [ 265.748358][ T3381] lo speed is unknown, defaulting to 1000 [ 265.980455][T13471] lo speed is unknown, defaulting to 1000 [ 266.350184][T13483] netlink: 'syz.0.3526': attribute type 10 has an invalid length. [ 266.360593][T13483] team0: Port device dummy0 added [ 266.383639][T13487] netlink: 'syz.3.3528': attribute type 10 has an invalid length. [ 266.396900][T13487] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 266.948189][T13515] lo speed is unknown, defaulting to 1000 [ 267.038428][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 267.049271][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 267.059914][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 267.070383][T13521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3541'. [ 267.079498][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 267.090058][T13519] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3542'. [ 267.149618][T13530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3546'. [ 267.232411][T13533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3547'. [ 268.195536][T13568] futex_wake_op: wÞ£ÿ tries to shift op by -1; fix this program [ 268.462137][T13582] lo speed is unknown, defaulting to 1000 [ 268.782097][T13611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3575'. [ 268.792066][T13611] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3575'. [ 268.805119][T13611] erspan0: entered promiscuous mode [ 268.810901][T13611] gretap0: entered promiscuous mode [ 268.816621][T13611] debugfs: 'hsr0' already exists in 'hsr' [ 268.823539][T13611] Cannot create hsr debugfs directory [ 268.829424][T13611] hsr0: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 268.839595][T13611] hsr0: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 269.737548][T13635] netlink: 'syz.2.3589': attribute type 12 has an invalid length. [ 269.758588][T13631] lo speed is unknown, defaulting to 1000 [ 269.941645][T13649] wireguard0: entered promiscuous mode [ 269.947275][T13649] wireguard0: entered allmulticast mode [ 270.496341][ T29] kauditd_printk_skb: 681 callbacks suppressed [ 270.496359][ T29] audit: type=1400 audit(1759195944.921:22912): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 270.592870][ T29] audit: type=1400 audit(1759195945.021:22913): avc: denied { prog_load } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.632692][ T29] audit: type=1400 audit(1759195945.021:22914): avc: denied { create } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 270.653458][ T29] audit: type=1400 audit(1759195945.021:22915): avc: denied { map_create } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.672904][ T29] audit: type=1400 audit(1759195945.021:22916): avc: denied { prog_load } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.692170][ T29] audit: type=1400 audit(1759195945.021:22917): avc: denied { create } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 270.712921][ T29] audit: type=1400 audit(1759195945.021:22918): avc: denied { open } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 270.732501][ T29] audit: type=1400 audit(1759195945.021:22919): avc: denied { open } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 270.752097][ T29] audit: type=1400 audit(1759195945.021:22920): avc: denied { map_create } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.771505][ T29] audit: type=1400 audit(1759195945.021:22921): avc: denied { prog_load } for pid=13653 comm="syz.2.3596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 270.793984][T13658] lo speed is unknown, defaulting to 1000 [ 270.984725][T13670] lo speed is unknown, defaulting to 1000 [ 271.131113][T13674] netlink: 'syz.2.3603': attribute type 10 has an invalid length. [ 271.175412][T13674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.202540][T13674] .`: (slave batadv0): Enslaving as an active interface with an up link [ 272.664704][T13724] netlink: 'syz.2.3623': attribute type 13 has an invalid length. [ 272.768793][ T8788] lo speed is unknown, defaulting to 1000 [ 272.775734][ T8788] syz2: Port: 1 Link DOWN [ 272.780159][ T8788] lo speed is unknown, defaulting to 1000 [ 273.221170][T13741] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 273.270168][T13745] sch_fq: defrate 4294967295 ignored. [ 273.367461][T13753] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.399796][T13753] bond0: (slave macvlan0): Opening slave failed [ 274.039103][T13780] __nla_validate_parse: 4 callbacks suppressed [ 274.039121][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 274.058988][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 274.070072][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 274.081310][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 274.091757][T13780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3642'. [ 275.034136][T13817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3658'. [ 275.044368][T13817] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3658'. [ 275.065538][T13817] erspan0: entered promiscuous mode [ 275.081731][T13817] gretap0: entered promiscuous mode [ 275.108938][T13819] lo speed is unknown, defaulting to 1000 [ 275.321825][T13822] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3661'. [ 275.350443][T13822] hsr_slave_0: left promiscuous mode [ 275.357364][T13822] hsr_slave_1: left promiscuous mode [ 275.501209][ T29] kauditd_printk_skb: 506 callbacks suppressed [ 275.501228][ T29] audit: type=1400 audit(1759195949.911:23428): avc: denied { prog_load } for pid=13830 comm="syz.5.3665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.550321][ T29] audit: type=1400 audit(1759195949.951:23429): avc: denied { mounton } for pid=13830 comm="syz.5.3665" path="/571" dev="tmpfs" ino=3032 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 275.600572][ T29] audit: type=1400 audit(1759195949.971:23430): avc: denied { map_create } for pid=13833 comm="syz.5.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.619983][ T29] audit: type=1400 audit(1759195949.971:23431): avc: denied { prog_load } for pid=13833 comm="syz.5.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.639271][ T29] audit: type=1400 audit(1759195949.971:23432): avc: denied { create } for pid=13833 comm="syz.5.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 275.659974][ T29] audit: type=1400 audit(1759195949.971:23433): avc: denied { prog_load } for pid=13833 comm="syz.5.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 275.681725][ T29] audit: type=1400 audit(1759195949.971:23434): avc: denied { create } for pid=13833 comm="syz.5.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 275.702628][ T29] audit: type=1400 audit(1759195949.971:23435): avc: denied { create } for pid=13833 comm="syz.5.3666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 275.723611][ T29] audit: type=1400 audit(1759195950.001:23436): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 275.843159][ T29] audit: type=1400 audit(1759195950.081:23437): avc: denied { create } for pid=13835 comm="syz.5.3667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 275.955837][T13851] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3989 sclass=netlink_route_socket pid=13851 comm=syz.5.3668 [ 275.987470][T13854] lo speed is unknown, defaulting to 1000 [ 276.005632][T13855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3672'. [ 276.740716][T13870] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3679'. [ 276.859526][T13885] sch_fq: defrate 4294967295 ignored. [ 276.944057][T13888] lo speed is unknown, defaulting to 1000 [ 277.673008][T13912] veth5: entered promiscuous mode [ 277.678112][T13912] veth5: entered allmulticast mode [ 279.390149][T13981] lo speed is unknown, defaulting to 1000 [ 279.882116][T14001] .`: (slave batadv0): Releasing backup interface [ 280.762036][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 280.762050][ T29] audit: type=1400 audit(1759195955.182:23956): avc: denied { prog_load } for pid=14029 comm="syz.2.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.790525][ T29] audit: type=1400 audit(1759195955.212:23957): avc: denied { execmem } for pid=14029 comm="syz.2.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 280.843451][ T29] audit: type=1400 audit(1759195955.262:23958): avc: denied { map_create } for pid=14029 comm="syz.2.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.882184][T14031] lo speed is unknown, defaulting to 1000 [ 280.888084][ T29] audit: type=1400 audit(1759195955.292:23959): avc: denied { prog_load } for pid=14029 comm="syz.2.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 280.908486][ T29] audit: type=1400 audit(1759195955.292:23960): avc: denied { prog_load } for pid=14029 comm="syz.2.3745" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 281.005763][ T29] audit: type=1400 audit(1759195955.302:23961): avc: denied { read write } for pid=3306 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 281.030703][ T29] audit: type=1326 audit(1759195955.372:23962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.4.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 281.054437][ T29] audit: type=1326 audit(1759195955.372:23963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.4.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 281.079265][ T29] audit: type=1326 audit(1759195955.372:23964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14032 comm="syz.4.3747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 281.097689][T14046] audit: audit_backlog=65 > audit_backlog_limit=64 [ 281.222488][T14051] netlink: 'syz.0.3753': attribute type 7 has an invalid length. [ 281.358275][T14054] lo speed is unknown, defaulting to 1000 [ 281.631332][T14057] veth0_to_team: entered promiscuous mode [ 283.182393][T14114] __nla_validate_parse: 1 callbacks suppressed [ 283.182410][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3778'. [ 283.200979][T14114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3778'. [ 283.647821][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3786'. [ 283.657852][T14133] netlink: 'syz.3.3786': attribute type 30 has an invalid length. [ 283.670580][ T4139] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.679654][ T4139] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.698217][ T4139] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.716831][ T4139] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.761218][T14137] netlink: 'syz.3.3788': attribute type 10 has an invalid length. [ 283.771687][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3788'. [ 283.966583][T14150] netlink: 'syz.3.3794': attribute type 4 has an invalid length. [ 283.974412][T14150] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3794'. [ 283.988188][T14150] .`: renamed from $Hÿ (while UP) [ 284.123560][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3797'. [ 284.250148][T14163] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3800'. [ 284.424558][T14178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3807'. [ 284.495271][T14178] vlan0: entered allmulticast mode [ 284.501462][T14178] veth0_to_hsr: entered allmulticast mode [ 284.842828][T14204] lo speed is unknown, defaulting to 1000 [ 285.716652][T14223] netlink: 'syz.5.3825': attribute type 13 has an invalid length. [ 285.724605][T14223] netlink: 'syz.5.3825': attribute type 17 has an invalid length. [ 285.769461][ T29] kauditd_printk_skb: 736 callbacks suppressed [ 285.769491][ T29] audit: type=1400 audit(1759195960.183:24699): avc: denied { prog_load } for pid=14222 comm="syz.5.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.795131][ T29] audit: type=1400 audit(1759195960.183:24700): avc: denied { create } for pid=14222 comm="syz.5.3825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 285.834800][T14223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 285.890348][ T29] audit: type=1400 audit(1759195960.313:24701): avc: denied { prog_load } for pid=14225 comm="syz.5.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 285.928790][ T29] audit: type=1400 audit(1759195960.343:24702): avc: denied { open } for pid=14225 comm="syz.5.