last executing test programs: 7m52.805678227s ago: executing program 32 (id=490): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000001c0)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000840)={[{@init_itable_val}, {@block_validity}, {@nobh}, {@user_xattr}, {@errors_remount}, {@quota}], [{@flag='sync'}]}, 0x3, 0x43f, &(0x7f0000001300)="$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") open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) 7m50.240367116s ago: executing program 33 (id=503): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 7m49.275150441s ago: executing program 34 (id=508): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x60ad, &(0x7f0000000600)={0x0, 0xb1b2, 0x1, 0xfffffffe, 0xa0}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000002700)={0x119f, 0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/264, 0xf9}, {&(0x7f00000015c0)=""/4096, 0xd8da7}, {&(0x7f0000002a00)=""/88, 0x8}], 0x0}, 0x20) 7m49.204832861s ago: executing program 35 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000300)={0x0, {{0xa, 0x0, 0x0, @mcast1, 0x10000008}}}, 0x88) 7m14.961750143s ago: executing program 36 (id=1717): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x8}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 7m14.296598274s ago: executing program 37 (id=1733): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/235, 0xeb}, 0x8}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 7m3.1723999s ago: executing program 38 (id=2111): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 6m55.066274331s ago: executing program 39 (id=2401): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000180)='cpu==0||!') 6m16.840009113s ago: executing program 40 (id=3831): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 6m13.420183024s ago: executing program 41 (id=3894): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 6m5.579846932s ago: executing program 42 (id=4168): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1) 5m55.64569742s ago: executing program 43 (id=4513): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x0) 5m50.28784617s ago: executing program 44 (id=4718): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffff76, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) 5m48.119466523s ago: executing program 45 (id=4765): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="00020201"], 0x18) 5m46.777393023s ago: executing program 46 (id=4790): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 5m36.31126794s ago: executing program 47 (id=5158): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0), 0x1, 0x553, &(0x7f0000000800)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), &(0x7f0000000300)=ANY=[], 0x381, 0x0) 4m23.616103487s ago: executing program 48 (id=7707): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bind$unix(r1, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 4m19.35986492s ago: executing program 49 (id=7815): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x8001, 0x40]}}, {0x0, 0x0, 0x0, 0x0, @time={0x7f63, 0xa}, {0x0, 0x59}, {0x0, 0xff}, @time=@tick=0xfffffffe}], 0x38) read$char_usb(r2, 0x0, 0x0) 4m16.353086726s ago: executing program 50 (id=7869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) 4m4.343489075s ago: executing program 0 (id=8360): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000005b80)={{{@in6=@remote, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x7}}, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x6c}, 0x0, @in6=@dev}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="f368656e065b", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev}}}}}}, 0x0) 4m4.313303625s ago: executing program 0 (id=8362): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.737818834s ago: executing program 0 (id=8385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c0000001801000020207325000000000020"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r3, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) 4m3.637973376s ago: executing program 0 (id=8392): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 4m2.739338199s ago: executing program 0 (id=8423): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) 4m2.320613666s ago: executing program 0 (id=8435): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 4m2.286219766s ago: executing program 51 (id=8435): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r1, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) 3m58.307235615s ago: executing program 8 (id=8597): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x20000010) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') 3m58.260618306s ago: executing program 8 (id=8599): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x200000000b}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r2, 0x1}}, 0x18) 3m58.259313356s ago: executing program 8 (id=8602): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3804402, &(0x7f0000000680)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nombcache}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r0, 0x0, 0x0, 0x1001f0) copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80042, 0x8) fallocate(r1, 0x10, 0x6, 0x10001) 3m58.126159938s ago: executing program 8 (id=8607): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f0000000000), 0x1, 0x503, &(0x7f0000000140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4800000, 0x8005, 0x0, 0x0, 0x9, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d10a00966d61fdcf335263bd9bffbcc2542ded71038259ca0400e1a311efec32d71e14ef3dc177b5b48b00", "f2fdffffffffffffff810000000000d300e6d602000000000000000000000001", [0xca4e]}) write$binfmt_misc(r0, &(0x7f00000003c0)='(', 0x1) 3m57.177740202s ago: executing program 8 (id=8638): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0xd}, 0xa59745d475f27e94, 0x4, 0x7, 0x1, 0x5, 0x20005, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r0, r1, 0x0) 3m56.929600096s ago: executing program 8 (id=8651): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8081}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 3m56.872523707s ago: executing program 52 (id=8651): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x8081}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x420, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) 3m1.792906841s ago: executing program 3 (id=10924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000040008001240fffffffa11000300686173683a6e65742c6e657400000000050004"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3m1.747549241s ago: executing program 3 (id=10925): socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000882b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setresuid(0x0, 0x0, 0x0) 3m1.690807073s ago: executing program 3 (id=10928): bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r0}, 0x10) setitimer(0x1, 0x0, 0x0) 3m1.351931277s ago: executing program 3 (id=10935): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8006, 0x0, 0x0, 0x1b, 0x8, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8a5f755a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "899c4c35edb172aa66810000000000d31733d602000000feffffff0000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) 3m0.932312334s ago: executing program 3 (id=10948): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) stat(&(0x7f00000001c0)='./file0\x00', 0x0) 3m0.444382451s ago: executing program 3 (id=10958): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000680)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nombcache}, {@user_xattr}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 3m0.370071502s ago: executing program 53 (id=10958): syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000680)={[{@delalloc}, {@data_err_abort}, {@barrier}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nombcache}, {@user_xattr}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x19) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 2m19.492834624s ago: executing program 2 (id=12013): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000200)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@fadd={0x58, 0x114, 0x6, {{0x3, 0x7}, &(0x7f0000000180)=0x9, 0x0, 0x800029, 0x5, 0x6, 0x968, 0x20, 0xfffffffffffffff9}}], 0x58, 0x4804}, 0x0) 2m19.360802656s ago: executing program 2 (id=12017): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff000000e8ff00001142"], 0x0) 2m19.324472746s ago: executing program 2 (id=12018): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000280)=[@window={0x3, 0x4, 0x4}, @window={0x3, 0x2}, @sack_perm, @window={0x3, 0x0, 0xc}, @mss={0x2, 0x800}, @window={0x3, 0xfffc, 0xfffc}, @sack_perm, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m18.446098819s ago: executing program 2 (id=12049): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000001cc0)='ext2\x00', &(0x7f0000001d00)='./file0\x00', 0x0, &(0x7f0000000980)={[{@mblk_io_submit}]}, 0x64, 0x50b, &(0x7f0000000200)="$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") r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m18.336649811s ago: executing program 2 (id=12053): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x7}, 0x18) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000003e000701fcf7fffffedbdf25017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2m18.126803414s ago: executing program 2 (id=12059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 2m18.108623595s ago: executing program 54 (id=12059): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x41, 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$unix(r3, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 1m32.796512902s ago: executing program 1 (id=13289): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1m32.648481595s ago: executing program 1 (id=13295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m32.523791226s ago: executing program 1 (id=13300): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[], 0x50}}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m32.415559008s ago: executing program 1 (id=13304): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 1m32.29233641s ago: executing program 1 (id=13310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x20) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) 1m32.180883721s ago: executing program 1 (id=13312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 1m32.180732801s ago: executing program 55 (id=13312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x5}, 0x10) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f0000000000000200020000", 0x1c) 676.65278ms ago: executing program 6 (id=16682): mlockall(0x6) r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r2, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 670.481921ms ago: executing program 9 (id=16684): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = inotify_init1(0x800) r4 = fcntl$dupfd(r2, 0x406, r3) connect$pppl2tp(r4, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r4, 0x2, 0x2, 0x4, 0x3, {0xa, 0x4e22, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2b9d}}}, 0x3a) setsockopt$inet_mtu(r4, 0x111, 0xa, &(0x7f0000000000)=0x3, 0x4) 625.352331ms ago: executing program 9 (id=16686): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffe9) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) 549.001193ms ago: executing program 6 (id=16688): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 533.599792ms ago: executing program 4 (id=16690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000140)={0xa000000d}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000300)={0x10000000}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000600)={0x10}) 516.286653ms ago: executing program 7 (id=16691): socket$packet(0x11, 0xa, 0x300) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x5}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @opaque="0af67622bbddd44976"}}}}}}, 0x0) 496.076883ms ago: executing program 9 (id=16692): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 445.290634ms ago: executing program 7 (id=16693): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=@newtfilter={0x30, 0x2c, 0xd2b, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0xe, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x893}, 0x24040084) 435.942464ms ago: executing program 5 (id=16694): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000080)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 424.331914ms ago: executing program 4 (id=16695): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x15a) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 402.090104ms ago: executing program 6 (id=16696): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r3}, 0x10) 340.863205ms ago: executing program 9 (id=16697): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "0002002000", "07f217bd74511e465bbbd5de01000000f9044677d4d588363d63af84db44be59", "00f8ff00", "8ce63ecbc640735f"}, 0x38) close(r1) 340.577675ms ago: executing program 7 (id=16698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfffe}, {0xfff1, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0xe, 0xe5}}]}, 0x38}}, 0x200009d4) 337.170265ms ago: executing program 5 (id=16699): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r2) 327.453125ms ago: executing program 4 (id=16700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) 326.246885ms ago: executing program 6 (id=16701): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xf7, 0x5, 0x7, 0x3, 0x7, 0xf, 0x2, 0x56, 0x40, 0x80, 0x9, 0x52, 0x9, 0x5}, 0xe) 311.786476ms ago: executing program 9 (id=16702): socket$inet_sctp(0x2, 0x4, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f0000000dc0)={[{@user_xattr}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x20}}, {@nodioread_nolock}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}], [{@uid_gt={'uid>', 0xee01}}, {@obj_user={'obj_user', 0x3d, 'kmem_cache_free\x00'}}, {@appraise}, {@subj_user={'subj_user', 0x3d, 'noinit_itable'}}, {@euid_lt}, {@obj_role={'obj_role', 0x3d, 'dioread_nolock'}}, {@uid_eq}]}, 0x3, 0x583, &(0x7f0000000800)="$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") lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x2) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000001c0)=0x1, 0x4) mkdir(&(0x7f0000000000)='./control\x00', 0x0) 233.822627ms ago: executing program 6 (id=16703): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 233.503857ms ago: executing program 5 (id=16704): r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xa002a008}) 233.208877ms ago: executing program 4 (id=16705): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000200), 0x3, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {0x0, 0x0, 0x2}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 232.897257ms ago: executing program 9 (id=16706): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001580)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018200000000000006c0000006c0000000200000000000000000000070000000000000000070000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d700000000000000000000000000000000a1d8faf5bd23dd800008"], 0x0, 0x86}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r1) socket$inet(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22ff892f"], 0x3e) 212.869567ms ago: executing program 7 (id=16707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r3, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 177.067767ms ago: executing program 5 (id=16708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 