last executing test programs: 19m53.291739136s ago: executing program 0 (id=400): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "f7d8ff", 0x40, 0x3c, 0x0, @local, @mcast2, {[@hopopts={0x0, 0x1ffffd7f, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}, @hopopts={0x0, 0x0, '\x00', [@generic={0x4, 0x0, "1cc189f4d48147c3d91cdc337ff4ad3bf86bbe429ac70924c72e43a7a69f813b5923485416db7c768b615a0ea16dc0845c205fc9a5064e40ae4811ff51dc50befd520b3ba8f2cb880a0dcb9573411c1937bceff896"}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x0, [0x0, 0x0, 0x0]}, @pad1]}, @dstopts={0x32, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @enc_lim]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x0, 0x0, @void}}}}}}}}, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8d0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 19m53.206169913s ago: executing program 0 (id=403): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000180)={[{@test_dummy_encryption_v1}, {@nolazytime}]}, 0x1, 0x241, &(0x7f00000020c0)="$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") 19m51.369982752s ago: executing program 32 (id=405): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 19m51.366105762s ago: executing program 0 (id=412): r0 = socket$inet6(0xa, 0x2, 0x0) getuid() bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="cb00000006000000"], 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0xb}, 0x20) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) close(0x3) 19m51.242487052s ago: executing program 0 (id=414): r0 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$vga_arbiter(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xff, 0x1219, &(0x7f0000002100)="$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") creat(&(0x7f00000001c0)='./bus\x00', 0x40) preadv(0xffffffffffffffff, 0x0, 0x0, 0x29d3, 0x6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0/file1\x00', 0x1222068, 0x0, 0x1, 0x0, 0x0) 19m50.910982719s ago: executing program 0 (id=417): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x1) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) 19m50.801006708s ago: executing program 0 (id=418): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x25, {"4831ff48c7c6000004004881c60001000048893e"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x3d}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0xaaaa) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0xffffffffffffffff) 19m50.751576572s ago: executing program 33 (id=418): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x25, {"4831ff48c7c6000004004881c60001000048893e"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x3d}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0xaaaa) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_assert_syzos_uexit$x86(r5, 0xffffffffffffffff) 19m34.222414559s ago: executing program 2 (id=563): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 19m34.111949988s ago: executing program 2 (id=564): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x5, r0}, 0x38) r1 = gettid() ioperm(0x8, 0x3, 0x7) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f0000000180)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_btf_id_by_name$bpf_lsm(0x0) inotify_init() syz_usb_connect(0x0, 0x2d, &(0x7f0000000e40)={{0x12, 0x1, 0x0, 0xf7, 0x35, 0xbd, 0x40, 0x763, 0x1002, 0x1506, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa4, 0x20, 0x1, 0xff, 0xbe, 0xb8, 0x0, [], [{{0x9, 0x5, 0x8, 0x3, 0x40, 0xfe, 0x6, 0x1}}]}}]}}]}}, 0x0) 19m33.355949979s ago: executing program 2 (id=570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv4_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'nr0\x00'}, @FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0xfffffffffffffffe, 0x181) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000000e40)="$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") r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x10) getdents(r1, &(0x7f0000000000)=""/51, 0x33) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r3, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c002200060000000002000008000400810000000500240001000000050016000100000005002c"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) getdents(r1, 0x0, 0x58) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x4, 0x9, 0xfffffffffffffff4, 0x3ddc}, 0x0, &(0x7f0000000240)={0x1f, 0xffffffffffffffff, 0xffffffffffffffff, 0x20, 0x0, 0x100000000}, 0x0, 0x0) 19m32.925326424s ago: executing program 6 (id=574): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) madvise(&(0x7f0000f0f000/0x2000)=nil, 0x2000, 0x15) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x44000) 19m32.271350447s ago: executing program 2 (id=576): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 19m32.270047667s ago: executing program 2 (id=577): chdir(&(0x7f0000000080)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, 0x0, &(0x7f0000000240)) 19m32.181705264s ago: executing program 2 (id=582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000000000000b210000ff3f7c081e0f315b91fcaec7bf495d5c618332756cbb1bb9ce6d12b9d976d1f33aca41e50a3342bcd67c311f7885a05c3fcf2ae21f1498ec481e7ca2c3ca4c7b3bf94448f62e111e5a79929b9182cc977ba6ae766ce37bdaac6da997fbc15f0c79f42155b99a280667b51fdc7902d7be5ef41f953fedb32aceeada13250626957e2013d5b12cc916541ccbeb0d4060a4dd89664eaba2f6b4ede0c9e3dc1c9446d9284ebe0e46eee7bc145ff0a2779c025553298812978ea53a8c60f254f23344a80a0aac7b141787bad6b0ba090000005f2f3158f0d200000000000070000000000000000701000040000000afbb30c2946e41ef3167d1f6ed47aa1f52bad114a89dbed741f74a23cd8d915e2dcc74a4932646b90f90a9d3956d5cadb642ac79fcb0aae3654482188263abd27e9d57cc28032453dc75f333e1f367ab38b7e7719805a454e79802d07ec60c00b0000000000000000100000001"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 19m32.139001618s ago: executing program 34 (id=582): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a40)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4096, 0x1000}}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x7290, &(0x7f0000000280)={0x0, 0x0, 0x2, 0x3, 0xde}, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) 19m31.99106377s ago: executing program 6 (id=587): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f00000000c0)={0xfffffff6, 0x3fe, 0xfffffffd, 0x7ff, 0x3, "04ae080000000000007800000500080100", 0x4, 0x200}) r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0) 19m31.49067976s ago: executing program 6 (id=588): openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 19m31.431617505s ago: executing program 6 (id=589): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 19m31.258027879s ago: executing program 6 (id=590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = gettid() clock_settime(0xfffffffb, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) timer_getoverrun(0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10000, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) 19m30.812000175s ago: executing program 6 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000"], 0x0, 0x56, 0x0, 0x4}, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19m30.738639011s ago: executing program 35 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_read_part_table(0x635, &(0x7f0000000000)="$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") r2 = dup(r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000"], 0x0, 0x56, 0x0, 0x4}, 0x28) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 19m30.722983622s ago: executing program 5 (id=596): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0xf3a, 0x0) read$char_usb(r3, &(0x7f0000000000)=""/111, 0x6f) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) 19m29.864118522s ago: executing program 5 (id=602): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$eJzs3c1rG80dAODfyh+ynbR2odAmJ0OhNYTIdeomLfSQ0kMpNBBoz02MrJjUshUsOcTGEOdQ6KXQlh4K7SXnfqSHQq/9uLb/ROmhJITWMW/e04tediX5U5LtxJId/Dyw2pnd2Z0Z7ezsSLtIAVxYk+lLLuJKRPw8iRhvLk8iYigLDUbcbqR7u7VRTKck6vUf/C/J0vz50u6+kub8UjPyxYj4+08iruUO5jranJdLK83QdG3p0XR1bf36w6W5hdJCafnmzOzsjVtfv3Xz8Fbv6qN/rV9+9YvvfuWPtwfjCy9+9o8kbsfl5rrtrY3ie+7+kMmYbL4nQ+lbuM93TjuzM5acdQF4J+mpOdA4y+NKjMdAFurgfU9AAOBceBoRdQDggklc/wHggml9D7C9tVFsTWf7jUR/vf52RIw06t+6v9lYM9i8ZzeS3Qcd20723RlJImLiFPKfjIjf/uVHv0+n6NF9SIB2Np9FxP2Jye2t/IH+P0n7v+Gj95DvuOar3TarN7abPLBY/wf989d0/PONw+O/qzsP9IxkrwfGPyP5Nufuuzj6/M+97LDpMfqmo6Xjv2/tebZtd/y389DaxEAz9plszDeUPHhYLqV922cjYiqG8ml8Jkva/imoqTefvOmU/97x3/9/+ePfpfmn890UuZeD+aiP79lmfq42dwpVz7x+FnF1sF39k53xb9Jh/Hu34173H5rvffOnv+mUMq1/Wt/WdLj+vVV/HvHltsd/91gmXZ9PnM6aw3SrUbTxp//8eqxT/rvHP5/N0/xbnwX6IT3+Y93rP5GGqmvri3PlcmmlevI8/vl8/G+d1u1t/+3rn7X/fdL2P5z8MAu3WtqTuVptZSZiOPn+4eU3drdtxVvp0/pPfan9+d+p/eeaz8be34l1N/hq+A/NXbWtf2azU/17K63//ImOf5dAvbnNgVUv3i4OdMr/eMd/NgtNNZccp/87oqTv0ZoBAAAAAAAAAAAAAAAAAAAAAAAA4ORyEXE5klxhJ5zLFQqN//D+fIzlypVq7dqDyuryfGT/lT0RQ7nWT12O7/k91Jnm7+G34jcOxL8WEZ+LiF/lR7N4oVgpz5915QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg6dL+//9/ms4Khca6/+bPunQAQM+MnHUBAIC+c/0HgIvnZNf/0Z6VAwDonxN//q8nvSkIANA3x77+3+9tOQCA/nH/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB67e+dOOtU/3toopvH5x2uri5XH1+dL1cXC0mqxUKysPCosVCoL5VKhWFnquKPNxqxcqTyajeXVJ9O1UrU2XV1bv7dUWV2u3Xu4NLdQulca6lvNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD4qmvri3PlcmlFoEtgtDR6HopxjgKDcS6KcSiw+e+hrF13TRwTH0zjH+6SJjnNvEYPLtnbS4yeSd8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8CH4NAAA//9RvRhH") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) 19m27.848491065s ago: executing program 5 (id=618): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r5}, 0x10) close(r2) 19m27.807303028s ago: executing program 5 (id=612): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8000c61) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) 19m27.29198971s ago: executing program 5 (id=615): syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x1208000, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r3}, 0x10) r4 = dup(r1) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f00000012c0)=ANY=[@ANYBLOB="b0"], 0xb0) getresuid(&(0x7f0000000440), &(0x7f0000000400), &(0x7f00000004c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',privport,access=', @ANYRESDEC=r5]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.redirect\x00', 0x0, 0xc300) 19m26.911744621s ago: executing program 5 (id=616): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, r2, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 19m26.897064452s ago: executing program 36 (id=616): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e28}, {&(0x7f00000000c0)=""/250, 0x468}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x18, r2, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8814}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 12m13.06564368s ago: executing program 8 (id=2770): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x80008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/126], 0x110) setsockopt$inet_group_source_req(r3, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='ns\x00') getdents64(r4, 0x0, 0xffffffff00000018) 12m11.95210709s ago: executing program 8 (id=2772): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x42504}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x40000, 0x100a8}}}}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x50}}, 0x40000) readv(0xffffffffffffffff, &(0x7f0000003980)=[{&(0x7f0000002880)=""/61, 0x3d}, {&(0x7f00000028c0)=""/4096, 0x1000}], 0x2) 12m9.203153083s ago: executing program 8 (id=2790): getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4b, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) pipe(&(0x7f00000000c0)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 12m8.295853897s ago: executing program 8 (id=2786): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002c00)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 12m8.25718539s ago: executing program 8 (id=2787): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 12m8.203987324s ago: executing program 8 (id=2788): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x70) 12m8.102931812s ago: executing program 37 (id=2788): r0 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x70) 11.966237581s ago: executing program 3 (id=4731): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 10.473003312s ago: executing program 1 (id=4734): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r5}, 0x8) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x3, 0x7f, 0x2, 0x8, @mcast1, @private2, 0x7800, 0x40, 0x4, 0x1}}) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 10.348657092s ago: executing program 7 (id=4736): mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='tick_stop\x00', r4, 0x0, 0x6}, 0x18) r5 = fsopen(&(0x7f0000000000)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 10.097139692s ago: executing program 9 (id=4737): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket$inet6(0xa, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0180000000000000000001000000000000000200"], 0x28}}, 0x40000) 6.506161403s ago: executing program 7 (id=4738): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 6.477365805s ago: executing program 4 (id=4739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000950000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) timer_create(0x2, &(0x7f0000000240)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5722780b6c2a7", 0x0, 0x0, 0x0, 0x25, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4ed4c3db", 0x0}, 0x50) 6.476722505s ago: executing program 9 (id=4740): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x1}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r5, 0x0, 0xfffffe3e) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) 6.346428496s ago: executing program 1 (id=4741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xa4, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x10, 0xfffffffc, 0xdc67}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x3a, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) unshare(0x42000000) 6.345910416s ago: executing program 3 (id=4742): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x33, &(0x7f00000001c0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0xfd}]}, 0xfc9e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) openat$kvm(0xffffffffffffff9c, 0x0, 0x161642, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4000004) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @generic={{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100, {[@ssrr={0x89, 0x3, 0x9c}, @ssrr={0x89, 0x3, 0x75}]}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, &(0x7f0000000080)='proc\x00', 0x0, 0x0) getdents64(0xffffffffffffffff, 0xfffffffffffffffe, 0x29) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.338652306s ago: executing program 3 (id=4743): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) 3.780397354s ago: executing program 7 (id=4744): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@broadcast, @broadcast, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @empty, @multicast1, @multicast, @loopback}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000005c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KDGKBSENT(r5, 0x4b48, 0x0) 3.662948533s ago: executing program 4 (id=4745): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x6, 0x4, 0x8, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(0xffffffffffffffff, 0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) epoll_create1(0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) 3.661541423s ago: executing program 9 (id=4746): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 3.661012873s ago: executing program 3 (id=4747): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) 3.639426425s ago: executing program 4 (id=4748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) dup(0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 3.353068618s ago: executing program 1 (id=4749): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200840d, &(0x7f0000000280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) kcmp(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.692661802s ago: executing program 9 (id=4750): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peeksig(0x4209, r4, &(0x7f00000001c0)={0x9, 0x1}, 0x0) ioctl$SIOCSIFMTU(r0, 0x40047452, 0x0) 2.630162506s ago: executing program 7 (id=4751): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x11}, 0x18) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) dup(0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) 