last executing test programs: 4m32.398757474s ago: executing program 32 (id=148): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) 4m10.910715442s ago: executing program 33 (id=813): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x50, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x7fffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc11082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa32"], 0xfdef) 4m1.223388841s ago: executing program 4 (id=1091): socket$inet_dccp(0x2, 0x6, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 4m1.143302422s ago: executing program 4 (id=1094): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_config_ext={0x0, 0x1}, 0x8002, 0x0, 0x0, 0x7, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1000004, &(0x7f0000000d80)=ANY=[@ANYBLOB='shortname=lower,iocharset=iso8859-1,fmask=00000000000000000000066,uni_xlate=1,uni_xlate=0,fmask=00000000000000000000003,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,utf8=1,check=strict,nonumtail=0,rodir,errors=continue,shortname=lower,umaQk=00000000000000000000007,rodir,sys_immutable,\x00', @ANYBLOB="1a961083c216e398b3852441fbacd14539194e81e2ec74ea00af4757fd632db5866c80f5b55492be6ad393d28d63023cd2e764a6bb41fa00d6c103356045fc3ade2c93339a56afb89b72a46f475c860a952e02dbf9c947a7cb75e89843f6d981fe7eed0ef37d5ab46550aa22", @ANYRES64], 0x6, 0x2bb, &(0x7f0000001240)="$eJzs3U9rI2UcB/DfpMkkKpgcPInggB48Ldu9ekmRXRB7cslBPWhxtyBNEFoo+AdjT169ePDgKxAEX4gX34HgVfBmhcLITGaapI1pIk3rls/n0l+feb4zv5k+tNNDn370yujgSRb7J1/+Fp1OEo1+9OM0iV40ovZ1zOl/GwDAs+w0z+PPfGKdXBIRnc21BQBs0Io//188r36+kbYAgA16/N777+zs7j58N8s68Wj0zfGg+M2++Dg5vrMfn8Qwnsb96MZZRPmi0IrybaEoH+V5Pm5mhV68PhofD4rk6MNfqvPv/BFR5rejG71y6Pxto8y/vftwO5uYyY+LPp6vrt8v8g+iGy+dh+fyDxbkY5DGG6/N9H8vuvHrx/FpDONJ2cQ0/9V2lr2Vf/fXFx8U7RX5ZHw8aJfzpvKtG/7SAAAAAAAAAAAAAAAAAAAAAABwh92r9s5pR7l/TzFU7b+zdVZ80oqs1pvfn2eST+oTze4PlOf5OI8f6v117mdZllcTp/lmvNyM5u3cNQAAAAAAAAAAAAAAAAAAAPy/HH32+cHecPj08FqKejeAZkT8/Tjiv56nPzPyaiyf3K6uuTccNqpyfk5zdiS26jlJxNI2ipu4psdyVfHcpZ6r4sef1j1h5+o5rcXXus6iXl0He8niZ9iOeqRTLZLv04jpnDRWvFb6b4fyWGf5pQsPdde+9/SFshgvmRPJssbe/H3y5KqR5OJdpOVTXRhvVcVM/MLaWGk9R2cSv/y9IrFbBwAAAAAAAAAAAAAAAAAAbNT0r38XHDxZGm3k7Y21BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3avr//9coxlV4hclpHB41bvkeAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuPv+CQAA///WoVye") renameat2(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) 4m0.940625515s ago: executing program 4 (id=1098): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback, 0x580d5476}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0xfffffeffffff7f7e, &(0x7f0000000140)={0xa, 0x4e20, 0xffffffff, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7}], 0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x60) 4m0.899676786s ago: executing program 4 (id=1100): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x2007, 0x3a, 'M', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b) r1 = syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000340)='./file1\x00', 0x12fd438, &(0x7f0000000380)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYRESHEX=r2, @ANYRES8=r1], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 4m0.770970558s ago: executing program 4 (id=1107): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000100)={[{@noquota}, {@noblock_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x82f}}, {@grpquota}, {@debug}, {@debug}, {@grpid}]}, 0x80, 0x544, &(0x7f0000001740)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x22020400) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setpgid(0x0, 0x0) 4m0.237849646s ago: executing program 4 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000a00)="10200003", 0x4, 0x4, &(0x7f0000000940)={0x11, 0x8100, r3, 0x1, 0x9, 0x6, @random="ec7336c86934"}, 0x14) 4m0.192597467s ago: executing program 34 (id=1121): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000a00)="10200003", 0x4, 0x4, &(0x7f0000000940)={0x11, 0x8100, r3, 0x1, 0x9, 0x6, @random="ec7336c86934"}, 0x14) 3m30.869218665s ago: executing program 1 (id=1957): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000600)=0x5, 0x4) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r3, @ANYBLOB="0100000000000000240012000c000100627269646765"], 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4004081, &(0x7f0000000140)={0x11, 0xf8, r3, 0x1, 0x9, 0x6, @dev}, 0x14) 3m30.835464595s ago: executing program 