154.141538ms ago: executing program 4 (id=16709): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_io_uring_setup(0x2960, &(0x7f0000000300)={0x0, 0x79ac, 0x10100, 0x0, 0x38b}, &(0x7f0000000000), &(0x7f0000000080)) 139.051158ms ago: executing program 7 (id=16710): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000005304"], 0x14}}, 0x48480) 114.611479ms ago: executing program 5 (id=16711): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x22, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, 'ip_vti0\x00'}}, 0x1e) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @multicast, 'veth1_to_bond\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000340)={0x18, 0x0, {0x0, @multicast, 'macvlan0\x00'}}, 0x1e) 98.298169ms ago: executing program 6 (id=16712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f00000005c0)=ANY=[@ANYBLOB="fdffffffffcf3b316b9cffffffffffff7f"]) 74.330759ms ago: executing program 7 (id=16713): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000, 0x400, 0x0, 0xfffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 74.02071ms ago: executing program 4 (id=16714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000ffdbdf251000000020000180140002006261746164765f736c6176655f31000008000100", @ANYRES32=r5], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x40400c0) 0s ago: executing program 5 (id=16715): ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) kernel console output (not intermixed with test programs): `syz.5.12422'. [ 419.802627][T11663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.433753][T10760] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 420.458043][T10760] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 420.549672][T11724] loop9: detected capacity change from 0 to 1024 [ 420.605651][T11724] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.688840][T11724] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4113: comm syz.9.12440: Allocating blocks 385-513 which overlap fs metadata [ 420.710897][T11721] EXT4-fs (loop9): pa ffff888106a847e0: logic 16, phys. 129, len 24 [ 420.719126][T11721] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 420.773210][T31647] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.998984][T11751] netlink: 'syz.9.12446': attribute type 1 has an invalid length. [ 421.006922][T11751] netlink: 224 bytes leftover after parsing attributes in process `syz.9.12446'. [ 421.112044][T11766] netlink: 228 bytes leftover after parsing attributes in process `syz.9.12450'. [ 421.312612][ T29] kauditd_printk_skb: 1204 callbacks suppressed [ 421.312634][ T29] audit: type=1400 audit(1751201603.348:27170): avc: denied { read } for pid=11715 comm="syz.7.12438" path="socket:[108158]" dev="sockfs" ino=108158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 421.355879][ T29] audit: type=1400 audit(1751201603.348:27171): avc: denied { read } for pid=11715 comm="syz.7.12438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 421.376735][ T29] audit: type=1400 audit(1751201603.358:27172): avc: denied { read } for pid=11715 comm="syz.7.12438" path="socket:[108158]" dev="sockfs" ino=108158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 421.401620][ T29] audit: type=1400 audit(1751201603.358:27173): avc: denied { read } for pid=11715 comm="syz.7.12438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 421.422358][ T29] audit: type=1400 audit(1751201603.390:27174): avc: denied { prog_load } for pid=11782 comm="syz.5.12465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.441803][ T29] audit: type=1400 audit(1751201603.390:27175): avc: denied { bpf } for pid=11782 comm="syz.5.12465" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.462624][ T29] audit: type=1400 audit(1751201603.390:27176): avc: denied { perfmon } for pid=11782 comm="syz.5.12465" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 421.483958][ T29] audit: type=1400 audit(1751201603.390:27177): avc: denied { prog_run } for pid=11782 comm="syz.5.12465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.487811][T11792] loop9: detected capacity change from 0 to 512 [ 421.513928][ T29] audit: type=1400 audit(1751201603.495:27178): avc: denied { map_create } for pid=11793 comm="syz.6.12457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.533617][ T29] audit: type=1400 audit(1751201603.495:27179): avc: denied { map_read map_write } for pid=11793 comm="syz.6.12457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 421.558629][T11785] wg2: entered promiscuous mode [ 421.559191][T11794] serio: Serial port ptm0 [ 421.563623][T11785] wg2: entered allmulticast mode [ 421.625832][T11792] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 421.639085][T11792] System zones: 0-2, 18-18, 34-35 [ 421.668654][T11792] EXT4-fs error (device loop9): ext4_quota_enable:7124: inode #4: comm syz.9.12455: iget: bad i_size value: 5910974510929920 [ 421.687394][T11792] EXT4-fs error (device loop9): ext4_quota_enable:7127: comm syz.9.12455: Bad quota inode: 4, type: 1 [ 421.706861][T11792] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 421.721759][T11792] EXT4-fs (loop9): mount failed [ 421.957169][T11833] netlink: 52 bytes leftover after parsing attributes in process `syz.5.12473'. [ 422.254361][T11864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12481'. [ 422.578687][T11895] netlink: 'syz.9.12492': attribute type 13 has an invalid length. [ 422.604015][T11895] gretap0: refused to change device tx_queue_len [ 422.611211][T11895] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 422.831917][T11927] ip6tnl1: entered promiscuous mode [ 424.041440][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12522'. [ 424.070821][T11983] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.079110][T11983] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.087542][T11983] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.095929][T11983] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 424.143916][T11983] vxlan0: entered promiscuous mode [ 424.733205][T12020] serio: Serial port ptm0 [ 425.667326][T12101] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.676227][T12101] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.685106][T12101] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.694808][T12101] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.705146][T12101] geneve2: entered promiscuous mode [ 425.923390][T12122] netlink: 96 bytes leftover after parsing attributes in process `syz.9.12578'. [ 426.084439][ T29] kauditd_printk_skb: 1138 callbacks suppressed [ 426.084454][ T29] audit: type=1400 audit(1751201608.356:28318): avc: denied { prog_load } for pid=12125 comm="syz.7.12581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.110314][ T29] audit: type=1400 audit(1751201608.356:28319): avc: denied { bpf } for pid=12125 comm="syz.7.12581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.131177][ T29] audit: type=1400 audit(1751201608.356:28320): avc: denied { perfmon } for pid=12125 comm="syz.7.12581" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.157315][ T29] audit: type=1400 audit(1751201608.440:28321): avc: denied { bpf } for pid=12125 comm="syz.7.12581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.178258][ T29] audit: type=1400 audit(1751201608.440:28322): avc: denied { bpf } for pid=12125 comm="syz.7.12581" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 426.199385][ T29] audit: type=1400 audit(1751201608.440:28323): avc: denied { prog_run } for pid=12125 comm="syz.7.12581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 426.217521][T12124] loop9: detected capacity change from 0 to 8192 [ 426.227710][ T29] audit: type=1400 audit(1751201608.492:28324): avc: denied { read write } for pid=12123 comm="syz.9.12580" name="loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.252841][ T29] audit: type=1400 audit(1751201608.492:28325): avc: denied { open } for pid=12123 comm="syz.9.12580" path="/dev/loop9" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.277300][ T29] audit: type=1400 audit(1751201608.492:28326): avc: denied { ioctl } for pid=12123 comm="syz.9.12580" path="/dev/loop9" dev="devtmpfs" ino=109 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 426.304092][ T29] audit: type=1400 audit(1751201608.513:28327): avc: denied { mounton } for pid=12123 comm="syz.9.12580" path="/712/file1" dev="tmpfs" ino=3690 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 427.117730][T12202] geneve3: entered promiscuous mode [ 427.209528][T12208] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12609'. [ 427.695439][T12243] loop9: detected capacity change from 0 to 512 [ 427.718019][T12243] EXT4-fs (loop9): orphan cleanup on readonly fs [ 427.747831][T12251] syzkaller1: entered promiscuous mode [ 427.753449][T12251] syzkaller1: entered allmulticast mode [ 427.781058][T12243] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.12621: bg 0: block 248: padding at end of block bitmap is not set [ 427.798246][T12243] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.12621: Failed to acquire dquot type 1 [ 427.822625][T12243] EXT4-fs (loop9): 1 truncate cleaned up [ 427.841448][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12625'. [ 427.861647][T12243] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 428.027443][T31647] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.132466][T12272] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 428.158879][T12272] SELinux: failed to load policy [ 428.244766][T12279] netlink: 'syz.6.12633': attribute type 298 has an invalid length. [ 428.493518][T12312] 9pnet_fd: Insufficient options for proto=fd [ 428.790071][T12338] geneve3: entered promiscuous mode [ 428.871621][T12347] SELinux: policydb version 0 does not match my version range 15-34 [ 428.893334][T12347] SELinux: failed to load policy [ 429.258477][T12381] netlink: 'syz.5.12673': attribute type 1 has an invalid length. [ 429.266436][T12381] netlink: 224 bytes leftover after parsing attributes in process `syz.5.12673'. [ 429.366862][T12385] netlink: 'syz.1.12674': attribute type 2 has an invalid length. [ 429.374841][T12385] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12674'. [ 429.918816][T12437] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12694'. [ 429.989529][T12445] netlink: 'syz.7.12696': attribute type 10 has an invalid length. [ 429.998245][T12445] netlink: 40 bytes leftover after parsing attributes in process `syz.7.12696'. [ 430.008292][T12445] dummy0: entered promiscuous mode [ 430.016165][T12445] bridge0: port 1(dummy0) entered blocking state [ 430.023519][T12445] bridge0: port 1(dummy0) entered disabled state [ 430.030456][T12445] dummy0: entered allmulticast mode [ 430.039086][T12445] bridge0: port 1(dummy0) entered blocking state [ 430.045701][T12445] bridge0: port 1(dummy0) entered forwarding state [ 430.120430][T12454] loop9: detected capacity change from 0 to 128 [ 430.160842][T12454] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.188589][T12454] ext4 filesystem being mounted at /727/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.277731][T31647] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 430.484221][T12490] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12714'. [ 430.499034][T12490] netlink: 204 bytes leftover after parsing attributes in process `syz.5.12714'. [ 430.830564][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12725'. [ 430.839601][T12521] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12725'. [ 430.863503][ T29] kauditd_printk_skb: 1147 callbacks suppressed [ 430.863520][ T29] audit: type=1400 audit(1751201613.374:29473): avc: denied { prog_load } for pid=12524 comm="syz.6.12726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 430.889277][ T29] audit: type=1400 audit(1751201613.374:29474): avc: denied { bpf } for pid=12524 comm="syz.6.12726" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.910432][ T29] audit: type=1400 audit(1751201613.374:29475): avc: denied { perfmon } for pid=12524 comm="syz.6.12726" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.933566][ T29] audit: type=1400 audit(1751201613.447:29476): avc: denied { perfmon } for pid=12524 comm="syz.6.12726" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.955640][ T29] audit: type=1400 audit(1751201613.447:29477): avc: denied { bpf } for pid=12524 comm="syz.6.12726" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 430.976874][ T29] audit: type=1400 audit(1751201613.447:29478): avc: denied { prog_run } for pid=12524 comm="syz.6.12726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 430.996919][ T29] audit: type=1400 audit(1751201613.479:29479): avc: denied { prog_load } for pid=12524 comm="syz.6.12726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 431.016298][ T29] audit: type=1400 audit(1751201613.479:29480): avc: denied { bpf } for pid=12524 comm="syz.6.12726" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 431.047461][ T29] audit: type=1400 audit(1751201613.542:29481): avc: denied { map_create } for pid=12526 comm="syz.5.12727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 431.067996][ T29] audit: type=1400 audit(1751201613.542:29482): avc: denied { bpf } for pid=12526 comm="syz.5.12727" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 431.119238][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12729'. [ 431.136564][T12531] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12729'. [ 431.211298][T12539] syzkaller0: entered promiscuous mode [ 431.217011][T12539] syzkaller0: entered allmulticast mode [ 431.695171][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12745'. [ 431.704419][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12745'. [ 431.740157][T12568] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.748970][T12568] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.757856][T12568] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.766802][T12568] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.818831][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12745'. [ 431.828024][T12568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12745'. [ 432.655045][T12644] tipc: Enabling of bearer rejected, failed to enable media [ 432.883609][T12665] netlink: 'syz.9.12781': attribute type 1 has an invalid length. [ 432.925404][T12665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.936577][T12708] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12781'. [ 432.956032][T12708] bond0 (unregistering): Released all slaves [ 433.258423][T12771] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 433.276694][T12771] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 433.538241][T12792] netlink: 'syz.6.12803': attribute type 21 has an invalid length. [ 433.546951][T12792] netlink: 156 bytes leftover after parsing attributes in process `syz.6.12803'. [ 433.607760][T12796] netlink: 'syz.6.12805': attribute type 1 has an invalid length. [ 433.648280][T12796] netlink: 'syz.6.12805': attribute type 1 has an invalid length. [ 433.806235][T12843] cgroup: fork rejected by pids controller in /syz6 [ 434.826157][T13279] loop9: detected capacity change from 0 to 128 [ 434.887965][T13279] syz.9.12831: attempt to access beyond end of device [ 434.887965][T13279] loop9: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 435.449264][T13341] 0ªX¹¦D: entered promiscuous mode [ 435.470542][T13341] 0ªî{X¹¦: renamed from 30ªX¹¦D [ 435.482905][T13341] 0ªî{X¹¦: left promiscuous mode [ 435.488016][T13341] 0ªî{X¹¦: entered allmulticast mode [ 