2.626357087s ago: executing program 4 (id=4752): mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) chroot(&(0x7f0000000200)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000100), 0x8ffffffe) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c020000190001000000000010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000800000000800000000000000000000000000000000000000000000000000000030000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa010000000000000000000000000000002b00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001008250db55ea46e325000000000000003200000000000000e00000010000000000000000000000000000800003000000000000000000000000000000ff0100000000000000000000000000010000000033000000000000000a010101000000000000000000000000043500000200010000000000bf0a000000000000fe8000000000000000000000000000aa000004d46c00"], 0x23c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.272389656s ago: executing program 1 (id=4753): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 1.964418931s ago: executing program 3 (id=4754): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r5, 0x851, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xfffffffffffffe44}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 1.71970009s ago: executing program 9 (id=4755): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) io_uring_setup(0x400, &(0x7f0000001340)={0x0, 0x310b, 0x1, 0x0, 0x13e}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001500), 0x0, 0xf73, 0x0) r6 = syz_open_procfs(0x0, 0x0) pread64(r6, &(0x7f0000002240)=""/237, 0xed, 0x4eb) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sync() 1.654268986s ago: executing program 7 (id=4756): pipe2$9p(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010002, &(0x7f00000008c0)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@utf8no}, {@shortname_win95}, {@uni_xlate}, {@fat=@uid}, {@numtail}]}, 0x1, 0x36b, &(0x7f0000000500)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmmsg$inet(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) mremap(&(0x7f000046d000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) 1.653094616s ago: executing program 4 (id=4757): syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f0000000c40)={[{@jqfmt_vfsv0}, {@nojournal_checksum}, {@barrier}, {@barrier}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xff, 0x4ab, &(0x7f0000000080)="$eJzs3DtsHEUfAPD/nu34+/KyCeGREMAQEBEPO3ECSYHEQ0KiAIQERSgPx4lCLjGKjYQjixgUhQYJIiFaBKJBUFNQUSGgQqKhgB5FipCbhFSH9m7vOJ99j1wuPj9+P2m9M3t7NzO7O7szO94NYMMaSf8kEVsj4o+IGIqIXP0KI+XZtYW5iX8W5iaSKBZf+ztJvxZXF+YmKqsm2XxLOdKfznIXknh2mXSnZ8+dyhcKk2ez+NjM6bfHpmfPPXHydP7E5InJM+NHjhw6eODwU+NPdqWct6V53f3e1J5dL75x6eWJo5fe/PnbpCbTteWo2wIdGoj5mm1S7+EupLCabKsJJ/1NV+3GxqVLBiNKFXWgVP+Hou/C9upnQ/HCBz3NHHBLFYvF4njjj+eLwDqWRK9zAPRG5UJ/deGzibQPvLgfvP5dea7cAUrLfS2byp2e/mpHdaCuf9tNcxFxdP765+kUS+5DAAB03w9p++fxcrtjcfsvF3fWrLc9GxsazsZSdkTE7RGxMyLuiCite1dE3H2D6Y/UxZe2f3KXOypYm9L239PZ2FZlytKtrDLcl8W2lco/kBw/WZjcn22TfTEwmMYPLPvrSZQGgeK3jxulP1LT/kunNP1KWzDLx+X+wcXfOZafyd90wTNX3o/Y3b9c+bMBvGwMa1dE7O4wjZOPfr1n8ZK+aqh1+ZtoPs7UluIXEY+U9/981JW/Imk+Pjn2vyhM7h+rHBVL/fLrxVcbpX9T5e+CdP9vXvb4r5Z/OKkdr51e8hObWqVx8c8PG/ZpRiKeiQ6O/03J64sSfzc/M3O9GLEpeWnJ8rM1N7gr8dL8QLn8+/YuX/93xH9b4p6ISA/ieyPivoi4P9t3D0TEgxGxt0n5f3r+obealL+n+z++KZ+h2tr/lf1QPhCqR0SrQN+pH79vlHx7579DpdC+bEk75792M9jhVgMAAIA1JRcRWyPJjVbDudzoaPl/+HfG5lxhanrmseNT75w5Vn5GYDgGcpU7XUNZPLL7n8PleKn3PV6aR5zP7pcezO4bf9r3/1J8dGKqcKzXhYcNbkuD+p/6q6/XuQNuuS6MowFrVLP6/+XhFcwIsOI6v/5rOcBa16IWe2EDrGOu4rBxLVf/z/cgH8DKa3z9n9Q0gHWuWsk/aWPlmse96h/eBNYeF3nYuFrX/1du1fuvgN5p/yn+1RJIkkVL4quI5t9Kep/nDgIfrY5sNA5ErtFHgzf6goieBPKrIxutApWKOnvuVH/bb7WYLZ7PFwq/f3czqff2vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANAt/wYAAP//gN/guA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r3, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 1.074020893s ago: executing program 1 (id=4758): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) 1.015572407s ago: executing program 3 (id=4759): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$setlease(r1, 0x400, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) pipe2$9p(&(0x7f0000002480), 0x80000) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f00000001c0)=0xaf, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r5, 0x0, r4, 0x0, 0x406f413, 0x0) 599.967791ms ago: executing program 7 (id=4760): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x23}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @random="15714bc789a3"}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008000) 598.854871ms ago: executing program 4 (id=4770): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TCFLSH(r3, 0x40045436, 0x2) socket$inet6(0xa, 0x3, 0xff) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2c}, 0x78, r5}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8916, &(0x7f0000000000)) 7.554029ms ago: executing program 1 (id=4761): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x9, 0x7, 0x7, 0x24e13, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0xc}, 0x50) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 0s ago: executing program 9 (id=4762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {}, {0x2, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x0, 0x5, 0x1, 0xc}, 0xb, 0xfffffffe, 0x8, 0x5, 0x9, 0x2, 0x9, 0xd, 0x8, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) kernel console output (not intermixed with test programs): ous mode [ 683.357701][T11860] device veth1_macvtap entered promiscuous mode [ 683.413627][T11860] device veth3 left promiscuous mode [ 683.420303][T11860] device veth7 left promiscuous mode [ 683.427698][T11860] device veth9 left promiscuous mode [ 683.435036][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 683.442690][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 683.497983][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.513556][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.568149][ T28] audit: type=1326 audit(2000525180.780:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 683.594969][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.638864][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.683019][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.718246][ T28] audit: type=1326 audit(2000525180.780:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 683.754628][ T6490] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 683.768513][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.891447][ T28] audit: type=1326 audit(2000525180.780:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 683.915687][ T28] audit: type=1326 audit(2000525180.780:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 683.954213][ T28] audit: type=1326 audit(2000525180.780:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 684.064017][ T6490] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 684.072239][ T28] audit: type=1326 audit(2000525180.790:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 684.108181][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 684.114540][ T6490] hid-thrustmaster 0003:044F:B65D.0007: item fetching failed at offset 2/5 [ 684.122057][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.392262][ T6490] hid-thrustmaster 0003:044F:B65D.0007: parse failed with error -22 [ 684.397912][ T28] audit: type=1326 audit(2000525180.790:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11854 comm="syz.4.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 684.412227][ T6490] hid-thrustmaster: probe of 0003:044F:B65D.0007 failed with error -22 [ 684.439371][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 684.447841][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 684.465283][ T6490] usb 2-1: USB disconnect, device number 4 [ 684.479501][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 684.495657][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 684.504538][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 684.512943][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 684.521918][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 684.531067][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 684.540678][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 684.549600][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.564658][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 684.573542][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 684.581959][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 684.591690][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 684.600654][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 684.610199][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 684.618943][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 684.627468][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 684.635470][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 684.644226][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 684.651864][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 684.660040][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 684.667882][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 684.675777][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 684.683723][ T548] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 684.692817][T11871] kthread_run failed with err -4 [ 684.698010][T11869] netem: change failed [ 684.842368][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 687.998927][ T28] kauditd_printk_skb: 327 callbacks suppressed [ 687.998943][ T28] audit: type=1326 audit(2000525185.840:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1974185ba7 code=0x7ffc0000 [ 688.380285][ T28] audit: type=1326 audit(2000525185.880:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f197412ade9 code=0x7ffc0000 [ 688.569386][ T28] audit: type=1326 audit(2000525185.880:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1974185ba7 code=0x7ffc0000 [ 688.622460][ T28] audit: type=1326 audit(2000525185.880:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f197412ade9 code=0x7ffc0000 [ 688.657219][ T28] audit: type=1326 audit(2000525185.880:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f197418ebe9 code=0x7ffc0000 [ 688.681323][ T28] audit: type=1326 audit(2000525185.880:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1974185ba7 code=0x7ffc0000 [ 688.713111][ T28] audit: type=1326 audit(2000525185.880:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f197412ade9 code=0x7ffc0000 [ 688.832228][ T28] audit: type=1326 audit(2000525185.880:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11910 comm="syz.9.3257" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f197418ebe9 code=0x7ffc0000 [ 688.892749][ T28] audit: type=1400 audit(2000525186.170:2139): avc: denied { setattr } for pid=11922 comm="syz.1.3270" name="file1" dev="tmpfs" ino=480 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 693.374283][ T28] audit: type=1326 audit(2000525191.220:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 693.818848][ T28] audit: type=1326 audit(2000525191.220:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 693.874637][ T28] audit: type=1326 audit(2000525191.220:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 693.903577][ T28] audit: type=1326 audit(2000525191.220:2143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 693.952290][ T28] audit: type=1326 audit(2000525191.220:2144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 693.968901][T11987] netlink: 'syz.4.3277': attribute type 27 has an invalid length. [ 694.021947][ T28] audit: type=1326 audit(2000525191.220:2145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 694.075933][ T28] audit: type=1326 audit(2000525191.220:2146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 694.127881][ T28] audit: type=1326 audit(2000525191.220:2147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 694.196056][ T28] audit: type=1326 audit(2000525191.220:2148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 694.220833][ T28] audit: type=1326 audit(2000525191.220:2149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11979 comm="syz.7.3274" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 694.329333][T11997] overlayfs: missing 'lowerdir' [ 694.335540][T11994] netlink: 'syz.1.3290': attribute type 10 has an invalid length. [ 694.759440][T12008] xt_NFQUEUE: number of total queues is 0 [ 695.659695][T12012] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 695.679639][T12012] FAT-fs (loop19): unable to read boot sector [ 697.214390][T12031] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.221484][T12031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.229000][T12031] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.236546][T12031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.245004][T12031] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 697.257309][T12031] device veth0_vlan left promiscuous mode [ 697.264041][T12031] device veth0_vlan entered promiscuous mode [ 697.273280][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.281787][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 697.300295][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.309818][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 697.318962][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.327794][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.337131][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.345842][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.354353][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 697.363346][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 697.371808][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 697.379972][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 697.388433][T12045] netlink: 'syz.7.3295': attribute type 10 has an invalid length. [ 698.473351][ T28] kauditd_printk_skb: 321 callbacks suppressed [ 698.473370][ T28] audit: type=1326 audit(2000525196.300:2471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.4.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4194585ba7 code=0x7ffc0000 [ 698.548306][ T28] audit: type=1326 audit(2000525196.300:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.4.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f419452ade9 code=0x7ffc0000 [ 698.592616][ T28] audit: type=1326 audit(2000525196.300:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.4.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 698.623386][ T28] audit: type=1326 audit(2000525196.300:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.4.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4194585ba7 code=0x7ffc0000 [ 698.647504][ T28] audit: type=1326 audit(2000525196.300:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.4.