last executing test programs: 1m9.592615187s ago: executing program 3 (id=329): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0x2004}], 0x1, 0x2000, 0x0) 1m9.446735422s ago: executing program 3 (id=332): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="05000000040000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x44000) 1m9.429874163s ago: executing program 3 (id=333): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x2, 0x7c}, [@nested={0x7, 0x1, 0x0, 0x1, [@generic="d52a6a"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) 1m9.317064315s ago: executing program 3 (id=336): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) 1m9.253330681s ago: executing program 3 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(r0, &(0x7f0000000040)='./file0\x00', 0x89901) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1}, 0x94) move_mount(r1, 0x0, r0, 0x0, 0x46) close(r0) 1m9.091427707s ago: executing program 3 (id=341): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000180)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 1m9.049110822s ago: executing program 32 (id=341): r0 = syz_io_uring_setup(0x10f, &(0x7f0000000180)={0x0, 0x211a, 0x0, 0x4, 0x204}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000300)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 39.143762054s ago: executing program 2 (id=892): rseq(0x0, 0x0, 0x0, 0x0) personality(0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0}, 0x58) r0 = socket$inet6(0xa, 0x802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) brk(0x55555ede5ffe) connect$inet6(r0, 0x0, 0x0) 37.272856761s ago: executing program 1 (id=908): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @empty}], 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000080)) 37.222596456s ago: executing program 1 (id=910): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="86b3", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x2404c140) 37.0811379s ago: executing program 2 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [], {0x14, 0x10}}, 0x28}}, 0x0) 37.050215754s ago: executing program 2 (id=913): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$EVIOCGBITSND(r0, 0x40044591, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 36.918900906s ago: executing program 2 (id=914): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) 36.614901607s ago: executing program 2 (id=916): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 36.201251988s ago: executing program 1 (id=919): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r0, &(0x7f0000002480)="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", 0x1fb) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b40)="a028a5af023ba092ae45cff08a070c6ecd1c1df98cbfaf3bf819242a7239f7a95bcd132ea1301dafb35d0ce453ceb2efdfbcb24c58d1f00f9359590f81a602fa8ee341d40f008de9ea085d0ae4e67500effd8d7369f7cd8a0b", 0x59}], 0x1}}], 0x1, 0xa010) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 35.874877051s ago: executing program 2 (id=920): openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 35.874646411s ago: executing program 33 (id=920): openat(0xffffffffffffff9c, 0x0, 0x2d41, 0xd5) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x410c0}, 0x4048084) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 35.748158003s ago: executing program 4 (id=922): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x3, {0x1, 0x33, 0xf7, 0x3}}, 0x7) 35.718076377s ago: executing program 4 (id=923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) recvmsg(r2, &(0x7f0000000000)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) 35.326775136s ago: executing program 1 (id=926): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) 35.112424787s ago: executing program 1 (id=928): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, 0x0, 0x4044040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r8 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r7, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="14e8ffff1700010000000000000000"], 0x14}}, 0x4004854) getpid() 34.78271931s ago: executing program 4 (id=930): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 34.513721957s ago: executing program 1 (id=932): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x3, {0x1, 0x33, 0xf7, 0x3}}, 0x7) 34.401074469s ago: executing program 34 (id=932): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES16=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x3, {0x1, 0x33, 0xf7, 0x3}}, 0x7) 33.924426696s ago: executing program 4 (id=937): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x500, 0x40) open_tree(r0, &(0x7f0000000300)='\x00', 0x89901) 33.830916596s ago: executing program 4 (id=938): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 33.566523762s ago: executing program 4 (id=939): readv(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000}, 0x48) 33.499680448s ago: executing program 35 (id=939): readv(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000}, 0x48) 2.69927963s ago: executing program 5 (id=1320): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) 2.49713262s ago: executing program 0 (id=1324): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000340)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x6, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x1c, 0xfff6, 0x65, 0x5, 0x81, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, 0x0, 0x0) 2.341555706s ago: executing program 0 (id=1327): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="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", 0xffc, 0x4000, 0x0, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r0, 0xf6690000) sendmmsg$inet6(r1, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="dabd", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="390f1e", 0x3}], 0x1}}], 0x2, 0x8080) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000001c0)=0x40) 2.280995172s ago: executing program 6 (id=1328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 2.153294255s ago: executing program 0 (id=1330): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, 0x0, 0x20048800) socket$rds(0x15, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 2.057567795s ago: executing program 7 (id=1332): socket(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lchown(&(0x7f00000006c0)='./file0\x00', 0x0, 0xee01) 2.052962405s ago: executing program 6 (id=1333): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"]}, 0x187) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a0000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r6, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="01002abd7000fbdbdf250a000000040003803000038014117885ce6f0fe2202fa4000600000000000000000000000000000000010500080098000000060007004e21"], 0x48}, 0x1, 0x0, 0x0, 0x8041000}, 0x20) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000d80)={0x138, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xa928}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x54}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7fffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x804}, 0x40850) syz_emit_ethernet(0xfdef, &(0x7f0000000580)=ANY=[], 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10000}, 0x4110, 0x0, 0x0, 0x8, 0x37e, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r8, 0x4008240b, 0x0) r9 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 2.022294498s ago: executing program 7 (id=1334): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) socket$key(0xf, 0x3, 0x2) socketpair(0x1, 0x800, 0xfffffffc, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 1.970197083s ago: executing program 7 (id=1335): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.928148718s ago: executing program 8 (id=1336): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0xf4, 0x24, 0x4ee4e6a52ff56541, 0x7, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0xfa, 0x6, 0xc16e, 0x2, 0x24b5, 0x7, 0x2}}, {0x8, 0x2, [0x101, 0x9]}}, {{0x1c, 0x1, {0xd, 0x40, 0x7, 0xfff, 0x2, 0x3, 0x10000, 0x6}}, {0x10, 0x2, [0xff, 0xb, 0xf372, 0x7cf1, 0xfffc, 0xac01]}}, {{0x1c, 0x1, {0x40, 0x0, 0x7, 0x9, 0x0, 0x8000, 0x3, 0x2}}, {0x8, 0x2, [0x3, 0xb0c]}}, {{0x1c, 0x1, {0x9, 0x8, 0x7ff, 0x4, 0x2, 0x5, 0x5, 0x8}}, {0x14, 0x2, [0x2, 0x200, 0xf, 0x5, 0x7f, 0x7, 0x1, 0xff81]}}, {{0x1c, 0x1, {0x84, 0x2, 0x6b7, 0x8001, 0x1, 0x47fb, 0x0, 0x3}}, {0xa, 0x2, [0x0, 0x8001, 0x4fed]}}]}]}, 0xf4}}, 0x0) 1.917907178s ago: executing program 7 (id=1337): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000380)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000019340000000c0000000400000002000084fdffffff0a00000002000000e26900000100000005000000040000000000000000000001050000002000000000"], 0x0, 0x58}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r4, 0x0, 0x2}, 0x18) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES8=r6, @ANYRES32=r2, @ANYRES32, @ANYRESHEX=r5], 0x10c}}, 0x804) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x28, 0x3, 0x0, 0x0, 0x0, 0x3, 0x4000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0xa8e, 0x0, 0x1ff}, 0x0, 0x1, 0xffffffffffffffff, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r5, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) 1.894401101s ago: executing program 8 (id=1338): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0x8, &(0x7f0000000000)={0xfffffffffffffffb, 0xfffffffffffffffc}, 0x0) getrlimit(0x5, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r3, 0x0, 0x2}, 0x18) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130428bd700000000000e0000001000000000000000000000000000000000000000000000000000000014e2100004e2400000200202000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000001000000003c0000000a0101000000000000000000000000000400000000000000060000000000000002000000000000000400000000004000ffffffffffffffff03000000000000007f00000000000000000000000000000000000000000000000800150000000000cc000000000000000000000000000000f600"/147], 0x10c}}, 0x804) r6 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r6, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0xff, 0x0, 0x0, 0x0, 0x4, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x183, 0x6}, 0x6025, 0x20004005, 0xb, 0x0, 0x1, 0x1, 0x9, 0x0, 0x0, 0x0, 0x6}, r7, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000000000)=0x1) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0x20) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r9, 0x0, 0x2}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r4) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x500, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x476, &(0x7f0000000540)="$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") writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 1.883922722s ago: executing program 6 (id=1339): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff00"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000e728f40418c6643033422a048c3ed2267c8446cd85304d45c08dd8fa988f29b0e71b2a5e12a6c95b8eb5738ee36ab340357da72a1cd1a25b2d36c6e1aabac658757b2ce52dcd3634b478bd365ffdfa636403c013fa4b34aeb34df632c172dafe2ea635257e4f8cfd6d5261bec695c9a1f0a57646dc9b8506cd14f3044a2f983bb468d6d8ae617583555bf4b4b4799f4ed59c093e83f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x2c}}, 0x3884) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "60cfc7e5a9992101d7f1c5aca325a25884f9c3c0c5ce07602565fef1599658ea0d1dfa9decf9a7d5cbc1410b90e108ecbce34e8fcbc5c7c6d4f9f335cb4a4d3c", 0x39}, 0x48, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0xd, 0xffff}, {0x3, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800b7e00ffb6ae039f3c233663b00000000000000181100"/35, @ANYRES32, @ANYBLOB="0000000000000000b702000014800000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.772657783s ago: executing program 5 (id=1340): socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = io_uring_setup(0x68af, &(0x7f0000000480)={0x0, 0x0, 0x1880, 0x1}) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3f, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x8000) close_range(r1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000840)={[{@max_batch_time}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@resuid}, {@debug}, {@minixdf}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}], [{@seclabel}]}, 0x1, 0x5dd, &(0x7f0000000e00)="$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") quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000300)={0x2, 0x0, 0xc9, 0x0, 0x2, 0x8, 0x2, 0x0, 0x9d}) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xc, &(0x7f0000000e00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d9a}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd5}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) 1.685715212s ago: executing program 7 (id=1341): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = inotify_init1(0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={0xffffffffffffffff, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r3, 0xffffffffffffffff, 0x0, 0x200) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r4 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84", 0x44}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r9, 0x0, 0xf7}, 0x18) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) inotify_rm_watch(r1, 0x0) socket(0x2, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c753d325f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$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") 1.519696908s ago: executing program 5 (id=1342): syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880), 0x0, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.256252605s ago: executing program 0 (id=1343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(0x0, 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) 1.254667545s ago: executing program 8 (id=1344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x7116f40f8d8a71ce}) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x8000) 1.240692116s ago: executing program 5 (id=1345): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 1.200972801s ago: executing program 0 (id=1346): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa}, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(0xffffffffffffffff, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 1.200570231s ago: executing program 5 (id=1347): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}}}, 0xb8}}, 0x0) 1.166267974s ago: executing program 8 (id=1348): socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) 1.157916784s ago: executing program 5 (id=1349): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000f40)=ANY=[], 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00fd583bf43affffff00"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000e728f40418c6643033422a048c3ed2267c8446cd85304d45c08dd8fa988f29b0e71b2a5e12a6c95b8eb5738ee36ab340357da72a1cd1a25b2d36c6e1aabac658757b2ce52dcd3634b478bd365ffdfa636403c013fa4b34aeb34df632c172dafe2ea635257e4f8cfd6d5261bec695c9a1f0a57646dc9b8506cd14f3044a2f983bb468d6d8ae617583555bf4b4b4799f4ed59c093e83f", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0014000004000000000000000000000000000000000000000000b13a7b511c"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYRESHEX], 0x2c}}, 0x3884) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @empty, @multicast1}}}}) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000340)={0x0, "60cfc7e5a9992101d7f1c5aca325a25884f9c3c0c5ce07602565fef1599658ea0d1dfa9decf9a7d5cbc1410b90e108ecbce34e8fcbc5c7c6d4f9f335cb4a4d3c", 0x39}, 0x48, 0xfffffffffffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd30, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0xd, 0xffff}, {0x3, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @loopback}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x880) 1.129356227s ago: executing program 8 (id=1350): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) getpid() getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semget$private(0x0, 0x2, 0x2) 644.448516ms ago: executing program 6 (id=1351): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) 389.195831ms ago: executing program 7 (id=1352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 230.730927ms ago: executing program 8 (id=1353): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000006b80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="e8020000000000002900000004000000005a"], 0x2e8}}], 