435.508023][T13341] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 435.633208][ T29] kauditd_printk_skb: 1304 callbacks suppressed [ 435.633223][ T29] audit: type=1400 audit(1751201618.382:30787): avc: denied { prog_load } for pid=13350 comm="syz.5.12860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 435.659215][ T29] audit: type=1400 audit(1751201618.382:30788): avc: denied { bpf } for pid=13350 comm="syz.5.12860" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.680156][ T29] audit: type=1400 audit(1751201618.382:30789): avc: denied { perfmon } for pid=13350 comm="syz.5.12860" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.715346][ T29] audit: type=1400 audit(1751201618.392:30790): avc: denied { prog_run } for pid=13351 comm="syz.7.12859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 435.734844][ T29] audit: type=1400 audit(1751201618.434:30791): avc: denied { allowed } for pid=13351 comm="syz.7.12859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 435.754544][ T29] audit: type=1400 audit(1751201618.455:30792): avc: denied { perfmon } for pid=13350 comm="syz.5.12860" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.775919][ T29] audit: type=1400 audit(1751201618.455:30793): avc: denied { bpf } for pid=13350 comm="syz.5.12860" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 435.796846][ T29] audit: type=1400 audit(1751201618.466:30794): avc: denied { create } for pid=13350 comm="syz.5.12860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 435.816893][ T29] audit: type=1400 audit(1751201618.466:30795): avc: denied { setopt } for pid=13350 comm="syz.5.12860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 435.837042][ T29] audit: type=1400 audit(1751201618.466:30796): avc: denied { create } for pid=13350 comm="syz.5.12860" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 436.172731][T13390] netlink: 'syz.5.12876': attribute type 1 has an invalid length. [ 436.187125][T13386] __nla_validate_parse: 4 callbacks suppressed [ 436.187143][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12874'. [ 436.195267][T13390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.222475][T13390] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12876'. [ 436.242269][T13390] bond0 (unregistering): Released all slaves [ 436.441869][T13469] netlink: 271 bytes leftover after parsing attributes in process `syz.6.12890'. [ 436.764754][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 437.263714][T13528] pim6reg1: entered allmulticast mode [ 437.473521][T13548] pim6reg1: entered promiscuous mode [ 437.478972][T13548] pim6reg1: entered allmulticast mode [ 437.508187][T13554] netlink: 'syz.6.12913': attribute type 1 has an invalid length. [ 437.532430][T13554] 8021q: adding VLAN 0 to HW filter on device bond4 [ 437.550487][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12913'. [ 437.561833][T13554] bond4 (unregistering): Released all slaves [ 437.973880][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12923'. [ 438.000873][T13646] IPVS: Error joining to the multicast group [ 438.717333][T13705] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12949'. [ 438.730605][T13700] SELinux: ebitmap: truncated map [ 438.737088][T13700] SELinux: failed to load policy [ 439.123629][T13754] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12961'. [ 439.775582][T13821] netlink: 'syz.5.12986': attribute type 1 has an invalid length. [ 439.783529][T13821] netlink: 'syz.5.12986': attribute type 4 has an invalid length. [ 439.791414][T13821] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12986'. [ 439.892023][T13836] program syz.5.12992 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 439.901720][T13836] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 440.132902][T13853] serio: Serial port ptm0 [ 440.268531][T13869] loop9: detected capacity change from 0 to 8192 [ 440.287417][T13869] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 440.412250][ T29] kauditd_printk_skb: 1173 callbacks suppressed [ 440.412267][ T29] audit: type=1400 audit(1751201623.400:31970): avc: denied { map_create } for pid=13885 comm="syz.5.13013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 440.441322][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 440.461326][ T29] audit: type=1400 audit(1751201623.411:31971): avc: denied { map_create } for pid=13887 comm="syz.6.13014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 440.480860][ T29] audit: type=1400 audit(1751201623.411:31972): avc: denied { bpf } for pid=13887 comm="syz.6.13014" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.502756][ T29] audit: type=1400 audit(1751201623.411:31973): avc: denied { map_read map_write } for pid=13887 comm="syz.6.13014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 440.523037][ T29] audit: type=1400 audit(1751201623.411:31974): avc: denied { prog_load } for pid=13887 comm="syz.6.13014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 440.543044][ T29] audit: type=1400 audit(1751201623.411:31975): avc: denied { perfmon } for pid=13887 comm="syz.6.13014" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 440.567376][ T29] audit: type=1400 audit(1751201623.411:31976): avc: denied { prog_run } for pid=13887 comm="syz.6.13014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 440.586771][ T29] audit: type=1400 audit(1751201623.432:31977): avc: denied { read write } for pid=13887 comm="syz.6.13014" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 440.612105][ T29] audit: type=1400 audit(1751201623.432:31978): avc: denied { read write open } for pid=13887 comm="syz.6.13014" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 440.637942][ T29] audit: type=1400 audit(1751201623.432:31979): avc: denied { prog_load } for pid=13884 comm="syz.7.13012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 440.874797][T13912] netlink: 'syz.7.13022': attribute type 21 has an invalid length. [ 440.882876][T13912] IPv6: NLM_F_CREATE should be specified when creating new route [ 441.502864][T13961] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 441.583905][T13967] netem: incorrect ge model size [ 441.589062][T13967] netem: change failed [ 441.658839][T13969] smc: net device bond0 applied user defined pnetid SYZ2 [ 441.666975][T13969] smc: ib device syz2 ibport 1 applied user defined pnetid SYZ2 [ 441.687154][T13969] smc: net device bond0 erased user defined pnetid SYZ2 [ 441.694978][T13969] smc: ib device syz2 ibport 1 erased user defined pnetid SYZ2 [ 442.346458][T14012] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13059'. [ 442.355565][T14012] netlink: 'syz.9.13059': attribute type 15 has an invalid length. [ 442.363526][T14012] netlink: 'syz.9.13059': attribute type 18 has an invalid length. [ 442.390549][T14012] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.399363][T14012] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.408135][T14012] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.417076][T14012] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 442.439663][T14012] vxlan0: entered promiscuous mode [ 442.984142][T14046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.002875][T14046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.256079][T14076] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13091'. [ 443.743598][T14110] netlink: 271 bytes leftover after parsing attributes in process `syz.9.13105'. [ 443.768452][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13104'. [ 443.777582][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13104'. [ 443.877660][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13108'. [ 444.135716][T14137] netlink: 'syz.6.13116': attribute type 1 has an invalid length. [ 444.143721][T14137] netlink: 224 bytes leftover after parsing attributes in process `syz.6.13116'. [ 444.266595][T14157] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13120'. [ 444.604000][T14187] netem: change failed [ 444.880022][T14209] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 445.175864][ T29] kauditd_printk_skb: 1045 callbacks suppressed [ 445.175882][ T29] audit: type=1400 audit(1751201628.397:33025): avc: denied { prog_run } for pid=14237 comm="syz.7.13152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 445.241599][ T29] audit: type=1400 audit(1751201628.450:33026): avc: denied { allowed } for pid=14236 comm="syz.9.13151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 445.261392][ T29] audit: type=1400 audit(1751201628.460:33027): avc: denied { create } for pid=14236 comm="syz.9.13151" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 445.282920][ T29] audit: type=1400 audit(1751201628.460:33028): avc: denied { map } for pid=14236 comm="syz.9.13151" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 445.307572][ T29] audit: type=1400 audit(1751201628.460:33029): avc: denied { read write } for pid=14236 comm="syz.9.13151" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114321 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 445.332754][ T29] audit: type=1400 audit(1751201628.471:33030): avc: denied { bpf } for pid=14232 comm="syz.1.13149" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 445.358778][T14234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.373738][T14234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.396968][ T29] audit: type=1400 audit(1751201628.481:33031): avc: denied { perfmon } for pid=14232 comm="syz.1.13149" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 445.418348][ T29] audit: type=1400 audit(1751201628.586:33032): avc: denied { prog_load } for pid=14236 comm="syz.9.13151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 445.437848][ T29] audit: type=1400 audit(1751201628.586:33033): avc: denied { bpf } for pid=14236 comm="syz.9.13151" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 445.458869][ T29] audit: type=1400 audit(1751201628.586:33034): avc: denied { perfmon } for pid=14236 comm="syz.9.13151" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 445.856647][T14265] netlink: 96 bytes leftover after parsing attributes in process `syz.7.13163'. [ 446.702381][T14363] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13189'. [ 447.169082][T14395] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14395 comm=syz.1.13202 [ 447.221639][T14398] sch_tbf: burst 0 is lower than device lo mtu (39799) ! [ 447.237536][T14400] __nla_validate_parse: 1 callbacks suppressed [ 447.237578][T14400] netlink: 40 bytes leftover after parsing attributes in process `syz.9.13204'. [ 447.371492][T14410] syzkaller1: entered promiscuous mode [ 447.377256][T14410] syzkaller1: entered allmulticast mode [ 447.652937][T14436] netlink: 'syz.6.13219': attribute type 3 has an invalid length. [ 447.962904][T14457] Invalid ELF header magic: != ELF [ 448.641635][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.649145][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.657551][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.674442][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.682529][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.690080][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.697858][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.705339][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.713715][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.721211][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.728743][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.736253][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.744467][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.759120][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.767333][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.774762][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.782304][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.789746][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.797923][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.805487][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.812991][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.820573][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.828678][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.836157][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.843695][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.851118][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.859331][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.866769][ T3396] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 448.882791][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13246'. [ 448.892715][ T3396] hid-generic 0000:0000:0000.0016: hidraw0: HID v54.3f Device [syz0] on syz0 [ 449.062558][T14532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13250'. [ 449.071638][T14532] netlink: 'syz.5.13250': attribute type 15 has an invalid length. [ 449.079566][T14532] netlink: 'syz.5.13250': attribute type 18 has an invalid length. [ 449.094969][T14532] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.103820][T14532] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.113218][T14532] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.122059][T14532] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.141343][T14532] vxlan0: entered promiscuous mode [ 449.195792][T14536] netlink: 28 bytes leftover after parsing attributes in process `syz.9.13253'. [ 449.317536][T14545] hub 6-0:1.0: USB hub found [ 449.330306][T14545] hub 6-0:1.0: 8 ports detected [ 449.505319][T14564] netlink: 'syz.9.13264': attribute type 1 has an invalid length. [ 449.597604][T14566] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13267'. [ 449.633021][T14566] netlink: zone id is out of range [ 449.653130][T14566] netlink: zone id is out of range [ 449.658297][T14566] netlink: zone id is out of range [ 449.667025][T14566] netlink: zone id is out of range [ 449.690137][T14566] netlink: del zone limit has 8 unknown bytes [ 449.957125][ T29] kauditd_printk_skb: 1017 callbacks suppressed [ 449.957142][ T29] audit: type=1400 audit(1751201633.416:34052): avc: denied { open } for pid=14586 comm="syz.9.13277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 450.015794][ T29] audit: type=1400 audit(1751201633.426:34053): avc: denied { perfmon } for pid=14586 comm="syz.9.13277" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 450.037828][ T29] audit: type=1400 audit(1751201633.426:34054): avc: denied { kernel } for pid=14586 comm="syz.9.13277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 450.057545][ T29] audit: type=1400 audit(1751201633.479:34055): avc: denied { perfmon } for pid=14586 comm="syz.9.13277" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 450.079525][ T29] audit: type=1400 audit(1751201633.479:34056): avc: denied { read } for pid=14596 comm="syz.5.13280" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.103567][ T29] audit: type=1400 audit(1751201633.479:34057): avc: denied { read open } for pid=14596 comm="syz.5.13280" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 450.127848][ T29] audit: type=1400 audit(1751201633.479:34058): avc: denied { allowed } for pid=14596 comm="syz.5.13280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 450.148286][ T29] audit: type=1400 audit(1751201633.489:34059): avc: denied { create } for pid=14596 comm="syz.5.13280" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.170007][ T29] audit: type=1400 audit(1751201633.489:34060): avc: denied { map } for pid=14596 comm="syz.5.13280" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.195330][ T29] audit: type=1400 