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f419452ade9 code=0x7ffc0000 [ 698.672295][ T28] audit: type=1326 audit(2000525196.300:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12034 comm="syz.4.3292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 698.704136][T12063] overlayfs: missing 'lowerdir' [ 700.202357][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 700.676582][T12090] netlink: 'syz.3.3307': attribute type 13 has an invalid length. [ 701.016242][T12090] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.023593][T12090] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.598783][ T28] audit: type=1326 audit(2000525201.430:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 703.623073][ T28] audit: type=1326 audit(2000525201.430:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 703.647062][ T28] audit: type=1326 audit(2000525201.430:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 703.704457][ T28] audit: type=1326 audit(2000525201.430:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 703.729241][ T28] audit: type=1326 audit(2000525201.430:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 703.753439][ T28] audit: type=1326 audit(2000525201.430:2482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 703.870299][ T28] audit: type=1326 audit(2000525201.430:2483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 704.158649][ T28] audit: type=1326 audit(2000525201.430:2484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 704.189911][ T28] audit: type=1326 audit(2000525201.430:2485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 704.215207][ T28] audit: type=1326 audit(2000525201.430:2486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12111 comm="syz.4.3312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 704.302039][T12126] loop1: detected capacity change from 0 to 1024 [ 704.658351][T12126] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 705.085040][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 707.082520][T12174] syz.9.3332[12174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 707.082568][T12174] syz.9.3332[12174] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 707.106320][T12177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3331'. [ 708.599464][T12202] syz.7.3336[12202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 708.599541][T12202] syz.7.3336[12202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 708.612697][T12202] netlink: 'syz.7.3336': attribute type 4 has an invalid length. [ 708.636419][T12202] netlink: 'syz.7.3336': attribute type 4 has an invalid length. [ 709.724388][T12210] loop1: detected capacity change from 0 to 512 [ 712.535117][T12210] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 712.558018][T12214] netlink: 'syz.7.3344': attribute type 27 has an invalid length. [ 712.596794][T12210] EXT4-fs (loop1): 1 truncate cleaned up [ 712.603316][T12210] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 712.759649][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 714.450120][T12248] device xfrm0 entered promiscuous mode [ 714.898053][T12259] netlink: 96 bytes leftover after parsing attributes in process `syz.7.3352'. [ 716.043077][T12256] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3351'. [ 716.072333][T12256] netem: unknown loss type 13 [ 716.082456][T12256] netem: change failed [ 718.357235][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3359'. [ 718.922265][T12305] loop1: detected capacity change from 0 to 512 [ 718.933050][T12305] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 719.050979][T12305] EXT4-fs (loop1): 1 truncate cleaned up [ 719.056979][T12305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 719.843829][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 721.444461][T12323] loop1: detected capacity change from 0 to 256 [ 721.516666][T12323] FAT-fs (loop1): Directory bread(block 64) failed [ 721.523401][T12323] FAT-fs (loop1): Directory bread(block 65) failed [ 721.530511][T12323] FAT-fs (loop1): Directory bread(block 66) failed [ 721.537367][T12323] FAT-fs (loop1): Directory bread(block 67) failed [ 721.544801][T12323] FAT-fs (loop1): Directory bread(block 68) failed [ 721.551595][T12323] FAT-fs (loop1): Directory bread(block 69) failed [ 721.559679][T12323] FAT-fs (loop1): Directory bread(block 70) failed [ 721.567184][T12323] FAT-fs (loop1): Directory bread(block 71) failed [ 721.574692][T12323] FAT-fs (loop1): Directory bread(block 72) failed [ 721.583329][T12323] FAT-fs (loop1): Directory bread(block 73) failed [ 722.213544][T12341] device macsec0 entered promiscuous mode [ 722.219435][T12341] device bridge0 entered promiscuous mode [ 722.225760][T12341] bridge0: port 1(macsec0) entered blocking state [ 722.232371][T12341] bridge0: port 1(macsec0) entered disabled state [ 722.421933][T12341] device bridge0 left promiscuous mode [ 722.601324][T12349] netlink: 'syz.9.3377': attribute type 1 has an invalid length. [ 723.908106][T12360] loop1: detected capacity change from 0 to 512 [ 724.173101][T12360] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.3379: casefold flag without casefold feature [ 724.187406][T12360] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.3379: couldn't read orphan inode 15 (err -117) [ 724.201202][T12360] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 725.820545][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 726.536490][ T28] kauditd_printk_skb: 409 callbacks suppressed [ 726.536515][ T28] audit: type=1326 audit(2000525224.380:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.605939][ T28] audit: type=1326 audit(2000525224.420:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.630322][ T28] audit: type=1326 audit(2000525224.420:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.655352][ T28] audit: type=1326 audit(2000525224.420:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.679978][ T28] audit: type=1326 audit(2000525224.420:2900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.705155][ T28] audit: type=1326 audit(2000525224.420:2901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.729899][ T28] audit: type=1326 audit(2000525224.430:2902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.838322][T12396] loop1: detected capacity change from 0 to 128 [ 726.849996][ T28] audit: type=1326 audit(2000525224.440:2903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 726.875064][ T28] audit: type=1326 audit(2000525224.440:2904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 727.180704][ T28] audit: type=1326 audit(2000525224.440:2905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12387 comm="syz.4.3386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f419458ebe9 code=0x7ffc0000 [ 727.925280][T12414] futex_wake_op: syz.1.3393 tries to shift op by -1; fix this program [ 729.451687][T12434] syz.7.3398[12434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 729.452931][T12434] syz.7.3398[12434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 735.252370][T12482] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3409'. [ 736.188580][T12494] loop1: detected capacity change from 0 to 4096 [ 736.195457][T12494] EXT4-fs: Ignoring removed mblk_io_submit option [ 736.394106][T12494] EXT4-fs (loop1): Test dummy encryption mode enabled [ 737.159851][T12494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 737.917584][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 741.512247][ T3303] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 741.531299][T12535] overlayfs: missing 'lowerdir' [ 742.618154][T12542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3427'. [ 742.635318][T12542] tc_dump_action: action bad kind [ 742.679532][T12542] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 742.713313][ T3303] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee [ 742.724644][ T3303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.738477][ T3303] usb 2-1: config 0 descriptor?? [ 742.751059][ T3303] usb 2-1: selecting invalid altsetting 1 [ 742.768984][ T3303] snd-usb-audio: probe of 2-1:0.0 failed with error -22 [ 742.817057][T12231] udevd[12231]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 742.953115][T12526] loop1: detected capacity change from 0 to 1024 [ 742.999538][T12526] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 743.013035][T12526] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.608019][ T3303] usb 2-1: USB disconnect, device number 5 [ 744.442410][ T696] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: comm kworker/u4:334: lblock 0 mapped to illegal pblock 0 (length 6) [ 744.502451][ T696] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 744.544525][ T696] EXT4-fs (loop1): This should not happen!! Data will be lost [ 744.544525][ T696] [ 744.853821][ T696] EXT4-fs error (device loop1): ext4_map_blocks:745: inode #15: block 8: comm kworker/u4:334: lblock 8 mapped to illegal pblock 8 (length 8) [ 744.895345][ T696] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 744.914547][ T696] EXT4-fs (loop1): This should not happen!! Data will be lost [ 744.914547][ T696] [ 745.185035][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 745.219101][T12572] loop1: detected capacity change from 0 to 256 [ 752.518337][T12648] bridge: RTM_NEWNEIGH with invalid ether address [ 752.880258][ T28] kauditd_printk_skb: 213 callbacks suppressed [ 752.880274][ T28] audit: type=1400 audit(2000525250.720:3119): avc: denied { shutdown } for pid=12650 comm="syz.1.3454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 753.964669][T12660] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3456'. [ 760.358841][T12731] loop1: detected capacity change from 0 to 512 [ 760.442117][T12731] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 760.484688][T12731] EXT4-fs (loop1): orphan cleanup on readonly fs [ 760.491821][T12731] Quota error (device loop1): do_check_range: Getting block 196613 out of range 1-5 [ 760.513876][T12731] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 760.559246][T12731] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.3471: Failed to acquire dquot type 1 [ 760.571845][T12731] EXT4-fs (loop1): 1 truncate cleaned up [ 760.577727][T12731] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 760.668501][T12737] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 760.728769][T12737] device xfrm0 left promiscuous mode [ 760.775133][T12737] device veth1_macvtap left promiscuous mode [ 760.797528][T12737] device veth1_macvtap entered promiscuous mode [ 760.881687][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 760.892288][ T3303] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 760.895945][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 760.950410][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 760.963651][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 760.994446][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 761.032451][ T3303] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 761.322287][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 761.436302][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 761.540226][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 761.617911][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 761.699279][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 762.382878][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 762.431947][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 762.492573][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 762.540406][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 762.564843][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 762.768447][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 762.847337][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 762.929369][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 763.012716][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 763.096449][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 763.180096][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 764.432595][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 764.460060][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 764.487854][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 764.510958][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 764.532713][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 764.548169][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 764.562557][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 764.678697][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 764.690545][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 764.719890][ T3305] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 764.727593][ T3305] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 765.082401][ T28] audit: type=1400 audit(2000525262.870:3120): avc: denied { create } for pid=12755 comm="syz.7.3481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 765.185608][ T3305] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 766.096129][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 766.138928][T12781] loop1: detected capacity change from 0 to 512 [ 766.151795][T12781] EXT4-fs: Ignoring removed mblk_io_submit option [ 766.163872][T12781] EXT4-fs: Ignoring removed bh option [ 766.169874][T12781] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 766.183028][T12781] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 766.351830][T12785] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 766.364972][ T28] audit: type=1400 audit(2000525264.210:3121): avc: denied { relabelto } for pid=12776 comm="syz.9.3485" name="596" dev="tmpfs" ino=3194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 767.149488][ T28] audit: type=1400 audit(2000525264.210:3122): avc: denied { associate } for pid=12776 comm="syz.9.3485" name="596" dev="tmpfs" ino=3194 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 768.852228][ T28] audit: type=1400 audit(2000525266.690:3123): avc: denied { associate } for pid=12797 comm="syz.7.3491" name="blkio.bfq.io_merged_recursive" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 768.887290][T12781] EXT4-fs (loop1): 1 truncate cleaned up [ 768.893255][T12781] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 769.002241][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 769.098852][T12805] netlink: 'syz.1.3486': attribute type 27 has an invalid length. [ 769.137793][T12805] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.145056][T12805] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.641429][T12813] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3493'. [ 769.650729][T12813] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3493'. [ 769.666984][T12813] device wireguard0 entered promiscuous mode [ 770.925551][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 771.054682][T12847] loop1: detected capacity change from 0 to 128 [ 771.353519][T12847] syz.1.3499: attempt to access beyond end of device [ 771.353519][T12847] loop1: rw=2049, sector=145, nr_sectors = 89 limit=128 [ 771.393386][T12847] syz.1.3499: attempt to access beyond end of device [ 771.393386][T12847] loop1: rw=2049, sector=241, nr_sectors = 800 limit=128 [ 771.418947][T12847] syz.1.3499: attempt to access beyond end of device [ 771.418947][T12847] loop1: rw=524288, sector=241, nr_sectors = 256 limit=128 [ 771.433698][T12847] syz.1.3499: attempt to access beyond end of device [ 771.433698][T12847] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 771.447909][T12847] syz.1.3499: attempt to access beyond end of device [ 771.447909][T12847] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 771.462118][T12847] syz.1.3499: attempt to access beyond end of device [ 771.462118][T12847] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 771.477086][T12847] syz.1.3499: attempt to access beyond end of device [ 771.477086][T12847] loop1: rw=0, sector=241, nr_sectors = 8 limit=128 [ 771.491858][T12854] syz.1.3499: attempt to access beyond end of device [ 771.491858][T12854] loop1: rw=0, sector=241, nr_sectors = 1 limit=128 [ 771.506049][T12847] syz.1.3499: attempt to access beyond end of device [ 771.506049][T12847] loop1: rw=0, sector=241, nr_sectors = 1 limit=128 [ 771.520940][T12847] Buffer I/O error on dev loop1, logical block 241, async page read [ 771.529654][T12847] syz.1.3499: attempt to access beyond end of device [ 771.529654][T12847] loop1: rw=0, sector=242, nr_sectors = 1 limit=128 [ 771.543572][T12847] Buffer I/O error on dev loop1, logical block 242, async page read [ 771.552045][T12847] Buffer I/O error on dev loop1, logical block 243, async page read [ 771.560667][T12847] Buffer I/O error on dev loop1, logical block 244, async page read [ 771.569288][T12847] Buffer I/O error on dev loop1, logical block 245, async page read [ 771.577845][T12847] Buffer I/O error on dev loop1, logical block 246, async page read [ 771.586612][T12847] Buffer I/O error on dev loop1, logical block 247, async page read [ 771.596026][T12847] Buffer I/O error on dev loop1, logical block 248, async page read [ 771.604496][T12847] Buffer I/O error on dev loop1, logical block 241, async page read [ 771.613032][T12847] Buffer I/O error on dev loop1, logical block 242, async page read [ 772.168543][T12867] netlink: 'syz.3.3508': attribute type 16 has an invalid length. [ 775.595918][T12907] loop1: detected capacity change from 0 to 256 [ 775.603716][T12907] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 777.642617][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 777.749951][T12907] FAT-fs (loop1): Directory bread(block 64) failed [ 777.756649][T12907] FAT-fs (loop1): Directory bread(block 65) failed [ 777.763321][T12907] FAT-fs (loop1): Directory bread(block 66) failed [ 777.769950][T12907] FAT-fs (loop1): Directory bread(block 67) failed [ 777.777031][T12907] FAT-fs (loop1): Directory bread(block 68) failed [ 777.784070][T12907] FAT-fs (loop1): Directory bread(block 69) failed [ 777.790946][T12907] FAT-fs (loop1): Directory bread(block 70) failed [ 777.797897][T12907] FAT-fs (loop1): Directory bread(block 71) failed [ 777.804765][T12907] FAT-fs (loop1): Directory bread(block 72) failed [ 777.811463][T12907] FAT-fs (loop1): Directory bread(block 73) failed [ 779.280592][T12934] loop1: detected capacity change from 0 to 2048 [ 781.772095][T12934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 781.781360][T12934] ext4 filesystem being mounted at /131/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 782.098696][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 782.625215][T12965] !: renamed from dummy0 [ 782.779707][T12977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3531'. [ 783.278930][T12985] syz.3.3535[12985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.279233][T12985] syz.3.3535[12985] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 783.313718][T12985] netlink: 'syz.3.3535': attribute type 4 has an invalid length. [ 783.352025][T12985] netlink: 'syz.3.3535': attribute type 4 has an invalid length. [ 787.133517][T13000] loop1: detected capacity change from 0 to 4096 [ 787.141109][T13000] EXT4-fs: Ignoring removed mblk_io_submit option [ 787.336669][T13000] EXT4-fs (loop1): Test dummy encryption mode enabled [ 787.382283][T13000] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 787.618415][ T28] audit: type=1400 audit(2000525285.460:3124): avc: denied { unlink } for pid=9983 comm="syz-executor" name="memory.events" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 787.651559][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 788.016366][T13021] overlayfs: failed to clone lowerpath [ 794.534531][T13104] device bridge1 entered promiscuous mode [ 794.922383][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 797.795885][T13133] syz.4.3576[13133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 797.796208][T13133] syz.4.3576[13133] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 798.581151][T13136] loop1: detected capacity change from 0 to 512 [ 798.701012][T13136] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 799.238410][T13136] EXT4-fs (loop1): 1 truncate cleaned up [ 799.280397][T13136] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 801.602756][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 810.254639][T13230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3598'. [ 813.160467][T13269] tipc: Trying to set illegal importance in message [ 813.605692][T13277] netlink: 'syz.4.3611': attribute type 27 has an invalid length. [ 814.590177][T13292] tipc: Enabling of bearer rejected, failed to enable media [ 814.662022][T13275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 814.724050][T13275] device veth1_macvtap left promiscuous mode [ 814.753281][T13275] device veth1_macvtap entered promiscuous mode [ 814.813388][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 814.903930][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 814.963238][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 814.982724][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 814.993416][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 815.034442][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 815.077911][T13310] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3616'. [ 815.129329][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 815.214089][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 815.223113][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 815.232492][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 815.242582][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 815.251267][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 815.260508][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 815.270449][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 815.280241][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 815.312777][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 815.321979][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 815.335391][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 815.352674][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 815.362477][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 815.402370][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 815.415504][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 815.424476][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 815.433435][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 815.441504][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 815.449791][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 815.458056][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 815.467342][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 815.477345][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 815.488340][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 815.498366][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 815.508252][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 815.682602][T13318] netlink: 9 bytes leftover after parsing attributes in process `syz.9.3618'. [ 815.755799][T13319] netlink: 5 bytes leftover after parsing attributes in process `syz.9.3618'. [ 815.765163][T13319] 0ªX¹¦D: renamed from gretap0 [ 815.774115][T13319] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 816.541000][T13294] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 816.562284][T13294] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 817.418726][T13287] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 819.271852][T13358] loop1: detected capacity change from 0 to 2048 [ 820.442420][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 820.843635][T13358] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 821.272718][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 822.071578][T13374] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3631'. [ 822.588333][T13370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 822.597449][T13370] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 822.681075][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 822.727283][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 822.741298][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 822.812725][T10320] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 823.770079][T13386] netlink: 'syz.4.3633': attribute type 27 has an invalid length. [ 824.349067][T13402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3639'. [ 824.792525][ T28] audit: type=1400 audit(2000525322.570:3125): avc: denied { watch_reads } for pid=13403 comm="syz.7.3650" path="/604/file0" dev="tmpfs" ino=3290 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 828.912514][T13445] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3651'. [ 833.332628][T13463] xt_NFQUEUE: number of total queues is 0 [ 834.858371][T13457] netlink: 'syz.9.3655': attribute type 27 has an invalid length. [ 834.965812][T13457] tipc: Resetting bearer [ 835.049168][T13457] device veth9 left promiscuous mode [ 836.146161][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 836.154156][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 836.234038][T13458] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 836.243049][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 836.252777][T13485] netlink: 'syz.4.3661': attribute type 16 has an invalid length. [ 836.261001][T13485] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.3661'. [ 836.261032][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 836.298549][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 836.307404][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 836.316000][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 836.325422][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 836.335406][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 836.346009][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 836.362699][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 836.380388][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 836.389422][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 836.398493][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 836.407512][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 836.416282][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 836.425885][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 836.434670][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 836.443523][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 836.462858][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 836.471769][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 836.482571][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 836.498746][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 836.512766][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 836.531475][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 836.542554][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 836.561583][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 836.572713][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 836.586248][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 836.598861][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 836.606996][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 836.614623][ T1028] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 836.815568][T13494] loop1: detected capacity change from 0 to 2048 [ 837.204985][T13494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 838.255543][T13494] hub 8-0:1.0: USB hub found [ 838.514140][T13494] hub 8-0:1.0: 1 port detected [ 840.988567][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 841.016720][T13527] sch_tbf: peakrate 8 is lower than or equals to rate 16 ! [ 841.477890][ T28] audit: type=1326 audit(2000525339.320:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 841.503699][ T28] audit: type=1326 audit(2000525339.320:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 841.528934][ T28] audit: type=1326 audit(2000525339.320:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=37 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 841.739673][ T28] audit: type=1326 audit(2000525339.320:3129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 841.949769][ T28] audit: type=1326 audit(2000525339.320:3130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 842.153820][ T28] audit: type=1326 audit(2000525339.320:3131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 842.680035][ T28] audit: type=1326 audit(2000525339.320:3132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 842.728351][ T28] audit: type=1326 audit(2000525339.320:3133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 842.756485][ T28] audit: type=1326 audit(2000525339.320:3134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=284 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 843.842300][ T28] audit: type=1326 audit(2000525339.320:3135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.7.3674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 848.001331][T13616] device wireguard0 entered promiscuous mode [ 848.960803][T13631] xt_hashlimit: max too large, truncated to 1048576 [ 849.704900][T13641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3699'. [ 851.307694][T13654] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3707'. [ 852.278132][T13666] loop1: detected capacity change from 0 to 512 [ 852.340040][T13666] EXT4-fs: Ignoring removed nomblk_io_submit option [ 852.361495][T13666] EXT4-fs (loop1): Test dummy encryption mode enabled [ 852.400127][T13666] EXT4-fs (loop1): 1 truncate cleaned up [ 852.490679][T13666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 853.139141][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 856.563721][T13718] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3724'. [ 856.730439][T13706] loop1: detected capacity change from 0 to 40427 [ 856.763708][T13706] F2FS-fs (loop1): Should set mode=lfs with 1024KB-sized IO [ 858.982099][T13729] syz.1.3727[13729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 858.982235][T13729] syz.1.3727[13729] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 861.528631][T13766] loop1: detected capacity change from 0 to 256 [ 861.570267][T13766] FAT-fs (loop1): Directory bread(block 64) failed [ 861.577541][T13766] FAT-fs (loop1): Directory bread(block 65) failed [ 861.584678][T13766] FAT-fs (loop1): Directory bread(block 66) failed [ 861.591693][T13766] FAT-fs (loop1): Directory bread(block 67) failed [ 861.598607][T13766] FAT-fs (loop1): Directory bread(block 68) failed [ 861.605385][T13766] FAT-fs (loop1): Directory bread(block 69) failed [ 861.612367][T13766] FAT-fs (loop1): Directory bread(block 70) failed [ 861.619223][T13766] FAT-fs (loop1): Directory bread(block 71) failed [ 861.626024][T13766] FAT-fs (loop1): Directory bread(block 72) failed [ 861.632791][T13766] FAT-fs (loop1): Directory bread(block 73) failed [ 862.165473][T13769] device dummy0 entered promiscuous mode [ 862.201667][T13769] device vlan0 entered promiscuous mode [ 863.400470][T13781] xt_NFQUEUE: number of total queues is 0 [ 863.638270][T10367] Bluetooth: hci0: Frame reassembly failed (-84) [ 865.688700][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 865.695482][T13787] Bluetooth: hci0: command 0x1003 tx timeout [ 865.813837][T13816] incfs: Error accessing: ./file0/file0. [ 866.311641][T13816] incfs: mount failed -20 [ 868.382270][ T807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 868.597843][ T807] usb 2-1: Using ep0 maxpacket: 16 [ 868.604164][ T807] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 868.627924][ T807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 868.655087][ T807] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 868.703399][ T807] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 868.777766][ T807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.931592][ T807] usb 2-1: Product: syz [ 868.942206][ T807] usb 2-1: Manufacturer: syz [ 868.947002][ T807] usb 2-1: SerialNumber: syz [ 868.961204][ T807] usb 2-1: config 0 descriptor?? [ 869.357793][T13911] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 871.213836][ T807] usb 2-1: USB disconnect, device number 6 [ 872.852296][ T28] kauditd_printk_skb: 60 callbacks suppressed [ 872.852324][ T28] audit: type=1400 audit(2000525370.688:3196): avc: denied { relabelfrom } for pid=13954 comm="syz.7.3772" name="" dev="pipefs" ino=54271 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 873.181184][T13980] tmpfs: Bad value for 'size' [ 873.801429][T13988] loop1: detected capacity change from 0 to 2048 [ 874.261609][T13988] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 874.537630][T14008] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 874.712126][T14002] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3780: bg 0: block 234: padding at end of block bitmap is not set [ 874.727867][T14002] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 874.741295][T14002] EXT4-fs (loop1): This should not happen!! Data will be lost [ 874.741295][T14002] [ 874.764774][T14002] EXT4-fs (loop1): Total free blocks count 0 [ 874.783166][T14002] EXT4-fs (loop1): Free/Dirty block details [ 874.811142][T14002] EXT4-fs (loop1): free_blocks=0 [ 874.828162][T14002] EXT4-fs (loop1): dirty_blocks=5792 [ 874.846389][T14002] EXT4-fs (loop1): Block reservation details [ 874.922990][T14002] EXT4-fs (loop1): i_reserved_data_blocks=362 [ 875.076465][T10275] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 875.774068][T14027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3789'. [ 875.935571][T14024] xt_hashlimit: max too large, truncated to 1048576 [ 881.369317][T14057] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3797'. [ 881.622418][T14044] device veth5 entered promiscuous mode [ 881.637857][T14063] syz.7.3798[14063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 881.638154][T14063] syz.7.3798[14063] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 881.829887][T14062] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3799'. [ 882.115686][T14062] netlink: 277 bytes leftover after parsing attributes in process `syz.3.3799'. [ 882.629613][T14070] loop1: detected capacity change from 0 to 128 [ 882.694313][T14070] bio_check_eod: 25734 callbacks suppressed [ 882.694334][T14070] syz.1.3801: attempt to access beyond end of device [ 882.694334][T14070] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 883.003026][T14070] syz.1.3801: attempt to access beyond end of device [ 883.003026][T14070] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 