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 285.948279][ T29] audit: type=1400 audit(1759195960.343:24703): avc: denied { allowed } for pid=14225 comm="syz.5.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 285.980721][ T29] audit: type=1400 audit(1759195960.353:24704): avc: denied { map_create } for pid=14225 comm="syz.5.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 286.000345][ T29] audit: type=1400 audit(1759195960.383:24705): avc: denied { prog_load } for pid=14225 comm="syz.5.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 286.019721][ T29] audit: type=1400 audit(1759195960.383:24706): avc: denied { execmem } for pid=14225 comm="syz.5.3826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 286.087777][ T29] audit: type=1400 audit(1759195960.463:24707): avc: denied { prog_load } for pid=14227 comm="syz.5.3827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 286.108254][ T29] audit: type=1400 audit(1759195960.503:24708): avc: denied { execmem } for pid=14227 comm="syz.5.3827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 286.460194][T14245] netlink: 'syz.0.3833': attribute type 10 has an invalid length. [ 286.509002][T14245] netlink: 'syz.0.3833': attribute type 10 has an invalid length. [ 286.521532][T14245] team0: Port device dummy0 removed [ 286.530896][T14245] dummy0: entered promiscuous mode [ 286.549159][T14245] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 286.583257][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3835'. [ 286.620477][T14258] netlink: 'syz.2.3839': attribute type 13 has an invalid length. [ 286.669561][T14258] 8021q: adding VLAN 0 to HW filter on device .` [ 286.677709][T14258] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.688220][T14258] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 286.704187][ T8789] lo speed is unknown, defaulting to 1000 [ 286.711209][ T8789] syz2: Port: 1 Link ACTIVE [ 286.715790][ T8789] lo speed is unknown, defaulting to 1000 [ 287.183567][T14312] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3862'. [ 287.250768][T14315] lo speed is unknown, defaulting to 1000 [ 287.371940][T14318] netlink: 'syz.0.3864': attribute type 4 has an invalid length. [ 287.804698][ T8788] lo speed is unknown, defaulting to 1000 [ 287.811633][ T8788] syz2: Port: 1 Link DOWN [ 287.816140][ T8788] lo speed is unknown, defaulting to 1000 [ 288.701018][T14383] netlink: 'syz.5.3890': attribute type 1 has an invalid length. [ 288.901488][T14391] netlink: 'syz.0.3893': attribute type 7 has an invalid length. [ 288.974171][T14394] pim6reg: entered allmulticast mode [ 289.054917][T14394] pim6reg: left allmulticast mode [ 289.376218][T14398] tipc: Enabling of bearer rejected, failed to enable media [ 289.927485][T14427] netlink: 'syz.0.3904': attribute type 4 has an invalid length. [ 290.804704][T14429] Set syz1 is full, maxelem 65536 reached [ 290.808810][T14437] __nla_validate_parse: 2 callbacks suppressed [ 290.808830][T14437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3908'. [ 290.855301][T14437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3908'. [ 290.861748][T14441] loop4: detected capacity change from 0 to 512 [ 290.873870][T14441] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 290.886829][T14441] EXT4-fs (loop4): 1 truncate cleaned up [ 290.894356][T14441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.908447][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 290.908464][ T29] audit: type=1400 audit(1759195965.208:25410): avc: denied { mount } for pid=14439 comm="syz.4.3910" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 290.950437][ T29] audit: type=1400 audit(1759195965.218:25411): avc: denied { prog_run } for pid=14439 comm="syz.4.3910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 290.970295][ T29] audit: type=1400 audit(1759195965.255:25412): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 290.977815][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.990654][ T29] audit: type=1400 audit(1759195965.264:25413): avc: denied { create } for pid=14447 comm="syz.2.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.990750][ T29] audit: type=1400 audit(1759195965.264:25414): avc: denied { write } for pid=14447 comm="syz.2.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 290.990781][ T29] audit: type=1400 audit(1759195965.264:25415): avc: denied { read } for pid=14447 comm="syz.2.3912" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.043365][ T29] audit: type=1400 audit(1759195965.321:25416): avc: denied { open } for pid=14438 comm="syz.0.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 291.043401][ T29] audit: type=1400 audit(1759195965.321:25417): avc: denied { kernel } for pid=14438 comm="syz.0.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 291.045526][ T29] audit: type=1400 audit(1759195965.339:25418): avc: denied { execmem } for pid=14438 comm="syz.0.3909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 291.159856][ T29] audit: type=1400 audit(1759195965.433:25419): avc: denied { read } for pid=14449 comm="syz.4.3913" path="socket:[38274]" dev="sockfs" ino=38274 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 291.206584][T14448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3912'. [ 291.285945][T14462] lo speed is unknown, defaulting to 1000 [ 291.329808][T14466] bond2: left allmulticast mode [ 291.335894][T14466] bond2: left promiscuous mode [ 291.340948][T14466] bridge0: port 1(bond2) entered disabled state [ 291.365127][T14466] tls_set_device_offload_rx: netdev not found [ 292.033298][T14449] delete_channel: no stack [ 292.243629][T14491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3923'. [ 292.252622][T14491] netlink: 'syz.3.3923': attribute type 15 has an invalid length. [ 292.265797][T14491] vxlan1: entered promiscuous mode [ 292.861484][T14494] $Hÿ: (slave dummy0): Releasing backup interface [ 292.869023][T14494] dummy0: left promiscuous mode [ 292.986464][T14498] netlink: 'syz.0.3924': attribute type 10 has an invalid length. [ 292.994413][T14498] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3924'. [ 293.164553][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3925'. [ 295.637893][T14554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3944'. [ 295.849068][T14568] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3950'. [ 295.936476][T14575] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3953'. [ 296.307306][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 296.307338][ T29] audit: type=1326 audit(1759195970.251:25625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.458239][ T29] audit: type=1326 audit(1759195970.288:25626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.482211][ T29] audit: type=1326 audit(1759195970.288:25627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.507474][ T29] audit: type=1326 audit(1759195970.297:25628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.532157][ T29] audit: type=1326 audit(1759195970.297:25629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.557075][ T29] audit: type=1326 audit(1759195970.307:25630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.582256][ T29] audit: type=1326 audit(1759195970.307:25631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.606962][ T29] audit: type=1326 audit(1759195970.307:25632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.631711][ T29] audit: type=1326 audit(1759195970.307:25633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.644138][T14584] usb usb5: usbfs: process 14584 (syz.5.3955) did not claim interface 0 before use [ 296.656879][ T29] audit: type=1326 audit(1759195970.307:25634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14590 comm="syz.4.3956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 296.844321][T14607] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3971'. [ 297.003737][T14616] usb usb5: usbfs: process 14616 (syz.4.3972) did not claim interface 0 before use [ 297.172962][T14626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3966'. [ 297.818148][T14658] lo speed is unknown, defaulting to 1000 [ 298.090156][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3978'. [ 298.467038][T14683] lo speed is unknown, defaulting to 1000 [ 299.313406][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3987'. [ 299.322458][T14698] netlink: 'syz.5.3987': attribute type 15 has an invalid length. [ 299.341486][T14709] random: crng reseeded on system resumption [ 299.356592][T14698] vxlan0: entered promiscuous mode [ 299.377116][ T4133] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.385819][ T4133] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.394765][ T4133] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 299.406797][ T4133] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 300.222592][T14735] netlink: 'syz.5.4000': attribute type 27 has an invalid length. [ 300.313066][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4000'. [ 300.434997][T14735] vxcan1: left allmulticast mode [ 300.482054][T14735] vxlan0: left promiscuous mode [ 300.506941][ T4148] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.516525][ T4148] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.543973][ T4148] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.557698][T14745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4003'. [ 300.573262][ T4148] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.580010][T14747] netlink: 'syz.5.4004': attribute type 21 has an invalid length. [ 300.590771][T14747] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4004'. [ 300.601586][T14747] netlink: 'syz.5.4004': attribute type 4 has an invalid length. [ 300.609723][T14747] netlink: 'syz.5.4004': attribute type 5 has an invalid length. [ 300.617504][T14747] netlink: 3 bytes leftover after parsing attributes in process `syz.5.4004'. [ 300.890665][T14759] loop4: detected capacity change from 0 to 512 [ 300.919326][T14759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 301.079867][T14759] ext4 filesystem being mounted at /761/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.134346][T14759] EXT4-fs (loop4): shut down requested (1) [ 301.141023][T14759] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 301.174080][T14776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4013'. [ 301.183838][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 301.216108][T14773] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4012'. [ 301.263134][T14787] netlink: 'syz.3.4016': attribute type 1 has an invalid length. [ 301.275207][T14783] netlink: 'syz.2.4015': attribute type 10 has an invalid length. [ 301.286044][T14783] team0: Port device dummy0 added [ 301.294803][T14783] netlink: 'syz.2.4015': attribute type 10 has an invalid length. [ 301.303403][T14783] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 301.316526][T14783] team0: Failed to send options change via netlink (err -105) [ 301.324149][T14783] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 301.333367][T14783] team0: Port device dummy0 removed [ 301.340686][T14783] .