audit(1751201633.489:34061): avc: denied { read write } for pid=14596 comm="syz.5.13280" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=114834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 450.314564][T14608] netlink: 566 bytes leftover after parsing attributes in process `syz.1.13282'. [ 450.564146][T14626] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14626 comm=syz.1.13289 [ 450.689940][T14643] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13296'. [ 450.711699][T14643] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 450.820460][T14659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13300'. [ 450.934584][T14670] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13305'. [ 450.943956][T14670] netem: unknown loss type 13 [ 450.948793][T14670] netem: change failed [ 451.225087][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13314'. [ 451.234187][T14695] netlink: 'syz.7.13314': attribute type 15 has an invalid length. [ 451.242139][T14695] netlink: 'syz.7.13314': attribute type 18 has an invalid length. [ 451.327750][T14689] lo speed is unknown, defaulting to 1000 [ 451.445815][T14689] chnl_net:caif_netlink_parms(): no params data found [ 451.517659][T14689] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.524953][T14689] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.532948][T14689] bridge_slave_0: entered allmulticast mode [ 451.539462][T14689] bridge_slave_0: entered promiscuous mode [ 451.547783][T14689] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.555118][T14689] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.563106][T14689] bridge_slave_1: entered allmulticast mode [ 451.569732][T14689] bridge_slave_1: entered promiscuous mode [ 451.594792][T14689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.607155][T14689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.636207][T14689] team0: Port device team_slave_0 added [ 451.646215][T14689] team0: Port device team_slave_1 added [ 451.682339][T14689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.689401][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.716334][T14689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.730843][T14689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.737836][T14689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.764901][T14689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.805519][T14939] netlink: 'syz.6.13320': attribute type 1 has an invalid length. [ 451.813553][T14939] netlink: 'syz.6.13320': attribute type 4 has an invalid length. [ 451.857609][T14689] hsr_slave_0: entered promiscuous mode [ 451.863960][T14689] hsr_slave_1: entered promiscuous mode [ 451.869966][T14689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 451.878556][T14689] Cannot create hsr debugfs directory [ 452.031075][ T6549] bridge_slave_1: left allmulticast mode [ 452.036855][ T6549] bridge_slave_1: left promiscuous mode [ 452.042593][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.064120][ T6549] bridge_slave_0: left allmulticast mode [ 452.069869][ T6549] bridge_slave_0: left promiscuous mode [ 452.075670][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.085608][ T6549] bridge_slave_1: left allmulticast mode [ 452.091524][ T6549] bridge_slave_1: left promiscuous mode [ 452.097400][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.107942][ T6549] bridge_slave_0: left promiscuous mode [ 452.113740][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.188043][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.199667][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.208936][ T6549] bond0 (unregistering): Released all slaves [ 452.274575][ T6549] bond0 (unregistering): (slave 0@ÿ): Releasing backup interface [ 452.286136][ T6549] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 452.295648][ T6549] bond0 (unregistering): Released all slaves [ 452.307951][ T6549] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 452.316372][ T6549] batadv0: left promiscuous mode [ 452.324746][ T6549] bond1 (unregistering): Released all slaves [ 452.448651][ T6549] batadv_slave_0: left promiscuous mode [ 452.463283][ T6549] hsr_slave_0: left promiscuous mode [ 452.471249][ T6549] hsr_slave_1: left promiscuous mode [ 452.480153][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 452.506479][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 452.524948][ T6549] hsr_slave_0: left promiscuous mode [ 452.543279][ T6549] hsr_slave_1: left promiscuous mode [ 452.568418][T15091] 9p: Unknown access argument Œ: -22 [ 452.609718][ T6549] team0 (unregistering): Port device team_slave_1 removed [ 452.624719][ T6549] team0 (unregistering): Port device team_slave_0 removed [ 452.766770][ T6549] team0 (unregistering): Port device team_slave_1 removed [ 452.795503][ T6549] team0 (unregistering): Port device team_slave_0 removed [ 453.114764][T14689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 453.125822][T14689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 453.136381][T14689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 453.165123][T14689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 453.205825][T15178] __nla_validate_parse: 1 callbacks suppressed [ 453.205846][T15178] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13336'. [ 453.221103][T15178] netlink: 'syz.6.13336': attribute type 15 has an invalid length. [ 453.229143][T15178] netlink: 'syz.6.13336': attribute type 18 has an invalid length. [ 453.461904][T14689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.505267][T14689] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.554596][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.561707][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.602684][ T7659] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.609830][ T7659] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.843214][ T23] page_pool_release_retry() stalled pool shutdown: id 231, 1 inflight 60 sec [ 454.075124][T14689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.717429][T14689] veth0_vlan: entered promiscuous mode [ 454.728371][ T29] kauditd_printk_skb: 672 callbacks suppressed [ 454.728388][ T29] audit: type=1400 audit(1751201638.434:34734): avc: denied { create } for pid=15316 comm="syz.6.13364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.750816][T14689] veth1_vlan: entered promiscuous mode [ 454.802402][ T29] audit: type=1400 audit(1751201638.465:34735): avc: denied { map_create } for pid=15316 comm="syz.6.13364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.821988][ T29] audit: type=1400 audit(1751201638.465:34736): avc: denied { map_read map_write } for pid=15316 comm="syz.6.13364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.831623][T14689] veth0_macvtap: entered promiscuous mode [ 454.842193][ T29] audit: type=1400 audit(1751201638.476:34737): avc: denied { prog_load } for pid=15316 comm="syz.6.13364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.867304][ T29] audit: type=1400 audit(1751201638.476:34738): avc: denied { bpf } for pid=15316 comm="syz.6.13364" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.888232][ T29] audit: type=1400 audit(1751201638.476:34739): avc: denied { prog_load } for pid=15316 comm="syz.6.13364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.907854][ T29] audit: type=1400 audit(1751201638.476:34740): avc: denied { bpf } for pid=15316 comm="syz.6.13364" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.914495][T14689] veth1_macvtap: entered promiscuous mode [ 454.928726][ T29] audit: type=1400 audit(1751201638.476:34741): avc: denied { perfmon } for pid=15316 comm="syz.6.13364" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 454.955603][ T29] audit: type=1400 audit(1751201638.476:34742): avc: denied { prog_run } for pid=15316 comm="syz.6.13364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 454.975057][ T29] audit: type=1400 audit(1751201638.486:34743): avc: denied { write } for pid=15316 comm="syz.6.13364" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 454.977109][T15323] atomic_op ffff88810e226d28 conn xmit_atomic 0000000000000000 [ 455.048879][T14689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.084300][T14689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.132151][T14689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.140949][T14689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.149932][T14689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.158697][T14689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.335440][T15348] ALSA: seq fatal error: cannot create timer (-22) [ 455.378496][T15350] netlink: 'syz.7.13376': attribute type 1 has an invalid length. [ 456.303713][T15405] netlink: 36 bytes leftover after parsing attributes in process `syz.5.13399'. [ 456.310227][T15464] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.338982][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.339817][T15405] netlink: 'syz.5.13399': attribute type 4 has an invalid length. [ 456.392382][ T23] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 456.417485][T15468] pim6reg: entered allmulticast mode [ 456.476264][T15468] pim6reg: left allmulticast mode [ 456.741374][T15501] loop4: detected capacity change from 0 to 512 [ 456.765033][T15501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 456.803961][T15501] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13424: bg 0: block 248: padding at end of block bitmap is not set [ 456.851290][T15501] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.13424: Failed to acquire dquot type 1 [ 456.899096][T15501] EXT4-fs (loop4): 1 truncate cleaned up [ 456.915275][T15501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 456.935609][T15501] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz.4.13424: deleted inode referenced: 12 [ 456.970663][T14689] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.206201][T15555] loop4: detected capacity change from 0 to 164 [ 457.224194][T15555] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 457.718951][T15602] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 457.936908][T15618] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 458.156486][T15640] loop4: detected capacity change from 0 to 128 [ 458.229505][T15646] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13475'. [ 458.238992][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13475'. [ 458.263253][T15646] wireguard0: entered promiscuous mode [ 458.268842][T15646] wireguard0: entered allmulticast mode [ 458.742548][T15703] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 458.852539][T15715] 9pnet_fd: Insufficient options for proto=fd [ 459.057799][T15739] netlink: 'syz.9.13520': attribute type 3 has an invalid length. [ 459.466623][T15766] loop4: detected capacity change from 0 to 512 [ 459.484459][T15766] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 459.492809][T15766] EXT4-fs (loop4): orphan cleanup on readonly fs [ 459.501910][T15766] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.13522: corrupted inode contents [ 459.520232][T15766] EXT4-fs (loop4): Remounting filesystem read-only [ 459.527932][ T29] kauditd_printk_skb: 1362 callbacks suppressed [ 459.527953][ T29] audit: type=1400 audit(1751201643.463:36104): avc: denied { sys_module } for pid=15769 comm="syz.7.13524" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 459.539769][T15766] EXT4-fs (loop4): 1 truncate cleaned up [ 459.556250][ T29] audit: type=1400 audit(1751201643.463:36105): avc: denied { module_request } for pid=15769 comm="syz.7.13524" kmod="pim6reg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 459.589185][ T7238] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 459.599933][ T7238] Quota error (device loop4): write_blk: dquota write failed [ 459.607392][ T7238] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 459.617536][ T7238] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 459.628145][ T7238] Quota error (device loop4): write_blk: dquota write failed [ 459.635569][ T7238] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 459.645610][ T7238] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 459.655813][ T7238] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 459.661973][ T29] audit: type=1400 audit(1751201643.610:36106): avc: denied { map_create } for pid=15780 comm="syz.7.13526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 459.666657][ T7238] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 459.684027][ T29] audit: type=1400 audit(1751201643.610:36107): avc: denied { bpf } for pid=15780 comm="syz.7.13526" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 459.715355][T15766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.754030][T14689] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.887326][T15803] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13531'. [ 460.450663][T15848] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.13550'. [ 460.480253][T15848] netlink: zone id is out of range [ 460.491739][T15848] netlink: zone id is out of range [ 460.507047][T15848] netlink: zone id is out of range [ 460.517221][T15848] netlink: zone id is out of range [ 460.532103][T15848] netlink: del zone limit has 8 unknown bytes [ 461.491227][T15939] ref_ctr_offset mismatch. inode: 0x135b offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 461.823589][T15984] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13591'. [ 461.963937][T15994] netlink: 'syz.6.13594': attribute type 39 has an invalid length. [ 461.975758][T15942] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13584'. [ 461.991739][T15942] netlink: 'syz.4.13584': attribute type 4 has an invalid length. [ 462.389184][T16021] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.390182][T16023] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13601'. [ 462.774573][T16049] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 462.899745][T16059] ALSA: seq fatal error: cannot create timer (-22) [ 463.076033][T16068] ref_ctr_offset mismatch. inode: 0x1269 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 463.198151][T16072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13622'. [ 463.457286][T16094] serio: Serial port ptm0 [ 463.703582][T16127] netlink: 'syz.5.13639': attribute type 39 has an invalid length. [ 463.883545][T16100] netlink: 36 bytes leftover after parsing attributes in process `syz.9.13633'. [ 463.920859][T16100] netlink: 'syz.9.13633': attribute type 4 has an invalid length. [ 464.037874][T16166] loop4: detected capacity change from 0 to 512 [ 464.051243][T16166] EXT4-fs: Ignoring removed nomblk_io_submit option [ 464.058810][T16166] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 464.071818][T16166] EXT4-fs (loop4): 1 truncate cleaned up [ 464.078099][T16166] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.102075][T16172] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 464.130709][T16172] EXT4-fs (loop4): Remounting filesystem read-only [ 464.140210][T14689] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.205137][T16179] loop4: detected capacity change from 0 to 2048 [ 464.229424][T16179] EXT4-fs: inline encryption not supported [ 464.235518][T16179] EXT4-fs: Ignoring removed i_version option [ 464.250222][T16179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.292203][ T29] kauditd_printk_skb: 1092 callbacks suppressed [ 464.292221][ T29] audit: type=1400 audit(1751201648.471:37200): avc: denied { read write } for pid=16178 comm="syz.4.13650" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 