883.019552][T14070] syz.1.3801: attempt to access beyond end of device [ 883.019552][T14070] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.034900][T14079] netlink: 'syz.3.3805': attribute type 27 has an invalid length. [ 883.045381][T14079] device xfrm0 left promiscuous mode [ 883.052308][T14070] syz.1.3801: attempt to access beyond end of device [ 883.052308][T14070] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.067921][T14079] device wireguard0 left promiscuous mode [ 883.074654][T14070] syz.1.3801: attempt to access beyond end of device [ 883.074654][T14070] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.092340][T14081] syz.1.3801: attempt to access beyond end of device [ 883.092340][T14081] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.096877][T14082] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 883.108344][T14070] syz.1.3801: attempt to access beyond end of device [ 883.108344][T14070] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.129452][T14081] syz.1.3801: attempt to access beyond end of device [ 883.129452][T14081] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.145761][T14081] syz.1.3801: attempt to access beyond end of device [ 883.145761][T14081] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.171846][T14081] syz.1.3801: attempt to access beyond end of device [ 883.171846][T14081] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 883.187612][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 883.205630][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 883.221887][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 883.235969][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.243878][T10348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.261174][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 883.278777][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 883.292279][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.299904][T10348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.318808][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 883.336443][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 883.352935][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 883.370569][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 883.379433][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 883.388357][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 883.397495][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 883.406406][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 883.479602][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 883.491849][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 883.507623][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 883.522685][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 883.535591][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 883.547276][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 883.559162][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 883.570854][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 883.582631][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 883.594670][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 883.605082][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 883.620638][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 883.640095][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 883.653746][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 883.665187][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 883.676428][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 883.686418][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 883.698397][T13287] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 883.706785][T13287] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 883.717802][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 883.732489][ T6] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 883.741233][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 883.753937][T13287] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 883.777488][T13287] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 883.785567][T13287] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 884.110604][T14107] xt_NFQUEUE: number of total queues is 0 [ 885.561560][T13287] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 885.569802][T13287] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 885.588923][T13287] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 887.535120][T14126] device bridge5 entered promiscuous mode [ 887.642256][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 887.986675][T14135] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3817'. [ 888.333647][T14138] xt_hashlimit: max too large, truncated to 1048576 [ 888.376182][T14145] netlink: 'syz.7.3820': attribute type 27 has an invalid length. [ 888.964752][T14145] device bridge5 left promiscuous mode [ 888.995125][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 889.009803][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 889.184103][T14146] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 889.202911][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 889.210741][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 889.232628][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 889.241756][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 889.262729][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.281727][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.290855][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 889.308184][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 889.359189][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 889.382026][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 889.391384][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 889.447967][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 889.584330][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 889.615363][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 889.623853][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 889.631771][T10275] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 890.002037][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3825'. [ 890.019724][T14166] device bridge0 entered promiscuous mode [ 890.027872][T14166] bridge0: port 3(macsec0) entered blocking state [ 890.034892][T14166] bridge0: port 3(macsec0) entered disabled state [ 890.046111][T14166] device bridge0 left promiscuous mode [ 890.402196][T14171] xt_NFQUEUE: number of total queues is 0 [ 890.476735][T14172] futex_wake_op: syz.7.3828 tries to shift op by -1; fix this program [ 892.239457][T14186] loop1: detected capacity change from 0 to 512 [ 892.377619][T14186] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 892.386916][T14186] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 892.399430][T14186] EXT4-fs (loop1): 1 truncate cleaned up [ 892.405976][T14186] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 893.639419][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 894.331436][T14211] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3834'. [ 894.480397][T14217] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 894.913246][T14222] 9pnet_fd: Insufficient options for proto=fd [ 894.925073][T14222] device vlan0 entered promiscuous mode [ 894.930819][T14222] device bridge0 entered promiscuous mode [ 896.042269][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 896.042289][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 896.056850][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 898.393787][T14234] device wireguard0 entered promiscuous mode [ 900.542712][ T2957] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 900.557641][T14263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3849'. [ 900.783701][ T2957] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 900.837454][ T2957] usb 2-1: config 0 has no interface number 0 [ 900.955647][ T2957] usb 2-1: config 0 interface 41 has no altsetting 0 [ 901.001261][ T2957] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 901.016771][ T2957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.026897][ T2957] usb 2-1: Product: syz [ 901.032310][ T2957] usb 2-1: Manufacturer: syz [ 901.036999][ T2957] usb 2-1: SerialNumber: syz [ 901.042500][ T2957] usb 2-1: config 0 descriptor?? [ 901.730155][T14292] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3854'. [ 902.199432][T14294] device vlan0 entered promiscuous mode [ 902.215359][T14294] device bridge0 entered promiscuous mode [ 902.503949][ T2957] CoreChips: probe of 2-1:0.41 failed with error -71 [ 902.689193][ T2957] usb 2-1: USB disconnect, device number 7 [ 903.064927][T14294] bridge0: port 1(vlan1) entered blocking state [ 903.476341][T14294] bridge0: port 1(vlan1) entered disabled state [ 903.868097][T14315] overlayfs: failed to clone upperpath [ 906.909582][T14348] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3869'. [ 910.993899][T14381] xt_NFQUEUE: number of total queues is 0 [ 911.327755][T14392] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3879'. [ 912.682233][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 912.697466][T14400] loop1: detected capacity change from 0 to 40427 [ 912.705911][T14400] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 912.714085][T14400] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 912.723885][T14400] F2FS-fs (loop1): invalid crc value [ 912.730774][T14400] F2FS-fs (loop1): Found nat_bits in checkpoint [ 912.753911][T14400] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 912.761257][T14400] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 913.199819][ T28] audit: type=1400 audit(2000525411.048:3197): avc: denied { create } for pid=14417 comm="syz.1.3897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 913.322286][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 914.596034][ T28] audit: type=1400 audit(2000525412.448:3198): avc: denied { connect } for pid=14417 comm="syz.1.3897" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 914.625186][ T28] audit: type=1400 audit(2000525412.448:3199): avc: denied { name_connect } for pid=14417 comm="syz.1.3897" dest=20001 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 914.804858][T14432] netlink: 52 bytes leftover after parsing attributes in process `syz.7.3885'. [ 917.659850][ T28] audit: type=1326 audit(2000525415.018:3200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 917.961723][ T28] audit: type=1326 audit(2000525415.018:3201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 918.097129][ T28] audit: type=1326 audit(2000525415.018:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 920.333656][T14481] loop1: detected capacity change from 0 to 256 [ 920.340865][T14481] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 920.458398][T14481] FAT-fs (loop1): Directory bread(block 64) failed [ 920.465147][T14481] FAT-fs (loop1): Directory bread(block 65) failed [ 920.472280][T14481] FAT-fs (loop1): Directory bread(block 66) failed [ 920.478971][T14481] FAT-fs (loop1): Directory bread(block 67) failed [ 920.485867][T14481] FAT-fs (loop1): Directory bread(block 68) failed [ 920.492479][T14481] FAT-fs (loop1): Directory bread(block 69) failed [ 920.499322][T14481] FAT-fs (loop1): Directory bread(block 70) failed [ 920.506152][T14481] FAT-fs (loop1): Directory bread(block 71) failed [ 920.512934][T14481] FAT-fs (loop1): Directory bread(block 72) failed [ 920.519608][T14481] FAT-fs (loop1): Directory bread(block 73) failed [ 921.157607][ T28] audit: type=1326 audit(2000525415.028:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 921.181624][ T28] audit: type=1326 audit(2000525415.028:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 921.205502][ T28] audit: type=1326 audit(2000525415.058:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 921.230499][ T28] audit: type=1326 audit(2000525415.068:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 921.254465][ T28] audit: type=1326 audit(2000525415.078:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 922.697079][ T28] audit: type=1326 audit(2000525415.108:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2a5558ebe9 code=0x7ffc0000 [ 922.823608][ T28] audit: type=1326 audit(2000525415.118:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2a5558ec23 code=0x7ffc0000 [ 922.859966][ T28] audit: type=1326 audit(2000525415.138:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2a5558d69f code=0x7ffc0000 [ 923.767603][ T28] audit: type=1326 audit(2000525415.138:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f2a5558ec77 code=0x7ffc0000 [ 923.792115][ T28] audit: type=1326 audit(2000525415.138:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14461 comm="syz.3.3899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2a5558d550 code=0x7ffc0000 [ 923.820246][T14505] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 923.873294][T14503] netlink: 'syz.9.3910': attribute type 6 has an invalid length. [ 923.976681][T14511] loop1: detected capacity change from 0 to 256 [ 924.057052][T14511] FAT-fs (loop1): bogus number of FAT sectors [ 924.078462][T14511] FAT-fs (loop1): Can't find a valid FAT filesystem [ 926.322241][T14548] loop1: detected capacity change from 0 to 512 [ 926.564866][T14548] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 926.574782][T14548] ext4 filesystem being mounted at /207/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 927.233847][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 929.270324][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 929.322960][ T28] audit: type=1400 audit(2000525426.748:3223): avc: denied { read } for pid=14563 comm="syz.1.3923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 930.075537][T14593] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 932.937591][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3934'. [ 933.239674][T14621] loop1: detected capacity change from 0 to 512 [ 933.253906][T14621] EXT4-fs: Ignoring removed mblk_io_submit option [ 933.268456][T14621] EXT4-fs: Ignoring removed bh option [ 933.295631][T14621] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 933.308037][T14621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 933.327067][T14621] EXT4-fs (loop1): 1 truncate cleaned up [ 933.333470][T14621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 933.748409][T14634] syz.7.3940[14634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 933.748482][T14634] syz.7.3940[14634] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 934.717021][T14621] netlink: 'syz.1.3935': attribute type 27 has an invalid length. [ 934.744828][T14621] device bridge1 left promiscuous mode [ 934.753871][T14621] device veth5 left promiscuous mode [ 934.771428][T14621] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 934.818889][T14621] device veth0_vlan left promiscuous mode [ 934.829348][T14621] device veth0_vlan entered promiscuous mode [ 934.845425][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 934.862551][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 934.890537][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 934.910700][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.918069][T10229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.942478][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 934.961269][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 934.972281][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.979342][T10229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 935.007467][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 935.027867][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 935.036959][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 935.055597][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 935.075810][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 935.092529][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 935.115768][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 935.134627][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 935.154517][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 935.268514][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 935.278619][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 935.301812][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 935.310846][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 