`: (slave dummy0): Enslaving as an active interface with an up link [ 301.739117][ T29] kauditd_printk_skb: 316 callbacks suppressed [ 301.739136][ T29] audit: type=1400 audit(1759195975.340:25951): avc: denied { create } for pid=14814 comm="syz.2.4025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 301.808851][ T29] audit: type=1400 audit(1759195975.368:25952): avc: denied { write } for pid=5791 comm="kworker/1:11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39755 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.204337][T14834] __nla_validate_parse: 1 callbacks suppressed [ 302.204389][T14834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4034'. [ 302.256426][T14842] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4035'. [ 302.332965][T14834] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4034'. [ 302.366304][ T29] audit: type=1400 audit(1759195975.808:25953): avc: denied { write } for pid=14818 comm="syz.5.4027" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 302.390816][ T29] audit: type=1400 audit(1759195975.808:25954): avc: denied { open } for pid=14818 comm="syz.5.4027" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 302.416337][ T29] audit: type=1400 audit(1759195975.808:25955): avc: denied { ioctl } for pid=14818 comm="syz.5.4027" path="/dev/input/event1" dev="devtmpfs" ino=243 ioctlcmd=0x45ef scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 302.443177][ T29] audit: type=1326 audit(1759195975.817:25956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 302.467983][ T29] audit: type=1326 audit(1759195975.817:25957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 302.477369][T14856] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4036'. [ 302.493247][ T29] audit: type=1326 audit(1759195975.817:25958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 302.525398][ T29] audit: type=1326 audit(1759195975.817:25959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 302.550106][ T29] audit: type=1326 audit(1759195975.817:25960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14841 comm="syz.0.4035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 302.595712][T14852] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4036'. [ 302.693871][T14854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4037'. [ 302.727166][T14864] loop4: detected capacity change from 0 to 2048 [ 302.754133][T14864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 302.786699][T14869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4040'. [ 302.860716][T14871] netlink: 'syz.4.4039': attribute type 10 has an invalid length. [ 303.031813][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.243380][T14893] ip6erspan0: entered promiscuous mode [ 304.027690][T14924] loop4: detected capacity change from 0 to 512 [ 304.044603][T14924] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 304.054626][T14924] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.4057: bg 0: block 104: invalid block bitmap [ 304.068107][T14924] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 304.085163][T14924] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4057: invalid indirect mapped block 1 (level 1) [ 304.098724][T14924] EXT4-fs (loop4): 1 truncate cleaned up [ 304.105125][T14924] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.207840][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.582501][T14939] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4070'. [ 304.646255][T14944] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 304.811146][T14954] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4068'. [ 304.860011][T14954] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4068'. [ 304.894013][T14954] 0ªî{X¹¦: renamed from gretap0 [ 304.908822][T14954] 0ªî{X¹¦: entered allmulticast mode [ 304.914863][T14954] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 305.048858][T14950] netlink: zone id is out of range [ 305.054447][T14971] IPv6: NLM_F_CREATE should be specified when creating new route [ 305.056662][T14950] netlink: zone id is out of range [ 305.068171][T14950] netlink: zone id is out of range [ 305.073440][T14950] netlink: zone id is out of range [ 305.078643][T14950] netlink: zone id is out of range [ 305.083851][T14950] netlink: zone id is out of range [ 305.089018][T14950] netlink: zone id is out of range [ 305.094138][T14950] netlink: zone id is out of range [ 305.099378][T14950] netlink: zone id is out of range [ 305.185000][T14979] netlink: 'syz.0.4078': attribute type 13 has an invalid length. [ 305.213170][T14979] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 305.348109][T14981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14981 comm=syz.0.4078 [ 305.360896][T14981] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14981 comm=syz.0.4078 [ 305.500514][T14979] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.571292][T14980] lo speed is unknown, defaulting to 1000 [ 307.095213][ T29] kauditd_printk_skb: 287 callbacks suppressed [ 307.095231][ T29] audit: type=1326 audit(1759195980.345:26248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15020 comm="syz.2.4091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 307.157738][T15035] netlink: 'syz.2.4097': attribute type 27 has an invalid length. [ 307.337822][T15035] veth0_to_team: left promiscuous mode [ 307.979777][T15045] __nla_validate_parse: 3 callbacks suppressed [ 307.979871][T15045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4101'. [ 308.221549][T15061] lo speed is unknown, defaulting to 1000 [ 308.698092][T15069] netlink: 'syz.2.4105': attribute type 13 has an invalid length. [ 308.772048][T15069] 8021q: adding VLAN 0 to HW filter on device .` [ 308.775675][ T29] audit: type=1326 audit(1759195981.898:26249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.784671][T15069] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.801977][ T29] audit: type=1326 audit(1759195981.898:26250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.802009][ T29] audit: type=1326 audit(1759195981.898:26251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.802039][ T29] audit: type=1326 audit(1759195981.898:26252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.802096][ T29] audit: type=1326 audit(1759195981.898:26253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.802126][ T29] audit: type=1326 audit(1759195981.898:26254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.810100][T15071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15071 comm=syz.2.4105 [ 308.832372][ T29] audit: type=1326 audit(1759195981.898:26255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.832462][ T29] audit: type=1326 audit(1759195981.898:26256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.832491][ T29] audit: type=1326 audit(1759195981.898:26257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15066 comm="syz.0.4116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 308.931713][T15071] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15071 comm=syz.2.4105 [ 309.063072][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4107'. [ 309.085155][ T8789] lo speed is unknown, defaulting to 1000 [ 309.092110][ T8789] syz2: Port: 1 Link ACTIVE [ 309.094227][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4107'. [ 309.110087][ T8789] lo speed is unknown, defaulting to 1000 [ 309.284988][T15082] atomic_op ffff88813df9e528 conn xmit_atomic 0000000000000000 [ 309.295714][T15077] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4108'. [ 309.308694][T15082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4109'. [ 309.324612][T15084] netlink: 'syz.4.4110': attribute type 21 has an invalid length. [ 309.333744][T15084] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4110'. [ 309.478762][T15084] netlink: 'syz.4.4110': attribute type 4 has an invalid length. [ 309.486571][T15084] netlink: 'syz.4.4110': attribute type 5 has an invalid length. [ 309.494367][T15084] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4110'. [ 309.617120][T15098] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4114'. [ 309.855458][T15106] infiniband syz!: set down [ 309.860022][T15106] infiniband syz!: added team_slave_0 [ 309.875753][T15106] RDS/IB: syz!: added [ 309.879961][T15106] smc: adding ib device syz! with port count 1 [ 309.886250][T15106] smc: ib device syz! port 1 has pnetid [ 310.542794][T15118] lo speed is unknown, defaulting to 1000 [ 311.028765][T15131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4123'. [ 311.038807][T15131] netlink: 'syz.0.4123': attribute type 15 has an invalid length. [ 311.233712][T15131] vxlan0: entered promiscuous mode [ 311.241394][ T4104] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.278268][ T4104] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.286700][ T4104] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.554282][ T4104] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 311.615267][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4129'. [ 311.716649][T15146] pim6reg: entered allmulticast mode [ 311.750830][T15146] pim6reg: left allmulticast mode [ 311.868378][T15157] wg2: left promiscuous mode [ 311.873071][T15157] wg2: left allmulticast mode [ 311.925860][T15157] wg2: entered promiscuous mode [ 311.930874][T15157] wg2: entered allmulticast mode [ 312.696835][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 312.696851][ T29] audit: type=1326 audit(1759195985.584:26351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.726650][ T29] audit: type=1326 audit(1759195985.603:26352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.750246][ T29] audit: type=1326 audit(1759195985.603:26353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.773919][ T29] audit: type=1326 audit(1759195985.603:26354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.797492][ T29] audit: type=1326 audit(1759195985.603:26355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.821068][ T29] audit: type=1326 audit(1759195985.603:26356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.844661][ T29] audit: type=1326 audit(1759195985.603:26357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.868329][ T29] audit: type=1326 audit(1759195985.603:26358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.891911][ T29] audit: type=1326 audit(1759195985.603:26359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 312.915626][ T29] audit: type=1326 audit(1759195985.603:26360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15189 comm="syz.5.4144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 313.090206][T15190] gretap0: entered promiscuous mode [ 313.118813][T15190] 0ªî{X¹¦: renamed from gretap0 [ 313.187890][T15190] 0ªî{X¹¦: left promiscuous mode [ 313.193330][T15190] 0ªî{X¹¦: entered allmulticast mode [ 313.201025][T15190] net_ratelimit: 18 callbacks suppressed [ 313.201073][T15190] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 313.656520][T15210] __nla_validate_parse: 6 callbacks suppressed [ 313.656578][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4145'. [ 313.673882][T15210] netlink: 'syz.4.4145': attribute type 15 has an invalid length. [ 313.685898][T15210] vxlan0: entered promiscuous mode [ 313.692278][ T4104] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.701974][ T4104] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.715700][ T4104] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.724043][ T4104] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.910976][T15225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.919685][T15225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.463331][T15235] loop4: detected capacity change from 0 to 1024 [ 314.470110][T15235] EXT4-fs: Ignoring removed orlov option [ 314.498366][T15235] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.596614][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.630707][T15253] atomic_op ffff888149ea7d28 conn xmit_atomic 0000000000000000 [ 314.641060][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'. [ 314.892719][T15264] lo speed is unknown, defaulting to 1000 [ 315.705145][T15282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4171'. [ 315.899281][T15290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4171'. [ 316.191675][T15294] IPv6: NLM_F_CREATE should be specified when creating new route [ 316.231516][T15279] netlink: zone id is out of range [ 316.238608][T15279] netlink: zone id is out of range [ 316.243962][T15279] netlink: zone id is out of range [ 316.249234][T15279] netlink: zone id is out of range [ 316.254393][T15279] netlink: zone id is out of range [ 316.259564][T15279] netlink: zone id is out of range [ 316.264707][T15279] netlink: zone id is out of range [ 316.269892][T15279] netlink: zone id is out of range [ 316.275013][T15279] netlink: zone id is out of range [ 317.175371][T15328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4183'. [ 317.436518][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4187'. [ 317.447582][T15341] tipc: New replicast peer: 10.1.1.2 [ 317.452941][T15341] tipc: Enabled bearer , priority 10 [ 317.502680][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4187'. [ 317.541482][T15345] random: crng reseeded on system resumption [ 