464.295998][T16179] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, [ 464.298646][ T29] audit: type=1400 audit(1751201648.471:37201): avc: denied { open } for pid=16178 comm="syz.4.13650" path="/57/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 464.321568][T16179] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 464.348072][ T29] audit: type=1400 audit(1751201648.481:37202): avc: denied { read write } for pid=16178 comm="syz.4.13650" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 464.384952][T16179] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 1 with error 28 [ 464.384986][T16179] EXT4-fs (loop4): This should not happen!! Data will be lost [ 464.384986][T16179] [ 464.397242][ T29] audit: type=1400 audit(1751201648.481:37203): avc: denied { open } for pid=16178 comm="syz.4.13650" path="/57/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 464.406986][T16179] EXT4-fs (loop4): Total free blocks count 0 [ 464.436273][T16179] EXT4-fs (loop4): Free/Dirty block details [ 464.442204][T16179] EXT4-fs (loop4): free_blocks=2415919104 [ 464.442406][ T29] audit: type=1400 audit(1751201648.544:37204): avc: denied { prog_load } for pid=16178 comm="syz.4.13650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 464.447974][T16179] EXT4-fs (loop4): dirty_blocks=32 [ 464.447993][T16179] EXT4-fs (loop4): Block reservation details [ 464.467307][ T29] audit: type=1400 audit(1751201648.544:37205): avc: denied { bpf } for pid=16178 comm="syz.4.13650" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 464.472444][T16179] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 464.478438][ T29] audit: type=1400 audit(1751201648.544:37206): avc: denied { perfmon } for pid=16178 comm="syz.4.13650" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 464.526517][ T29] audit: type=1400 audit(1751201648.544:37207): avc: denied { prog_run } for pid=16178 comm="syz.4.13650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 464.576301][ T29] audit: type=1400 audit(1751201648.754:37208): avc: denied { mounton } for pid=16201 comm="syz.7.13655" path="/3009/file0" dev="tmpfs" ino=15478 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 464.600244][ T29] audit: type=1400 audit(1751201648.754:37209): avc: denied { mount } for pid=16201 comm="syz.7.13655" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 464.618161][T16179] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 464.724515][T16214] SELinux: syz.6.13658 (16214) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 465.936552][T16281] netlink: 36 bytes leftover after parsing attributes in process `syz.7.13676'. [ 465.952720][T16281] netlink: 'syz.7.13676': attribute type 4 has an invalid length. [ 466.000367][T16360] netem: incorrect gi model size [ 466.005379][T16360] netem: change failed [ 466.366343][T16422] netlink: 'syz.9.13705': attribute type 10 has an invalid length. [ 466.396941][T16422] team0: Port device dummy0 added [ 466.414636][T16427] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 466.414636][T16427] The task syz.4.13703 (16427) triggered the difference, watch for misbehavior. [ 466.417478][T16422] netlink: 'syz.9.13705': attribute type 10 has an invalid length. [ 466.442672][T16422] team0: Port device dummy0 removed [ 466.451166][T16422] dummy0: entered promiscuous mode [ 466.458141][T16422] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 466.582126][T16442] geneve2: entered promiscuous mode [ 466.735427][T16461] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13719'. [ 466.750147][T16461] macvtap1: entered promiscuous mode [ 466.755653][T16461] erspan0: entered promiscuous mode [ 466.761213][T16461] macvtap1: entered allmulticast mode [ 466.766630][T16461] erspan0: entered allmulticast mode [ 466.776559][T16461] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13719'. [ 466.815151][T16467] netlink: 96 bytes leftover after parsing attributes in process `syz.6.13720'. [ 467.115506][T16501] binfmt_misc: register: failed to install interpreter file ./file0 [ 467.545463][T16578] netlink: 272 bytes leftover after parsing attributes in process `syz.6.13755'. [ 468.385038][T16637] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13781'. [ 468.608112][T16642] bridge0: port 3(syz_tun) entered blocking state [ 468.614710][T16642] bridge0: port 3(syz_tun) entered disabled state [ 468.665688][T16642] syz_tun: entered allmulticast mode [ 468.675272][T16642] syz_tun: entered promiscuous mode [ 468.682568][T16642] bridge0: port 3(syz_tun) entered blocking state [ 468.689084][T16642] bridge0: port 3(syz_tun) entered forwarding state [ 469.026219][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 469.078564][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 469.078580][ T29] audit: type=1400 audit(1751201653.499:37784): avc: denied { create } for pid=16678 comm="syz.5.13797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 469.106437][ T29] audit: type=1400 audit(1751201653.510:37785): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 469.196593][ T29] audit: type=1400 audit(1751201653.615:37786): avc: denied { map_create } for pid=16717 comm="syz.9.13811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 469.201245][T16718] netlink: 96 bytes leftover after parsing attributes in process `syz.9.13811'. [ 469.217243][ T29] audit: type=1400 audit(1751201653.615:37787): avc: denied { prog_load } for pid=16717 comm="syz.9.13811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 469.244686][ T29] audit: type=1400 audit(1751201653.615:37788): avc: denied { prog_load } for pid=16717 comm="syz.9.13811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 469.287027][ T29] audit: type=1400 audit(1751201653.709:37789): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 469.311523][ T29] audit: type=1400 audit(1751201653.709:37790): avc: denied { map_create } for pid=16719 comm="syz.9.13812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 469.331280][ T29] audit: type=1400 audit(1751201653.709:37791): avc: denied { map_create } for pid=16719 comm="syz.9.13812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 469.350791][ T29] audit: type=1400 audit(1751201653.709:37792): avc: denied { map_create } for pid=16719 comm="syz.9.13812" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 469.385558][ T29] audit: type=1400 audit(1751201653.741:37793): avc: denied { prog_load } for pid=16721 comm="syz.4.13813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 469.734515][T16748] SET target dimension over the limit! [ 469.838097][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 469.975161][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.6.13833'. [ 469.984422][T16771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13833'. [ 471.201403][T16869] netem: incorrect ge model size [ 471.206405][T16869] netem: change failed [ 471.374592][T16885] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 471.632864][T16930] netlink: 'syz.7.13886': attribute type 4 has an invalid length. [ 471.933432][T16964] binfmt_misc: register: failed to install interpreter file ./file2 [ 472.107518][T16979] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13906'. [ 472.568529][T17019] ip6tnl1: entered promiscuous mode [ 472.573924][T17019] ip6tnl1: entered allmulticast mode [ 472.586670][T17023] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13925'. [ 472.737171][T17032] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 16 [ 472.881740][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13934'. [ 472.890812][T17055] netlink: 'syz.6.13934': attribute type 15 has an invalid length. [ 473.293511][T17087] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13947'. [ 473.362057][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13948'. [ 473.371133][T17090] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13948'. [ 473.410321][T17092] netlink: 112 bytes leftover after parsing attributes in process `syz.4.13949'. [ 473.648416][T17115] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13956'. [ 473.851399][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 473.851417][ T29] audit: type=1400 audit(1751201658.507:38199): avc: denied { map_create } for pid=17139 comm="syz.7.13966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 473.908642][ T29] audit: type=1400 audit(1751201658.507:38200): avc: denied { map_create } for pid=17139 comm="syz.7.13966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 473.928163][ T29] audit: type=1400 audit(1751201658.507:38201): avc: denied { prog_load } for pid=17139 comm="syz.7.13966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 473.947711][ T29] audit: type=1400 audit(1751201658.507:38202): avc: denied { prog_load } for pid=17139 comm="syz.7.13966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 473.967565][ T29] audit: type=1400 audit(1751201658.518:38203): avc: denied { open } for pid=17139 comm="syz.7.13966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 473.987255][ T29] audit: type=1400 audit(1751201658.549:38204): avc: denied { map_create } for pid=17140 comm="syz.5.13967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.006767][ T29] audit: type=1400 audit(1751201658.549:38205): avc: denied { prog_load } for pid=17140 comm="syz.5.13967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.006801][ T29] audit: type=1400 audit(1751201658.549:38206): avc: denied { open } for pid=17140 comm="syz.5.13967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 474.006882][ T29] audit: type=1400 audit(1751201658.549:38207): avc: denied { mounton } for pid=17140 comm="syz.5.13967" path="/378" dev="tmpfs" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 474.006913][ T29] audit: type=1400 audit(1751201658.570:38208): avc: denied { prog_load } for pid=17142 comm="syz.7.13968" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 474.367130][T17179] netlink: 20 bytes leftover after parsing attributes in process `syz.9.13982'. [ 475.766658][T17311] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14024'. [ 476.413434][T17336] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14037'. [ 476.701658][T17353] netlink: 51 bytes leftover after parsing attributes in process `syz.4.14042'. [ 476.881594][T17361] netlink: 'syz.4.14047': attribute type 10 has an invalid length. [ 476.900318][T17363] No such timeout policy "syz1" [ 476.922895][T17361] veth0_vlan: entered allmulticast mode [ 476.971274][T17361] veth0_vlan: left promiscuous mode [ 476.995174][T17365] netlink: 'syz.6.14044': attribute type 10 has an invalid length. [ 477.008547][T17361] veth0_vlan: entered promiscuous mode [ 477.031312][T17361] team0: Device veth0_vlan failed to register rx_handler [ 477.111883][T17365] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 477.380619][T17423] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14057'. [ 478.663191][ T29] kauditd_printk_skb: 261 callbacks suppressed [ 478.663210][ T29] audit: type=1400 audit(1751201663.557:38470): avc: denied { open } for pid=17476 comm="syz.4.14074" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 478.723016][ T29] audit: type=1400 audit(1751201663.599:38471): avc: denied { mounton } for pid=17476 comm="syz.4.14074" path="/147/file0" dev="tmpfs" ino=776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 478.745938][ T29] audit: type=1400 audit(1751201663.610:38472): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 478.827939][ T29] audit: type=1400 audit(1751201663.652:38473): avc: denied { map_create } for pid=17480 comm="syz.6.14076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 478.847512][ T29] audit: type=1400 audit(1751201663.673:38474): avc: denied { prog_load } for pid=17480 comm="syz.6.14076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 478.877361][ T29] audit: type=1400 audit(1751201663.777:38475): avc: denied { prog_load } for pid=17483 comm="syz.4.14077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 478.950152][ T29] audit: type=1400 audit(1751201663.861:38476): avc: denied { prog_load } for pid=17495 comm="syz.9.14079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 479.037412][ T29] audit: type=1400 audit(1751201663.861:38477): avc: denied { prog_load } for pid=17483 comm="syz.4.14077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 479.056980][ T29] audit: type=1400 audit(1751201663.893:38478): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 479.081571][ T29] audit: type=1400 audit(1751201663.914:38479): avc: denied { prog_load } for pid=17495 comm="syz.9.14079" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 479.387742][T17523] __nla_validate_parse: 1 callbacks suppressed [ 479.387764][T17523] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14088'. [ 479.654690][T17552] netlink: 25 bytes leftover after parsing attributes in process `syz.7.14098'. [ 479.664116][T17552] 0ªî{X¹¦: entered promiscuous mode [ 479.669511][T17552] 0ªî{X¹¦: left allmulticast mode [ 479.682597][T17552] netlink: 5 bytes leftover after parsing attributes in process `syz.7.14098'. [ 479.691861][T17552] 0ªX¹¦Dö»: renamed from 30ªî{X¹¦ [ 479.700708][T17552] 0ªX¹¦Dö»: left promiscuous mode [ 479.706079][T17552] 0ªX¹¦Dö»: entered allmulticast mode [ 479.996482][T17581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17581 comm=syz.6.14110 [ 480.013861][T17581] netlink: 'syz.6.14110': attribute type 1 has an invalid length. [ 480.034419][T17584] SET target dimension over the limit! [ 480.040267][T17581] 8021q: adding VLAN 0 to HW filter on device bond5 [ 480.065000][T17581] bond5: (slave ip6gretap1): making interface the new active one [ 480.073932][T17581] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link [ 480.453509][T17655] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 480.514081][T17657] Falling back ldisc for ttyS3. [ 480.575772][T17678] ALSA: seq fatal error: cannot create timer (-19) [ 480.795698][T17710] SET target dimension over the limit! [ 481.058677][T17744] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14168'. [ 481.075268][T17746] ALSA: seq fatal error: cannot create timer (-19) [ 481.099112][T17744] macvtap2: entered promiscuous mode [ 481.104684][T17744] macvtap2: entered allmulticast mode [ 481.643967][T17810] IPv6: Can't replace route, no match found [ 481.805538][T17834] netdevsim netdevsim5: Direct firmware load for ÿÿÿÿ failed with error -2 [ 482.037653][T17861] IPv6: Can't replace route, no match found [ 482.665002][T17939] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14238'. [ 483.270502][T17995] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 483.294406][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14268'. [ 483.303514][T18000] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14268'. [ 483.312600][T18000] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14268'. [ 483.336365][T18000] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14268'. [ 483.345493][T18000] netlink: 'syz.7.14268': attribute type 6 has an invalid length. [ 483.438993][ T29] kauditd_printk_skb: 613 callbacks suppressed [ 483.439011][ T29] audit: type=1400 audit(487.174:39093): avc: denied { open } for pid=18014 comm="syz.7.14275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 483.490103][ T29] audit: type=1400 audit(487.216:39094): avc: denied { open } for pid=18014 comm="syz.7.14275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 483.509315][ T29] audit: type=1400 audit(487.216:39095): avc: denied { create } for pid=18014 comm="syz.7.14275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 