935.320222][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 935.329263][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 935.338040][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 935.358513][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 935.396579][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 935.407636][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 935.422880][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 935.669337][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 935.700643][T14663] loop1: detected capacity change from 0 to 512 [ 935.715899][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 935.721788][T14663] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 935.743868][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 935.751691][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 935.759785][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 935.767607][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 935.777702][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 935.777922][T14663] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 935.786080][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 935.802201][T14663] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 935.812854][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 935.847110][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 935.908482][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 936.437454][T14671] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.3948: verity file corrupted; can't find descriptor [ 936.437521][T14672] EXT4-fs error (device loop1): ext4_get_verity_descriptor_location:337: inode #15: comm syz.1.3948: verity file corrupted; can't find descriptor [ 936.469290][T14671] EXT4-fs (loop1): Remounting filesystem read-only [ 936.476122][T14671] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 936.489215][T14672] EXT4-fs (loop1): Remounting filesystem read-only [ 936.495873][T14672] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size [ 936.583260][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 938.162794][T14695] syz.7.3950[14695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 938.162955][T14695] syz.7.3950[14695] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 938.572635][T14695] overlayfs: failed to clone lowerpath [ 938.982349][T14694] overlayfs: missing 'lowerdir' [ 941.644903][T14739] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3965'. [ 944.946148][ T28] audit: type=1400 audit(2000525447.330:3224): avc: denied { map } for pid=14772 comm="syz.3.3977" path="socket:[55208]" dev="sockfs" ino=55208 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 945.322418][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 945.677287][T14801] syz.9.3981[14801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 945.678331][T14801] syz.9.3981[14801] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 945.942909][T14800] overlayfs: failed to resolve './file1': -2 [ 948.522420][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 949.093898][T14819] netlink: 'syz.4.3987': attribute type 4 has an invalid length. [ 950.294754][T14846] overlayfs: failed to clone upperpath [ 955.946008][ T28] audit: type=1400 audit(2000525455.370:3225): avc: denied { create } for pid=14880 comm="syz.4.4002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 957.528940][T13295] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 958.008217][T13295] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 958.022049][T13295] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 958.058442][T13295] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 958.069878][T13295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 958.125091][T13295] usb 2-1: SerialNumber: syz [ 958.633120][T13295] usb 2-1: 0:2 : does not exist [ 958.638816][T13295] usb 2-1: unit 5: unexpected type 0x0c [ 958.651868][T13295] usb 2-1: USB disconnect, device number 8 [ 958.893003][T14914] udevd[14914]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 960.140457][T14939] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 960.148147][T14939] IPv6: NLM_F_CREATE should be set when creating new route [ 962.682002][T14968] netlink: 'syz.3.4020': attribute type 4 has an invalid length. [ 962.690653][T14968] netlink: 17 bytes leftover after parsing attributes in process `syz.3.4020'. [ 962.784450][T14969] IPv6: NLM_F_CREATE should be specified when creating new route [ 964.206675][T14983] loop1: detected capacity change from 0 to 1024 [ 964.222519][T14983] EXT4-fs: Ignoring removed i_version option [ 964.232387][T14983] EXT4-fs (loop1): Test dummy encryption mode enabled [ 964.241209][T14983] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 964.767690][T14983] bridge0: port 3(vlan2) entered blocking state [ 964.774162][T14983] bridge0: port 3(vlan2) entered disabled state [ 964.842724][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 966.288316][T14997] loop1: detected capacity change from 0 to 40427 [ 966.302792][T15010] device vlan0 entered promiscuous mode [ 966.311865][T14997] F2FS-fs (loop1): invalid crc value [ 966.333376][T14997] F2FS-fs (loop1): Found nat_bits in checkpoint [ 966.846859][T14997] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 967.862058][T15031] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 967.889385][T15032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4036'. [ 972.260843][T15076] device vlan2 entered promiscuous mode [ 972.320260][T15076] device bridge0 entered promiscuous mode [ 972.464330][T15089] loop1: detected capacity change from 0 to 256 [ 972.601086][T15089] FAT-fs (loop1): Directory bread(block 64) failed [ 972.607867][T15089] FAT-fs (loop1): Directory bread(block 65) failed [ 972.614704][T15089] FAT-fs (loop1): Directory bread(block 66) failed [ 972.621526][T15089] FAT-fs (loop1): Directory bread(block 67) failed [ 972.628273][T15089] FAT-fs (loop1): Directory bread(block 68) failed [ 972.634944][T15089] FAT-fs (loop1): Directory bread(block 69) failed [ 972.641780][T15089] FAT-fs (loop1): Directory bread(block 70) failed [ 972.648650][T15089] FAT-fs (loop1): Directory bread(block 71) failed [ 972.655345][T15089] FAT-fs (loop1): Directory bread(block 72) failed [ 972.662185][T15089] FAT-fs (loop1): Directory bread(block 73) failed [ 977.773875][T15138] tipc: Failed to remove unknown binding: 66,1,1/2130706433:4261189001/4261189003 [ 977.911824][T15138] tipc: Failed to remove unknown binding: 66,1,1/2130706433:4261189001/4261189003 [ 979.478396][T15161] overlayfs: missing 'lowerdir' [ 986.120862][T15204] netlink: 'syz.9.4081': attribute type 27 has an invalid length. [ 986.145951][T15204] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 986.161567][T15204] device veth1_macvtap left promiscuous mode [ 987.692391][T15211] overlayfs: failed to clone upperpath [ 987.995741][T15204] device veth1_macvtap entered promiscuous mode [ 988.062604][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 988.162618][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 988.183360][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 988.202791][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 988.400755][T15225] incfs: ino conflict with backing FS 1 [ 988.427852][T15225] overlayfs: missing 'lowerdir' [ 988.487887][T15226] incfs: iterate_incfs_dir / -22 [ 989.154217][ T28] audit: type=1400 audit(2000525491.240:3226): avc: denied { mounton } for pid=15219 comm="syz.1.4085" path="/234/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 989.366113][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 989.374772][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 989.383264][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 989.395205][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 989.432541][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 989.458727][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 989.467336][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 989.475796][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 989.484237][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 989.495806][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 989.506136][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 989.515027][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 989.530438][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 989.552776][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 989.563332][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 989.574377][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 989.640849][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 989.719205][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 989.730925][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 989.738755][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): macsec1: link becomes ready [ 989.746677][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 989.754546][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 989.762395][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 989.770211][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 989.777966][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 989.785944][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 989.802678][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 989.810454][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 989.822362][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 989.838168][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 989.852617][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 989.861065][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 993.746911][T15269] loop1: detected capacity change from 0 to 256 [ 993.948960][ T28] audit: type=1400 audit(2000525496.790:3227): avc: denied { associate } for pid=15258 comm="syz.9.4095" name="718" dev="tmpfs" ino=3831 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 994.436020][T15280] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4100'. [ 994.983349][T15282] netlink: 'syz.4.4097': attribute type 2 has an invalid length. [ 995.012749][ T28] audit: type=1400 audit(2000525497.860:3228): avc: denied { write } for pid=2639 comm="syz-executor" name="718" dev="tmpfs" ino=3831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 995.042752][ T28] audit: type=1400 audit(2000525497.860:3229): avc: denied { remove_name } for pid=2639 comm="syz-executor" name="bus" dev="tmpfs" ino=3836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 995.070422][ T28] audit: type=1400 audit(2000525497.890:3230): avc: denied { rmdir } for pid=2639 comm="syz-executor" name="718" dev="tmpfs" ino=3831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 995.564074][T15295] IPv6: NLM_F_CREATE should be specified when creating new route [ 995.908689][T15302] loop1: detected capacity change from 0 to 512 [ 995.940579][T15302] EXT4-fs: Ignoring removed mblk_io_submit option [ 995.958737][T15302] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 995.977800][T15302] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 995.992622][T15302] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c01c, mo2=0102] [ 996.001040][T15302] System zones: 0-2, 18-18, 34-34 [ 996.032341][T15302] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.4106: iget: bad i_size value: 360287970189639680 [ 996.052474][T15302] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4106: couldn't read orphan inode 15 (err -117) [ 996.084472][T15302] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 996.163345][T15302] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.4106: iget: bad i_size value: 360287970189639680 [ 996.203549][T15302] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.4106: iget: bad i_size value: 360287970189639680 [ 996.233775][ T28] audit: type=1400 audit(2000525499.080:3231): avc: denied { create } for pid=15301 comm="syz.1.4106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 996.327292][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 996.556194][T15315] overlayfs: missing 'lowerdir' [ 996.567136][T15315] I/O error, dev loop15, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 996.577179][T15315] FAT-fs (loop15): unable to read boot sector [ 1004.777599][T15384] syz.1.4124[15384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1004.777773][T15384] syz.1.4124[15384] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1011.833770][T15437] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1012.340955][T15444] loop1: detected capacity change from 0 to 512 [ 1012.351602][T15446] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1012.438129][T15447] syz.9.4134[15447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1012.438419][T15447] syz.9.4134[15447] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1012.523164][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1013.329766][T15446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4140'. [ 1016.989584][T15491] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1016.998961][T15491] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1017.077424][T15491] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 1017.715938][T15497] overlayfs: failed to clone upperpath [ 1020.422461][T15512] overlayfs: missing 'lowerdir' [ 1021.233504][T15514] block device autoloading is deprecated and will be removed. [ 1021.241467][T15514] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1021.251093][T15514] FAT-fs (loop3): unable to read boot sector [ 1022.763331][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1025.293821][T15566] syz.9.4165[15566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1025.293890][T15566] syz.9.4165[15566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1027.726194][T15586] overlayfs: missing 'lowerdir' [ 1027.755964][T15586] I/O error, dev loop19, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1027.765638][T15586] FAT-fs (loop19): unable to read boot sector [ 1029.107925][T15591] xt_bpf: check failed: parse error [ 1031.272760][T15643] syz.3.4181[15643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1031.273046][T15643] syz.3.4181[15643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1035.726024][T15653] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4183'. [ 1038.232486][T15658] overlayfs: missing 'lowerdir' [ 1038.343452][T15660] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 1038.353098][T15660] FAT-fs (loop9): unable to read boot sector [ 1042.341272][T15696] loop1: detected capacity change from 0 to 512 [ 1042.465223][T15696] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1042.861125][T15696] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #17: comm syz.1.4196: inline data xattr refers to an external xattr inode [ 1042.914136][T15696] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.4196: couldn't read orphan inode 17 (err -117) [ 1042.965739][T15696] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1046.456147][ T9983] EXT4-fs (loop1): unmounting filesystem. [ 1047.416211][T15754] netlink: 'syz.1.4209': attribute type 13 has an invalid length. [ 1047.427706][T15754] netlink: 'syz.1.4209': attribute type 17 has an invalid length. [ 1048.685823][T15754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1048.812587][T15754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1048.867268][T15768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4214'. [ 1049.013196][T15776] 9pnet_fd: Insufficient options for proto=fd [ 1049.025191][T15779] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4217'. [ 1049.093191][ T28] audit: type=1400 audit(2000525551.920:3232): avc: denied { mounton } for pid=15773 comm="syz.1.4215" path="/260/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 1049.912729][T15795] overlayfs: failed to clone upperpath [ 1050.440670][T15816] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1050.473128][T15816] device vlan0 left promiscuous mode [ 1050.478576][T15816] device bridge0 left promiscuous mode [ 1050.636932][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1050.637950][ T807] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1050.653924][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1050.668784][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1051.015800][ T807] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1051.402678][ T807] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1051.412469][ T807] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1051.432285][ T807] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1051.730387][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1051.892586][ T807] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1051.937333][ T807] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1055.803210][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1057.222030][T15909] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1057.229593][T15909] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1057.247207][T15909] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 1057.255630][T15909] device vlan0 left promiscuous mode [ 1057.260961][T15909] device bridge0 left promiscuous mode [ 1057.677717][T10363] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1057.697623][T10363] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1058.959238][T15941] overlayfs: failed to clone upperpath [ 1064.730693][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1065.328172][T15977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1065.721766][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1065.730796][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1065.768443][T16001] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1065.811680][T16001] device veth1_macvtap left promiscuous mode [ 1065.821220][T16001] device veth1_macvtap entered promiscuous mode [ 1065.862845][T11865] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1065.876968][T11865] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1065.894231][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1065.902048][T13299] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1065.931008][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1065.949661][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1065.967126][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1065.986822][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1066.009965][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1066.018489][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1066.028052][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1066.052964][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1066.074619][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1066.094833][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1066.276031][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1066.309655][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1066.318281][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1066.327009][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1066.336074][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1066.344369][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1066.358961][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1066.372152][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1066.388959][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1066.402363][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1066.411574][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1066.419931][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1066.433730][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1067.508833][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1068.904440][T13299] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1068.955020][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1068.971615][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1068.979562][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1068.987432][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1069.050551][T13299] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1069.057533][T10348] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1070.537749][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1072.205331][T16049] xt_hashlimit: max too large, truncated to 1048576 [ 1076.799000][T16074] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1076.843036][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth13: link becomes ready [ 1076.929425][ T521] IPv6: ADDRCONF(NETDEV_CHANGE): veth12: link becomes ready [ 1077.126349][T16087] 9pnet_fd: Insufficient options for proto=fd [ 1079.985240][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1081.969034][T16136] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4303'. [ 1082.018308][T16136] bridge4: port 1(veth15) entered blocking state [ 1082.025248][T16136] bridge4: port 1(veth15) entered disabled state [ 1082.032237][T16136] device veth15 entered promiscuous mode [ 1082.066678][T16136] bridge4: port 2(veth0_to_bond) entered blocking state [ 1082.085460][T16136] bridge4: port 2(veth0_to_bond) entered disabled state [ 1082.096839][T16136] device veth0_to_bond entered promiscuous mode [ 1082.117194][T16136] bridge4: port 3(vlan0) entered blocking state [ 1082.124759][T16136] bridge4: port 3(vlan0) entered disabled state [ 1082.149334][T16137] loop1: detected capacity change from 0 to 256 [ 1082.156562][T16136] device vlan0 entered promiscuous mode [ 1082.162394][T16136] device veth0_to_hsr entered promiscuous mode [ 1082.186717][T16137] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 1082.229860][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4304'. [ 1082.240111][T16137] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4297'. [ 1082.758903][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1083.782573][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1083.790120][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1083.803342][T16163] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0.3: link becomes ready [ 1085.253056][ T28] audit: type=1400 audit(2000525585.513:3233): avc: denied { read } for pid=16166 comm="syz.9.4312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 1086.612691][T16188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4316'. [ 1093.377385][T16245] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4331'. [ 1093.800773][T16270] xt_hashlimit: max too large, truncated to 1048576 [ 1098.707073][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1099.659866][T16333] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4351'. [ 1103.861518][T16362] overlayfs: './file0' not a directory [ 1106.693836][T16392] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4366'. [ 1106.704351][T16392] device gretap0 entered promiscuous mode [ 1109.671097][T16430] netlink: 100 bytes leftover after parsing attributes in process `syz.4.4375'. [ 1109.717767][T16435] hub 6-0:1.0: USB hub found [ 1109.731126][T16435] hub 6-0:1.0: 1 port detected [ 1114.229108][T16460] overlayfs: failed to clone lowerpath [ 1117.428424][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1118.360200][T16478] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1125.118359][T16525] tipc: Resetting bearer [ 1127.298060][T16565] fuse: Unknown parameter '0x0000000000000003' [ 1127.423969][T11865] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1129.800719][T16595] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4416'. [ 1130.785757][T11865] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.818801][T11865] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1130.922381][T16603] netlink: 72 bytes leftover after parsing attributes in process `syz.9.4421'. [ 1131.099505][T11865] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1131.122784][T11865] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.131253][T11865] usb 2-1: Product: syz [ 1131.144435][T11865] usb 2-1: Manufacturer: syz [ 1131.149260][T11865] usb 2-1: SerialNumber: syz [ 1131.301818][T11865] cdc_mbim 2-1:1.0: skipping garbage [ 1131.439016][T11865] cdc_mbim 2-1:1.0: bind() failure [ 1131.445219][T11865] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1131.452554][T11865] cdc_ncm 2-1:1.1: bind() failure [ 1131.458764][T11865] usb 2-1: USB disconnect, device number 9 [ 1131.765026][T16624] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1131.900057][T16630] overlayfs: overlapping lowerdir path [ 1132.305613][T16631] device bridge11 entered promiscuous mode [ 1132.456317][T16641] syz.7.4430[16641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1132.456421][T16641] syz.7.4430[16641] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1133.692450][T16647] overlayfs: failed to clone lowerpath [ 1135.564237][T16655] incfs: Backing dir is not set, filesystem can't be mounted. [ 1135.572189][T16655] incfs: mount failed -2 [ 1136.150199][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1137.126321][T16689] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4441'. [ 1145.901088][T16767] IPv6: Can't replace route, no match found [ 1149.756746][T16792] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4473'. [ 1150.516258][T11865] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1151.036126][T11865] usb 2-1: Using ep0 maxpacket: 32 [ 1151.042595][T11865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.077050][T11865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.168369][T11865] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1151.299621][T11865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.318864][T11865] usb 2-1: config 0 descriptor?? [ 1151.390321][T11865] hub 2-1:0.0: USB hub found [ 1151.618106][T11865] hub 2-1:0.0: 1 port detected [ 1152.702926][T16837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.730701][T16837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.188409][ T6] usb 2-1: USB disconnect, device number 10 [ 1153.484816][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1154.300715][T16850] overlayfs: failed to clone upperpath [ 1156.088012][T16874] overlayfs: failed to clone lowerpath [ 1158.754516][T16892] bridge0: port 1(gretap0) entered blocking state [ 1158.761195][T16892] bridge0: port 1(gretap0) entered disabled state [ 1158.770611][T16892] device gretap0 entered promiscuous mode [ 1160.864007][ T7625] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1165.588447][T16962] netlink: 'syz.4.4520': attribute type 27 has an invalid length. [ 1165.692470][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1165.708975][T16964] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1165.725432][T16964] device veth1_macvtap left promiscuous mode [ 1166.388983][T16964] device veth1_macvtap entered promiscuous mode [ 1166.419767][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1166.428122][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1166.710921][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.719602][T16889] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1166.728113][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1166.735626][T16889] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1166.740051][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1166.751481][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1166.760400][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1166.769547][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1166.778695][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1166.788417][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1166.796949][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1166.805906][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1166.819916][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1166.830839][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1166.839161][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1166.847894][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1166.857812][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1166.866711][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1166.886026][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1166.894932][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1166.908667][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1166.921390][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.930405][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.938971][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1166.947380][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1166.963080][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1166.971428][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1166.984890][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1166.995592][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1167.006134][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1167.013888][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1167.021887][ T674] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1167.473582][T16987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1167.484207][T16987] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4527'. [ 1167.502608][T16987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=16987 comm=syz.4.4527 [ 1167.530691][T16987] cgroup: subsys name conflicts with all [ 1167.794408][T16990] bridge0: port 1(vlan2) entered blocking state [ 1167.801853][T16990] bridge0: port 1(vlan2) entered disabled state [ 1167.873195][ T6] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1169.602668][T17020] overlayfs: failed to clone lowerpath [ 1170.144715][ T28] audit: type=1400 audit(2000525663.681:3234): avc: denied { name_bind } for pid=17015 comm="syz.7.4536" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 1170.179043][T17025] tipc: Enabling of bearer rejected, failed to enable media [ 1170.909871][ T28] audit: type=1400 audit(2000525664.568:3235): avc: denied { name_bind } for pid=17026 comm="syz.3.4538" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 1170.992792][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1173.332517][T17046] overlayfs: failed to clone lowerpath [ 1173.342502][T17046] overlayfs: failed to clone upperpath [ 1174.961337][T17077] IPv6: Can't replace route, no match found [ 1175.685438][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1176.773549][T17086] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1177.728357][T17100] overlayfs: failed to resolve './file1': -2 [ 1178.252779][T17108] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1178.374574][T17111] bridge0: port 1(vlan1) entered blocking state [ 1178.390359][T17111] bridge0: port 1(vlan1) entered disabled state [ 1179.833608][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1181.230965][T17154] bridge0: port 3(vlan1) entered blocking state [ 1181.237677][T17154] bridge0: port 3(vlan1) entered disabled state [ 1181.410080][T17162] overlayfs: failed to clone lowerpath [ 1185.928404][T17199] tipc: Enabling of bearer rejected, failed to enable media [ 1186.768529][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1189.499577][T17253] overlayfs: failed to clone lowerpath [ 1189.506590][T17253] overlayfs: failed to clone upperpath [ 1190.080942][T17267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4594'. [ 1191.062928][T17282] netlink: 'syz.9.4599': attribute type 15 has an invalid length. [ 1191.206273][T17285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4600'. [ 1192.019538][T17289] netlink: 'syz.3.4602': attribute type 27 has an invalid length. [ 1192.083730][T17289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.091159][T17289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.153433][T17289] device bridge11 left promiscuous mode [ 1192.215052][T17292] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1192.535710][ T28] audit: type=1400 audit(2000525684.532:3236): avc: denied { mounton } for pid=17297 comm="syz.9.4606" path="/822/file0" dev="tmpfs" ino=4390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 1193.881063][T16889] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1193.889170][T16889] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1193.907492][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1193.915624][ T6] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1193.923864][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1193.973125][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1193.994142][T10395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1194.001384][T10395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1194.009098][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1194.018139][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1194.380146][T10395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1194.387594][T10395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1194.456265][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1194.499778][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1194.541172][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1194.549914][ T6] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1194.559624][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1194.567915][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1194.576352][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1194.584984][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1194.594459][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1194.603804][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1194.612736][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1194.621245][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1194.630319][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1194.638750][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1194.647475][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1194.655900][ T6] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1194.664085][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1194.672738][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1194.681552][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1194.690375][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth3: link becomes ready [ 1194.698578][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth2: link becomes ready [ 1194.706842][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth5: link becomes ready [ 1194.714710][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth4: link becomes ready [ 1194.723265][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth7: link becomes ready [ 1194.731288][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth6: link becomes ready [ 1194.739145][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth9: link becomes ready [ 1194.747292][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth8: link becomes ready [ 1194.755140][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth11: link becomes ready [ 1194.763566][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): veth10: link becomes ready [ 1194.771829][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1194.781337][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready [ 1194.792806][T17302] bridge0: port 3(vlan3) entered blocking state [ 1194.800665][T17302] bridge0: port 3(vlan3) entered disabled state [ 1194.827309][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1194.835995][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1194.850084][T11865] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1195.685508][ T28] audit: type=1326 audit(2000525686.913:3237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1195.727450][T10395] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1195.862354][ T28] audit: type=1326 audit(2000525686.913:3238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1195.887686][ T28] audit: type=1326 audit(2000525686.923:3239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1195.914973][T11865] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1195.926833][ T807] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1195.943113][ T28] audit: type=1326 audit(2000525686.923:3240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1195.984073][ T28] audit: type=1326 audit(2000525686.923:3241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1196.281708][ T28] audit: type=1326 audit(2000525686.923:3242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1198.311690][ T28] audit: type=1326 audit(2000525686.932:3243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1198.339733][ T28] audit: type=1326 audit(2000525686.932:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17321 comm="syz.7.4611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb262d8ebe9 code=0x7ffc0000 [ 1198.424045][T17348] __vm_enough_memory: pid: 17348, comm: syz.4.4617, no enough memory for the allocation [ 1198.494024][T17348] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4617'. [ 1199.178495][T17348] device veth1_macvtap left promiscuous mode [ 1200.212772][ C1] ip6_tnl_xmit_ctl: 8 callbacks suppressed [ 1200.212793][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1206.182623][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1206.875806][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1207.781369][ T28] audit: type=1400 audit(2000525698.322:3245): avc: denied { map } for pid=17427 comm="syz.9.4637" path="socket:[61383]" dev="sockfs" ino=61383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 1208.136117][T17442] syz.4.4650[17442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1208.137757][T17442] syz.4.4650[17442] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1208.966824][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1212.512755][T17456] overlayfs: failed to resolve './file1': -2 [ 1214.070400][T17462] bridge0: port 1(vlan2) entered blocking state [ 1214.077112][T17462] bridge0: port 1(vlan2) entered disabled state [ 1214.370079][T17466] syz.1.4646 (17466) used greatest stack depth: 19064 bytes left [ 1214.523822][T17477] bridge0: port 3(vlan1) entered blocking state [ 1214.530231][T17477] bridge0: port 3(vlan1) entered disabled state [ 1214.629285][T17488] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 1216.473307][T17503] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1216.481757][T17503] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1216.490120][T17503] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1216.498674][T17503] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1216.508260][T17503] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1216.516395][T17503] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1216.525024][T17503] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1222.130436][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1222.130481][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1225.368894][T17576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4670'. [ 1226.984120][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1228.449251][ T28] audit: type=1400 audit(2000525717.668:3246): avc: denied { mounton } for pid=17579 comm="syz.1.4675" path="/" dev="configfs" ino=14393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1229.758707][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1231.545423][T17596] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1231.962819][ T28] audit: type=1400 audit(2000525720.898:3247): avc: denied { unmount } for pid=9983 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 1232.440084][T16889] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1232.639609][T16889] usb 2-1: Using ep0 maxpacket: 16 [ 1232.647578][T16889] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1232.656962][T16889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.665255][T16889] usb 2-1: Product: syz [ 1232.669559][T16889] usb 2-1: Manufacturer: syz [ 1232.674450][T16889] usb 2-1: SerialNumber: syz [ 1232.687480][T16889] r8152-cfgselector 2-1: config 0 descriptor?? [ 1233.500149][T16889] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1233.507492][T16889] r8152-cfgselector 2-1: USB disconnect, device number 11 [ 1234.431752][T17647] xt_hashlimit: max too large, truncated to 1048576 [ 1238.089830][T17675] netlink: 'syz.4.4697': attribute type 32 has an invalid length. [ 1238.104899][T17677] __vm_enough_memory: pid: 17677, comm: syz.3.4696, no enough memory for the allocation [ 1238.130882][T17677] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4696'. [ 1241.035795][T17702] overlayfs: failed to clone upperpath [ 1241.422957][T17709] device macsec0 entered promiscuous mode [ 1243.578585][T17721] xt_hashlimit: size too large, truncated to 1048576 [ 1245.896968][T17741] netlink: 25 bytes leftover after parsing attributes in process `syz.9.4714'. [ 1246.006787][T17741] netlink: 45349 bytes leftover after parsing attributes in process `syz.9.4714'. [ 1246.018011][T17741] 0ªX¹¦Dö»: renamed from 30ªX¹¦D [ 1248.903018][T17761] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1250.544608][T17777] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 1250.582210][ T28] audit: type=1400 audit(2000525738.112:3248): avc: denied { ioctl } for pid=17767 comm="syz.9.4722" path="socket:[61970]" dev="sockfs" ino=61970 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1251.252844][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1252.577257][T17798] bridge0: port 1(vlan1) entered blocking state [ 1252.584054][T17798] bridge0: port 1(vlan1) entered disabled state [ 1252.903899][T17800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4728'. [ 1253.333033][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1261.653812][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 1262.955198][T17879] overlayfs: './file0' not a directory [ 1263.336761][T17885] futex_wake_op: syz.4.4752 tries to shift op by -1; fix this program [ 1264.104803][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4754'. [ 1264.122719][T17897] device bridge0 entered promiscuous mode [ 1264.130559][T17897] bridge0: port 3(macsec0) entered blocking state [ 1264.137054][T17897] bridge0: port 3(macsec0) entered disabled state [ 1264.148002][T17897] device bridge0 left promiscuous mode [ 1265.993888][T17928] tipc: Enabling of bearer rejected, already enabled [ 1266.004074][T17928] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 1266.016600][T17928] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 1266.025339][T17928] CPU: 0 PID: 17928 Comm: syz.9.4762 Tainted: G W syzkaller #0 [ 1266.034614][T17928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1266.044835][T17928] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 1266.051703][T17928] Code: e8 34 e8 b4 fd 4d 89 ef 83 7d d0 00 74 0a e8 36 8b 70 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 fc e7 b4 fd 48 8b 45 [ 1266.072020][T17928] RSP: 0018:ffffc90001336ee0 EFLAGS: 00010202 [ 1266.078079][T17928] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 1266.086216][T17928] RDX: ffff88813a000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.094176][T17928] RBP: ffffc90001336f28 R08: ffff88813a000000 R09: 0000000000000002 [ 1266.102407][T17928] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 1266.110631][T17928] R13: ffff88810f65c000 R14: 0000000000000000 R15: ffff88810f65c000 [ 1266.118692][T17928] FS: 00007f1974f846c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1266.128063][T17928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.134806][T17928] CR2: 0000200000002280 CR3: 000000010e2b0000 CR4: 00000000003506b0 [ 1266.143606][T17928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1266.151757][T17928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1266.160091][T17928] Call Trace: [ 1266.163358][T17928] [ 1266.166381][T17928] sfq_init+0x1b59/0x2870 [ 1266.170794][T17928] ? __cfi_sfq_init+0x10/0x10 [ 1266.175455][T17928] qdisc_create+0x7f3/0x1040 [ 1266.180042][T17928] ? qdisc_notify+0x360/0x360 [ 1266.184713][T17928] ? qdisc_lookup+0x100/0x4e0 [ 1266.189414][T17928] tc_modify_qdisc+0x8ea/0x1900 [ 1266.194807][T17928] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 1266.200195][T17928] ? __kasan_check_write+0x14/0x20 [ 1266.205746][T17928] ? mutex_lock+0x8d/0x1a0 [ 1266.210253][T17928] ? __cfi_mutex_lock+0x10/0x10 [ 1266.215196][T17928] ? ns_capable+0x8c/0xf0 [ 1266.219709][T17928] ? netlink_net_capable+0x125/0x160 [ 1266.225165][T17928] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 1266.230526][T17928] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 1266.235667][T17928] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 1266.241646][T17928] ? kernel_text_address+0xa0/0xd0 [ 1266.246842][T17928] ? __kernel_text_address+0xd/0x30 [ 1266.252046][T17928] ? unwind_get_return_address+0x4d/0x90 [ 1266.257877][T17928] ? memcpy+0x56/0x70 [ 1266.261901][T17928] ? avc_has_perm_noaudit+0x2f4/0x460 [ 1266.267692][T17928] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 1266.273545][T17928] ? slab_post_alloc_hook+0x4f/0x2d0 [ 1266.279407][T17928] ? kmem_cache_alloc_node+0x181/0x340 [ 1266.284884][T17928] ? __alloc_skb+0xea/0x4b0 [ 1266.289392][T17928] ? avc_has_perm+0x158/0x240 [ 1266.294227][T17928] ? __alloc_skb+0x236/0x4b0 [ 1266.298989][T17928] ? netlink_sendmsg+0x626/0xbc0 [ 1266.304019][T17928] ? __cfi_avc_has_perm+0x10/0x10 [ 1266.309134][T17928] ? selinux_nlmsg_lookup+0x400/0x4c0 [ 1266.314680][T17928] netlink_rcv_skb+0x1f2/0x440 [ 1266.319614][T17928] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 1266.325400][T17928] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 1266.331117][T17928] ? __netlink_lookup+0x387/0x3b0 [ 1266.336222][T17928] rtnetlink_rcv+0x1c/0x20 [ 1266.341060][T17928] netlink_unicast+0x8b1/0xa30 [ 1266.345823][T17928] netlink_sendmsg+0x8aa/0xbc0 [ 1266.350749][T17928] ? _raw_spin_unlock+0x4c/0x70 [ 1266.355698][T17928] ? __cfi_netlink_sendmsg+0x10/0x10 [ 1266.360984][T17928] ? __schedule+0xb8f/0x14e0 [ 1266.365846][T17928] ? security_socket_sendmsg+0x93/0xb0 [ 1266.371485][T17928] ? __cfi_netlink_sendmsg+0x10/0x10 [ 1266.376844][T17928] ____sys_sendmsg+0x5a9/0x990 [ 1266.381678][T17928] ? __sys_sendmsg_sock+0x40/0x40 [ 1266.386776][T17928] ? import_iovec+0x7c/0xb0 [ 1266.391285][T17928] ___sys_sendmsg+0x21c/0x290 [ 1266.396349][T17928] ? __sys_sendmsg+0x270/0x270 [ 1266.401282][T17928] ? __fdget+0x19c/0x220 [ 1266.405800][T17928] __x64_sys_sendmsg+0x1f0/0x2c0 [ 1266.410915][T17928] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 1266.416449][T17928] ? __kasan_check_write+0x14/0x20 [ 1266.421639][T17928] ? fpregs_restore_userregs+0x128/0x260 [ 1266.427605][T17928] ? switch_fpu_return+0xe/0x10 [ 1266.432537][T17928] x64_sys_call+0x171/0x9a0 [ 1266.437028][T17928] do_syscall_64+0x4c/0xa0 [ 1266.441432][T17928] ? clear_bhb_loop+0x30/0x80 [ 1266.446311][T17928] ? clear_bhb_loop+0x30/0x80 [ 1266.451079][T17928] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1266.457228][T17928] RIP: 0033:0x7f197418ebe9 [ 1266.461827][T17928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.482290][T17928] RSP: 002b:00007f1974f84038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.490797][T17928] RAX: ffffffffffffffda RBX: 00007f19743b5fa0 RCX: 00007f197418ebe9 [ 1266.499015][T17928] RDX: 0000000004008000 RSI: 0000200000000200 RDI: 0000000000000005 [ 1266.506985][T17928] RBP: 00007f1974211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1266.515117][T17928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.523207][T17928] R13: 00007f19743b6038 R14: 00007f19743b5fa0 R15: 00007ffd46b27c58 [ 1266.531697][T17928] [ 1266.534703][T17928] Modules linked in: [ 1266.538697][T17928] ---[ end trace 0000000000000000 ]--- [ 1266.544185][T17928] RIP: 0010:qdisc_tree_reduce_backlog+0x181/0x360 [ 1266.550715][T17928] Code: e8 34 e8 b4 fd 4d 89 ef 83 7d d0 00 74 0a e8 36 8b 70 fd e9 a2 00 00 00 4d 8b 36 49 8d 46 20 48 89 c1 48 c1 e9 03 48 89 4d b8 <80> 3c 19 00 48 89 45 d0 74 0d 48 8b 7d d0 e8 fc e7 b4 fd 48 8b 45 [ 1266.570703][T17928] RSP: 0018:ffffc90001336ee0 EFLAGS: 00010202 [ 1266.576875][T17928] RAX: 0000000000000020 RBX: dffffc0000000000 RCX: 0000000000000004 [ 1266.585052][T17928] RDX: ffff88813a000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1266.593053][T17928] RBP: ffffc90001336f28 R08: ffff88813a000000 R09: 0000000000000002 [ 1266.601066][T17928] R10: 00000000ffffffff R11: 0000000000000002 R12: 00000000000b0002 [ 1266.602931][ T28] audit: type=1400 audit(2000525752.899:3249): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 1266.609163][T17928] R13: ffff88810f65c000 R14: 0000000000000000 R15: ffff88810f65c000 [ 1266.609182][T17928] FS: 00007f1974f846c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1266.609197][T17928] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1266.609210][T17928] CR2: 0000200000002280 CR3: 000000010e2b0000 CR4: 00000000003506b0 [ 1266.609226][T17928] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1266.635419][ T28] audit: type=1400 audit(2000525752.899:3250): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 1266.639882][T17928] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1266.639903][T17928] Kernel panic - not syncing: Fatal exception in interrupt [ 1266.649579][T17928] Kernel Offset: disabled [ 1266.716947][T17928] Rebooting in 86400 seconds..