0x1, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1a, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sync() syz_clone(0x4220000, 0x0, 0x0, 0x0, &(0x7f0000000140), &(0x7f00000001c0)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x4000) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES16=r6, @ANYRESDEC=r4, @ANYRESHEX=r2], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0xfffffffffffffdca, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24060050}, 0x8000) socket$kcm(0xa, 0x3, 0x87) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 165.205164ms ago: executing program 6 (id=1354): r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000008b00000005000000090000000100"], 0x50) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000cc0)=[r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0], 0x5) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000d80)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$eJzs3d9rW+UbAPDnpO1+f7/rYAwVkcIunMyla+uPCV7MS9HhQO9naM/KaLKMJh1rHbhduBtvZAgiDsR7vfdy+A/4Vwx0MGQUvfAmctKTLluTNuuypprPB05533NO8p435zxvn5M3IQEMrYnsTyHixYj4Kok4HBFJvm008o0Ta/utPrw+my1JNBof/5E098vqredqPe5gXnkhIn75IuJkYWO7teWVhVK5nC7m9cl65cpkbXnl1KVKaT6dTy9Pz8yceXNm+p233+pbX187/9e3H919/8yXx1e/+en+kdtJnI1D+bb2fjyDG+2ViZjIX5OxOPvEjlN9aGw3SQZ9AGzLSB7nY5GNAYdjJI964L/v84hoAEMqEf8wpFp5QOvefvP74P/vUFaycx68t3YDtLH/o2vvjcS+5r3RgdXksTuj7H53vA/tZ238/Pud29kS/XsfAmBLN25GxOnR0Y3jX5KPf9t3uvPqfe2VJ9sw/sHOuZvlP693yn8K6/lPdMh/DnaI3e3YOv4L9/vQTFdZ/vdux/x3fdJqfCSv/a+Z840lFy+V09N5NnwixvZm9c3mc86s3mt029ae/2VL1n4rF8yP4/7o3scfM1eql56lz+0e3Ix4qWP+m6yf/6TD+c9ej/M9tnEsvfNKt21b9//5avwQ8WrH8/9oRivZfH5ysnk9TLauio3+vHXs127tD7r/2fk/sHn/x5P2+dra07fx/b6/027bHut/9H7970k+aZb35Ouuler1xamIPcmHG9dPP3psq97aP+v/ieObj3+drv/9EfFpj/2/dfTHl3vq/4DO/9xTnf+nL9z74LPvurXf2/j3RrN0Il/Ty/jX6wE+y2sHAAAAAAAAu00hIg5FUiiulwuFYnHt8x1H40ChXK3VT16sLl2ei+Z3ZcdjrNCa6T7c9nmIqfzzsK369BP1mYg4EhFfj+xv1ouz1fLcoDsPAAAAAAAAAAAAAAAAAAAAu8TBLt//z/w2MuijA547P/kNw2vL+O/HLz0Bu5L//zC8xD8ML/EPw0v8w/AS/zC8xD8ML/EPw0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQF+dP3cuWxqrD6/PZvW5q8tLC9Wrp+bS2kKxsjRbnK0uXinOV6vz5bQ4W61s9XzlavXK1HQsXZusp7X6ZG155UKlunS5fuFSpTSfXkjHdqRXAAAAAAAAAAAAAAAAAAAA8O9SW15ZKJXL6aKCwrYKo7vjMBT6XBj0yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAj/wTAAD//wQrN8c=") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(0xffffffffffffffff, 0xc0096616, &(0x7f0000000140)={0x4, [0x0, 0x0, 0x0, 0x0]}) socketpair(0x1, 0x800, 0xfffffffc, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x702, 0xe, 0xff0f, &(0x7f0000000540)="e460334470b8d480eb20c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="050000000000000000000000000000706c00"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) r7 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0xfe, 0x0, 0x9, 0x1004a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x550, 0xfffffffffffffc75}, 0x0, 0x0, 0x0, 0x4, 0x7, 0x40f}, 0x0, 0x8, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x40082406, &(0x7f0000000000)='cpu<=0||!') r8 = fcntl$dupfd(r0, 0x0, r0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000ac0)=0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x6, 0x13, &(0x7f0000000a00)=ANY=[@ANYBLOB="487b0800f0ffffff8500000052000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="00000000000000b70500000800000085000000a50000001859000000000063b914be16c75ed275e7d238ea39000000000000000000185500"], &(0x7f0000000300)='GPL\x00', 0x1, 0x20, &(0x7f0000000380)=""/32, 0x41000, 0x14, '\x00', r9, @fallback=0xc, r8, 0x8, &(0x7f0000000b00)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000b40)={0xfff, 0xc, 0x200, 0x7}, 0x10, r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x52d}, 0x94) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 65.342994ms ago: executing program 0 (id=1355): syz_usb_disconnect(0xffffffffffffffff) 0s ago: executing program 6 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = inotify_init1(0x0) r2 = socket(0xa, 0x3, 0x3a) r3 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000280)={r4, 0x1000, {0x0, 0x0, 0x0, 0x4, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) sendfile(r3, r4, 0x0, 0x200) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x9}, 0xc) r5 = open(&(0x7f0000000140)='./file1\x00', 0x80080, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000080000000000000005000000152000000000defffb05b49a546d6ff3070000008febf6c1872cc4b9ab5a9b92e3197a6c4c42960c2a3a4884da339668cb7900"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000200)='f2fs_iostat_latency\x00', r5}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r7, r7, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08", 0x34}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0xf7}, 0x18) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000000f14012127bd7000fcdbdf2508004500000064002efe4f1e7afb7e1c56c9a3140f64b02567e7c667e2762af8ec210fd90dbb577191afe84c000000cd18d8d8898c0e7b558bbf0c0cca7d951d0c90c37bbd82394f9e21cf31e9b99360d6a501a06548e1e8761e2bf5f28d6e6b47d60500000000000000339821e02c8178f2647b591b9d0962252f270ad62837fe2fb444dd81"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x1004) inotify_rm_watch(r1, 0x0) socket(0x2, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c753d325f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x1b1, &(0x7f0000001bc0)="$eJzs289qE10YB+A3+dp+SV0kC1fiYsCNq9D0CgxSQQwIShYKgmIbkI4ELAR0YbNz4U14OW71Slx2IRxJJrF/nIBUzVj7PJu8zJlfeGfg5OSEzNPrL/d3RwfDJ8OP0ajVon4rpTiqRTvqsTCJEmtlBwGAi+AopfiSUpou580PkVKquiMA4E9brP/p/4n1HwAuiYePHt/r9fs7D7KsEZG/Gw/Gg+K1GO8N40XksRdb0YqvMf2CMFfUd+72d7aymXa8zw/n+cPx4L/T+W60ol2e7xb57HR+PTZP5rejFVfL89ul+Y24eeNEvhOt+Pw8RpHHbkyzx/m33Sy7fb9/Jn9ldh4AAAD8CzrZd6X7905n2XiR79V++veBM/vrtbjmP4QAUImD12/2n+X53qvKioiYzI804sdzPm0Wja6useyc8cUtrfJm/lrRjN//zusbEfG3XOCFL0b1ZUPNkrlznqIREbOiwg8lYCWOZ3/VnQAAAAAAAAAAAAAAAMus4tGlqq8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvnWwAAAP//cyOKBA==") kernel console output (not intermixed with test programs): idge_slave_1: entered promiscuous mode [ 35.580184][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.587334][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.594602][ T3325] bridge_slave_0: entered allmulticast mode [ 35.601001][ T3325] bridge_slave_0: entered promiscuous mode [ 35.624384][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.633567][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.640653][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.648044][ T3325] bridge_slave_1: entered allmulticast mode [ 35.654616][ T3325] bridge_slave_1: entered promiscuous mode [ 35.665954][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.673045][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.699035][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.715629][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.746099][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.753159][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.779120][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.800442][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.829663][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.844189][ T3315] team0: Port device team_slave_0 added [ 35.851446][ T3315] team0: Port device team_slave_1 added [ 35.890552][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.897606][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.923645][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.942472][ T3325] team0: Port device team_slave_0 added [ 35.950421][ T3314] hsr_slave_0: entered promiscuous mode [ 35.956344][ T3314] hsr_slave_1: entered promiscuous mode [ 35.962526][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 35.968259][ T3314] Cannot create hsr debugfs directory [ 35.976235][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.983294][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.009326][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.023415][ T3325] team0: Port device team_slave_1 added [ 36.056435][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.063481][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.089395][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.113863][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.120877][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.147034][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.186101][ T3315] hsr_slave_0: entered promiscuous mode [ 36.192869][ T3315] hsr_slave_1: entered promiscuous mode [ 36.198817][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.204556][ T3315] Cannot create hsr debugfs directory [ 36.244250][ T3325] hsr_slave_0: entered promiscuous mode [ 36.250509][ T3325] hsr_slave_1: entered promiscuous mode [ 36.256395][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 36.262159][ T3325] Cannot create hsr debugfs directory [ 36.340859][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.352031][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.360673][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.371890][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.440680][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.455581][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.464457][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.473425][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.489409][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.497944][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.511677][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.528941][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.548474][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.559913][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.572491][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.581402][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.591719][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.604314][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.623345][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.630416][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.657209][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.664405][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.680090][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.690343][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.704884][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.714008][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.744768][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 36.755322][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.802083][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.835443][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.844935][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.867396][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.878277][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.885515][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.897514][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.907769][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.914859][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.924627][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.945832][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.963557][ T1437] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.970686][ T1437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.979728][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.986838][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.015542][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.026719][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.051479][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.058626][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.069124][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.076214][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.093639][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.100734][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.110096][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.117193][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.127261][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.147643][ T3313] veth0_vlan: entered promiscuous mode [ 37.177115][ T3325] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.187606][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.215822][ T3313] veth1_vlan: entered promiscuous mode [ 37.229854][ T3313] veth0_macvtap: entered promiscuous mode [ 37.252353][ T3313] veth1_macvtap: entered promiscuous mode [ 37.264548][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.283438][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.302633][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.320045][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.348202][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.369540][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.391937][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.408825][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.421367][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.436296][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.470435][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.512369][ T3319] veth0_vlan: entered promiscuous mode [ 37.549515][ T3319] veth1_vlan: entered promiscuous mode [ 37.600944][ T3319] veth0_macvtap: entered promiscuous mode [ 37.607968][ T3319] veth1_macvtap: entered promiscuous mode [ 37.643454][ T3325] veth0_vlan: entered promiscuous mode [ 37.655808][ T3315] veth0_vlan: entered promiscuous mode [ 37.674916][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.685136][ T3325] veth1_vlan: entered promiscuous mode [ 37.704103][ T3315] veth1_vlan: entered promiscuous mode [ 37.715102][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.734997][ T3325] veth0_macvtap: entered promiscuous mode [ 37.746329][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.755185][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.764908][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.774504][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.798169][ T3485] random: crng reseeded on system resumption [ 37.815770][ T3315] veth0_macvtap: entered promiscuous mode [ 37.843953][ T3315] veth1_macvtap: entered promiscuous mode [ 37.877235][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.888342][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.907216][ T3314] veth0_vlan: entered promiscuous mode [ 37.916505][ T3325] veth1_macvtap: entered promiscuous mode [ 37.947061][ T3314] veth1_vlan: entered promiscuous mode [ 37.995935][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.025838][ T1437] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.062815][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 38.062869][ T29] audit: type=1400 audit(1763010256.126:99): avc: denied { create } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.122290][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.129967][ T1437] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.149005][ T3314] veth0_macvtap: entered promiscuous mode [ 38.165320][ T29] audit: type=1400 audit(1763010256.156:100): avc: denied { write } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.185325][ T29] audit: type=1400 audit(1763010256.156:101): avc: denied { nlmsg_write } for pid=3486 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.185768][ T3314] veth1_macvtap: entered promiscuous mode [ 38.214504][ T29] audit: type=1400 audit(1763010256.276:102): avc: denied { read write } for pid=3488 comm="syz.3.6" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.215834][ T1437] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.237876][ T29] audit: type=1400 audit(1763010256.276:103): avc: denied { open } for pid=3488 comm="syz.3.6" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.261810][ T3489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.269774][ T29] audit: type=1400 audit(1763010256.276:104): avc: denied { ioctl } for pid=3488 comm="syz.3.6" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.290929][ T3489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.317279][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.325923][ T1437] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.354035][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.369580][ T1437] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.429029][ T29] audit: type=1400 audit(1763010256.496:105): avc: denied { name_bind } for pid=3494 comm="syz.2.3" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 38.450476][ T29] audit: type=1400 audit(1763010256.496:106): avc: denied { node_bind } for pid=3494 comm="syz.2.3" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 38.456306][ T1437] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.510765][ T1437] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.526105][ T1437] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.536741][ T1437] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.547293][ T1437] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.554153][ T29] audit: type=1400 audit(1763010256.586:107): avc: denied { create } for pid=3499 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.564534][ T1437] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.575471][ T29] audit: type=1400 audit(1763010256.616:108): avc: denied { bind } for pid=3499 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.605962][ T3503] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 38.613774][ T3503] netlink: 'syz.2.9': attribute type 2 has an invalid length. [ 38.621652][ T1437] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.653948][ T3503] Zero length message leads to an empty skb [ 38.672984][ T3509] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 38.867646][ T3523] netlink: 47 bytes leftover after parsing attributes in process `syz.0.17'. [ 38.876799][ T3523] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 38.886603][ T3523] netlink: 47 bytes leftover after parsing attributes in process `syz.0.17'. [ 39.649524][ T3566] random: crng reseeded on system resumption [ 39.997956][ T3583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.40'. [ 40.015201][ T3583] bond0: entered promiscuous mode [ 40.020330][ T3583] bond_slave_0: entered promiscuous mode [ 40.026123][ T3583] bond_slave_1: entered promiscuous mode [ 40.030331][ T3585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.43'. [ 40.034144][ T3583] gretap0: entered promiscuous mode [ 40.071463][ T3583] hsr1: entered promiscuous mode [ 40.695145][ T3617] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 41.271921][ T3647] netlink: 'syz.4.67': attribute type 21 has an invalid length. [ 41.314990][ T3647] netlink: 132 bytes leftover after parsing attributes in process `syz.4.67'. [ 41.507403][ T3657] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.632064][ T3665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.641237][ T3665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.085958][ T3677] netlink: 'syz.1.82': attribute type 21 has an invalid length. [ 42.096140][ T3677] netlink: 132 bytes leftover after parsing attributes in process `syz.1.82'. [ 43.159488][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 43.159515][ T29] audit: type=1400 audit(1763010261.226:162): avc: denied { create } for pid=3709 comm="syz.1.96" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.194710][ T3727] 9pnet_fd: Insufficient options for proto=fd [ 43.223937][ T3732] netlink: 'syz.1.96': attribute type 4 has an invalid length. [ 43.240219][ T3731] usb usb6: usbfs: process 3731 (syz.4.105) did not claim interface 0 before use [ 43.326264][ T29] audit: type=1400 audit(1763010261.386:163): avc: denied { setopt } for pid=3741 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.356275][ T264] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.362903][ T29] audit: type=1400 audit(1763010261.416:164): avc: denied { read } for pid=3741 comm="syz.3.110" path="socket:[5306]" dev="sockfs" ino=5306 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.399830][ T29] audit: type=1400 audit(1763010261.466:165): avc: denied { read } for pid=3749 comm="syz.2.113" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.422795][ T29] audit: type=1400 audit(1763010261.466:166): avc: denied { open } for pid=3749 comm="syz.2.113" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.452735][ T29] audit: type=1400 audit(1763010261.486:167): avc: denied { ioctl } for pid=3749 comm="syz.2.113" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 43.486618][ T3752] netlink: 'syz.4.114': attribute type 21 has an invalid length. [ 43.497242][ T3752] netlink: 132 bytes leftover after parsing attributes in process `syz.4.114'. [ 43.680682][ T3780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 43.699044][ T3784] netlink: 'syz.2.130': attribute type 21 has an invalid length. [ 43.956316][ T3811] __nla_validate_parse: 1 callbacks suppressed [ 43.956333][ T3811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.143'. [ 43.981416][ T3814] netlink: 'syz.0.144': attribute type 21 has an invalid length. [ 43.992639][ T3814] netlink: 132 bytes leftover after parsing attributes in process `syz.0.144'. [ 44.055604][ T3817] ======================================================= [ 44.055604][ T3817] WARNING: The mand mount option has been deprecated and [ 44.055604][ T3817] and is ignored by this kernel. Remove the mand [ 44.055604][ T3817] option from the mount to silence this warning. [ 44.055604][ T3817] ======================================================= [ 44.090947][ T3817] 9pnet_virtio: no channels available for device [ 44.156779][ T29] audit: type=1400 audit(1763010262.116:168): avc: denied { mounton } for pid=3805 comm="syz.2.141" path="/34/bus" dev="tmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.441339][ T3831] mmap: syz.4.150 (3831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.480810][ T29] audit: type=1400 audit(1763010262.546:169): avc: denied { create } for pid=3832 comm="syz.0.151" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.503047][ T29] audit: type=1400 audit(1763010262.566:170): avc: denied { read write } for pid=3832 comm="syz.0.151" name="file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.525851][ T29] audit: type=1400 audit(1763010262.566:171): avc: denied { open } for pid=3832 comm="syz.0.151" path="/24/file0" dev="tmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 44.644668][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.4.157'. [ 45.358932][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.525417][ T3886] netlink: 16 bytes leftover after parsing attributes in process `syz.0.170'. [ 45.608816][ T3886] bond0: entered promiscuous mode [ 45.613920][ T3886] bond_slave_0: entered promiscuous mode [ 45.619798][ T3886] bond_slave_1: entered promiscuous mode [ 45.628062][ T3886] gretap0: entered promiscuous mode [ 45.634677][ T3886] debugfs: 'hsr1' already exists in 'hsr' [ 45.640479][ T3886] Cannot create hsr debugfs directory [ 45.646143][ T3886] hsr1: entered promiscuous mode [ 45.926423][ T3897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 46.156538][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.219106][ T3909] program syz.0.181 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.584522][ T3926] random: crng reseeded on system resumption [ 47.204347][ T3936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.192'. [ 47.269060][ T3940] netlink: 'syz.1.194': attribute type 21 has an invalid length. [ 47.296321][ T3940] netlink: 132 bytes leftover after parsing attributes in process `syz.1.194'. [ 47.960069][ T3970] random: crng reseeded on system resumption [ 48.158500][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.159384][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 48.205355][ T3972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.214749][ T3972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.226190][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 48.226206][ T29] audit: type=1400 audit(1763010266.286:188): avc: denied { mount } for pid=3973 comm="syz.2.207" name="/" dev="hugetlbfs" ino=6657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 48.318919][ T3978] netlink: 'syz.1.209': attribute type 21 has an invalid length. [ 48.326759][ T3978] netlink: 132 bytes leftover after parsing attributes in process `syz.1.209'. [ 48.386510][ T29] audit: type=1400 audit(1763010266.446:189): avc: denied { create } for pid=3975 comm="syz.2.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 48.764759][ T4015] netlink: 220 bytes leftover after parsing attributes in process `syz.3.223'. [ 48.775192][ T4015] netlink: 220 bytes leftover after parsing attributes in process `syz.3.223'. [ 49.178754][ T4033] random: crng reseeded on system resumption [ 49.204886][ T4037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.214400][ T4037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.224027][ T4037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.232744][ T4037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.566724][ T4055] __nla_validate_parse: 1 callbacks suppressed [ 49.566748][ T4055] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 49.587798][ T4055] bond0: entered promiscuous mode [ 49.592938][ T4055] bond_slave_0: entered promiscuous mode [ 49.598874][ T4055] bond_slave_1: entered promiscuous mode [ 49.607330][ T4055] gretap0: entered promiscuous mode [ 49.614313][ T4055] debugfs: 'hsr1' already exists in 'hsr' [ 49.620717][ T4055] Cannot create hsr debugfs directory [ 49.626109][ T4055] hsr1: entered promiscuous mode [ 49.656329][ T4063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.659137][ T29] audit: type=1400 audit(1763010267.716:190): avc: denied { name_connect } for pid=4060 comm="syz.0.245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 49.665128][ T4063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.737960][ T29] audit: type=1400 audit(1763010267.796:191): avc: denied { listen } for pid=4060 comm="syz.0.245" lport=57940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.787641][ T29] audit: type=1400 audit(1763010267.826:192): avc: denied { ioctl } for pid=4060 comm="syz.0.245" path="socket:[5841]" dev="sockfs" ino=5841 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.812169][ T29] audit: type=1400 audit(1763010267.826:193): avc: denied { accept } for pid=4060 comm="syz.0.245" lport=57940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 50.010251][ T4080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.253'. [ 50.126604][ T4087] netlink: 'syz.3.256': attribute type 1 has an invalid length. [ 50.324559][ T29] audit: type=1400 audit(1763010267.936:194): avc: denied { create } for pid=4074 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.344081][ T29] audit: type=1400 audit(1763010267.936:195): avc: denied { connect } for pid=4074 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.363780][ T29] audit: type=1400 audit(1763010267.936:196): avc: denied { bind } for pid=4074 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.382895][ T29] audit: type=1400 audit(1763010267.936:197): avc: denied { write } for pid=4074 comm="syz.0.251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 50.575535][ T4108] random: crng reseeded on system resumption [ 50.681994][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 50.767547][ T4131] 9pnet_fd: Insufficient options for proto=fd [ 51.615885][ T4158] tmpfs: Unknown parameter 'usrquota' [ 52.227842][ T4171] 9pnet_fd: Insufficient options for proto=fd [ 53.288554][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 53.288568][ T29] audit: type=1400 audit(1763010271.346:206): avc: denied { nlmsg_read } for pid=4191 comm="syz.0.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.999682][ T4223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.056020][ T29] audit: type=1400 audit(1763010272.106:207): avc: denied { create } for pid=4225 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.093029][ T4223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.223465][ T29] audit: type=1400 audit(1763010272.136:208): avc: denied { read } for pid=4225 comm="syz.3.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.722928][ T29] audit: type=1400 audit(1763010272.676:209): avc: denied { create } for pid=4247 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 54.951878][ T4260] netlink: 'syz.0.322': attribute type 21 has an invalid length. [ 54.959822][ T4260] netlink: 132 bytes leftover after parsing attributes in process `syz.0.322'. [ 55.457459][ T4286] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 55.775629][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.872016][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.874102][ T29] audit: type=1400 audit(1763010273.936:210): avc: denied { mounton } for pid=4302 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 56.010520][ T4305] random: crng reseeded on system resumption [ 56.082224][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.093659][ T4315] netlink: 16 bytes leftover after parsing attributes in process `syz.4.347'. [ 56.119171][ T4315] bond0: entered promiscuous mode [ 56.124269][ T4315] bond_slave_0: entered promiscuous mode [ 56.130776][ T4315] bond_slave_1: entered promiscuous mode [ 56.139921][ T4320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.349'. [ 56.160016][ T4315] gretap0: entered promiscuous mode [ 56.166315][ T4315] debugfs: 'hsr1' already exists in 'hsr' [ 56.172080][ T4315] Cannot create hsr debugfs directory [ 56.177459][ T4315] hsr1: entered promiscuous mode [ 56.189378][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.254958][ T4329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.352'. [ 56.265440][ T29] audit: type=1400 audit(1763010274.326:211): avc: denied { ioctl } for pid=4328 comm="syz.2.351" path="socket:[7271]" dev="sockfs" ino=7271 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 56.440165][ T29] audit: type=1400 audit(1763010274.486:212): avc: denied { search } for pid=3043 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.461457][ T29] audit: type=1400 audit(1763010274.486:213): avc: denied { search } for pid=3043 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.483088][ T29] audit: type=1400 audit(1763010274.486:214): avc: denied { search } for pid=3043 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.504758][ T29] audit: type=1400 audit(1763010274.486:215): avc: denied { read } for pid=3043 comm="dhcpcd" name="n25" dev="tmpfs" ino=1766 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.557663][ T31] bridge_slave_1: left allmulticast mode [ 56.563515][ T31] bridge_slave_1: left promiscuous mode [ 56.569282][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.591219][ T31] bridge_slave_0: left allmulticast mode [ 56.597009][ T31] bridge_slave_0: left promiscuous mode [ 56.602778][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.654915][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 56.871787][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.882313][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.892785][ T31] bond0 (unregistering): Released all slaves [ 57.215636][ T31] hsr_slave_0: left promiscuous mode [ 57.280361][ T31] hsr_slave_1: left promiscuous mode [ 57.339921][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.347495][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.373460][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.381016][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.401491][ T31] veth1_macvtap: left promiscuous mode [ 57.407920][ T31] veth0_macvtap: left promiscuous mode [ 57.413661][ T31] veth1_vlan: left promiscuous mode [ 57.419116][ T31] veth0_vlan: left promiscuous mode [ 57.461355][ T4400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.370'. [ 57.550265][ T31] team0 (unregistering): Port device team_slave_1 removed [ 57.570165][ T31] team0 (unregistering): Port device team_slave_0 removed [ 57.665505][ T4302] chnl_net:caif_netlink_parms(): no params data found [ 58.509857][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 58.509948][ T29] audit: type=1326 audit(1763010276.566:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.570641][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.577813][ T4302] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.591532][ T29] audit: type=1326 audit(1763010276.606:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.614816][ T29] audit: type=1326 audit(1763010276.606:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.638163][ T29] audit: type=1326 audit(1763010276.606:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.662070][ T29] audit: type=1326 audit(1763010276.606:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.685360][ T29] audit: type=1326 audit(1763010276.616:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.709000][ T29] audit: type=1326 audit(1763010276.616:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.732507][ T29] audit: type=1326 audit(1763010276.616:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.755917][ T29] audit: type=1326 audit(1763010276.626:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.779214][ T29] audit: type=1326 audit(1763010276.626:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4427 comm="syz.1.