483.529478][ T29] audit: type=1400 audit(487.226:39096): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 483.546056][T18022] netlink: 'syz.6.14277': attribute type 1 has an invalid length. [ 483.553328][ T29] audit: type=1400 audit(487.226:39097): avc: denied { block_suspend } for pid=18016 comm="syz.5.14274" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 483.561365][T18022] netlink: 'syz.6.14277': attribute type 4 has an invalid length. [ 483.582386][ T29] audit: type=1400 audit(487.226:39098): avc: denied { block_suspend } for pid=18016 comm="syz.5.14274" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=0 [ 483.590207][T18022] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.14277'. [ 483.631219][ T29] audit: type=1400 audit(487.352:39099): avc: denied { allowed } for pid=18018 comm="syz.9.14273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 483.650593][ T29] audit: type=1400 audit(487.352:39100): avc: denied { map_create } for pid=18018 comm="syz.9.14273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 483.669935][ T29] audit: type=1400 audit(487.352:39101): avc: denied { prog_load } for pid=18018 comm="syz.9.14273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 483.723629][ T29] audit: type=1400 audit(487.436:39102): avc: denied { map_create } for pid=18021 comm="syz.4.14276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 484.253865][T18093] __nla_validate_parse: 1 callbacks suppressed [ 484.253881][T18093] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14306'. [ 484.702127][T18146] netlink: 96 bytes leftover after parsing attributes in process `syz.7.14331'. [ 485.173480][T18190] netdevsim netdevsim9: loading /lib/firmware/. failed with error -22 [ 485.181808][T18190] netdevsim netdevsim9: Direct firmware load for . failed with error -22 [ 485.320565][T18206] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14356'. [ 485.590841][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14369'. [ 485.878631][T18269] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14392'. [ 486.627315][T18333] netlink: 'syz.9.14408': attribute type 2 has an invalid length. [ 486.708205][T18350] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14414'. [ 486.720278][T18350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14414'. [ 487.614537][T18427] pim6reg1: entered promiscuous mode [ 487.620085][T18427] pim6reg1: entered allmulticast mode [ 487.738308][T18439] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14451'. [ 487.747495][T18439] netlink: 'syz.7.14451': attribute type 7 has an invalid length. [ 487.755392][T18439] netlink: 'syz.7.14451': attribute type 8 has an invalid length. [ 487.763320][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14451'. [ 488.219774][ T29] kauditd_printk_skb: 606 callbacks suppressed [ 488.219792][ T29] audit: type=1400 audit(492.192:39709): avc: denied { create } for pid=18480 comm="syz.4.14467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 488.282385][ T29] audit: type=1400 audit(492.223:39710): avc: denied { map_create } for pid=18480 comm="syz.4.14467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.301390][ T29] audit: type=1400 audit(492.223:39711): avc: denied { prog_load } for pid=18480 comm="syz.4.14467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.320338][ T29] audit: type=1400 audit(492.223:39712): avc: denied { prog_load } for pid=18480 comm="syz.4.14467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.339214][ T29] audit: type=1400 audit(492.223:39713): avc: denied { prog_load } for pid=18480 comm="syz.4.14467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.357993][ T29] audit: type=1400 audit(492.234:39714): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 488.381910][ T29] audit: type=1400 audit(492.234:39715): avc: denied { map_create } for pid=18483 comm="syz.7.14469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.400822][ T29] audit: type=1400 audit(492.255:39716): avc: denied { prog_load } for pid=18483 comm="syz.7.14469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.419681][ T29] audit: type=1400 audit(492.255:39717): avc: denied { map_create } for pid=18485 comm="syz.4.14472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 488.438615][ T29] audit: type=1400 audit(492.255:39718): avc: denied { prog_load } for pid=18483 comm="syz.7.14469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 489.094589][T18562] netlink: 108 bytes leftover after parsing attributes in process `syz.5.14503'. [ 489.127074][T18568] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14505'. [ 489.328257][T18589] serio: Serial port ptm0 [ 489.450119][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14519'. [ 489.459245][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14519'. [ 489.508381][T18604] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14519'. [ 489.517463][T18604] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14519'. [ 489.621950][T18612] netlink: 96 bytes leftover after parsing attributes in process `syz.9.14523'. [ 491.021039][T18748] sch_fq: defrate 2048 ignored. [ 491.178196][T18756] block device autoloading is deprecated and will be removed. [ 491.196358][T18756] syz.6.14580: attempt to access beyond end of device [ 491.196358][T18756] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 492.051657][T18843] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 492.999816][ T29] kauditd_printk_skb: 542 callbacks suppressed [ 492.999912][ T29] audit: type=1400 audit(497.200:40261): avc: denied { prog_load } for pid=18874 comm="syz.5.14632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 493.045188][ T29] audit: type=1400 audit(497.242:40262): avc: denied { read write } for pid=18878 comm="syz.4.14633" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 493.072521][ T29] audit: type=1400 audit(497.284:40263): avc: denied { create } for pid=18878 comm="syz.4.14633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 493.104999][ T29] audit: type=1400 audit(497.305:40264): avc: denied { create } for pid=18880 comm="syz.7.14634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 493.124915][ T29] audit: type=1400 audit(497.315:40265): avc: denied { create } for pid=18880 comm="syz.7.14634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 493.213637][ T29] audit: type=1400 audit(497.368:40266): avc: denied { create } for pid=18880 comm="syz.7.14634" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 493.253805][T18889] veth0_to_bond: entered allmulticast mode [ 493.269055][ T29] audit: type=1400 audit(497.441:40267): avc: denied { create } for pid=18888 comm="syz.7.14636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 493.289548][ T29] audit: type=1400 audit(497.441:40268): avc: denied { prog_load } for pid=18888 comm="syz.7.14636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 493.309010][ T29] audit: type=1400 audit(497.452:40269): avc: denied { create } for pid=18888 comm="syz.7.14636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 493.328404][ T29] audit: type=1400 audit(497.515:40270): avc: denied { prog_load } for pid=18891 comm="syz.5.14637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 494.116126][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14675'. [ 494.287685][T19008] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=5126 sclass=netlink_audit_socket pid=19008 comm=syz.5.14688 [ 494.378968][T19013] serio: Serial port ptm0 [ 494.432984][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14694'. [ 494.681238][T19056] serio: Serial port ptm0 [ 495.135812][T19121] netlink: 96 bytes leftover after parsing attributes in process `syz.9.14731'. [ 495.906094][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.025529][T19227] team0: Port device $Hÿ removed [ 496.031060][ T3396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.040887][T19227] dummy0: left allmulticast mode [ 496.046172][T19227] bridge0: port 1(dummy0) entered disabled state [ 496.062211][T19227] bond0: (slave veth0_to_bond): Releasing backup interface [ 496.162535][T19243] syzkaller0: entered promiscuous mode [ 496.168166][T19243] syzkaller0: entered allmulticast mode [ 496.178965][T19243] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 496.382667][ T3396] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 496.588596][T19301] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 496.979201][T19348] netlink: 96 bytes leftover after parsing attributes in process `syz.9.14829'. [ 497.372301][T19376] C: renamed from team_slave_0 [ 497.379077][T19376] netlink: 'syz.9.14841': attribute type 3 has an invalid length. [ 497.387125][T19376] netlink: 152 bytes leftover after parsing attributes in process `syz.9.14841'. [ 497.396363][T19376] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 497.456514][T19380] netlink: 96 bytes leftover after parsing attributes in process `syz.7.14843'. [ 497.769113][ T29] kauditd_printk_skb: 789 callbacks suppressed [ 497.769163][ T29] audit: type=1400 audit(502.218:41060): avc: denied { map_create } for pid=19408 comm="syz.9.14856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.811887][ T29] audit: type=1400 audit(502.228:41061): avc: denied { create } for pid=19412 comm="syz.7.14858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 497.831399][ T29] audit: type=1400 audit(502.228:41062): avc: denied { map_create } for pid=19412 comm="syz.7.14858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.850406][ T29] audit: type=1400 audit(502.228:41063): avc: denied { prog_load } for pid=19412 comm="syz.7.14858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.869201][ T29] audit: type=1400 audit(502.228:41064): avc: denied { prog_load } for pid=19412 comm="syz.7.14858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.888241][ T29] audit: type=1400 audit(502.249:41065): avc: denied { prog_load } for pid=19408 comm="syz.9.14856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.907076][ T29] audit: type=1400 audit(502.249:41066): avc: denied { prog_load } for pid=19408 comm="syz.9.14856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 497.948467][ T29] audit: type=1400 audit(502.260:41067): avc: denied { read write } for pid=31647 comm="syz-executor" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 497.971509][ T29] audit: type=1400 audit(502.344:41068): avc: denied { read write } for pid=31647 comm="syz-executor" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 497.994481][ T29] audit: type=1400 audit(502.386:41069): avc: denied { map_create } for pid=19418 comm="syz.7.14862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 498.520376][T19480] netlink: 96 bytes leftover after parsing attributes in process `syz.9.14890'. [ 498.810685][T19507] C: renamed from team_slave_0 (while UP) [ 498.818238][T19507] netlink: 'syz.5.14903': attribute type 1 has an invalid length. [ 498.826254][T19507] netlink: 152 bytes leftover after parsing attributes in process `syz.5.14903'. [ 498.835792][T19507] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 499.049860][T19523] bond_slave_1: mtu less than device minimum [ 499.175608][T19533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19533 comm=syz.5.14912 [ 499.188870][T19533] netlink: 'syz.5.14912': attribute type 1 has an invalid length. [ 499.213554][T19533] bond0: (slave bridge2): making interface the new active one [ 499.221430][T19533] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 499.958055][T19606] netlink: 'syz.6.14929': attribute type 4 has an invalid length. [ 500.634363][T19644] netlink: 136 bytes leftover after parsing attributes in process `syz.5.14947'. [ 500.736577][T19654] sit0: entered allmulticast mode [ 500.796237][T19654] sit0: entered promiscuous mode [ 500.877792][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14954'. [ 500.887099][T19662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14954'. [ 500.896302][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14954'. [ 500.905928][T19662] netlink: 28 bytes leftover after parsing attributes in process `syz.5.14954'. [ 500.915061][T19662] netlink: 'syz.5.14954': attribute type 6 has an invalid length. [ 501.634371][T19722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14977'. [ 501.657262][T19722] A link change request failed with some changes committed already. Interface sit2 may have been left with an inconsistent configuration, please check. [ 501.933859][T19757] netlink: 96 bytes leftover after parsing attributes in process `syz.6.14992'. [ 501.951215][T19753] netlink: 'syz.9.14990': attribute type 13 has an invalid length. [ 502.554169][ T29] kauditd_printk_skb: 537 callbacks suppressed [ 502.554263][ T29] audit: type=1400 audit(507.236:41607): avc: denied { map_create } for pid=19811 comm="syz.4.15018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.620491][ T29] audit: type=1400 audit(507.278:41608): avc: denied { prog_load } for pid=19811 comm="syz.4.15018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.639385][ T29] audit: type=1400 audit(507.278:41609): avc: denied { prog_load } for pid=19811 comm="syz.4.15018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 502.658231][ T29] audit: type=1326 audit(507.278:41610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.4.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8854e929 code=0x7ffc0000 [ 502.681359][ T29] audit: type=1326 audit(507.278:41611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.4.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fcd8854e929 code=0x7ffc0000 [ 502.704665][ T29] audit: type=1326 audit(507.278:41612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.4.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8854e929 code=0x7ffc0000 [ 502.728001][ T29] audit: type=1326 audit(507.278:41613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.4.