318.729072][T15363] IPv6: NLM_F_CREATE should be specified when creating new route [ 318.772111][T15367] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.847484][T15367] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.905865][T15367] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 318.927348][T15356] loop4: detected capacity change from 0 to 1764 [ 318.945092][T15356] net_ratelimit: 16 callbacks suppressed [ 318.945108][T15356] netlink: zone id is out of range [ 318.957289][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 318.957302][ T29] audit: type=1400 audit(1759195991.440:26599): avc: denied { mount } for pid=15355 comm="syz.4.4190" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 318.989673][T15367] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.006469][T15356] netlink: zone id is out of range [ 319.011694][T15356] netlink: zone id is out of range [ 319.016843][T15356] netlink: zone id is out of range [ 319.021957][T15356] netlink: zone id is out of range [ 319.027100][T15356] netlink: zone id is out of range [ 319.032247][T15356] netlink: zone id is out of range [ 319.037378][T15356] netlink: zone id is out of range [ 319.042557][T15356] netlink: zone id is out of range [ 319.047739][T15356] netlink: zone id is out of range [ 319.087574][ T4138] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.101838][ T4138] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.114543][ T4138] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.126680][ T4138] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.150853][ T29] audit: type=1400 audit(1759195991.627:26600): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 319.215340][ T29] audit: type=1326 audit(1759195991.684:26601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.240121][ T29] audit: type=1326 audit(1759195991.684:26602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.265241][ T29] audit: type=1326 audit(1759195991.712:26603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.290143][ T29] audit: type=1326 audit(1759195991.712:26604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.314988][ T29] audit: type=1326 audit(1759195991.712:26605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.339719][ T29] audit: type=1326 audit(1759195991.712:26606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.364510][ T29] audit: type=1326 audit(1759195991.712:26607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.385463][T15380] loop4: detected capacity change from 0 to 8192 [ 319.389459][ T29] audit: type=1326 audit(1759195991.712:26608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15377 comm="syz.3.4195" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 319.415871][T15376] syz!: rxe_newlink: already configured on team_slave_0 [ 319.477046][T15380] loop4: p1[EZD] p2 p4 [ 319.481363][T15380] loop4: p1 start 150996992 is beyond EOD, truncated [ 319.490486][T15380] loop4: p4 size 281856 extends beyond EOD, truncated [ 320.208494][T15387] pim6reg: entered allmulticast mode [ 320.219872][T15387] pim6reg: left allmulticast mode [ 320.327308][T15403] tipc: Enabled bearer , priority 0 [ 320.355664][T15399] pim6reg: entered allmulticast mode [ 320.364171][T15399] pim6reg: left allmulticast mode [ 320.405069][T15404] lo speed is unknown, defaulting to 1000 [ 320.460851][T15407] team0: Port device geneve1 removed [ 320.514428][T15407] netlink: 'syz.4.4204': attribute type 10 has an invalid length. [ 320.522291][T15407] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4204'. [ 320.538115][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4207'. [ 320.942299][T15422] vxcan1: entered allmulticast mode [ 321.196233][T15437] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.277068][T15437] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.337289][T15437] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.391513][T15437] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 321.449083][ T4138] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.467556][ T4138] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.479808][ T4138] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.491226][ T4138] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 321.829173][T15468] netlink: 'syz.3.4222': attribute type 10 has an invalid length. [ 322.132403][T15470] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 322.138967][T15470] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 322.147748][T15470] vhci_hcd vhci_hcd.0: Device attached [ 322.405709][ T8788] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 322.474194][ T4096] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.514061][ T4096] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.539706][T15486] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4225'. [ 322.566241][ T4096] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.585635][ T4096] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.596251][T15490] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4225'. [ 322.629264][T15486] gretap0: entered promiscuous mode [ 322.646283][T15490] 0ªî{X¹¦: renamed from gretap0 [ 322.652440][T15490] 0ªî{X¹¦: left promiscuous mode [ 322.657563][T15490] 0ªî{X¹¦: entered allmulticast mode [ 322.734240][T15495] IPv6: NLM_F_CREATE should be specified when creating new route [ 323.440302][T15471] vhci_hcd: connection reset by peer [ 323.453140][ T4138] vhci_hcd: stop threads [ 323.457463][ T4138] vhci_hcd: release socket [ 323.461889][ T4138] vhci_hcd: disconnect device [ 324.344044][T15512] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 324.345779][T15516] pim6reg: entered allmulticast mode [ 324.371551][T15516] pim6reg: left allmulticast mode [ 324.411288][T15514] wg2: entered promiscuous mode [ 324.417680][T15514] wg2: entered allmulticast mode [ 324.875121][T15529] lo speed is unknown, defaulting to 1000 [ 325.061798][T15544] .`: (slave dummy0): Releasing backup interface [ 325.083946][T15544] netlink: 'syz.2.4245': attribute type 10 has an invalid length. [ 325.091879][T15544] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4245'. [ 325.126236][ T29] kauditd_printk_skb: 286 callbacks suppressed [ 325.126251][ T29] audit: type=1326 audit(1759195997.212:26895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.176742][ T29] audit: type=1326 audit(1759195997.250:26896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.200719][ T29] audit: type=1326 audit(1759195997.250:26897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.225585][ T29] audit: type=1326 audit(1759195997.250:26898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.249222][ T29] audit: type=1326 audit(1759195997.250:26899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.272833][ T29] audit: type=1326 audit(1759195997.250:26900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.296476][ T29] audit: type=1326 audit(1759195997.250:26901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.320194][ T29] audit: type=1326 audit(1759195997.250:26902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.343893][ T29] audit: type=1326 audit(1759195997.250:26903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.367787][ T29] audit: type=1326 audit(1759195997.250:26904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15543 comm="syz.5.4249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 325.461987][T15550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15550 comm=syz.0.4250 [ 325.555763][ T8789] page_pool_release_retry() stalled pool shutdown: id 37, 51 inflight 241 sec [ 325.994347][T15572] loop4: detected capacity change from 0 to 1024 [ 326.034248][T15572] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.043691][T15577] lo speed is unknown, defaulting to 1000 [ 326.056951][T15572] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #11: comm syz.4.4251: iget: bogus i_mode (1) [ 326.086713][T15572] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4251: couldn't read orphan inode 11 (err -117) [ 326.099776][T15572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.148325][T15582] lo speed is unknown, defaulting to 1000 [ 326.302501][T15580] lo speed is unknown, defaulting to 1000 [ 326.357303][T15552] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.660628][T15592] netlink: 'syz.5.4263': attribute type 10 has an invalid length. [ 327.254773][T15549] syz.4.4251 (15549) used greatest stack depth: 6392 bytes left [ 327.449845][T15610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4271'. [ 327.605813][T15623] netlink: 'syz.2.4282': attribute type 10 has an invalid length. [ 327.654161][T15625] sock: sock_timestamping_bind_phc: sock not bind to device [ 327.814282][ T8788] usb 11-1: enqueue for inactive port 0 [ 327.821085][ T8788] usb 11-1: enqueue for inactive port 0 [ 327.835908][T15635] random: crng reseeded on system resumption [ 327.966387][ T8788] vhci_hcd: vhci_device speed not set [ 328.115072][T15640] netlink: 'syz.0.4277': attribute type 10 has an invalid length. [ 328.125975][T15640] team0: Port device dummy0 added [ 328.136096][T15640] netlink: 'syz.0.4277': attribute type 10 has an invalid length. [ 328.225404][T15640] team0: Port device dummy0 removed [ 328.233919][T15640] dummy0: entered promiscuous mode [ 328.239519][T15640] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 328.854806][ T3381] IPVS: starting estimator thread 0... [ 328.958391][T15661] IPVS: using max 2688 ests per chain, 134400 per kthread [ 329.011686][T15669] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4286'. [ 329.642805][T15649] syz.5.4280 (15649) used greatest stack depth: 6312 bytes left [ 329.967471][T15695] ref_ctr increment failed for inode: 0x1286 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811a9ded40 [ 329.976740][T15686] lo speed is unknown, defaulting to 1000 [ 329.992893][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4293'. [ 330.040917][T15699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4290'. [ 330.613560][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 330.613578][ T29] audit: type=1326 audit(1759196002.339:27058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.645642][ T29] audit: type=1326 audit(1759196002.339:27059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.670533][ T29] audit: type=1326 audit(1759196002.339:27060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.695583][ T29] audit: type=1326 audit(1759196002.339:27061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.720357][ T29] audit: type=1326 audit(1759196002.339:27062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.744879][ T29] audit: type=1326 audit(1759196002.339:27063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.768703][ T29] audit: type=1326 audit(1759196002.339:27064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.775345][T15708] serio: Serial port ptm0 [ 330.793737][ T29] audit: type=1326 audit(1759196002.339:27065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.822531][ T29] audit: type=1326 audit(1759196002.339:27066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.847131][ T29] audit: type=1326 audit(1759196002.339:27067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15702 comm="syz.2.4307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 330.884350][T15701] loop4: detected capacity change from 0 to 1024 [ 330.891182][T15701] EXT4-fs: Ignoring removed orlov option [ 330.897000][T15701] EXT4-fs: Ignoring removed nomblk_io_submit option [ 330.981651][T15701] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.021375][T15717] sch_fq: defrate 4294967295 ignored. [ 331.045377][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.049716][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4299'. [ 331.065471][T15717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4299'. [ 331.098686][T15721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.109417][T15721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.151324][T15723] bridge0: port 1(vlan0) entered blocking state [ 331.157715][T15723] bridge0: port 1(vlan0) entered disabled state [ 331.206553][T15723] vlan0: entered allmulticast mode [ 