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1a90ff6c9 code=0x7ffc0000 [ 58.802664][ T4302] bridge_slave_0: entered allmulticast mode [ 58.809606][ T4302] bridge_slave_0: entered promiscuous mode [ 58.816431][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.824360][ T4302] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.834162][ T4302] bridge_slave_1: entered allmulticast mode [ 58.841110][ T4302] bridge_slave_1: entered promiscuous mode [ 58.910725][ T4302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.934434][ T4302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.988290][ T4302] team0: Port device team_slave_0 added [ 58.996917][ T4302] team0: Port device team_slave_1 added [ 59.025300][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.032308][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.058276][ T4302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.089110][ T4302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.096177][ T4302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.122269][ T4302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.297426][ T4302] hsr_slave_0: entered promiscuous mode [ 59.323717][ T4302] hsr_slave_1: entered promiscuous mode [ 59.344334][ T4302] debugfs: 'hsr0' already exists in 'hsr' [ 59.350219][ T4302] Cannot create hsr debugfs directory [ 59.569999][ T4302] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.580657][ T4302] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.590365][ T4302] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.599855][ T4302] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.645158][ T4302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.659864][ T4302] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.669685][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.676836][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.691529][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.698649][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.787555][ T4302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.984283][ T4522] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 60.407338][ T4302] veth0_vlan: entered promiscuous mode [ 60.430910][ T4302] veth1_vlan: entered promiscuous mode [ 60.466964][ T4302] veth0_macvtap: entered promiscuous mode [ 60.481848][ T4302] veth1_macvtap: entered promiscuous mode [ 60.505849][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.518714][ T4302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.531260][ T37] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.555265][ T37] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.569724][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.580067][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.728865][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.5.404'. [ 61.557063][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.416'. [ 62.077954][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.434'. [ 62.570013][ T4653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.445'. [ 63.219095][ T4683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 63.318921][ T4685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 63.396580][ T4687] netlink: 'syz.1.460': attribute type 21 has an invalid length. [ 63.418857][ T4687] netlink: 132 bytes leftover after parsing attributes in process `syz.1.460'. [ 63.482986][ T4693] netlink: 'syz.1.463': attribute type 1 has an invalid length. [ 63.497277][ T4693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.510442][ T4693] macvlan2: entered promiscuous mode [ 63.515819][ T4693] macvlan2: entered allmulticast mode [ 63.521672][ T4693] bond1: entered promiscuous mode [ 63.527186][ T4693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.535303][ T4693] team0: Port device macvlan2 added [ 63.593986][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 63.718662][ T4707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.469'. [ 63.820271][ T4711] 9pnet_virtio: no channels available for device [ 63.963661][ T4714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 64.169849][ T4720] netlink: 'syz.5.474': attribute type 21 has an invalid length. [ 64.237355][ T4726] process 'syz.2.472' launched './file2' with NULL argv: empty string added [ 64.246447][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 64.246465][ T29] audit: type=1326 audit(1763010282.296:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.276970][ T29] audit: type=1326 audit(1763010282.296:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.300355][ T29] audit: type=1326 audit(1763010282.296:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.324118][ T29] audit: type=1326 audit(1763010282.296:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.347456][ T29] audit: type=1326 audit(1763010282.296:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.370723][ T29] audit: type=1326 audit(1763010282.296:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.393991][ T29] audit: type=1326 audit(1763010282.296:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.409129][ T4728] serio: Serial port ptm0 [ 64.417466][ T29] audit: type=1326 audit(1763010282.296:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.2.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f5e018cf6c9 code=0x7ffc0000 [ 64.509936][ T29] audit: type=1400 audit(1763010282.486:306): avc: denied { execute_no_trans } for pid=4715 comm="syz.2.472" path="/83/file2" dev="tmpfs" ino=442 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 64.896760][ T4754] netlink: 'syz.5.487': attribute type 21 has an invalid length. [ 65.253099][ T4761] 9pnet_virtio: no channels available for device [ 65.735515][ T4770] smc: net device bond0 applied user defined pnetid SYZ0 [ 65.744459][ T4771] netlink: 'syz.0.492': attribute type 1 has an invalid length. [ 65.761401][ T4770] smc: net device bond0 erased user defined pnetid SYZ0 [ 65.792897][ T4771] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.834065][ T4771] macvlan2: entered promiscuous mode [ 65.839444][ T4771] macvlan2: entered allmulticast mode [ 65.846194][ T4771] bond1: entered promiscuous mode [ 65.851772][ T4771] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.860077][ T4771] team0: Port device macvlan2 added [ 65.956629][ T4785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.972419][ T4785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.994792][ T4789] netlink: 'syz.2.501': attribute type 21 has an invalid length. [ 66.006677][ T4789] __nla_validate_parse: 4 callbacks suppressed [ 66.006695][ T4789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.501'. [ 66.064367][ T4801] capability: warning: `syz.5.505' uses 32-bit capabilities (legacy support in use) [ 66.178075][ T29] audit: type=1400 audit(1763010284.236:307): avc: denied { read } for pid=4810 comm="syz.0.509" path="socket:[9259]" dev="sockfs" ino=9259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 66.435769][ T4825] netlink: 'syz.0.515': attribute type 21 has an invalid length. [ 66.443868][ T4825] netlink: 132 bytes leftover after parsing attributes in process `syz.0.515'. [ 66.648861][ T4849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.525'. [ 67.804995][ T4914] 9pnet_virtio: no channels available for device [ 67.927415][ T4923] netlink: 'syz.5.552': attribute type 1 has an invalid length. [ 68.009909][ T4923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.060398][ T4925] macvlan2: entered promiscuous mode [ 68.065752][ T4925] macvlan2: entered allmulticast mode [ 68.094319][ T4925] bond1: entered promiscuous mode [ 68.115169][ T4925] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.152342][ T4925] team0: Port device macvlan2 added [ 68.217765][ T4929] bond1: (slave ip6gretap1): making interface the new active one [ 68.225600][ T4929] ip6gretap1: entered promiscuous mode [ 68.237685][ T4929] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 68.478543][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.673580][ T4948] syzkaller0: entered promiscuous mode [ 68.679172][ T4948] syzkaller0: entered allmulticast mode [ 69.303370][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 69.524963][ T4984] syzkaller0: entered promiscuous mode [ 69.530497][ T4984] syzkaller0: entered allmulticast mode [ 69.799644][ T4999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.809315][ T4997] syzkaller0: entered promiscuous mode [ 69.814809][ T4997] syzkaller0: entered allmulticast mode [ 69.822835][ T4997] tipc: Started in network mode [ 69.827840][ T4997] tipc: Node identity 7e59b1d68b9c, cluster identity 4711 [ 69.835221][ T4997] tipc: Enabled bearer , priority 0 [ 69.843601][ T4999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.858797][ T4993] tipc: Resetting bearer [ 69.867311][ T4993] tipc: Disabling bearer [ 70.150371][ T5022] netlink: 'syz.4.588': attribute type 21 has an invalid length. [ 70.170918][ T5022] netlink: 132 bytes leftover after parsing attributes in process `syz.4.588'. [ 70.259616][ T5031] syzkaller0: entered promiscuous mode [ 70.265179][ T5031] syzkaller0: entered allmulticast mode [ 70.427886][ T5045] netlink: 'syz.4.593': attribute type 1 has an invalid length. [ 70.443453][ T5045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.459230][ T5045] macvlan2: entered promiscuous mode [ 70.464583][ T5045] macvlan2: entered allmulticast mode [ 70.470495][ T5045] bond1: entered promiscuous mode [ 70.479429][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.594'. [ 70.488820][ T5045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 70.504516][ T5045] team0: Port device macvlan2 added [ 70.678217][ T5061] netlink: 'syz.0.597': attribute type 10 has an invalid length. [ 70.700496][ T5061] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.710729][ T5061] team0: entered promiscuous mode [ 70.715882][ T5061] team_slave_0: entered promiscuous mode [ 70.721650][ T5061] team_slave_1: entered promiscuous mode [ 70.730286][ T5061] bond0: (slave team0): Enslaving as an active interface with an up link [ 70.751405][ T5061] syz.0.597 (5061) used greatest stack depth: 10128 bytes left [ 70.830287][ T5070] netlink: 'syz.0.601': attribute type 21 has an invalid length. [ 70.838679][ T5070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.601'. [ 71.237832][ T5093] netlink: 'syz.2.605': attribute type 1 has an invalid length. [ 71.278743][ T3735] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 71.387875][ T5097] syz.5.606 (5097) used greatest stack depth: 8808 bytes left [ 71.464734][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 71.464752][ T29] audit: type=1400 audit(1763010289.526:313): avc: denied { create } for pid=5100 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.536634][ T29] audit: type=1400 audit(1763010289.556:314): avc: denied { bind } for pid=5100 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.556105][ T29] audit: type=1400 audit(1763010289.556:315): avc: denied { setopt } for pid=5100 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.575605][ T29] audit: type=1400 audit(1763010289.556:316): avc: denied { write } for pid=5100 comm="syz.5.607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.702938][ T5093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.786404][ T5098] macvlan2: entered promiscuous mode [ 71.791845][ T5098] macvlan2: entered allmulticast mode [ 71.797922][ T5098] bond1: entered promiscuous mode [ 71.803535][ T5098] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.813902][ T5098] team0: Port device macvlan2 added [ 71.870558][ T5121] syzkaller0: entered promiscuous mode [ 71.876090][ T5121] syzkaller0: entered allmulticast mode [ 72.275130][ T29] audit: type=1400 audit(1763010289.966:317): avc: denied { read } for pid=5108 comm="syz.5.610" name="usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.298357][ T29] audit: type=1400 audit(1763010289.966:318): avc: denied { open } for pid=5108 comm="syz.5.610" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 72.821540][ T29] audit: type=1400 audit(1763010290.886:319): avc: denied { sqpoll } for pid=5150 comm="syz.5.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 73.450064][ T29] audit: type=1326 audit(1763010291.516:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5163 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 73.473473][ T29] audit: type=1326 audit(1763010291.516:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5163 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 73.496839][ T29] audit: type=1326 audit(1763010291.516:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5163 comm="syz.5.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 73.611353][ T5170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.625'. [ 74.118801][ T5177] syzkaller0: entered promiscuous mode [ 74.124329][ T5177] syzkaller0: entered allmulticast mode [ 74.281325][ T5189] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 74.431233][ T5189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 74.470956][ T5195] bond2: (slave ip6gretap1): making interface the new active one [ 74.498960][ T5195] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 74.580493][ T5214] syzkaller0: entered promiscuous mode [ 74.586194][ T5214] syzkaller0: entered allmulticast mode [ 74.625795][ T5219] batman_adv: batadv0: Adding interface: dummy0 [ 74.632145][ T5219] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.692371][ T5219] batman_adv: batadv0: Interface activated: dummy0 [ 74.710864][ T5226] batadv0: mtu less than device minimum [ 74.716812][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.727532][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.738345][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.749151][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.759917][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.770608][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.776335][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.643'. [ 74.781592][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.800830][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.811621][ T5226] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 74.846234][ T5231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.645'. [ 75.572414][ T5244] netlink: 36 bytes leftover after parsing attributes in process `syz.5.649'. [ 75.702773][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 75.864755][ T5266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 76.041871][ T5271] 9pnet_virtio: no channels available for device [ 76.105280][ T5277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.662'. [ 76.356531][ T5287] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 76.763176][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 77.026681][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 77.026700][ T29] audit: type=1400 audit(1763010295.086:333): avc: denied { write } for pid=5312 comm="syz.0.678" name="tcp6" dev="proc" ino=4026532840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 77.377501][ T5327] 9pnet_virtio: no channels available for device [ 77.536001][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.685'. [ 77.628425][ T29] audit: type=1400 audit(1763010295.666:334): avc: denied { mounton } for pid=5314 comm="syz.5.680" path="/proc/169/task" dev="proc" ino=9864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 77.742663][ T5336] netlink: 'syz.5.687': attribute type 1 has an invalid length. [ 77.761963][ T5336] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.779113][ T5336] macvlan3: entered promiscuous mode [ 77.784438][ T5336] macvlan3: entered allmulticast mode [ 77.871947][ T5349] syzkaller0: entered promiscuous mode [ 77.877485][ T5349] syzkaller0: entered allmulticast mode [ 77.992200][ T29] audit: type=1400 audit(1763010296.056:335): avc: denied { shutdown } for pid=5350 comm="syz.5.694" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.250203][ T5376] syzkaller0: entered promiscuous mode [ 78.255763][ T5376] syzkaller0: entered allmulticast mode [ 78.414359][ T5388] tipc: Started in network mode [ 78.419362][ T5388] tipc: Node identity 62d3d11e7f92, cluster identity 4711 [ 78.426538][ T5388] tipc: Enabled bearer , priority 0 [ 78.456405][ T5386] tipc: Disabling bearer [ 78.597854][ T5403] syzkaller0: entered promiscuous mode [ 78.603408][ T5403] syzkaller0: entered allmulticast mode [ 78.649966][ T5410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.659509][ T5410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.808493][ T5423] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 79.023412][ T5443] syzkaller0: entered promiscuous mode [ 79.029158][ T5443] syzkaller0: entered allmulticast mode [ 79.151558][ T5449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.733'. [ 79.340980][ T5458] netlink: 4 bytes leftover after parsing attributes in process `syz.4.736'. [ 79.835138][ T5476] syzkaller0: entered promiscuous mode [ 79.840673][ T5476] syzkaller0: entered allmulticast mode [ 79.899350][ T5480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 79.992228][ T5490] netlink: 'syz.5.749': attribute type 1 has an invalid length. [ 80.006670][ T5490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.218779][ T5506] syzkaller0: entered promiscuous mode [ 80.224308][ T5506] syzkaller0: entered allmulticast mode [ 80.348975][ T5516] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 80.387475][ T5516] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.411121][ T5516] bond2: (slave ip6gretap1): making interface the new active one [ 80.435395][ T5516] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 80.520660][ T29] audit: type=1400 audit(1763010298.586:336): avc: denied { setopt } for pid=5532 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.543495][ T29] audit: type=1400 audit(1763010298.606:337): avc: denied { getopt } for pid=5532 comm="syz.0.