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fcd8854e929 code=0x7ffc0000 [ 502.751685][ T29] audit: type=1326 audit(507.278:41614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19811 comm="syz.4.15018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd8854e929 code=0x7ffc0000 [ 502.774880][ T29] audit: type=1400 audit(507.289:41615): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 502.801691][ T29] audit: type=1400 audit(507.331:41616): avc: denied { read write } for pid=31647 comm="syz-executor" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 502.937462][T19840] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15027'. [ 503.827775][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15066'. [ 504.224106][T19976] xt_bpf: check failed: parse error [ 505.650280][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 506.233904][T20098] netlink: 'syz.4.15133': attribute type 13 has an invalid length. [ 506.394956][T20098] bridge0: port 3(syz_tun) entered disabled state [ 506.431288][T20098] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.438579][T20098] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.594805][T20098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.608572][T20098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.663856][T20098] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.672878][T20098] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.681909][T20098] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.690840][T20098] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.219289][T20171] netlink: 'syz.5.15161': attribute type 3 has an invalid length. [ 507.317560][ T29] kauditd_printk_skb: 471 callbacks suppressed [ 507.317578][ T29] audit: type=1400 audit(512.244:42088): avc: denied { prog_load } for pid=20190 comm="syz.7.15168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 507.321683][T20189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15166'. [ 507.323789][ T29] audit: type=1400 audit(512.244:42089): avc: denied { prog_load } for pid=20188 comm="syz.4.15166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 507.370520][ T29] audit: type=1400 audit(512.244:42090): avc: denied { prog_load } for pid=20188 comm="syz.4.15166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 507.399968][ T29] audit: type=1400 audit(512.297:42091): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 507.423913][ T29] audit: type=1400 audit(512.318:42092): avc: denied { create } for pid=20192 comm="syz.4.15170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 507.444258][ T29] audit: type=1400 audit(512.318:42093): avc: denied { create } for pid=20192 comm="syz.4.15170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 507.464457][ T29] audit: type=1400 audit(512.318:42094): avc: denied { map_create } for pid=20192 comm="syz.4.15170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 507.483493][ T29] audit: type=1400 audit(512.318:42095): avc: denied { prog_load } for pid=20192 comm="syz.4.15170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 507.502350][ T29] audit: type=1400 audit(512.318:42096): avc: denied { prog_load } for pid=20192 comm="syz.4.15170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 507.521177][ T29] audit: type=1400 audit(512.318:42097): avc: denied { map_create } for pid=20190 comm="syz.7.15168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 507.678334][T20218] pim6reg1: entered promiscuous mode [ 507.683827][T20218] pim6reg1: entered allmulticast mode [ 508.040648][T20256] netlink: 'syz.5.15191': attribute type 13 has an invalid length. [ 508.082158][T20256] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.089476][T20256] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.144143][T20256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 508.154714][T20256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.196896][T20256] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.205875][T20256] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.215016][T20256] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.224395][T20256] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.246063][T20256] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.255026][T20256] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.264014][T20256] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.272944][T20256] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.284923][T20263] netlink: 96 bytes leftover after parsing attributes in process `syz.7.15194'. [ 509.681169][T20378] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15244'. [ 509.766719][T20378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 509.817145][T20422] netlink: 'syz.9.15251': attribute type 4 has an invalid length. [ 509.881157][T20426] futex_wake_op: syz.7.15253 tries to shift op by -1; fix this program [ 510.635748][T20535] xt_hashlimit: max too large, truncated to 1048576 [ 510.862720][T20552] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15299'. [ 510.967621][T20568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15306'. [ 511.309383][T20596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15313'. [ 511.487788][T20609] netlink: 'syz.6.15317': attribute type 13 has an invalid length. [ 511.760707][T20632] xt_CT: No such helper "pptp" [ 511.938519][T20653] sch_tbf: burst 0 is lower than device veth1 mtu (1514) ! [ 512.094485][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 512.094502][ T29] audit: type=1400 audit(517.252:42715): avc: denied { map_create } for pid=20675 comm="syz.5.15342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.147897][ T29] audit: type=1400 audit(517.252:42716): avc: denied { read write } for pid=31647 comm="syz-executor" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 512.170846][ T29] audit: type=1400 audit(517.283:42717): avc: denied { prog_load } for pid=20675 comm="syz.5.15342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.189800][ T29] audit: type=1400 audit(517.283:42718): avc: denied { prog_load } for pid=20675 comm="syz.5.15342" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.208641][ T29] audit: type=1400 audit(517.304:42719): avc: denied { map_create } for pid=20678 comm="syz.9.15343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.227893][ T29] audit: type=1400 audit(517.304:42720): avc: denied { prog_load } for pid=20678 comm="syz.9.15343" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.248625][ T29] audit: type=1400 audit(517.315:42721): avc: denied { prog_load } for pid=20680 comm="syz.6.15344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.267439][ T29] audit: type=1400 audit(517.315:42722): avc: denied { map_create } for pid=20680 comm="syz.6.15344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.286305][ T29] audit: type=1400 audit(517.315:42723): avc: denied { prog_load } for pid=20680 comm="syz.6.15344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 512.305236][ T29] audit: type=1400 audit(517.315:42724): avc: denied { prog_load } for pid=20680 comm="syz.6.15344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 513.144039][T20821] Cannot find add_set index 0 as target [ 513.452953][T20859] netlink: 96 bytes leftover after parsing attributes in process `syz.5.15398'. [ 516.638722][T21221] bond0: (slave bridge0): Releasing backup interface [ 516.662750][T21221] team0: Port device bond0 removed [ 516.680340][T21221] bond2: (slave veth0_to_bond): Releasing backup interface [ 516.695813][T21221] bond0: (slave geneve1): Releasing backup interface [ 516.724834][T21221] bond5: (slave ip6gretap1): Releasing active interface [ 516.873377][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 516.873396][ T29] audit: type=1400 audit(522.270:43513): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 516.905140][ T29] audit: type=1400 audit(522.281:43514): avc: denied { prog_load } for pid=21245 comm="syz.6.15560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 516.939521][ T29] audit: type=1400 audit(522.344:43515): avc: denied { map_create } for pid=21253 comm="syz.4.15565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 516.994799][ T29] audit: type=1400 audit(522.365:43516): avc: denied { create } for pid=21254 comm="syz.7.15566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 517.014454][ T29] audit: type=1400 audit(522.365:43517): avc: denied { create } for pid=21254 comm="syz.7.15566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 517.033582][ T29] audit: type=1400 audit(522.375:43518): avc: denied { prog_load } for pid=21253 comm="syz.4.15565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 517.052446][ T29] audit: type=1400 audit(522.375:43519): avc: denied { create } for pid=21257 comm="syz.6.15564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 517.072764][ T29] audit: type=1400 audit(522.375:43520): avc: denied { create } for pid=21257 comm="syz.6.15564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 517.093161][ T29] audit: type=1400 audit(522.375:43521): avc: denied { prog_load } for pid=21257 comm="syz.6.15564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 517.112137][ T29] audit: type=1400 audit(522.386:43522): avc: denied { map_create } for pid=21256 comm="syz.5.15574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 517.219098][T21286] team0: Port device $Hÿ removed [ 517.226305][T21286] $Hÿ: (slave dummy0): Releasing backup interface [ 517.235900][T21286] dummy0: left promiscuous mode [ 517.390717][T21315] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15580'. [ 517.631506][T21354] syz.9.15593: attempt to access beyond end of device [ 517.631506][T21354] loop9: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 518.008529][T21401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15611'. [ 518.382692][T21426] netlink: 'syz.9.15617': attribute type 13 has an invalid length. [ 518.414694][T21426] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.423907][T21426] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.432925][T21426] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.442005][T21426] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.454277][T21426] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.463315][T21426] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.472315][T21426] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.481271][T21426] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.495121][T21431] netlink: 'syz.5.15620': attribute type 4 has an invalid length. [ 518.555843][T21435] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15621'. [ 518.573852][T21435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.287280][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15659'. [ 519.296412][T21547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15659'. [ 519.305687][T21547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15659'. [ 519.346028][T21547] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15659'. [ 519.355302][T21547] netlink: 'syz.4.15659': attribute type 6 has an invalid length. [ 519.725401][T21596] netlink: 96 bytes leftover after parsing attributes in process `syz.9.15687'. [ 519.999023][T21625] netlink: 96 bytes leftover after parsing attributes in process `syz.7.15700'. [ 520.187369][T21642] veth0_to_bond: entered allmulticast mode [ 520.274481][T21654] vlan0: entered allmulticast mode [ 520.279764][T21654] $Hÿ: entered allmulticast mode [ 520.336118][T21667] netlink: 96 bytes leftover after parsing attributes in process `syz.4.15718'. [ 520.638631][T21699] vlan2: entered allmulticast mode [ 520.643967][T21699] $Hÿ: entered allmulticast mode [ 521.059449][T21765] netlink: 'syz.4.15760': attribute type 1 has an invalid length. [ 521.090882][T21765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 521.120619][T21806] netlink: 'syz.5.15763': attribute type 4 has an invalid length. [ 521.158753][T21806] netlink: 'syz.5.15763': attribute type 4 has an invalid length. [ 521.540631][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15787'. [ 521.571195][T21862] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 521.592680][T21857] vlan2: entered allmulticast mode [ 521.594604][T21862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15787'. [ 521.598090][T21857] bond0: entered allmulticast mode [ 521.612215][T21857] bond_slave_0: entered allmulticast mode [ 521.618014][T21857] bond_slave_1: entered allmulticast mode [ 521.673317][ T29] kauditd_printk_skb: 799 callbacks suppressed [ 521.673336][ T29] audit: type=1400 audit(527.310:44322): avc: denied { execmem } for pid=21882 comm="syz.7.15792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 521.718458][ T29] audit: type=1400 audit(527.341:44323): avc: denied { map_create } for pid=21882 comm="syz.7.15792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 521.737359][ T29] audit: type=1400 audit(527.341:44324): avc: denied { prog_load } for pid=21882 comm="syz.7.15792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 521.756282][ T29] audit: type=1400 audit(527.352:44325): avc: denied { map_create } for pid=21879 comm="syz.6.15791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 521.794990][ T29] audit: type=1400 audit(527.383:44326): avc: denied { prog_load } for pid=21879 comm="syz.6.15791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 521.813968][ T29] audit: type=1400 audit(527.404:44327): avc: denied { prog_load } for pid=21885 comm="syz.5.15793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 521.832939][ T29] audit: type=1400 audit(527.404:44328): avc: denied { read write } for pid=21885 comm="syz.5.15793" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=0 [ 521.856981][ T29] audit: type=1400 audit(527.425:44329): avc: denied { create } for pid=21879 comm="syz.6.15791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 521.877592][ T29] audit: type=1400 audit(527.436:44330): avc: denied { read write } for pid=31647 comm="syz-executor" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 521.937664][ T29] audit: type=1400 audit(527.446:44331): avc: denied { prog_load } for pid=21887 comm="syz.7.15794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 522.194693][T21926] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 522.201293][T21926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 522.208886][T21926] vhci_hcd vhci_hcd.0: Device attached [ 522.240695][T21926] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 522.247281][T21926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 522.254849][T21926] vhci_hcd vhci_hcd.0: Device attached [ 522.299103][T21937] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 522.305745][T21937] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 522.313395][T21937] vhci_hcd vhci_hcd.0: Device attached [ 522.352494][T21926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 522.379020][T21926] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(7) [ 522.385644][T21926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.393384][T21926] vhci_hcd vhci_hcd.0: Device attached [ 522.419624][T21926] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 522.452935][ T3396] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 522.471113][T21926] vhci_hcd vhci_hcd.0: pdev(5) rhport(6) sockfd(15) [ 522.477772][T21926] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 522.485529][T21926] vhci_hcd vhci_hcd.0: Device attached [ 522.511735][T21932] vhci_hcd: connection closed [ 522.511998][ T5131] vhci_hcd: stop threads [ 522.512984][T21927] vhci_hcd: connection reset by peer [ 522.516709][ T5131] vhci_hcd: release socket [ 522.516727][ T5131] vhci_hcd: disconnect device [ 522.535915][T21944] vhci_hcd: connection closed [ 522.536006][T21939] vhci_hcd: connection closed [ 522.540892][T21957] vhci_hcd: connection closed [ 522.551771][ T5131] vhci_hcd: stop threads [ 522.560816][ T5131] vhci_hcd: release socket [ 522.565266][ T5131] vhci_hcd: disconnect device [ 522.595746][ T5131] vhci_hcd: stop threads [ 522.600122][ T5131] vhci_hcd: release socket [ 522.604576][ T5131] vhci_hcd: disconnect device [ 522.625909][ T5131] vhci_hcd: stop threads [ 522.630246][ T5131] vhci_hcd: release socket [ 522.634780][ T5131] vhci_hcd: disconnect device [ 522.675207][ T5131] vhci_hcd: stop threads [ 522.679553][ T5131] vhci_hcd: release socket [ 522.684047][ T5131] vhci_hcd: disconnect device [ 522.707132][T21981] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 524.039517][T22159] netlink: 'syz.7.15892': attribute type 4 has an invalid length. [ 524.065529][T22159] netlink: 'syz.7.15892': attribute type 4 has an invalid length. [ 524.348433][T22193] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22193 comm=syz.7.15912 [ 524.393837][T22198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22198 comm=syz.4.15914 [ 524.580580][T22218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22218 comm=syz.9.15926 [ 524.971315][T22268] netlink: 'syz.6.15944': attribute type 4 has an invalid length. [ 525.006134][T22268] netlink: 'syz.6.15944': attribute type 4 has an invalid length. [ 525.120271][T22281] netlink: 'syz.6.15948': attribute type 10 has an invalid length. [ 525.128472][T22281] __nla_validate_parse: 