331.211749][T15723] bridge0: entered allmulticast mode [ 331.235664][T15723] vlan0: left allmulticast mode [ 331.240608][T15723] bridge0: left allmulticast mode [ 331.580962][T15737] netlink: 'syz.2.4308': attribute type 30 has an invalid length. [ 331.810809][T15747] loop4: detected capacity change from 0 to 1024 [ 331.844418][T15747] EXT4-fs: Ignoring removed oldalloc option [ 331.877478][T15747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 331.896825][T15747] ext4 filesystem being mounted at /812/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.922231][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 331.931191][T15747] netlink: 'syz.4.4310': attribute type 1 has an invalid length. [ 331.938952][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 331.975444][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 331.984434][T15747] netlink: 'syz.4.4310': attribute type 1 has an invalid length. [ 331.992197][T15747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4310'. [ 332.061549][T15747] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.4310: Freeing blocks not in datazone - block = 0, count = 16 [ 332.077617][T15747] netlink: 'syz.4.4310': attribute type 63 has an invalid length. [ 332.098642][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 332.152714][T15756] loop4: detected capacity change from 0 to 128 [ 332.186043][T15756] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 332.198859][T15756] ext4 filesystem being mounted at /814/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 332.306518][ T3306] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.374779][T15763] netlink: 'syz.0.4323': attribute type 13 has an invalid length. [ 332.383558][T15763] netlink: 'syz.0.4323': attribute type 17 has an invalid length. [ 332.414985][T15763] $Hÿ: left promiscuous mode [ 332.420106][T15763] dummy0: left promiscuous mode [ 332.429835][T15763] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 332.451864][T15767] loop4: detected capacity change from 0 to 2048 [ 332.454766][T15763] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.467737][T15763] net_ratelimit: 16 callbacks suppressed [ 332.467796][T15763] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 332.496674][T15767] loop4: p1 p3 p4 [ 332.507341][T15767] loop4: p4 size 589824 extends beyond EOD, truncated [ 332.604736][T15781] lo speed is unknown, defaulting to 1000 [ 332.757226][T15787] wireguard0: entered promiscuous mode [ 332.762826][T15787] wireguard0: entered allmulticast mode [ 333.163952][T15795] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.223895][T15795] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.299098][T15795] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.381614][T15795] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.455807][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.477484][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.502917][ T12] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.515328][ T12] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 333.840184][T15792] syz.2.4321 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 333.855251][T15792] CPU: 0 UID: 0 PID: 15792 Comm: syz.2.4321 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 333.855346][T15792] Tainted: [W]=WARN [ 333.855353][T15792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.855368][T15792] Call Trace: [ 333.855389][T15792] [ 333.855399][T15792] __dump_stack+0x1d/0x30 [ 333.855425][T15792] dump_stack_lvl+0xe8/0x140 [ 333.855451][T15792] dump_stack+0x15/0x1b [ 333.855472][T15792] dump_header+0x81/0x220 [ 333.855536][T15792] oom_kill_process+0x342/0x400 [ 333.855579][T15792] out_of_memory+0x979/0xb80 [ 333.855641][T15792] try_charge_memcg+0x5e6/0x9e0 [ 333.855674][T15792] obj_cgroup_charge_pages+0xa6/0x150 [ 333.855760][T15792] __memcg_kmem_charge_page+0x9f/0x170 [ 333.855805][T15792] __alloc_frozen_pages_noprof+0x188/0x360 [ 333.855901][T15792] alloc_pages_mpol+0xb3/0x250 [ 333.855947][T15792] alloc_pages_noprof+0x90/0x130 [ 333.856011][T15792] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 333.856064][T15792] __kvmalloc_node_noprof+0x30f/0x4e0 [ 333.856103][T15792] ? ip_set_alloc+0x1f/0x30 [ 333.856214][T15792] ? ip_set_alloc+0x1f/0x30 [ 333.856243][T15792] ? hash_netiface_create+0x21b/0x740 [ 333.856275][T15792] ? __kmalloc_cache_noprof+0x189/0x320 [ 333.856398][T15792] ip_set_alloc+0x1f/0x30 [ 333.856423][T15792] hash_netiface_create+0x282/0x740 [ 333.856527][T15792] ? __pfx_hash_netiface_create+0x10/0x10 [ 333.856622][T15792] ip_set_create+0x3c9/0x960 [ 333.856670][T15792] ? __nla_parse+0x40/0x60 [ 333.856720][T15792] nfnetlink_rcv_msg+0x4c3/0x590 [ 333.856771][T15792] netlink_rcv_skb+0x123/0x220 [ 333.856821][T15792] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 333.856858][T15792] nfnetlink_rcv+0x16b/0x1690 [ 333.856893][T15792] ? nlmon_xmit+0x4f/0x60 [ 333.856912][T15792] ? consume_skb+0x49/0x150 [ 333.856941][T15792] ? nlmon_xmit+0x4f/0x60 [ 333.856985][T15792] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 333.857025][T15792] ? __dev_queue_xmit+0x1200/0x2000 [ 333.857081][T15792] ? __dev_queue_xmit+0x182/0x2000 [ 333.857119][T15792] ? ref_tracker_free+0x37d/0x3e0 [ 333.857164][T15792] ? __netlink_deliver_tap+0x4dc/0x500 [ 333.857204][T15792] netlink_unicast+0x5bd/0x690 [ 333.857266][T15792] netlink_sendmsg+0x58b/0x6b0 [ 333.857363][T15792] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.857394][T15792] __sock_sendmsg+0x145/0x180 [ 333.857450][T15792] ____sys_sendmsg+0x31e/0x4e0 [ 333.857493][T15792] ___sys_sendmsg+0x17b/0x1d0 [ 333.857597][T15792] __x64_sys_sendmsg+0xd4/0x160 [ 333.857640][T15792] x64_sys_call+0x191e/0x2ff0 [ 333.857665][T15792] do_syscall_64+0xd2/0x200 [ 333.857690][T15792] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 333.857742][T15792] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 333.857786][T15792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.857886][T15792] RIP: 0033:0x7f10f87feec9 [ 333.857912][T15792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.857936][T15792] RSP: 002b:00007f10f725f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.857960][T15792] RAX: ffffffffffffffda RBX: 00007f10f8a55fa0 RCX: 00007f10f87feec9 [ 333.857977][T15792] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 000000000000000b [ 333.857993][T15792] RBP: 00007f10f8881f91 R08: 0000000000000000 R09: 0000000000000000 [ 333.858007][T15792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.858087][T15792] R13: 00007f10f8a56038 R14: 00007f10f8a55fa0 R15: 00007ffc0b95eb38 [ 333.858112][T15792] [ 333.858125][T15792] memory: usage 307200kB, limit 307200kB, failcnt 568 [ 334.132355][T15824] netlink: 'syz.4.4330': attribute type 13 has an invalid length. [ 334.136236][T15792] memory+swap: usage 376368kB, limit 9007199254740988kB, failcnt 0 [ 334.140672][T15824] netlink: 'syz.4.4330': attribute type 17 has an invalid length. [ 334.143518][T15824] 0ªî{X¹¦: left allmulticast mode [ 334.147933][T15792] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 334.172178][T15792] Memory cgroup stats for [ 334.278442][T15792] /syz2: [ 334.278867][T15792] cache 0 [ 334.281736][T15824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.302354][T15792] rss 0 [ 334.305158][T15792] shmem 0 [ 334.308106][T15792] mapped_file 0 [ 334.311654][T15792] dirty 0 [ 334.315696][T15792] writeback 0 [ 334.318977][T15792] workingset_refault_anon 2508 [ 334.324689][T15792] workingset_refault_file 528 [ 334.329373][T15792] swap 70828032 [ 334.332861][T15792] swapcached 4096 [ 334.337405][T15792] pgpgin 615301 [ 334.340855][T15792] pgpgout 615299 [ 334.345332][T15792] pgfault 563125 [ 334.348880][T15792] pgmajfault 240 [ 334.352426][T15792] inactive_anon 0 [ 334.357034][T15792] active_anon 4096 [ 334.360768][T15792] inactive_file 0 [ 334.364417][T15792] active_file 4096 [ 334.369004][T15792] unevictable 0 [ 334.372461][T15792] hierarchical_memory_limit 314572800 [ 334.378811][T15792] hierarchical_memsw_limit 9223372036854771712 [ 334.384988][T15792] total_cache 0 [ 334.389519][T15792] total_rss 0 [ 334.392864][T15792] total_shmem 0 [ 334.396317][T15792] total_mapped_file 0 [ 334.401287][T15792] total_dirty 0 [ 334.404746][T15792] total_writeback 0 [ 334.409460][T15792] total_workingset_refault_anon 2508 [ 334.414802][T15792] total_workingset_refault_file 528 [ 334.420962][T15792] total_swap 70828032 [ 334.424981][T15792] total_swapcached 4096 [ 334.429199][T15792] total_pgpgin 615301 [ 334.434170][T15792] total_pgpgout 615299 [ 334.438229][T15792] total_pgfault 563125 [ 334.442544][T15792] total_pgmajfault 240 [ 334.446602][T15792] total_inactive_anon 0 [ 334.450757][T15792] total_active_anon 4096 [ 334.455005][T15792] total_inactive_file 0 [ 334.459166][T15792] total_active_file 4096 [ 334.463417][T15792] total_unevictable 0 [ 334.467389][T15792] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.4321,pid=15791,uid=0 [ 334.483059][T15792] Memory cgroup out of memory: Killed process 15791 (syz.2.4321) total-vm:96004kB, anon-rss:1136kB, file-rss:22184kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:0 [ 334.541924][T15826] loop4: detected capacity change from 0 to 512 [ 334.560069][T15826] EXT4-fs (loop4): too many log groups per flexible block group [ 334.567958][T15826] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 334.575085][T15826] EXT4-fs (loop4): mount failed [ 334.587214][T15826] loop4: detected capacity change from 0 to 512 [ 334.594037][T15826] EXT4-fs: Ignoring removed nobh option [ 334.624328][T15826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.4331: corrupted inode contents [ 334.658371][T15826] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.4331: mark_inode_dirty error [ 334.708474][T15826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.4331: corrupted inode contents [ 334.742044][T15826] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.4331: mark_inode_dirty error [ 334.772683][T15826] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.4331: Failed to acquire dquot type 0 [ 334.793915][T15826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4331: corrupted inode contents [ 334.853741][T15838] wireguard0: entered promiscuous mode [ 334.853938][T15792] syz.2.4321 (15792) used greatest stack depth: 5128 bytes left [ 334.859348][T15838] wireguard0: entered allmulticast mode [ 334.872995][T15826] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.4331: mark_inode_dirty error [ 334.937934][T15826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4331: corrupted inode contents [ 334.984705][T15826] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.4331: mark_inode_dirty error [ 335.019260][T15826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4331: corrupted inode contents [ 335.032550][T15826] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 335.042468][T15826] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.4331: corrupted inode contents [ 335.066545][T15826] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.4331: mark_inode_dirty error [ 335.165102][T15826] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 335.175848][T15826] EXT4-fs (loop4): 1 truncate cleaned up [ 335.183574][T15826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 335.197375][T15826] ext4 filesystem being mounted at /819/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.235462][T15826] __nla_validate_parse: 1 callbacks suppressed [ 335.235480][T15826] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4331'. [ 335.273097][ T3306] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.181344][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 336.181363][ T29] audit: type=1326 audit(1759196007.559:27290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.247078][ T29] audit: type=1326 audit(1759196007.597:27291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.248957][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 336.270553][ T29] audit: type=1326 audit(1759196007.597:27292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.280751][T15855] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 336.302977][ T29] audit: type=1326 audit(1759196007.597:27293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.338007][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 336.351053][T15860] loop4: detected capacity change from 0 to 256 [ 336.364627][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 336.373543][T15855] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 336.381347][T15855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4339'. [ 336.396452][T15861] netlink: 'syz.3.4339': attribute type 63 has an invalid length. [ 336.413214][ T29] audit: type=1326 audit(1759196007.690:27294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.436856][ T29] audit: type=1326 audit(1759196007.690:27295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.448719][T15865] sch_fq: defrate 4294967295 ignored. [ 336.460679][ T29] audit: type=1326 audit(1759196007.774:27296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.489539][ T29] audit: type=1326 audit(1759196007.774:27297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.513156][ T29] audit: type=1326 audit(1759196007.774:27298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15853 comm="syz.0.4337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 336.575239][ T29] audit: type=1326 audit(1759196007.803:27299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15864 comm="syz.2.4342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 336.632456][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 336.641353][T15868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4342'. [ 336.760781][T15878] netlink: 'syz.3.4346': attribute type 10 has an invalid length. [ 336.782732][T15878] .