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.568645][ T5535] syzkaller0: entered promiscuous mode [ 80.574151][ T5535] syzkaller0: entered allmulticast mode [ 80.784196][ T5569] syzkaller0: entered promiscuous mode [ 80.789737][ T5569] syzkaller0: entered allmulticast mode [ 80.920384][ T5587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.793'. [ 80.956484][ T5593] netlink: 'syz.0.796': attribute type 21 has an invalid length. [ 80.964438][ T5593] netlink: 132 bytes leftover after parsing attributes in process `syz.0.796'. [ 80.996849][ T5595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 81.031997][ T5601] syzkaller0: entered promiscuous mode [ 81.037535][ T5601] syzkaller0: entered allmulticast mode [ 81.146161][ T5615] netlink: 'syz.2.807': attribute type 21 has an invalid length. [ 81.154183][ T5615] netlink: 132 bytes leftover after parsing attributes in process `syz.2.807'. [ 81.647918][ T5645] netlink: 'syz.5.820': attribute type 21 has an invalid length. [ 81.656152][ T5645] netlink: 132 bytes leftover after parsing attributes in process `syz.5.820'. [ 81.841397][ T5655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.821'. [ 82.064356][ T5665] syzkaller0: entered promiscuous mode [ 82.069903][ T5665] syzkaller0: entered allmulticast mode [ 82.155054][ T5667] tipc: Enabling of bearer rejected, failed to enable media [ 82.745866][ T5687] random: crng reseeded on system resumption [ 82.812049][ T5691] 9pnet_virtio: no channels available for device [ 82.923646][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.961206][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 83.208287][ T29] audit: type=1400 audit(1763010301.256:338): avc: denied { ioctl } for pid=5711 comm="syz.5.844" path="socket:[11723]" dev="sockfs" ino=11723 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 83.233102][ T29] audit: type=1400 audit(1763010301.256:339): avc: denied { read } for pid=5711 comm="syz.5.844" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.262998][ T5714] netlink: 'syz.5.846': attribute type 1 has an invalid length. [ 83.281432][ T5714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 83.291032][ T5716] syzkaller0: entered promiscuous mode [ 83.296549][ T5716] syzkaller0: entered allmulticast mode [ 83.360308][ T5721] usb usb5: usbfs: process 5721 (syz.5.849) did not claim interface 0 before use [ 83.419814][ T29] audit: type=1400 audit(1763010301.486:340): avc: denied { append } for pid=5724 comm="syz.5.851" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 83.458602][ T29] audit: type=1400 audit(1763010301.516:341): avc: denied { setopt } for pid=5726 comm="syz.2.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.581469][ T5740] netlink: 'syz.5.858': attribute type 1 has an invalid length. [ 83.604051][ T5740] 8021q: adding VLAN 0 to HW filter on device bond5 [ 83.688469][ T29] audit: type=1400 audit(1763010301.716:342): avc: denied { create } for pid=5731 comm="syz.4.856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 83.709158][ T29] audit: type=1400 audit(1763010301.716:343): avc: denied { write } for pid=5731 comm="syz.4.856" path="socket:[12619]" dev="sockfs" ino=12619 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 83.970450][ T5766] netlink: 'syz.5.868': attribute type 29 has an invalid length. [ 85.246156][ T5796] syzkaller0: entered promiscuous mode [ 85.251836][ T5796] syzkaller0: entered allmulticast mode [ 85.431987][ T5801] tipc: Enabling of bearer rejected, failed to enable media [ 85.675552][ T5821] __nla_validate_parse: 2 callbacks suppressed [ 85.675573][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 86.168199][ T5830] syzkaller0: entered promiscuous mode [ 86.173764][ T5830] syzkaller0: entered allmulticast mode [ 87.372820][ T29] audit: type=1400 audit(1763010305.436:344): avc: denied { connect } for pid=5861 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 88.932723][ T1437] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.986048][ T1437] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.042103][ T1437] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.124429][ T1437] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.213743][ T5902] chnl_net:caif_netlink_parms(): no params data found [ 89.218373][ T5921] netlink: 4 bytes leftover after parsing attributes in process `syz.5.924'. [ 89.260875][ T1437] bridge_slave_1: left allmulticast mode [ 89.266566][ T1437] bridge_slave_1: left promiscuous mode [ 89.272308][ T1437] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.393122][ T1437] bridge_slave_0: left allmulticast mode [ 89.398890][ T1437] bridge_slave_0: left promiscuous mode [ 89.404679][ T1437] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.450900][ T1437] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 89.472944][ T1437] gretap0 (unregistering): left promiscuous mode [ 89.565968][ T1437] bond0 (unregistering): left promiscuous mode [ 89.572511][ T1437] bond_slave_0: left promiscuous mode [ 89.578032][ T1437] bond_slave_1: left promiscuous mode [ 89.727096][ T1437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.790341][ T1437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.855755][ T1437] bond0 (unregistering): Released all slaves [ 89.928913][ T1437] bond1 (unregistering): left promiscuous mode [ 89.939429][ T1437] team0: Port device macvlan2 removed [ 89.948293][ T1437] bond1 (unregistering): Released all slaves [ 89.960094][ T1437] bond2 (unregistering): Released all slaves [ 90.089589][ T1437] hsr_slave_0: left promiscuous mode [ 90.103526][ T1437] hsr_slave_1: left promiscuous mode [ 90.112917][ T1437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.120515][ T1437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.240655][ T1437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.248087][ T1437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.260916][ T1437] veth1_macvtap: left promiscuous mode [ 90.266847][ T1437] veth0_macvtap: left promiscuous mode [ 90.273045][ T1437] veth1_vlan: left promiscuous mode [ 90.278485][ T1437] veth0_vlan: left promiscuous mode [ 90.427078][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.5.931'. [ 90.531564][ T1437] team0 (unregistering): Port device team_slave_1 removed [ 90.541836][ T1437] team0 (unregistering): Port device team_slave_0 removed [ 90.677778][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.684961][ T5902] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.703823][ T5902] bridge_slave_0: entered allmulticast mode [ 90.714012][ T5902] bridge_slave_0: entered promiscuous mode [ 90.724268][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.731408][ T5902] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.794061][ T5902] bridge_slave_1: entered allmulticast mode [ 90.802618][ T5902] bridge_slave_1: entered promiscuous mode [ 90.901046][ T5902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.934883][ T5902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.988278][ T5902] team0: Port device team_slave_0 added [ 91.017697][ T5902] team0: Port device team_slave_1 added [ 91.114864][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.121950][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.147895][ T5902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.191600][ T5902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.198645][ T5902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.224593][ T5902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.288775][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 91.368291][ T1437] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.395094][ T5902] hsr_slave_0: entered promiscuous mode [ 91.414421][ T5902] hsr_slave_1: entered promiscuous mode [ 91.421030][ T5902] debugfs: 'hsr0' already exists in 'hsr' [ 91.426875][ T5902] Cannot create hsr debugfs directory [ 91.440668][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.447830][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.464976][ T5945] bridge_slave_0: entered allmulticast mode [ 91.494329][ T5945] bridge_slave_0: entered promiscuous mode [ 91.507993][ T1437] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.527000][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.534238][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.546114][ T5945] bridge_slave_1: entered allmulticast mode [ 91.557405][ T5945] bridge_slave_1: entered promiscuous mode [ 91.771154][ T6010] vhci_hcd: invalid port number 96 [ 91.776533][ T6010] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 91.871275][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.883515][ T1437] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.931360][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.021308][ T1437] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.038019][ T5945] team0: Port device team_slave_0 added [ 92.060192][ T5945] team0: Port device team_slave_1 added [ 92.118012][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.125112][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.151124][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.173268][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.180312][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.206394][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.237913][ T1437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.323018][ T1437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.342879][ T5945] hsr_slave_0: entered promiscuous mode [ 92.349258][ T5945] hsr_slave_1: entered promiscuous mode [ 92.356553][ T5945] debugfs: 'hsr0' already exists in 'hsr' [ 92.362351][ T5945] Cannot create hsr debugfs directory [ 92.379662][ T5993] chnl_net:caif_netlink_parms(): no params data found [ 92.402863][ T5902] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 92.435739][ T1437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.456756][ T5902] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 92.500950][ T1437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.516614][ T5902] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 92.526167][ T5902] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 92.638566][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.646115][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.653609][ T5993] bridge_slave_0: entered allmulticast mode [ 92.669189][ T5993] bridge_slave_0: entered promiscuous mode [ 92.687622][ T6072] netlink: 'syz.0.950': attribute type 21 has an invalid length. [ 92.700731][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.707917][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.715717][ T6073] 9pnet_virtio: no channels available for device [ 92.723447][ T5993] bridge_slave_1: entered allmulticast mode [ 92.730501][ T5993] bridge_slave_1: entered promiscuous mode [ 92.747728][ T6072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.950'. [ 92.763118][ T5902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.801246][ T1437] bridge_slave_1: left allmulticast mode [ 92.806941][ T1437] bridge_slave_1: left promiscuous mode [ 92.812735][ T1437] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.853011][ T1437] bridge_slave_0: left allmulticast mode [ 92.858755][ T1437] bridge_slave_0: left promiscuous mode [ 92.864436][ T1437] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.994238][ T1437] bridge_slave_1: left allmulticast mode [ 92.999975][ T1437] bridge_slave_1: left promiscuous mode [ 93.005795][ T1437] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.035735][ T1437] bridge_slave_0: left allmulticast mode [ 93.041605][ T1437] bridge_slave_0: left promiscuous mode [ 93.047337][ T1437] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.175685][ T1437] bond2 (unregistering): (slave ip6gretap1): Releasing active interface [ 93.220188][ T1437] gretap0 (unregistering): left promiscuous mode [ 93.290330][ T1437] bond0 (unregistering): left promiscuous mode [ 93.296551][ T1437] bond_slave_0: left promiscuous mode [ 93.302120][ T1437] bond_slave_1: left promiscuous mode [ 93.318853][ T1437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.329086][ T1437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.349374][ T1437] bond0 (unregistering): Released all slaves [ 93.367875][ T1437] bond1 (unregistering): left promiscuous mode [ 93.385678][ T1437] team0: Port device macvlan2 removed [ 93.400901][ T1437] bond1 (unregistering): Released all slaves [ 93.419894][ T1437] bond2 (unregistering): Released all slaves [ 93.458435][ T1437] gretap0 (unregistering): left promiscuous mode [ 93.520511][ T1437] bond0 (unregistering): left promiscuous mode [ 93.526750][ T1437] bond_slave_0: left promiscuous mode [ 93.532309][ T1437] bond_slave_1: left promiscuous mode [ 93.549067][ T1437] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.568763][ T1437] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.589196][ T1437] bond0 (unregistering): Released all slaves [ 93.608455][ T1437] bond1 (unregistering): left promiscuous mode [ 93.616863][ T1437] team0: Port device macvlan2 removed [ 93.631233][ T1437] bond1 (unregistering): Released all slaves [ 93.647386][ T5902] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.671982][ T6100] tipc: Started in network mode [ 93.676885][ T6100] tipc: Node identity 5e5501018aec, cluster identity 4711 [ 93.684251][ T6100] tipc: Enabled bearer , priority 0 [ 93.694459][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.713509][ T1437] tipc: Left network mode [ 93.722391][ T6099] tipc: Disabling bearer [ 93.741576][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.751130][ T1437] tipc: Left network mode [ 93.752069][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.762595][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.772585][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.779692][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.803953][ T1437] hsr_slave_0: left promiscuous mode [ 93.819271][ T1437] hsr_slave_1: left promiscuous mode [ 93.825267][ T1437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.832819][ T1437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.842567][ T1437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.850041][ T1437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.860117][ T1437] hsr_slave_0: left promiscuous mode [ 93.865851][ T1437] hsr_slave_1: left promiscuous mode [ 93.883744][ T1437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.891333][ T1437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.919991][ T6117] netlink: 'syz.5.959': attribute type 21 has an invalid length. [ 93.929669][ T1437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.937088][ T1437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.951114][ T1437] veth1_macvtap: left promiscuous mode [ 93.956770][ T1437] veth0_macvtap: left promiscuous mode [ 93.962401][ T1437] veth1_vlan: left promiscuous mode [ 93.967830][ T1437] veth0_vlan: left promiscuous mode [ 93.973912][ T1437] veth1_macvtap: left promiscuous mode [ 93.979635][ T1437] veth0_macvtap: left promiscuous mode [ 93.985281][ T1437] veth1_vlan: left promiscuous mode [ 93.990989][ T1437] veth0_vlan: left promiscuous mode [ 94.087719][ T1437] team0 (unregistering): Port device team_slave_1 removed [ 94.097937][ T1437] team0 (unregistering): Port device team_slave_0 removed [ 94.151690][ T1437] team0 (unregistering): Port device team_slave_1 removed [ 94.161560][ T1437] team0 (unregistering): Port device team_slave_0 removed [ 94.192758][ T5945] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 94.217076][ T6117] netlink: 132 bytes leftover after parsing attributes in process `syz.5.959'. [ 94.244460][ T5945] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 94.246316][ T29] audit: type=1400 audit(1763010312.306:345): avc: denied { write } for pid=6123 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 94.282506][ T5945] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 94.299451][ T5993] team0: Port device team_slave_0 added [ 94.316462][ T5945] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 94.341193][ T5902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.353855][ T5993] team0: Port device team_slave_1 added [ 94.433822][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.440850][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.452342][ T29] audit: type=1400 audit(1763010312.516:346): avc: denied { write } for pid=6141 comm="syz.0.966" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 94.466885][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.507227][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.514776][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.540824][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.613106][ T6156] 9pnet_virtio: no channels available for device [ 94.628098][ T5902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.640627][ T5993] hsr_slave_0: entered promiscuous mode [ 94.648333][ T5993] hsr_slave_1: entered promiscuous mode [ 94.822605][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.851722][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.914358][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.921544][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.940130][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.972'. [ 94.943440][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.956146][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.075507][ T5993] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 95.090707][ T5993] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 95.105332][ T5993] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 95.116053][ T5993] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 95.154699][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.207115][ T6201] syzkaller0: entered promiscuous mode [ 95.212797][ T6201] syzkaller0: entered allmulticast mode [ 95.254990][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.287762][ T4204] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.294891][ T4204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.329613][ T4204] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.336775][ T4204] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.407037][ T6220] tipc: Started in network mode [ 95.412100][ T6220] tipc: Node identity 16a60dd57ef2, cluster identity 4711 [ 95.419386][ T6220] tipc: Enabled bearer , priority 0 [ 95.440451][ T5902] veth0_vlan: entered promiscuous mode [ 95.448061][ T5902] veth1_vlan: entered promiscuous mode [ 95.466286][ T6219] tipc: Disabling bearer [ 95.479684][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.534260][ T5902] veth0_macvtap: entered promiscuous mode [ 95.551692][ T5902] veth1_macvtap: entered promiscuous mode [ 95.600410][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.624240][ T5902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.641026][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.649093][ T3459] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.691044][ T3459] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.728869][ T3459] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.777717][ T3459] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.864612][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.921'. [ 95.873860][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.6.921'. [ 95.895004][ T5945] veth0_vlan: entered promiscuous mode [ 95.939532][ T5945] veth1_vlan: entered promiscuous mode [ 95.988008][ T5993] veth0_vlan: entered promiscuous mode [ 95.993317][ T29] audit: type=1400 audit(1763010314.046:347): avc: denied { bind } for pid=6287 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.008767][ T5993] veth1_vlan: entered promiscuous mode [ 96.030401][ T5945] veth0_macvtap: entered promiscuous mode [ 96.036590][ T29] audit: type=1400 audit(1763010314.096:348): avc: denied { listen } for pid=6287 comm="syz.6.984" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.047257][ T5993] veth0_macvtap: entered promiscuous mode [ 96.075360][ T5993] veth1_macvtap: entered promiscuous mode [ 96.089838][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.128234][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.136020][ T6296] syz_tun: entered allmulticast mode [ 96.146912][ T6295] syz_tun: left allmulticast mode [ 96.170955][ T5945] veth1_macvtap: entered promiscuous mode [ 96.348459][ T4204] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.358279][ T4204] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.402162][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.416911][ T4204] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.458350][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.467045][ T4204] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.618675][ T1437] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.628236][ T1437] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.667498][ T1437] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.711870][ T6327] random: crng reseeded on system resumption [ 96.747014][ T1437] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.795291][ T6329] net_ratelimit: 10 callbacks suppressed [ 96.795314][ T6329] syzkaller0: mtu greater than device maximum [ 97.073768][ T6338] loop2: detected capacity change from 0 to 7 [ 97.432387][ T6364] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1001'. [ 97.746566][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1003'. [ 97.778881][ T6381] vhci_hcd: invalid port number 96 [ 97.784048][ T6381] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 98.315263][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1013'. [ 98.600313][ T6430] syzkaller0: entered promiscuous mode [ 98.606101][ T6430] syzkaller0: entered allmulticast mode [ 99.157144][ T6447] syzkaller0: entered promiscuous mode [ 99.162733][ T6447] syzkaller0: entered allmulticast mode [ 99.189474][ T6447] tipc: Enabled bearer , priority 0 [ 99.197546][ T6446] tipc: Resetting bearer [ 99.226412][ T6446] tipc: Disabling bearer [ 99.521663][ T6462] loop2: detected capacity change from 0 to 7 [ 99.676562][ T29] audit: type=1400 audit(1763010317.706:349): avc: denied { getopt } for pid=6454 comm="syz.7.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 99.955653][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1033'. [ 100.034533][ T29] audit: type=1400 audit(1763010318.096:350): avc: denied { accept } for pid=6488 comm="syz.0.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 100.334359][ T6496] loop2: detected capacity change from 0 to 7 [ 100.675268][ T6514] lo speed is unknown, defaulting to 1000 [ 100.681141][ T6514] lo speed is unknown, defaulting to 1000 [ 100.687351][ T6514] lo speed is unknown, defaulting to 1000 [ 100.693995][ T6514] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.702440][ T6514] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 100.791574][ T6514] lo speed is unknown, defaulting to 1000 [ 100.798641][ T6514] lo speed is unknown, defaulting to 1000 [ 100.805511][ T6514] lo speed is unknown, defaulting to 1000 [ 100.811799][ T6514] lo speed is unknown, defaulting to 1000 [ 100.818534][ T6514] lo speed is unknown, defaulting to 1000 [ 101.230342][ T6538] syzkaller0: entered promiscuous mode [ 101.235975][ T6538] syzkaller0: entered allmulticast mode [ 101.262918][ T6538] tipc: Started in network mode [ 101.267927][ T6538] tipc: Node identity 1aa82dbcd054, cluster identity 4711 [ 101.275170][ T6538] tipc: Enabled bearer , priority 0 [ 101.288225][ T6536] tipc: Resetting bearer [ 101.303678][ T6536] tipc: Disabling bearer [ 101.348055][ T29] audit: type=1400 audit(1763010319.406:351): avc: denied { mount } for pid=6546 comm="syz.6.1061" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 101.562393][ T29] audit: type=1400 audit(1763010319.506:352): avc: denied { create } for pid=6551 comm="syz.6.1063" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 101.825917][ T6562] vlan2: entered promiscuous mode [ 101.831149][ T6562] bridge0: entered promiscuous mode [ 101.948989][ T6564] vhci_hcd: invalid port number 96 [ 101.954273][ T6564] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 102.005312][ T6568] syz_tun: entered allmulticast mode [ 102.011656][ T6567] syz_tun: left allmulticast mode [ 102.071976][ T29] audit: type=1326 audit(1763010320.136:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 102.095549][ T29] audit: type=1326 audit(1763010320.136:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 102.120357][ T29] audit: type=1326 audit(1763010320.186:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 102.143930][ T29] audit: type=1326 audit(1763010320.186:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 102.167860][ T29] audit: type=1326 audit(1763010320.186:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 102.195906][ T29] audit: type=1326 audit(1763010320.186:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6573 comm="syz.5.1072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed325ef6c9 code=0x7ffc0000 [ 102.378970][ T6588] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.403188][ T6591] syz_tun: entered allmulticast mode [ 102.415467][ T6589] syz_tun: left allmulticast mode [ 102.427077][ T6592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1081'. [ 102.463542][ T6596] loop2: detected capacity change from 0 to 7 [ 102.789218][ T6625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.804205][ T6625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.874228][ T6629] loop2: detected capacity change from 0 to 7 [ 103.411791][ T6661] vhci_hcd: invalid port number 96 [ 103.416959][ T6661] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 103.596285][ T6677] syzkaller0: entered promiscuous mode [ 103.602121][ T6677] syzkaller0: entered allmulticast mode [ 103.617984][ T6677] tipc: Enabled bearer , priority 0 [ 103.625444][ T6676] tipc: Resetting bearer [ 103.634328][ T6676] tipc: Disabling bearer [ 104.638983][ T6700] vhci_hcd: invalid port number 96 [ 104.644880][ T6700] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 104.799530][ T2967] IPVS: starting estimator thread 0... [ 104.805195][ T6709] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 104.918706][ T6715] IPVS: using max 2352 ests per chain, 117600 per kthread [ 105.730938][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 105.730957][ T29] audit: type=1326 audit(1763010323.796:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac68ef6c9 code=0x7ffc0000 [ 105.760517][ T29] audit: type=1326 audit(1763010323.796:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac68ef6c9 code=0x7ffc0000 [ 105.912404][ T29] audit: type=1326 audit(1763010323.846:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f1ac68ef6c9 code=0x7ffc0000 [ 105.935979][ T29] audit: type=1326 audit(1763010323.846:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6745 comm="syz.0.1131" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ac68ef6c9 code=0x7ffc0000 [ 106.121859][ T6765] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 106.528686][ T29] audit: type=1400 audit(1763010324.026:378): avc: denied { connect } for pid=6757 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.503197][ T29] audit: type=1400 audit(1763010325.566:379): avc: denied { connect } for pid=6786 comm="syz.8.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.522851][ T29] audit: type=1400 audit(1763010325.566:380): avc: denied { write } for pid=6786 comm="syz.8.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.542372][ T29] audit: type=1400 audit(1763010325.566:381): avc: denied { read } for pid=6786 comm="syz.8.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 107.810242][ T6810] syzkaller0: entered promiscuous mode [ 107.815774][ T6810] syzkaller0: entered allmulticast mode [ 107.840578][ T6811] loop4: detected capacity change from 0 to 7 [ 107.878135][ T6811] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.897715][ T29] audit: type=1400 audit(1763010325.956:382): avc: denied { prog_load } for pid=6812 comm="syz.7.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 107.916968][ T29] audit: type=1400 audit(1763010325.956:383): avc: denied { bpf } for pid=6812 comm="syz.7.1153" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 107.927201][ T6811] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.946068][ T6811] loop4: unable to read partition table [ 107.952363][ T6811] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 107.966970][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.974991][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.983055][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.991225][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 107.999169][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.007119][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.015179][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.026663][ T6814] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1153' sets config #0 [ 108.046097][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 108.061134][ T6815] loop5: detected capacity change from 0 to 2048 [ 108.095090][ T6811] pim6reg: entered allmulticast mode [ 108.110155][ T6814] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1153' sets config #1 [ 108.128889][ T6815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.146205][ T6811] pim6reg: left allmulticast mode [ 108.146497][ T6818] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1155' sets config #0 [ 108.186834][ T6814] lo speed is unknown, defaulting to 1000 [ 108.197820][ T6815] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.209681][ T6818] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1155' sets config #1 [ 108.267317][ T6818] lo speed is unknown, defaulting to 1000 [ 108.309489][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.318228][ T6811] loop6: detected capacity change from 0 to 128 [ 108.333152][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.399129][ T6811] vfat: Unknown parameter 'u' [ 108.652276][ T3004] loop4: unable to read partition table [ 108.719058][ T5682] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:9: bg 0: block 345: padding at end of block bitmap is not set [ 108.737381][ T5682] EXT4-fs (loop5): Remounting filesystem read-only [ 108.772921][ T6809] syz.6.1152 (6809) used greatest stack depth: 7240 bytes left [ 110.193822][ T6873] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1166' sets config #1 [ 110.204871][ T4302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.264502][ T6873] lo speed is unknown, defaulting to 1000 [ 110.479781][ T6901] loop5: detected capacity change from 0 to 2048 [ 110.497863][ T6905] loop0: detected capacity change from 0 to 2048 [ 110.531883][ T6901] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.549225][ T6905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.565269][ T6901] ext4 filesystem being mounted at /183/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.579854][ T6905] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.683966][ T6924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.699148][ T6924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.716887][ T6905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.743095][ T6923] loop7: detected capacity change from 0 to 1024 [ 110.750812][ T6905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.786725][ T6923] EXT4-fs: Ignoring removed nomblk_io_submit option [ 110.810639][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 110.810658][ T29] audit: type=1400 audit(1763010328.876:534): avc: denied { read append } for pid=6896 comm="syz.0.1171" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.842041][ T6923] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 110.854649][ T6923] System zones: 0-1, 3-36 [ 110.864429][ T6923] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.918225][ T29] audit: type=1400 audit(1763010328.876:535): avc: denied { open } for pid=6896 comm="syz.0.1171" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 110.942605][ T29] audit: type=1400 audit(1763010328.876:536): avc: denied { write } for pid=6896 comm="syz.0.1171" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 110.962619][ T29] audit: type=1400 audit(1763010328.986:537): avc: denied { setattr } for pid=6909 comm="syz.7.1173" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.067955][ T29] audit: type=1400 audit(1763010329.126:538): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 111.099842][ T5945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.142050][ T29] audit: type=1400 audit(1763010329.196:539): avc: denied { create } for pid=6944 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.162812][ T29] audit: type=1400 audit(1763010329.206:540): avc: denied { write } for pid=6944 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.214174][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1175'. [ 111.225005][ T6950] loop4: detected capacity change from 0 to 7 [ 111.266525][ T6949] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1175' sets config #0 [ 111.281898][ T6957] pim6reg: entered allmulticast mode [ 111.293603][ T6955] loop8: detected capacity change from 0 to 1024 [ 111.308678][ T29] audit: type=1400 audit(1763010329.266:541): avc: denied { create } for pid=6944 comm="syz.6.1176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.328253][ T29] audit: type=1400 audit(1763010329.276:542): avc: denied { nlmsg_write } for pid=6946 comm="syz.7.1175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.348945][ T29] audit: type=1400 audit(1763010329.346:543): avc: denied { setopt } for pid=6944 comm="syz.6.1176" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.368532][ T6959] usb usb1: usbfs: interface 0 claimed by hub while 'syz.7.1175' sets config #1 [ 111.379617][ T6955] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.429007][ T6950] loop4: unable to read partition table [ 111.434730][ T6950] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 111.457878][ T6955] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 111.500814][ T6959] loop7: detected capacity change from 0 to 512 [ 111.509669][ T6959] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1175: error while reading EA inode 32 err=-116 [ 111.524628][ T6955] System zones: 0-1, 3-36 [ 111.546042][ T6955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.561540][ T6957] pim6reg: left allmulticast mode [ 111.574159][ T6959] EXT4-fs (loop7): Remounting filesystem read-only [ 111.600470][ T6959] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 111.613551][ T6959] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 111.650589][ T6959] EXT4-fs (loop7): 1 orphan inode deleted [ 111.675086][ T6959] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.714646][ T6959] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.747703][ T6949] netlink: 'syz.7.1175': attribute type 4 has an invalid length. [ 111.775815][ T6957] loop6: detected capacity change from 0 to 128 [ 111.789105][ T6957] vfat: Unknown parameter 'u' [ 111.808758][ T5993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.906748][ T6989] pim6reg: entered allmulticast mode [ 111.924677][ T6989] pim6reg: left allmulticast mode [ 111.945425][ T6988] loop8: detected capacity change from 0 to 1024 [ 111.953282][ T6988] EXT4-fs: Ignoring removed nobh option [ 111.959015][ T6988] EXT4-fs: Ignoring removed bh option [ 112.010913][ T6989] loop7: detected capacity change from 0 to 128 [ 112.021415][ T6989] vfat: Unknown parameter 'u' [ 112.036284][ T6988] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.078317][ T3004] loop4: unable to read partition table [ 112.102750][ T3004] loop4: unable to read partition table [ 112.199590][ T5993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.372303][ T12] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 112.411923][ T12] EXT4-fs (loop5): Remounting filesystem read-only [ 112.509981][ T4302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.867184][ T7051] random: crng reseeded on system resumption [ 112.897813][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 112.913459][ T52] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 112.971913][ T52] EXT4-fs (loop0): Remounting filesystem read-only [ 113.298247][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.462278][ T7088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1192'. [ 113.490367][ T7091] loop6: detected capacity change from 0 to 512 [ 113.715209][ T7105] syzkaller0: entered promiscuous mode [ 113.720750][ T7105] syzkaller0: entered allmulticast mode [ 113.759588][ T7105] tipc: Enabled bearer , priority 0 [ 113.768219][ T7104] tipc: Resetting bearer [ 113.795660][ T7104] tipc: Disabling bearer [ 113.829664][ T7091] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1193: error while reading EA inode 32 err=-116 [ 113.845549][ T7091] EXT4-fs (loop6): Remounting filesystem read-only [ 113.881470][ T7091] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 113.892215][ T7091] EXT4-fs (loop6): 1 orphan inode deleted [ 113.988466][ T7091] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.001418][ T7091] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.065275][ T7132] loop9: detected capacity change from 0 to 7 [ 114.089660][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1196'. [ 114.099161][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.106637][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.114954][ T7113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.122421][ T7113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.177660][ T7137] loop6: detected capacity change from 0 to 2048 [ 114.210871][ T7137] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.230756][ T7137] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.367134][ T7152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.383210][ T7152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.483851][ T7157] random: crng reseeded on system resumption [ 114.820369][ T7160] loop4: detected capacity change from 0 to 7 [ 114.827312][ T7160] buffer_io_error: 40 callbacks suppressed [ 114.827370][ T7160] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.841657][ T7160] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.849620][ T7160] loop4: unable to read partition table [ 114.858893][ T7160] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 114.872904][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.881676][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.896297][ T7161] pim6reg: entered allmulticast mode [ 114.908441][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.918562][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.926648][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.941255][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.953327][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.965186][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 114.998840][ T7160] pim6reg: left allmulticast mode [ 115.093540][ T7160] loop5: detected capacity change from 0 to 128 [ 115.116888][ T7160] vfat: Unknown parameter 'u' [ 115.165435][ T7173] loop2: detected capacity change from 0 to 7 [ 115.224241][ T52] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:3: bg 0: block 345: padding at end of block bitmap is not set [ 115.264903][ T52] EXT4-fs (loop6): Remounting filesystem read-only [ 115.275181][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1215'. [ 115.356175][ T5902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.018017][ T3004] loop4: unable to read partition table [ 116.133014][ T7203] random: crng reseeded on system resumption [ 116.290994][ T7205] netlink: 'syz.7.1223': attribute type 1 has an invalid length. [ 116.592027][ T7215] loop0: detected capacity change from 0 to 1024 [ 116.604300][ T7215] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.623717][ T7215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 116.632085][ T7215] System zones: 0-1, 3-36 [ 116.640432][ T7215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.669614][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.740431][ T7234] syzkaller0: entered promiscuous mode [ 116.746410][ T7234] syzkaller0: entered allmulticast mode [ 116.753963][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 116.754037][ T29] audit: type=1400 audit(1763010334.816:717): avc: denied { setopt } for pid=7233 comm="syz.5.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.813256][ T29] audit: type=1400 audit(1763010334.836:718): avc: denied { write } for pid=7233 comm="syz.5.1233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.926971][ T7251] loop2: detected capacity change from 0 to 7 [ 116.967382][ T7255] loop6: detected capacity change from 0 to 512 [ 116.990608][ T7258] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1245'. [ 117.010077][ T7255] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.1240: error while reading EA inode 32 err=-116 [ 117.032153][ T7255] EXT4-fs (loop6): Remounting filesystem read-only [ 117.040043][ T7255] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 117.050461][ T7255] EXT4-fs (loop6): 1 orphan inode deleted [ 117.056704][ T7255] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.070039][ T7255] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.164831][ T7271] syzkaller0: entered promiscuous mode [ 117.170444][ T7271] syzkaller0: entered allmulticast mode [ 117.210355][ T29] audit: type=1400 audit(1763010335.276:719): avc: denied { create } for pid=7275 comm="syz.6.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.230037][ T29] audit: type=1400 audit(1763010335.276:720): avc: denied { connect } for pid=7275 comm="syz.6.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 117.305003][ T29] audit: type=1400 audit(1763010335.366:721): avc: denied { watch watch_reads } for pid=7287 comm="syz.7.1256" path="/58/file1" dev="tmpfs" ino=315 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 117.386624][ T29] audit: type=1400 audit(1763010335.446:722): avc: denied { name_bind } for pid=7293 comm="syz.8.1259" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 117.440762][ T7299] syz_tun: entered allmulticast mode [ 117.457854][ T7297] syz_tun: left allmulticast mode [ 117.576428][ T7307] syzkaller0: entered promiscuous mode [ 117.582000][ T7307] syzkaller0: entered allmulticast mode [ 117.593263][ T7312] 9pnet_virtio: no channels available for device [ 117.624210][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1266'. [ 117.954814][ T29] audit: type=1400 audit(1763010336.016:723): avc: denied { listen } for pid=7321 comm="syz.7.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 118.028662][ T7332] syz_tun: entered allmulticast mode [ 118.040977][ T7331] syz_tun: left allmulticast mode [ 118.064158][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1275'. [ 118.082551][ T29] audit: type=1400 audit(1763010336.146:724): avc: denied { read } for pid=7333 comm="syz.8.1275" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.122211][ T29] audit: type=1400 audit(1763010336.146:725): avc: denied { open } for pid=7333 comm="syz.8.1275" path="net:[4026532930]" dev="nsfs" ino=4026532930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 118.145578][ T29] audit: type=1400 audit(1763010336.146:726): avc: denied { create } for pid=7333 comm="syz.8.1275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 118.182803][ T7340] syzkaller0: entered promiscuous mode [ 118.188416][ T7340] syzkaller0: entered allmulticast mode [ 118.308285][ T7347] loop2: detected capacity change from 0 to 7 [ 118.341021][ T7349] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1282'. [ 118.361363][ T7349] hub 1-0:1.0: USB hub found [ 118.366544][ T7349] hub 1-0:1.0: 8 ports detected [ 118.440860][ T7354] loop7: detected capacity change from 0 to 512 [ 118.460928][ T7354] EXT4-fs error (device loop7): ext4_xattr_inode_iget:446: comm syz.7.1282: error while reading EA inode 32 err=-116 [ 118.497065][ T7354] EXT4-fs (loop7): Remounting filesystem read-only [ 118.505659][ T7354] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 118.525223][ T7354] EXT4-fs (loop7): 1 orphan inode deleted [ 118.531614][ T7354] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.546857][ T7354] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.609844][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1284'. [ 119.181941][ T7349] netlink: 'syz.7.1282': attribute type 4 has an invalid length. [ 119.897667][ T7383] syzkaller0: entered promiscuous mode [ 119.903289][ T7383] syzkaller0: entered allmulticast mode [ 119.958955][ T7384] random: crng reseeded on system resumption [ 120.053717][ T7383] tipc: Enabled bearer , priority 0 [ 120.102702][ T7382] tipc: Resetting bearer [ 120.161803][ T7382] tipc: Disabling bearer [ 120.205374][ T7390] syzkaller0: entered promiscuous mode [ 120.210982][ T7390] syzkaller0: entered allmulticast mode [ 120.423033][ T7407] loop8: detected capacity change from 0 to 1024 [ 120.431823][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1298'. [ 120.441517][ T7407] EXT4-fs: Ignoring removed nobh option [ 120.447191][ T7407] EXT4-fs: Ignoring removed bh option [ 120.486205][ T7407] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.699453][ T7416] loop6: detected capacity change from 0 to 1024 [ 120.723853][ T7416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.803291][ T7416] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 120.832668][ T7420] pim6reg: entered allmulticast mode [ 120.860559][ T5993] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.873486][ T7416] System zones: 0-1, 3-36 [ 120.893033][ T7416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.920698][ T7420] pim6reg: left allmulticast mode [ 121.003322][ T5902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.018301][ T7420] loop5: detected capacity change from 0 to 128 [ 121.036083][ T7420] vfat: Unknown parameter 'u' [ 121.071862][ T7430] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1304' sets config #0 [ 121.109257][ T7430] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.1304' sets config #1 [ 121.133298][ T7430] lo speed is unknown, defaulting to 1000 [ 121.197436][ T7436] loop9: detected capacity change from 0 to 7 [ 121.245074][ T7443] syzkaller0: entered promiscuous mode [ 121.250753][ T7443] syzkaller0: entered allmulticast mode [ 121.263106][ T7441] syzkaller0: entered promiscuous mode [ 121.268730][ T7441] syzkaller0: entered allmulticast mode [ 121.311413][ T7443] tipc: Started in network mode [ 121.316406][ T7443] tipc: Node identity c2a599d41595, cluster identity 4711 [ 121.323709][ T7443] tipc: Enabled bearer , priority 0 [ 121.332002][ T7446] loop2: detected capacity change from 0 to 7 [ 121.354362][ T7442] tipc: Resetting bearer [ 121.400655][ T7442] tipc: Disabling bearer [ 121.446827][ T7456] loop7: detected capacity change from 0 to 1024 [ 121.455807][ T7456] EXT4-fs: Ignoring removed nobh option [ 121.461514][ T7456] EXT4-fs: Ignoring removed bh option [ 121.477349][ T7451] loop4: detected capacity change from 0 to 7 [ 121.483684][ T7451] buffer_io_error: 4 callbacks suppressed [ 121.483700][ T7451] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.492369][ T7456] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.497535][ T7451] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.517728][ T7451] loop4: unable to read partition table [ 121.531693][ T7454] pim6reg: entered allmulticast mode [ 121.576002][ T7460] random: crng reseeded on system resumption [ 121.613020][ T7451] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 121.630578][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.688878][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.770234][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.785009][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 121.785027][ T29] audit: type=1326 audit(1763010339.846:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.6.