4 callbacks suppressed [ 525.128526][T22281] netlink: 40 bytes leftover after parsing attributes in process `syz.6.15948'. [ 525.572514][T22334] netlink: 'syz.4.15972': attribute type 4 has an invalid length. [ 525.644792][T22334] netlink: 'syz.4.15972': attribute type 4 has an invalid length. [ 525.776510][T22355] netlink: 'syz.9.15981': attribute type 10 has an invalid length. [ 525.784533][T22355] netlink: 40 bytes leftover after parsing attributes in process `syz.9.15981'. [ 526.258867][T22410] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 526.443880][ T29] kauditd_printk_skb: 754 callbacks suppressed [ 526.443899][ T29] audit: type=1400 audit(532.317:45086): avc: denied { map_create } for pid=22433 comm="syz.7.16008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 526.469303][ T29] audit: type=1400 audit(532.317:45087): avc: denied { prog_load } for pid=22433 comm="syz.7.16008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 526.494202][ T29] audit: type=1400 audit(532.328:45088): avc: denied { prog_load } for pid=22433 comm="syz.7.16008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 526.513074][ T29] audit: type=1400 audit(532.349:45089): avc: denied { prog_load } for pid=22433 comm="syz.7.16008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 526.532049][ T29] audit: type=1326 audit(532.349:45090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22433 comm="syz.7.16008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921a22e929 code=0x7ffc0000 [ 526.555495][ T29] audit: type=1326 audit(532.349:45091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22433 comm="syz.7.16008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921a22e929 code=0x7ffc0000 [ 526.578596][ T29] audit: type=1326 audit(532.349:45092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22433 comm="syz.7.16008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f921a22e929 code=0x7ffc0000 [ 526.601929][ T29] audit: type=1326 audit(532.349:45093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22433 comm="syz.7.16008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921a22e929 code=0x7ffc0000 [ 526.625374][ T29] audit: type=1326 audit(532.349:45094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22433 comm="syz.7.16008" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f921a22e929 code=0x7ffc0000 [ 526.648687][ T29] audit: type=1400 audit(532.370:45095): avc: denied { map_create } for pid=22431 comm="syz.5.16007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 526.720707][T22452] xt_CT: No such helper "pptp" [ 526.920908][T22469] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16023'. [ 527.218975][T22499] ipvlan2: entered promiscuous mode [ 527.226887][T22499] bridge0: port 4(ipvlan2) entered blocking state [ 527.233454][T22499] bridge0: port 4(ipvlan2) entered disabled state [ 527.253370][T22499] ipvlan2: entered allmulticast mode [ 527.258761][T22499] bridge0: entered allmulticast mode [ 527.268500][T22499] ipvlan2: left allmulticast mode [ 527.273626][T22499] bridge0: left allmulticast mode [ 527.291302][ T3396] usb 11-1: enqueue for inactive port 0 [ 527.303071][ T3396] usb 11-1: enqueue for inactive port 0 [ 527.386098][ T3396] vhci_hcd: vhci_device speed not set [ 527.972185][T22577] netlink: 'syz.4.16058': attribute type 1 has an invalid length. [ 528.044100][T22614] bond2: (slave gretap1): making interface the new active one [ 528.051947][T22614] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 528.370425][T22654] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 528.942697][T22705] bridge: RTM_NEWNEIGH with invalid ether address [ 530.423995][T22838] netlink: 304 bytes leftover after parsing attributes in process `syz.5.16153'. [ 530.435800][T22838] netlink: 4 bytes leftover after parsing attributes in process `syz.5.16153'. [ 530.756266][T22888] netlink: 96 bytes leftover after parsing attributes in process `syz.9.16171'. [ 531.118800][T22930] netlink: 'syz.5.16187': attribute type 13 has an invalid length. [ 531.217042][ T29] kauditd_printk_skb: 656 callbacks suppressed [ 531.217061][ T29] audit: type=1400 audit(537.336:45752): avc: denied { map_create } for pid=22941 comm="syz.9.16193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.288041][ T29] audit: type=1400 audit(537.336:45753): avc: denied { prog_load } for pid=22941 comm="syz.9.16193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.306906][ T29] audit: type=1400 audit(537.336:45754): avc: denied { prog_load } for pid=22941 comm="syz.9.16193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.325784][ T29] audit: type=1400 audit(537.336:45755): avc: denied { read write } for pid=31647 comm="syz-executor" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 531.336234][T22950] netlink: 'syz.9.16199': attribute type 10 has an invalid length. [ 531.348621][ T29] audit: type=1400 audit(537.336:45756): avc: denied { prog_load } for pid=22940 comm="syz.7.16194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.348653][ T29] audit: type=1400 audit(537.336:45757): avc: denied { prog_load } for pid=22940 comm="syz.7.16194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.348680][ T29] audit: type=1400 audit(537.336:45758): avc: denied { prog_load } for pid=22940 comm="syz.7.16194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.356726][T22950] netlink: 40 bytes leftover after parsing attributes in process `syz.9.16199'. [ 531.375425][ T29] audit: type=1400 audit(537.388:45759): avc: denied { map_create } for pid=22944 comm="syz.9.16196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.375520][ T29] audit: type=1400 audit(537.399:45760): avc: denied { mount } for pid=22945 comm="syz.5.16195" name="/" dev="ramfs" ino=134538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 531.398681][T22950] dummy0: entered promiscuous mode [ 531.413018][ T29] audit: type=1400 audit(537.399:45761): avc: denied { prog_load } for pid=22944 comm="syz.9.16196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 531.425340][T22950] bridge0: port 1(dummy0) entered blocking state [ 531.493671][T22950] bridge0: port 1(dummy0) entered disabled state [ 531.517068][T22950] dummy0: entered allmulticast mode [ 531.702710][T22983] netlink: 20 bytes leftover after parsing attributes in process `syz.5.16208'. [ 532.042208][T23025] ip6gre2: entered allmulticast mode [ 532.227822][T23052] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16239'. [ 532.838374][T23122] netlink: 132 bytes leftover after parsing attributes in process `syz.9.16271'. [ 533.449658][T23193] policy can only be matched on NF_INET_PRE_ROUTING [ 533.449675][T23193] unable to load match [ 533.706983][T23224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23224 comm=syz.5.16307 [ 533.804719][T23230] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23230 comm=syz.6.16309 [ 533.978975][T23248] netlink: 92 bytes leftover after parsing attributes in process `syz.7.16319'. [ 534.081116][T23259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16325'. [ 534.512057][T23314] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16345'. [ 535.491839][T23453] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16391'. [ 535.531365][T23455] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16392'. [ 535.989724][ T29] kauditd_printk_skb: 788 callbacks suppressed [ 535.989738][ T29] audit: type=1400 audit(542.343:46550): avc: denied { map_create } for pid=23523 comm="syz.6.16415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 536.034915][ T29] audit: type=1400 audit(542.375:46551): avc: denied { prog_load } for pid=23523 comm="syz.6.16415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 536.053809][ T29] audit: type=1400 audit(542.385:46552): avc: denied { read write } for pid=23525 comm="syz.9.16416" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 536.083020][ T29] audit: type=1400 audit(542.385:46553): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 536.107072][ T29] audit: type=1400 audit(542.406:46554): avc: denied { map_create } for pid=23525 comm="syz.9.16416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 536.125899][ T29] audit: type=1400 audit(542.406:46555): avc: denied { prog_load } for pid=23525 comm="syz.9.16416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 536.144663][ T29] audit: type=1400 audit(542.427:46556): avc: denied { read write } for pid=31647 comm="syz-executor" name="loop9" dev="devtmpfs" ino=792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 536.173754][ T29] audit: type=1400 audit(542.448:46557): avc: denied { prog_load } for pid=23529 comm="syz.4.16417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 536.192609][ T29] audit: type=1400 audit(542.459:46558): avc: denied { prog_load } for pid=23529 comm="syz.4.16417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 536.211372][ T29] audit: type=1400 audit(542.459:46559): avc: denied { prog_load } for pid=23529 comm="syz.4.16417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 536.551507][T23576] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16437'. [ 536.762580][T23602] netlink: 'syz.9.16447': attribute type 13 has an invalid length. [ 536.781446][T23602] gretap0: refused to change device tx_queue_len [ 536.795027][T23602] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 536.923983][T23617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16454'. [ 536.954857][T23611] syzkaller0: entered promiscuous mode [ 536.960712][T23611] syzkaller0: entered allmulticast mode [ 537.379226][T23682] macvlan2: entered allmulticast mode [ 537.384691][T23682] veth1_vlan: entered allmulticast mode [ 537.394018][T23682] veth1_vlan: left allmulticast mode [ 537.605034][T23712] netlink: 304 bytes leftover after parsing attributes in process `syz.6.16481'. [ 537.616336][T23712] netlink: 4 bytes leftover after parsing attributes in process `syz.6.16481'. [ 537.754837][T23730] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16487'. [ 537.967808][T23766] syzkaller0: entered promiscuous mode [ 537.973478][T23766] syzkaller0: entered allmulticast mode [ 538.427020][T23825] netlink: 96 bytes leftover after parsing attributes in process `syz.4.16519'. [ 538.608019][T23838] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23838 comm=syz.4.16526 [ 538.930097][T23888] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16539'. [ 539.085033][T23924] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16547'. [ 539.151702][T23929] vlan0: entered allmulticast mode [ 540.371003][T24034] __nla_validate_parse: 2 callbacks suppressed [ 540.371024][T24034] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16590'. [ 540.488874][T24046] sch_fq: defrate 0 ignored. [ 540.766566][ T29] kauditd_printk_skb: 667 callbacks suppressed [ 540.766581][ T29] audit: type=1400 audit(547.351:47227): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 540.836388][ T29] audit: type=1400 audit(547.414:47228): avc: denied { map_create } for pid=24083 comm="syz.4.16614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.855273][ T29] audit: type=1400 audit(547.414:47229): avc: denied { prog_load } for pid=24083 comm="syz.4.16614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.874249][ T29] audit: type=1400 audit(547.414:47230): avc: denied { allowed } for pid=24083 comm="syz.4.16614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 540.893421][ T29] audit: type=1400 audit(547.414:47231): avc: denied { create } for pid=24082 comm="syz.5.16615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 540.913201][ T29] audit: type=1400 audit(547.425:47232): avc: denied { map_create } for pid=24088 comm="syz.7.16616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.923233][T24092] netlink: 12 bytes leftover after parsing attributes in process `syz.5.16618'. [ 540.932139][ T29] audit: type=1400 audit(547.425:47233): avc: denied { prog_load } for pid=24088 comm="syz.7.16616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.960064][ T29] audit: type=1400 audit(547.425:47234): avc: denied { prog_load } for pid=24088 comm="syz.7.16616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 540.978855][ T29] audit: type=1400 audit(547.425:47235): avc: denied { mounton } for pid=24082 comm="syz.5.16615" path="/892/file0" dev="tmpfs" ino=4595 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 541.007731][ T29] audit: type=1400 audit(547.509:47236): avc: denied { read write } for pid=14689 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 541.184032][T24113] netlink: 24 bytes leftover after parsing attributes in process `syz.5.16624'. [ 541.447559][T24146] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16633'. [ 541.448121][T24148] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16635'. [ 541.474877][T24148] netem: change failed [ 542.326210][T24223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24223 comm=syz.5.16666 [ 542.643632][T24263] netlink: 'syz.5.16683': attribute type 7 has an invalid length. [ 542.665677][T24256] netlink: 'syz.4.16680': attribute type 13 has an invalid length. [ 542.688191][T24256] gretap0: refused to change device tx_queue_len [ 542.703310][T24256] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 542.765050][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16688'. [ 542.785592][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16688'. [ 542.800335][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16688'. [ 542.823940][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16688'. [ 542.833891][T24272] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16688'. [ 543.091155][T24303] pim6reg1: entered promiscuous mode [ 543.096603][T24303] pim6reg1: entered allmulticast mode [ 543.233996][T24327] ================================================================== [ 543.242250][T24327] BUG: KCSAN: data-race in memcpy_and_pad / release_task [ 543.249336][T24327] [ 543.251693][T24327] write to 0xffff888109615608 of 8 bytes by task 10269 on cpu 0: [ 543.259442][T24327] release_task+0x6f9/0xb60 [ 543.264010][T24327] wait_consider_task+0x113f/0x1650 [ 543.269345][T24327] __do_wait+0xfa/0x510 [ 543.273550][T24327] do_wait+0xb7/0x260 [ 543.277573][T24327] kernel_wait4+0x16b/0x1e0 [ 543.283693][T24327] __x64_sys_wait4+0x91/0x120 [ 543.288431][T24327] x64_sys_call+0x26c8/0x2fb0 [ 543.293157][T24327] do_syscall_64+0xd2/0x200 [ 543.297701][T24327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.303637][T24327] [ 543.305975][T24327] read to 0xffff888109615140 of 3200 bytes by task 24327 on cpu 1: [ 543.313879][T24327] memcpy_and_pad+0x48/0x80 [ 543.318435][T24327] arch_dup_task_struct+0x2c/0x40 [ 543.323486][T24327] dup_task_struct+0x83/0x6a0 [ 543.328195][T24327] copy_process+0x399/0x1fe0 [ 543.332824][T24327] kernel_clone+0x16c/0x5b0 [ 543.337369][T24327] __se_sys_clone3+0x1c2/0x200 [ 543.342168][T24327] __x64_sys_clone3+0x31/0x40 [ 543.346882][T24327] x64_sys_call+0x10c9/0x2fb0 [ 543.351593][T24327] do_syscall_64+0xd2/0x200 [ 543.356116][T24327] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.362036][T24327] [ 543.364379][T24327] Reported by Kernel Concurrency Sanitizer on: [ 543.370552][T24327] CPU: 1 UID: 0 PID: 24327 Comm: syz.4.16714 Tainted: G W 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(voluntary) [ 543.384732][T24327] Tainted: [W]=WARN [ 543.388551][T24327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 543.398711][T24327] ================================================================== [ 543.416683][T24334] bridge: RTM_NEWNEIGH with invalid ether address