`: (slave dummy0): Releasing backup interface [ 336.795806][T15878] netlink: 'syz.3.4346': attribute type 10 has an invalid length. [ 336.807951][T15878] .`: (slave dummy0): Enslaving as an active interface with an up link [ 336.852078][T15874] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15874 comm=syz.2.4345 [ 337.332644][T15919] delete_channel: no stack [ 337.661879][T15927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4359'. [ 337.685829][T15929] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4360'. [ 337.704014][T15929] loop4: detected capacity change from 0 to 2048 [ 337.724615][T15929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 337.871906][T15933] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 337.887229][T15933] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 337.899712][T15933] EXT4-fs (loop4): This should not happen!! Data will be lost [ 337.899712][T15933] [ 337.909511][T15933] EXT4-fs (loop4): Total free blocks count 0 [ 337.915626][T15933] EXT4-fs (loop4): Free/Dirty block details [ 337.921527][T15933] EXT4-fs (loop4): free_blocks=2415919104 [ 337.927288][T15933] EXT4-fs (loop4): dirty_blocks=2400 [ 337.932636][T15933] EXT4-fs (loop4): Block reservation details [ 337.938645][T15933] EXT4-fs (loop4): i_reserved_data_blocks=150 [ 337.974604][T15929] sctp: [Deprecated]: syz.4.4360 (pid 15929) Use of int in maxseg socket option. [ 337.974604][T15929] Use struct sctp_assoc_value instead [ 338.003095][ T4138] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 338.266085][T15950] loop4: detected capacity change from 0 to 1024 [ 338.273207][T15950] EXT4-fs: Ignoring removed nobh option [ 338.279874][T15950] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 338.289445][T15950] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 338.299550][T15950] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 338.636784][T15955] lo speed is unknown, defaulting to 1000 [ 338.680153][T15961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4370'. [ 339.332317][T15977] tipc: Enabling of bearer rejected, failed to enable media [ 340.071066][T15993] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.206795][T15993] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.407438][T15993] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.520662][T15993] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.640931][ T4090] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.728902][ T4090] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.742951][ T4090] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.759187][ T4090] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.636926][T16036] tipc: Enabled bearer , priority 0 [ 342.581617][T16050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4397'. [ 342.592874][T16050] IPVS: Error connecting to the multicast addr [ 342.626899][T16052] SELinux: Context system_u:object_r:udev_helper_exec_t:s0 is not valid (left unmapped). [ 342.666177][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 342.666193][ T29] audit: type=1400 audit(1759196013.584:27496): avc: denied { mac_admin } for pid=16051 comm="syz.3.4398" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 342.693720][ T29] audit: type=1400 audit(1759196013.603:27497): avc: denied { relabelto } for pid=16051 comm="syz.3.4398" name="file0" dev="tmpfs" ino=4853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 342.720989][ T29] audit: type=1400 audit(1759196013.603:27498): avc: denied { associate } for pid=16051 comm="syz.3.4398" name="file0" dev="tmpfs" ino=4853 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:udev_helper_exec_t:s0" [ 342.878584][ T3381] tipc: Node number set to 1462455072 [ 343.063967][ T29] audit: type=1400 audit(1759196013.724:27499): avc: denied { ioctl } for pid=16051 comm="syz.3.4398" path="/921/file0" dev="tmpfs" ino=4853 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 343.093834][ T29] audit: type=1400 audit(1759196013.865:27500): avc: denied { unlink } for pid=3298 comm="syz-executor" name="file0" dev="tmpfs" ino=4853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:udev_helper_exec_t:s0" [ 343.370261][T16074] lo speed is unknown, defaulting to 1000 [ 343.481854][T16076] lo speed is unknown, defaulting to 1000 [ 344.163826][ T29] audit: type=1326 audit(1759196015.025:27501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.0.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 344.187550][ T29] audit: type=1326 audit(1759196015.025:27502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.0.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 344.211190][ T29] audit: type=1326 audit(1759196015.025:27503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.0.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd2934ad710 code=0x7ffc0000 [ 344.234853][ T29] audit: type=1326 audit(1759196015.025:27504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16088 comm="syz.0.4408" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 344.285881][T16093] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4409'. [ 344.467917][ T29] audit: type=1400 audit(1759196015.277:27505): avc: denied { getopt } for pid=16100 comm="syz.5.4413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 346.043394][T16125] lo speed is unknown, defaulting to 1000 [ 346.415583][T16122] lo speed is unknown, defaulting to 1000 [ 346.874303][T16127] loop4: detected capacity change from 0 to 2048 [ 347.050597][T16127] loop4: unable to read partition table [ 347.087114][T16127] loop4: partition table beyond EOD, truncated [ 347.093345][T16127] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 347.370598][T16133] loop4: detected capacity change from 0 to 256 [ 347.410807][T16133] msdos: Bad value for 'fmask' [ 347.444841][T16133] sch_fq: defrate 4294967295 ignored. [ 347.542942][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 347.553024][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4421'. [ 347.624765][T16137] lo speed is unknown, defaulting to 1000 [ 347.758021][T16139] lo speed is unknown, defaulting to 1000 [ 347.813083][T16145] netlink: 'syz.0.4434': attribute type 13 has an invalid length. [ 348.179098][T16155] netlink: 'syz.0.4426': attribute type 21 has an invalid length. [ 348.211204][T16155] netlink: 'syz.0.4426': attribute type 10 has an invalid length. [ 349.412733][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 349.412754][ T29] audit: type=1326 audit(1759196019.908:27559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.444609][ T29] audit: type=1326 audit(1759196019.908:27560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.469307][ T29] audit: type=1326 audit(1759196019.908:27561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.493843][ T29] audit: type=1326 audit(1759196019.908:27562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.518568][ T29] audit: type=1326 audit(1759196019.908:27563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10f87fd710 code=0x7ffc0000 [ 349.543466][ T29] audit: type=1326 audit(1759196019.908:27564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.568215][ T29] audit: type=1326 audit(1759196019.908:27565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.592776][ T29] audit: type=1326 audit(1759196019.908:27566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.617396][ T29] audit: type=1326 audit(1759196019.908:27567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 349.642014][ T29] audit: type=1326 audit(1759196019.908:27568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16187 comm="syz.2.4437" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f87feec9 code=0x7ffc0000 [ 350.538034][T16196] lo speed is unknown, defaulting to 1000 [ 350.813728][T16200] sch_fq: defrate 4294967295 ignored. [ 350.832350][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4439'. [ 350.841382][T16200] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4439'. [ 350.873416][T16206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4442'. [ 350.895634][T16206] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.906675][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4441'. [ 350.918166][T16206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4442'. [ 350.939417][T16206] netlink: 'syz.4.4442': attribute type 10 has an invalid length. [ 350.948465][T16206] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4442'. [ 350.959205][T16206] dummy0: entered promiscuous mode [ 351.078324][T16219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4444'. [ 352.450573][T16242] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4450'. [ 352.474832][T16242] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 352.493005][T16242] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 353.500046][T16264] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4459'. [ 353.615462][T16269] lo speed is unknown, defaulting to 1000 [ 354.562830][T16277] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16277 comm=syz.5.4462 [ 354.598193][T16279] wg2: left promiscuous mode [ 354.602894][T16279] wg2: left allmulticast mode [ 354.665189][T16279] wg2: entered promiscuous mode [ 354.670163][T16279] wg2: entered allmulticast mode [ 355.794821][T16289] lo speed is unknown, defaulting to 1000 [ 355.889938][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 355.889956][ T29] audit: type=1400 audit(1759196025.989:27660): avc: denied { ioctl } for pid=16290 comm="syz.0.4467" path="socket:[44494]" dev="sockfs" ino=44494 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 356.031577][T16294] lo speed is unknown, defaulting to 1000 [ 356.111571][ T29] audit: type=1326 audit(1759196026.092:27661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 356.134796][ T29] audit: type=1326 audit(1759196026.092:27662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 356.157933][ T29] audit: type=1326 audit(1759196026.092:27663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 356.181071][ T29] audit: type=1326 audit(1759196026.092:27664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 356.204237][ T29] audit: type=1326 audit(1759196026.139:27665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab40fc5d67 code=0x7ffc0000 [ 356.227229][ T29] audit: type=1326 audit(1759196026.139:27666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab40f6af79 code=0x7ffc0000 [ 356.250219][ T29] audit: type=1326 audit(1759196026.139:27667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 356.273322][ T29] audit: type=1326 audit(1759196026.139:27668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 356.296391][ T29] audit: type=1326 audit(1759196026.139:27669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16296 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab40fceec9 code=0x7ffc0000 [ 356.546946][T16311] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4473'. [ 356.553611][T16312] $Hÿ: renamed from .