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f39e402f6c9 code=0x7ffc0000 [ 121.825554][ T7454] pim6reg: left allmulticast mode [ 121.867969][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.918053][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.925788][ T29] audit: type=1326 audit(1763010339.876:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.6.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e402f6c9 code=0x7ffc0000 [ 121.946498][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 121.949252][ T29] audit: type=1326 audit(1763010339.876:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.6.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e402f6c9 code=0x7ffc0000 [ 121.980340][ T29] audit: type=1400 audit(1763010339.886:826): avc: denied { read write } for pid=7465 comm="syz.8.1317" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.004184][ T29] audit: type=1400 audit(1763010339.886:827): avc: denied { open } for pid=7465 comm="syz.8.1317" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.028712][ T29] audit: type=1326 audit(1763010339.886:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.6.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f39e402f6c9 code=0x7ffc0000 [ 122.052207][ T29] audit: type=1400 audit(1763010339.896:829): avc: denied { ioctl } for pid=7465 comm="syz.8.1317" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 122.077823][ T29] audit: type=1326 audit(1763010339.946:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7464 comm="syz.6.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f39e402f6c9 code=0x7ffc0000 [ 122.082159][ T7454] loop6: detected capacity change from 0 to 128 [ 122.109376][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 122.125217][ T3577] Buffer I/O error on dev loop4, logical block 0, async page read [ 122.142949][ T7472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1319'. [ 122.159344][ T7454] vfat: Unknown parameter 'u' [ 122.164442][ T5945] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.252951][ T29] audit: type=1326 audit(1763010339.986:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.6.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e402f6c9 code=0x7ffc0000 [ 122.276396][ T29] audit: type=1326 audit(1763010339.996:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7450 comm="syz.6.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39e402f6c9 code=0x7ffc0000 [ 122.312725][ T7478] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1323' sets config #0 [ 122.329482][ T7478] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1323' sets config #1 [ 122.375009][ T7485] syz_tun: entered allmulticast mode [ 122.415023][ T7484] syz_tun: left allmulticast mode [ 122.497674][ T7490] loop8: detected capacity change from 0 to 512 [ 122.540134][ T7490] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1323: error while reading EA inode 32 err=-116 [ 122.592519][ T7490] EXT4-fs (loop8): Remounting filesystem read-only [ 122.640871][ T7497] vhci_hcd: invalid port number 96 [ 122.646041][ T7497] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 122.665943][ T7490] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 122.721016][ T7490] EXT4-fs (loop8): 1 orphan inode deleted [ 122.767521][ T7490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.806863][ T7490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.816139][ T7507] loop6: detected capacity change from 0 to 128 [ 122.833848][ T7507] netlink: '': attribute type 1 has an invalid length. [ 122.852740][ T7490] netlink: 'syz.8.1323': attribute type 4 has an invalid length. [ 122.889389][ T10] lo speed is unknown, defaulting to 1000 [ 122.895188][ T10] syz0: Port: 1 Link DOWN [ 122.980096][ T7515] hub 1-0:1.0: USB hub found [ 122.986063][ T7515] hub 1-0:1.0: 8 ports detected [ 122.991026][ T7519] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1338'. [ 123.025421][ T7518] loop6: detected capacity change from 0 to 2048 [ 123.032233][ T7519] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1338' sets config #0 [ 123.044580][ T7515] lo speed is unknown, defaulting to 1000 [ 123.063609][ T7519] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.1338' sets config #1 [ 123.088485][ T7518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.106569][ T7518] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.123346][ T7524] loop5: detected capacity change from 0 to 1024 [ 123.131543][ T7524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.153056][ T7528] loop8: detected capacity change from 0 to 512 [ 123.172304][ T7524] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e041c01c, mo2=0002] [ 123.197540][ T7524] System zones: 0-1, 3-36 [ 123.202747][ T7528] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1338: error while reading EA inode 32 err=-116 [ 123.222157][ T7524] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.238432][ T7528] EXT4-fs (loop8): Remounting filesystem read-only [ 123.240633][ T7533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.271013][ T7533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.273145][ T7534] pim6reg: entered allmulticast mode [ 123.287556][ T7528] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 123.298311][ T7528] EXT4-fs (loop8): 1 orphan inode deleted [ 123.329067][ T4302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.338877][ T7528] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.353923][ T7534] pim6reg: left allmulticast mode [ 123.362608][ T7528] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.470480][ T7534] loop7: detected capacity change from 0 to 128 [ 123.515652][ T7519] netlink: 'syz.8.1338': attribute type 4 has an invalid length. [ 123.537158][ T7534] vfat: Unknown parameter 'u' [ 123.562860][ T7539] loop2: detected capacity change from 0 to 7 [ 123.984240][ T7554] loop5: detected capacity change from 0 to 2048 [ 124.044117][ T7554] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.158677][ T7554] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.234372][ T12] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 124.312671][ T12] EXT4-fs (loop6): Remounting filesystem read-only [ 124.335004][ T7559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.347610][ T7559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.514542][ T5902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.663609][ T31] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm kworker/u8:1: bg 0: block 345: padding at end of block bitmap is not set [ 124.697783][ T31] EXT4-fs (loop5): Remounting filesystem read-only [ 124.727279][ T7575] loop6: detected capacity change from 0 to 1024 [ 124.738179][ T7575] EXT4-fs: Ignoring removed nobh option [ 124.743856][ T7575] EXT4-fs: Ignoring removed bh option [ 124.759814][ T7575] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.847537][ T5902] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.861838][ T3004] ================================================================== [ 124.869962][ T3004] BUG: KCSAN: data-race in set_nlink / set_nlink [ 124.876333][ T3004] [ 124.878678][ T3004] read to 0xffff88810713b388 of 4 bytes by task 3577 on cpu 1: [ 124.886221][ T3004] set_nlink+0x29/0xb0 [ 124.890304][ T3004] kernfs_iop_permission+0x1e2/0x220 [ 124.895607][ T3004] inode_permission+0x1ca/0x310 [ 124.900476][ T3004] link_path_walk+0x162/0x900 [ 124.905172][ T3004] path_lookupat+0x63/0x2a0 [ 124.909701][ T3004] filename_lookup+0x147/0x340 [ 124.914489][ T3004] vfs_statx+0x9d/0x390 [ 124.918692][ T3004] vfs_fstatat+0x115/0x170 [ 124.923129][ T3004] __se_sys_newfstatat+0x55/0x260 [ 124.928176][ T3004] __x64_sys_newfstatat+0x55/0x70 [ 124.933225][ T3004] x64_sys_call+0x135a/0x3000 [ 124.937914][ T3004] do_syscall_64+0xd2/0x200 [ 124.942426][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.948340][ T3004] [ 124.950675][ T3004] write to 0xffff88810713b388 of 4 bytes by task 3004 on cpu 0: [ 124.958309][ T3004] set_nlink+0x99/0xb0 [ 124.962397][ T3004] kernfs_iop_permission+0x1e2/0x220 [ 124.967709][ T3004] inode_permission+0x1ca/0x310 [ 124.972584][ T3004] link_path_walk+0x162/0x900 [ 124.977277][ T3004] path_lookupat+0x63/0x2a0 [ 124.981799][ T3004] filename_lookup+0x147/0x340 [ 124.986586][ T3004] vfs_statx+0x9d/0x390 [ 124.990759][ T3004] vfs_fstatat+0x115/0x170 [ 124.995198][ T3004] __se_sys_newfstatat+0x55/0x260 [ 125.000244][ T3004] __x64_sys_newfstatat+0x55/0x70 [ 125.005290][ T3004] x64_sys_call+0x135a/0x3000 [ 125.010000][ T3004] do_syscall_64+0xd2/0x200 [ 125.014511][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.020418][ T3004] [ 125.022746][ T3004] value changed: 0x00000009 -> 0x00000008 [ 125.028551][ T3004] [ 125.030884][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 125.037053][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.046356][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.056415][ T3004] ================================================================== [ 125.138858][ T7582] loop4: detected capacity change from 0 to 7 [ 125.145482][ T7582] loop4: unable to read partition table [ 125.151574][ T7582] loop_reread_partitions: partition scan of loop4 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 125.168459][ T7582] pim6reg: entered allmulticast mode [ 125.218346][ T7582] pim6reg: left allmulticast mode [ 125.319682][ T7582] loop6: detected capacity change from 0 to 128 [ 125.326687][ T7582] vfat: Unknown parameter 'u' [ 125.519117][ T4302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.621879][ T7581] syz.6.1356 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 125.636106][ T7581] CPU: 1 UID: 0 PID: 7581 Comm: syz.6.1356 Not tainted syzkaller #0 PREEMPT(voluntary) [ 125.636294][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 125.636309][ T7581] Call Trace: [ 125.636317][ T7581] [ 125.636325][ T7581] __dump_stack+0x1d/0x30 [ 125.636350][ T7581] dump_stack_lvl+0xe8/0x140 [ 125.636371][ T7581] dump_stack+0x15/0x1b [ 125.636390][ T7581] dump_header+0x81/0x220 [ 125.636414][ T7581] oom_kill_process+0x342/0x400 [ 125.636451][ T7581] out_of_memory+0x979/0xb80 [ 125.636490][ T7581] try_charge_memcg+0x610/0xa10 [ 125.636563][ T7581] obj_cgroup_charge_pages+0xa6/0x150 [ 125.636670][ T7581] __memcg_kmem_charge_page+0x9f/0x170 [ 125.636695][ T7581] __alloc_frozen_pages_noprof+0x188/0x360 [ 125.636770][ T7581] alloc_pages_mpol+0xb3/0x260 [ 125.636814][ T7581] ? alloc_pages_noprof+0x61/0x130 [ 125.636868][ T7581] alloc_pages_noprof+0x90/0x130 [ 125.636899][ T7581] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 125.636960][ T7581] __kvmalloc_node_noprof+0x483/0x670 [ 125.637075][ T7581] ? ip_set_alloc+0x24/0x30 [ 125.637148][ T7581] ? ip_set_alloc+0x24/0x30 [ 125.637192][ T7581] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 125.637305][ T7581] ip_set_alloc+0x24/0x30 [ 125.637348][ T7581] hash_netiface_create+0x282/0x740 [ 125.637391][ T7581] ? __pfx_hash_netiface_create+0x10/0x10 [ 125.637468][ T7581] ip_set_create+0x3cc/0x970 [ 125.637495][ T7581] ? __nla_parse+0x40/0x60 [ 125.637553][ T7581] nfnetlink_rcv_msg+0x4c6/0x590 [ 125.637686][ T7581] netlink_rcv_skb+0x123/0x220 [ 125.637731][ T7581] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 125.637779][ T7581] nfnetlink_rcv+0x167/0x16c0 [ 125.637840][ T7581] ? kmem_cache_free+0xe4/0x3d0 [ 125.637904][ T7581] ? __kfree_skb+0x109/0x150 [ 125.637939][ T7581] ? nlmon_xmit+0x4f/0x60 [ 125.637972][ T7581] ? consume_skb+0x49/0x150 [ 125.638049][ T7581] ? nlmon_xmit+0x4f/0x60 [ 125.638075][ T7581] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 125.638119][ T7581] ? __dev_queue_xmit+0x1200/0x2000 [ 125.638137][ T7581] ? __dev_queue_xmit+0x182/0x2000 [ 125.638156][ T7581] ? ref_tracker_free+0x37d/0x3e0 [ 125.638316][ T7581] ? __netlink_deliver_tap+0x4dc/0x500 [ 125.638358][ T7581] netlink_unicast+0x5c0/0x690 [ 125.638408][ T7581] netlink_sendmsg+0x58b/0x6b0 [ 125.638437][ T7581] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.638497][ T7581] __sock_sendmsg+0x145/0x180 [ 125.638523][ T7581] ____sys_sendmsg+0x31e/0x4e0 [ 125.638643][ T7581] ___sys_sendmsg+0x17b/0x1d0 [ 125.638673][ T7581] __x64_sys_sendmsg+0xd4/0x160 [ 125.638696][ T7581] x64_sys_call+0x191e/0x3000 [ 125.638755][ T7581] do_syscall_64+0xd2/0x200 [ 125.638784][ T7581] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 125.638820][ T7581] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 125.638877][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.638964][ T7581] RIP: 0033:0x7f39e402f6c9 [ 125.638995][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.639072][ T7581] RSP: 002b:00007f39e2a8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.639093][ T7581] RAX: ffffffffffffffda RBX: 00007f39e4285fa0 RCX: 00007f39e402f6c9 [ 125.639131][ T7581] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000003 [ 125.639151][ T7581] RBP: 00007f39e40b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 125.639168][ T7581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.639185][ T7581] R13: 00007f39e4286038 R14: 00007f39e4285fa0 R15: 00007fffd8d12f68 [ 125.639232][ T7581] [ 125.984647][ T7581] memory: usage 307200kB, limit 307200kB, failcnt 233 [ 125.991588][ T7581] memory+swap: usage 307412kB, limit 9007199254740988kB, failcnt 0 [ 125.999575][ T7581] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 126.006882][ T7581] Memory cgroup stats for /syz6: [ 126.007343][ T7581] cache 0 [ 126.015276][ T7581] rss 0 [ 126.018037][ T7581] shmem 0 [ 126.021130][ T7581] mapped_file 0 [ 126.024588][ T7581] dirty 0 [ 126.027520][ T7581] writeback 0 [ 126.030847][ T7581] workingset_refault_anon 168 [ 126.035551][ T7581] workingset_refault_file 0 [ 126.040090][ T7581] swap 217088 [ 126.043380][ T7581] swapcached 4096 [ 126.047006][ T7581] pgpgin 34916 [ 126.050401][ T7581] pgpgout 34915 [ 126.053869][ T7581] pgfault 42880 [ 126.057325][ T7581] pgmajfault 84 [ 126.060874][ T7581] inactive_anon 0 [ 126.064517][ T7581] active_anon 4096 [ 126.068315][ T7581] inactive_file 0 [ 126.072213][ T7581] active_file 0 [ 126.075680][ T7581] unevictable 0 [ 126.079206][ T7581] hierarchical_memory_limit 314572800 [ 126.084594][ T7581] hierarchical_memsw_limit 9223372036854771712 [ 126.090788][ T7581] total_cache 0 [ 126.094299][ T7581] total_rss 0 [ 126.097616][ T7581] total_shmem 0 [ 126.101187][ T7581] total_mapped_file 0 [ 126.105179][ T7581] total_dirty 0 [ 126.108714][ T7581] total_writeback 0 [ 126.112542][ T7581] total_workingset_refault_anon 168 [ 126.117734][ T7581] total_workingset_refault_file 0 [ 126.122797][ T7581] total_swap 217088 [ 126.126685][ T7581] total_swapcached 4096 [ 126.130869][ T7581] total_pgpgin 34916 [ 126.134775][ T7581] total_pgpgout 34915 [ 126.138838][ T7581] total_pgfault 42880 [ 126.142907][ T7581] total_pgmajfault 84 [ 126.146880][ T7581] total_inactive_anon 0 [ 126.151116][ T7581] total_active_anon 4096 [ 126.155451][ T7581] total_inactive_file 0 [ 126.159738][ T7581] total_active_file 0 [ 126.163846][ T7581] total_unevictable 0 [ 126.167877][ T7581] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1356,pid=7580,uid=0 [ 126.182563][ T7581] Memory cgroup out of memory: Killed process 7580 (syz.6.1356) total-vm:96136kB, anon-rss:1264kB, file-rss:22596kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000