` (while UP) [ 356.570481][T16312] $Hÿ: entered promiscuous mode [ 356.756554][T16324] wireguard0: entered promiscuous mode [ 356.762211][T16324] wireguard0: entered allmulticast mode [ 357.330166][T16331] SELinux: failed to load policy [ 357.398695][T16329] sctp: [Deprecated]: syz.3.4473 (pid 16329) Use of int in maxseg socket option. [ 357.398695][T16329] Use struct sctp_assoc_value instead [ 357.511739][T16343] lo speed is unknown, defaulting to 1000 [ 358.962845][T16354] $Hÿ: entered promiscuous mode [ 358.992640][T16354] dummy0: entered promiscuous mode [ 358.999497][T16369] tipc: Enabling of bearer rejected, already enabled [ 359.201698][T16373] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4493'. [ 359.242310][T16363] lo speed is unknown, defaulting to 1000 [ 359.414411][T16365] lo speed is unknown, defaulting to 1000 [ 359.590947][T16373] sctp: [Deprecated]: syz.0.4493 (pid 16373) Use of int in maxseg socket option. [ 359.590947][T16373] Use struct sctp_assoc_value instead [ 359.724212][T16390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4497'. [ 360.341552][T16398] lo speed is unknown, defaulting to 1000 [ 360.541585][T16412] lo speed is unknown, defaulting to 1000 [ 361.262863][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 361.262879][ T29] audit: type=1400 audit(1759196031.022:27958): avc: denied { setopt } for pid=16414 comm="syz.0.4504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 362.149949][T16419] wireguard0: entered promiscuous mode [ 362.155523][T16419] wireguard0: entered allmulticast mode [ 362.174391][T16423] lo speed is unknown, defaulting to 1000 [ 362.249497][T16425] $Hÿ: left promiscuous mode [ 362.254809][T16425] dummy0: left promiscuous mode [ 362.273476][T16425] wg2: left promiscuous mode [ 362.279312][T16425] vxlan0: left promiscuous mode [ 362.589868][ T29] audit: type=1400 audit(1759196032.266:27959): avc: denied { ioctl } for pid=16434 comm="syz.5.4508" path="socket:[44784]" dev="sockfs" ino=44784 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 363.577703][T16446] wg2: left promiscuous mode [ 363.582599][T16446] wg2: left allmulticast mode [ 363.589144][ T29] audit: type=1326 audit(1759196033.202:27960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16455 comm="syz.5.4512" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d950ceec9 code=0x0 [ 363.631927][ T29] audit: type=1400 audit(1759196033.239:27961): avc: denied { ioctl } for pid=16448 comm="syz.0.4511" path="socket:[45502]" dev="sockfs" ino=45502 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 363.660106][T16447] wg2: entered promiscuous mode [ 363.665136][T16447] wg2: entered allmulticast mode [ 363.756449][ T29] audit: type=1326 audit(1759196033.361:27962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 363.780155][ T29] audit: type=1326 audit(1759196033.361:27963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 363.803789][ T29] audit: type=1326 audit(1759196033.361:27964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 363.827510][ T29] audit: type=1326 audit(1759196033.361:27965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 363.829083][T16449] macvtap0: refused to change device tx_queue_len [ 363.851180][ T29] audit: type=1326 audit(1759196033.361:27966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 363.851354][ T29] audit: type=1326 audit(1759196033.361:27967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16462 comm="syz.3.4513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f3628d3eec9 code=0x7ffc0000 [ 363.910407][T16456] $Hÿ: (slave dummy0): Releasing backup interface [ 363.927271][T16463] bridge0: port 1(31ªî{X¹¦) entered blocking state [ 363.934085][T16463] bridge0: port 1(31ªî{X¹¦) entered disabled state [ 363.955532][T16463] 1ªî{X¹¦: entered promiscuous mode [ 363.969225][T16463] bridge0: port 1(31ªî{X¹¦) entered blocking state [ 363.976052][T16463] bridge0: port 1(31ªî{X¹¦) entered forwarding state [ 364.586276][T16472] macsec1: entered promiscuous mode [ 364.602289][T16472] dummy0: entered promiscuous mode [ 364.608614][T16472] macsec1: entered allmulticast mode [ 364.613936][T16472] dummy0: entered allmulticast mode [ 364.626956][T16472] dummy0: left allmulticast mode [ 364.631957][T16472] dummy0: left promiscuous mode [ 364.718643][T16480] loop4: detected capacity change from 0 to 128 [ 364.735549][T16480] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 364.793136][T16475] program syz.4.4518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 365.854985][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4525'. [ 365.863959][T16497] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4525'. [ 365.892770][ T4090] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 366.055707][T16502] syz_tun: entered allmulticast mode [ 366.112598][T16502] dvmrp1: entered allmulticast mode [ 366.170359][T16499] syz_tun: left allmulticast mode [ 367.263420][T16518] netlink: 'syz.3.4533': attribute type 27 has an invalid length. [ 367.289776][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 367.289794][ T29] audit: type=1326 audit(1759196036.663:28081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 367.361438][ T29] audit: type=1326 audit(1759196036.691:28082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 367.386190][ T29] audit: type=1326 audit(1759196036.691:28083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 367.410862][ T29] audit: type=1326 audit(1759196036.701:28084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 367.461656][T16518] bridge0: port 1(31ªî{X¹¦) entered disabled state [ 368.343572][T16518] macsec0: left promiscuous mode [ 368.384304][ T29] audit: type=1326 audit(1759196036.785:28085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 368.409082][ T29] audit: type=1326 audit(1759196036.785:28086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 368.433830][ T29] audit: type=1326 audit(1759196036.785:28087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 368.458634][ T29] audit: type=1326 audit(1759196036.794:28088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 368.483168][ T29] audit: type=1326 audit(1759196036.794:28089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 368.507872][ T29] audit: type=1326 audit(1759196036.869:28090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16520 comm="syz.5.4534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 368.581301][T16518] veth5: left promiscuous mode [ 368.586187][T16518] veth5: left allmulticast mode [ 368.723642][ T4133] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.732103][ T4133] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.740521][ T4133] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.749043][ T4133] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.791639][T16530] Set syz1 is full, maxelem 65536 reached [ 369.850526][T16571] loop4: detected capacity change from 0 to 128 [ 369.892142][T16573] netlink: 'syz.2.4545': attribute type 1 has an invalid length. [ 369.921944][T16576] syz.4.4546: attempt to access beyond end of device [ 369.921944][T16576] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 369.936163][T16576] syz.4.4546: attempt to access beyond end of device [ 369.936163][T16576] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 369.951132][T16576] syz.4.4546: attempt to access beyond end of device [ 369.951132][T16576] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 369.975050][T16578] lo speed is unknown, defaulting to 1000 [ 370.017873][T16576] syz.4.4546: attempt to access beyond end of device [ 370.017873][T16576] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 370.032779][T16576] syz.4.4546: attempt to access beyond end of device [ 370.032779][T16576] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 370.047625][T16576] syz.4.4546: attempt to access beyond end of device [ 370.047625][T16576] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 370.062337][T16576] syz.4.4546: attempt to access beyond end of device [ 370.062337][T16576] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 370.077215][T16576] syz.4.4546: attempt to access beyond end of device [ 370.077215][T16576] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 370.091659][T16576] syz.4.4546: attempt to access beyond end of device [ 370.091659][T16576] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 370.106105][T16576] syz.4.4546: attempt to access beyond end of device [ 370.106105][T16576] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 370.130690][T16581] tipc: Bearer : already 2 bearers with priority 10 [ 370.138066][T16581] tipc: Bearer : trying with adjusted priority [ 370.146805][T16581] tipc: New replicast peer: 255.255.255.83 [ 370.152777][T16581] tipc: Enabled bearer , priority 9 [ 370.772193][T16596] lo speed is unknown, defaulting to 1000 [ 371.086770][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4557'. [ 371.328568][T16604] Set syz1 is full, maxelem 65536 reached [ 371.393324][ T2951] hid (null): unknown global tag 0xe [ 371.398945][ T2951] hid (null): unknown global tag 0xc [ 371.403102][ T2951] hid (null): unknown global tag 0xe [ 371.403156][ T2951] hid (null): unknown global tag 0xe [ 371.403180][ T2951] hid (null): unknown global tag 0xd [ 371.403196][ T2951] hid (null): unknown global tag 0xc [ 371.403241][ T2951] hid (null): unknown global tag 0xc [ 371.403256][ T2951] hid (null): unknown global tag 0xe [ 371.403299][ T2951] hid (null): unknown global tag 0xc [ 371.403348][ T2951] hid (null): unknown global tag 0xc [ 371.403406][ T2951] hid (null): unknown global tag 0xd [ 371.403456][ T2951] hid (null): unknown global tag 0xd [ 371.408003][ T2951] hid (null): unknown global tag 0xe [ 371.408022][ T2951] hid (null): unknown global tag 0xc [ 371.408047][ T2951] hid (null): report_id 19018 is invalid [ 371.408121][ T2951] hid (null): report_id 0 is invalid [ 371.408213][ T2951] hid (null): unknown global tag 0xd [ 371.408244][ T2951] hid (null): unknown global tag 0xe [ 371.408279][ T2951] hid (null): unknown global tag 0xc [ 371.408294][ T2951] hid (null): nested delimiters [ 371.408318][ T2951] hid (null): unknown global tag 0x9b [ 371.408332][ T2951] hid (null): report_id 0 is invalid [ 371.408437][ T2951] hid (null): report_id 0 is invalid [ 371.408466][ T2951] hid (null): unknown global tag 0xe [ 371.408481][ T2951] hid (null): unknown global tag 0xc [ 371.408495][ T2951] hid (null): report_id 3847094645 is invalid [ 371.408519][ T2951] hid (null): unknown global tag 0xcb [ 371.408550][ T2951] hid (null): unknown global tag 0xe [ 371.410169][ T2951] hid (null): unknown global tag 0xd [ 371.410187][ T2951] hid (null): report_id 16796 is invalid [ 371.410218][ T2951] hid (null): unknown global tag 0xe [ 371.414626][ T2951] hid (null): unknown global tag 0xd [ 371.414659][ T2951] hid (null): invalid report_size 63360 [ 371.414685][ T2951] hid (null): invalid report_count 99512854 [ 371.414712][ T2951] hid (null): global environment stack overflow [ 371.414828][ T2951] hid (null): unknown global tag 0xd [ 371.414864][ T2951] hid (null): unknown global tag 0xc [ 371.414890][ T2951] hid (null): unknown global tag 0xc [ 371.414905][ T2951] hid (null): unknown global tag 0xd [ 371.414936][ T2951] hid (null): unknown global tag 0xd [ 371.414949][ T2951] hid (null): unknown global tag 0xd [ 371.414978][ T2951] hid (null): unknown global tag 0xc [ 371.415066][ T2951] hid (null): invalid report_size 48769 [ 371.415090][ T2951] hid (null): invalid report_size 53507 [ 371.471492][ T2951] hid-generic 0491:000D:0000.0002: unknown global tag 0xe [ 371.471515][ T2951] hid-generic 0491:000D:0000.0002: item 0 2 1 14 parsing failed [ 371.471866][ T2951] hid-generic 0491:000D:0000.0002: probe with driver hid-generic failed with error -22 [ 372.659503][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 372.659521][ T29] audit: type=1326 audit(1759196041.687:28146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.660428][ T29] audit: type=1326 audit(1759196041.687:28147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.660574][ T29] audit: type=1326 audit(1759196041.687:28148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.660652][ T29] audit: type=1326 audit(1759196041.687:28149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.660931][ T29] audit: type=1326 audit(1759196041.687:28150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.661105][ T29] audit: type=1326 audit(1759196041.687:28151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.661269][ T29] audit: type=1326 audit(1759196041.687:28152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.661499][ T29] audit: type=1326 audit(1759196041.687:28153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.661652][ T29] audit: type=1326 audit(1759196041.687:28154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.661955][ T29] audit: type=1326 audit(1759196041.687:28155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16634 comm="syz.5.4565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 372.689805][T16635] lo speed is unknown, defaulting to 1000 [ 372.735640][T16637] netlink: 'syz.3.4567': attribute type 10 has an invalid length. [ 372.736261][T16637] .`: (slave dummy0): Releasing backup interface [ 372.738651][T16637] netlink: 'syz.3.4567': attribute type 10 has an invalid length. [ 372.741437][T16637] .`: (slave dummy0): Enslaving as an active interface with an up link [ 373.186197][T16645] loop4: detected capacity change from 0 to 256 [ 373.193257][T16645] FAT-fs (loop4): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 373.206581][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4570'. [ 373.216656][T16647] 1ªî{X¹¦: left allmulticast mode [ 373.222974][T16647] 1ªî{X¹¦: left promiscuous mode [ 373.228167][T16647] bridge0: port 1(31ªî{X¹¦) entered disabled state [ 373.237057][T16645] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=25883 sclass=netlink_xfrm_socket pid=16645 comm=syz.4.4569 [ 373.350333][T16655] bridge0: port 1(30ªî{X¹¦) entered blocking state [ 373.357068][T16655] bridge0: port 1(30ªî{X¹¦) entered disabled state [ 373.364890][T16655] 0ªî{X¹¦: entered allmulticast mode [ 373.370639][T16655] 0ªî{X¹¦: left allmulticast mode [ 376.198545][T16692] loop4: detected capacity change from 0 to 128 [ 376.524005][T16704] lo speed is unknown, defaulting to 1000 [ 377.019602][T16708] cgroup: none used incorrectly [ 377.338135][T16706] loop4: detected capacity change from 0 to 8192 [ 377.390096][T16706] loop4: p1 p2 < > p3 p4 < p5 > [ 377.395175][T16706] loop4: partition table partially beyond EOD, truncated [ 377.424429][T16706] loop4: p1 size 100663296 extends beyond EOD, truncated [ 377.446025][T16706] loop4: p2 start 591104 is beyond EOD, truncated [ 377.452576][T16706] loop4: p3 start 33572980 is beyond EOD, truncated [ 377.507824][T16706] loop4: p5 size 100663296 extends beyond EOD, truncated [ 378.294302][T16720] SELinux: failed to load policy [ 378.312284][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 378.312377][ T29] audit: type=1326 audit(1759196046.973:28372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.342677][ T29] audit: type=1326 audit(1759196046.973:28373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.367657][ T29] audit: type=1326 audit(1759196046.973:28374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.391464][ T29] audit: type=1326 audit(1759196046.973:28375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.416302][ T29] audit: type=1326 audit(1759196046.973:28376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.441018][ T29] audit: type=1326 audit(1759196046.973:28377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.466045][ T29] audit: type=1326 audit(1759196047.010:28378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.490879][ T29] audit: type=1326 audit(1759196047.010:28379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.524956][ T29] audit: type=1326 audit(1759196047.160:28380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 378.549822][ T29] audit: type=1326 audit(1759196047.160:28381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16723 comm="syz.0.4591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2934aeec9 code=0x7ffc0000 [ 379.810135][T16741] syzkaller0: entered promiscuous mode [ 379.815790][T16741] syzkaller0: entered allmulticast mode [ 380.268379][T16748] lo speed is unknown, defaulting to 1000 [ 380.675879][T16752] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 381.019247][T16762] netlink: 'syz.2.4604': attribute type 4 has an invalid length. [ 381.041113][ T3381] lo speed is unknown, defaulting to 1000 [ 381.046905][ T3381] syz2: Port: 1 Link DOWN [ 381.062153][ T3381] lo speed is unknown, defaulting to 1000 [ 381.078823][T16764] loop4: detected capacity change from 0 to 128 [ 381.093439][T16764] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 381.107394][T16764] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 381.269873][ T51] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 381.548690][T16786] netlink: 'syz.0.4610': attribute type 1 has an invalid length. [ 382.370070][T16794] netlink: 'syz.4.4616': attribute type 4 has an invalid length. [ 382.405433][T16798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16798 comm=syz.3.4617 [ 382.549708][T16815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4623'. [ 382.559162][T16815] netlink: 'syz.5.4623': attribute type 14 has an invalid length. [ 382.567100][T16815] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4623'. [ 382.576576][T16815] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4623'. [ 382.591081][T16815] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4623'. [ 382.608180][T16817] pim6reg: entered allmulticast mode [ 382.615311][T16817] pim6reg: left allmulticast mode [ 382.637888][T16819] netlink: 4 bytes leftover after parsing attributes in process `'. [ 382.662882][T16817] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 382.671090][T16817] netlink: 'syz.0.4624': attribute type 10 has an invalid length. [ 382.679614][T16817] team0: Port device hsr_slave_0 added [ 382.905863][T16826] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4627'. [ 383.129293][T16826] sctp: [Deprecated]: syz.5.4627 (pid 16826) Use of int in maxseg socket option. [ 383.129293][T16826] Use struct sctp_assoc_value instead [ 383.269132][T16837] netlink: 'syz.5.4629': attribute type 1 has an invalid length. [ 384.096162][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 384.096178][ T29] audit: type=1326 audit(1759196052.389:28467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 384.285605][T16852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4634'. [ 384.603150][ T29] audit: type=1326 audit(1759196052.389:28468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 384.626834][ T29] audit: type=1326 audit(1759196052.389:28469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 384.650437][ T29] audit: type=1326 audit(1759196052.389:28470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 384.674047][ T29] audit: type=1326 audit(1759196052.389:28471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 384.697639][ T29] audit: type=1326 audit(1759196052.389:28472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5d950ceec9 code=0x7ffc0000 [ 384.721279][ T29] audit: type=1326 audit(1759196052.389:28473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5d950cef03 code=0x7ffc0000 [ 384.744686][ T29] audit: type=1326 audit(1759196052.389:28474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5d950cd97f code=0x7ffc0000 [ 384.768100][ T29] audit: type=1326 audit(1759196052.418:28475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f5d950cef57 code=0x7ffc0000 [ 384.791671][ T29] audit: type=1326 audit(1759196052.427:28476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16849 comm="syz.5.4633" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5d950cd710 code=0x7ffc0000 [ 384.987343][T16881] netlink: zone id is out of range [ 384.992659][T16881] netlink: zone id is out of range [ 384.997824][T16881] netlink: zone id is out of range [ 385.004584][T16881] netlink: zone id is out of range [ 385.009721][T16881] netlink: zone id is out of range [ 385.016119][T16881] netlink: zone id is out of range [ 385.021265][T16881] netlink: zone id is out of range [ 385.062575][T16886] pim6reg: entered allmulticast mode [ 385.072264][T16888] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4647'. [ 385.082681][T16886] pim6reg: left allmulticast mode [ 385.144492][T16886] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 385.153912][T16886] netlink: 'syz.2.4646': attribute type 10 has an invalid length. [ 385.164044][T16886] team0: Port device hsr_slave_0 added [ 385.197344][T16899] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 385.359825][T16907] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4655'. [ 385.368925][T16907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4655'. [ 386.522943][T16928] loop7: detected capacity change from 0 to 16384 [ 386.591611][T16932] pim6reg: entered allmulticast mode [ 386.603335][T16932] pim6reg: left allmulticast mode [ 386.718300][T16934] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 386.737634][T16937] netlink: 'syz.2.4661': attribute type 4 has an invalid length. [ 386.805317][T16938] netlink: 'syz.4.4663': attribute type 10 has an invalid length. [ 386.815602][T16938] team0: Port device hsr_slave_0 added [ 387.457698][T16927] ================================================================== [ 387.465817][T16927] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 387.473201][T16927] [ 387.475525][T16927] read-write to 0xffff88811a1ad228 of 8 bytes by interrupt on cpu 1: [ 387.483590][T16927] __xa_clear_mark+0xf5/0x1e0 [ 387.488283][T16927] __folio_end_writeback+0x177/0x470 [ 387.493586][T16927] folio_end_writeback+0x71/0x3d0 [ 387.498647][T16927] end_buffer_async_write+0x156/0x1f0 [ 387.504026][T16927] end_bio_bh_io_sync+0x76/0xa0 [ 387.508986][T16927] bio_endio+0x37e/0x420 [ 387.513239][T16927] blk_update_request+0x336/0x730 [ 387.518286][T16927] blk_mq_end_request+0x26/0x50 [ 387.523136][T16927] lo_complete_rq+0x98/0x140 [ 387.527741][T16927] blk_done_softirq+0x77/0xb0 [ 387.532422][T16927] handle_softirqs+0xb7/0x290 [ 387.537099][T16927] run_ksoftirqd+0x1c/0x30 [ 387.541515][T16927] smpboot_thread_fn+0x328/0x530 [ 387.546461][T16927] kthread+0x486/0x510 [ 387.550531][T16927] ret_from_fork+0x11f/0x1b0 [ 387.555123][T16927] ret_from_fork_asm+0x1a/0x30 [ 387.559887][T16927] [ 387.562209][T16927] read to 0xffff88811a1ad228 of 8 bytes by task 16927 on cpu 0: [ 387.569831][T16927] xas_find_marked+0x218/0x620 [ 387.574596][T16927] find_get_entry+0x5d/0x380 [ 387.579191][T16927] filemap_get_folios_tag+0x13b/0x210 [ 387.584570][T16927] filemap_write_and_wait_range+0x1d3/0x340 [ 387.590481][T16927] bdev_release+0xeb/0x3d0 [ 387.594915][T16927] blkdev_release+0x15/0x20 [ 387.599440][T16927] __fput+0x29b/0x650 [ 387.603444][T16927] ____fput+0x1c/0x30 [ 387.607439][T16927] task_work_run+0x131/0x1a0 [ 387.612034][T16927] exit_to_user_mode_loop+0xe4/0x100 [ 387.617331][T16927] do_syscall_64+0x1d6/0x200 [ 387.621927][T16927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.627850][T16927] [ 387.630171][T16927] value changed: 0xfffffffff0000000 -> 0xffffffff00000000 [ 387.637319][T16927] [ 387.639643][T16927] Reported by Kernel Concurrency Sanitizer on: [ 387.645796][T16927] CPU: 0 UID: 0 PID: 16927 Comm: syz.4.4663 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 387.657177][T16927] Tainted: [W]=WARN [ 387.660978][T16927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 387.671043][T16927] ================================================================== [ 390.677432][ T8788] page_pool_release_retry() stalled pool shutdown: id 37, 51 inflight 302 sec