1 (id=1958): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000005b80)={{{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x9, 0x0, 0x0, 0x0, 0x1}}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, 0x0, @in6=@remote}}, 0xe8) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @random="00e300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, @time_exceeded={0x4, 0x1, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @dev}}}}}}, 0x0) 3m30.778809076s ago: executing program 1 (id=1959): socket$netlink(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES16=r0], 0x48) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) 3m30.778526976s ago: executing program 1 (id=1960): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$eJzs3U1vG1sZAODXzpeTm3uTW7oABLSUQkFVncRto6oLKCuEUCVElyC1IXGjKHYcxU5pQhfpf0CiEitY8gNYd8WeDYIdm7JA4iMCNZVYGM14kpo0bkKT2CF+Hmk0c+Y4fs+pNefYr+s5AfStyxGxFRHDEfEoIiay87lsi3utLXnc6+1n8zvbz+Zz0Ww++HsurU/ORdvfJD7KnrMQET/4TsSPc+/GrW9sLs9VKuW1VnF0qlFdnapvbN5Yqs4tlhfLK6XS7Mzs9J2bt0sn1tdL1eHs6Iuvfrf1jZ8mzRrPzrT34yS1uj60FycxGBHfO41gPTCQ9We41w3hg+Qj4kJEXEmv/4kYSF9NAOA8azYnojnRXgYAzrt8mgPL5YtZLmA88vlisZXDuxhj+Uqt3rj+uLa+stDKlU3GUP7xUqU8neUKJ2Mol5Rn0uO35dK+8s2I+DQifjYympaL87XKQi/f+ABAH/to3/z/r5HW/A8AnHOFXjcAAOg68z8A9B/zPwD0H/M/APQf8z8A9B/zPwD0n8Pm/wPu3wkA/P/6/v37ydbcye5/vfBkY3259uTGQrm+XKyuzxfna2urxcVabTG9Z0/1sOer1GqrM7di/enkN1frjan6xubDam19pfEwva/3w/JQV3oFALzPp5de/jH5eL91dzTdom0tB3M1nG/5XjcA6JmBXjcA6BmrfUH/OsZnfOkBOCcO+y8+hYgY3X+y2Ww2T69JwCm79jn5f+hXbfl/vwKCPiP/D/1L/h/6V7OZO+qa/3HUBwIAZ5scP9Dh+/8L2f7X2ZcDP1rY/4gXp9kqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONt21/8tZmuBj0c+XyxGfBwRkzGUe7xUKU9HxCcR8YeRoZGkPNPjNgMAx5X/Sy5b/+vaxNXx/bXDuTcj6T4ifvKLBz9/OtdorP0+Of+PvfONF9n5Ui/aDwAcZneeTvdtH+Rfbz+b39262Z6/fjsiCq34O9vDsbMXfzAG030hhiJi7J+5rNySa8tdHMfW84j47EH9z8V4mgNprXy6P34S++Ouxs//V/x8WtfaJ/8WnzmBtkC/eZmMP/cOuv7ycTndH3z9F9IR6viy8S95qvmddAx8G393/BvoMP5dPmqMW7/9buto9N265xGfH4zYjb3TNv7sxs91iH/1iPH/9IUvXelU1/xlxLU4OH57rKlGdXWqvrF5Y6k6t1heLK+USrMzs9N3bt4uTaU56qnOs8Hf7l7/pFNd0v+xDvELh/T/q0fs/6/+/eiHX35P/K9/5aD4+bj4nvjJnPi1I8afG/tNoVNdEn+hQ/8Pe/2vHzH+qz9vvrNsOADQO/WNzeW5SqW81s2D3TcSXQ3q4BwctBIeibPRnvaDb3Ur1nD8T3/VbH5QrE4jxklk3YCzYO+ij4g3vW4MAAAAAAAAAAAAAABwoG78YqnXfQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD8+k8AAAD//2CSzDE=") creat(&(0x7f0000000240)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x589f51fcc4604b99, 0x1ff) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xa, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "9300e6d6a89ef30bea2a0092000010000000aff571ec3199bde400"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x60) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x1000000}) 3m30.646787729s ago: executing program 1 (id=1962): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf4fffff7, 0x12, r1, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000000180)="024dfc7b58623401", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1f}}, 0x3c) 3m30.417090022s ago: executing program 1 (id=1966): r0 = socket$inet6(0xa, 0x40000080806, 0x0) close(0x3) io_setup(0x3ff, &(0x7f0000000500)=0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans']) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000400), 0x2000011a) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3m30.386374683s ago: executing program 35 (id=1966): r0 = socket$inet6(0xa, 0x40000080806, 0x0) close(0x3) io_setup(0x3ff, &(0x7f0000000500)=0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans']) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000400), 0x2000011a) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 2m10.184056649s ago: executing program 7 (id=4567): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000400)='GPL\x00', 0xf1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x80, 0x1, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x9, 0x3, 0x0, 0x0, 0x10, 0x1, {0x1}}) io_uring_enter(r0, 0x47bc, 0x2, 0x0, 0x0, 0x0) 2m10.157059659s ago: executing program 7 (id=4568): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) 2m10.09494759s ago: executing program 7 (id=4569): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000600)={@local, @random="6a2ddcf6177a", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1100, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}, 0x0) 2m10.09470261s ago: executing program 7 (id=4570): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27b000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 2m10.09451387s ago: executing program 7 (id=4571): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000540), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) write$cgroup_type(r1, &(0x7f0000000280), 0x9) 2m9.905234243s ago: executing program 7 (id=4572): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x0) 2m9.884726244s ago: executing program 36 (id=4572): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @rand_addr, 0x9}, 0x1c) listen(r0, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) shutdown(r0, 0x0) 2m6.545405535s ago: executing program 6 (id=4701): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x1c, 0x1, 0x1, [r3, r2, r2]}}, @rights={{0x18, 0x1, 0x1, [r3]}}], 0x38}}], 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x40, &(0x7f0000000040)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2m6.526187625s ago: executing program 6 (id=4704): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000140)={0x5178, 0x1, [{0x1, 0x1}]}) 2m6.462387656s ago: executing program 6 (id=4707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r2) 2m6.073908062s ago: executing program 6 (id=4709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27b000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) 2m5.629989068s ago: executing program 6 (id=4712): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$inet6(0xa, 0x6, 0x0) r3 = syz_io_uring_setup(0x58bb, &(0x7f0000000540)={0x0, 0x92af, 0x10100, 0x3, 0x1e2}, &(0x7f0000000280)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000240)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x14a8}}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 2m5.072488857s ago: executing program 6 (id=4723): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 2m5.044255747s ago: executing program 37 (id=4723): socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5865, 0x0, 0x2, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x100847c0, 0x0, 0x1, 0x0, 0x0) 28.186855129s ago: executing program 2 (id=7760): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000009f910000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x1) tkill(r3, 0x14) 28.14007535s ago: executing program 2 (id=7762): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) mknod$loop(0x0, 0x92bf16ace3325d49, 0x1) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x13, 0x0, 0x2, 0x2}, 0x10}}, 0x4) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 28.10579137s ago: executing program 2 (id=7764): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x0, 0x3}, {0x0, 0x4000000000, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x1b}, 0x20000, 0x6c}, 0x2, @in=@remote, 0x10000000, 0x3, 0x0, 0x0, 0xffffffff}}, 0xe8) r2 = syz_io_uring_setup(0x24f5, &(0x7f0000000780)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000800)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x0, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000480)="10ab119b497ad23a1c1142ce24b27ffa12477294d5f95fbf8890c08a1c7a02944cf58f9e6725ddafac32a98ed3ec927d19a01a193c99058915996d97a79d6e364c97cd620d3e639b4374dae2de1c616415fbc228c3f6bbaacf237291ea1c763bc9f9405da6d699a83194b49c8848fe72407cbcd06881dbc687e9a9967c4031632fbbb883db18c6b0c40a546715fa886040c2", 0x5d}], 0x100000000000000f}, 0x0, 0x80840, 0x1}) io_uring_enter(r2, 0x11d30, 0x0, 0x0, 0x0, 0x0) 28.027139691s ago: executing program 2 (id=7767): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x89101a, 0x0) fchdir(r0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) 28.026801231s ago: executing program 2 (id=7769): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) 27.522969119s ago: executing program 2 (id=7782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) 27.522800669s ago: executing program 38 (id=7782): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r3, 0x0) write$cgroup_subtree(r3, &(0x7f00000000c0)=ANY=[], 0x7) perf_event_open(&(0x7f0000000340)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) 2.072785568s ago: executing program 8 (id=8496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f00000000c0)='bridge0\x00') 1.92780046s ago: executing program 8 (id=8500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 1.881657221s ago: executing program 8 (id=8503): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215fea43703a4e543ee9d1a3c3f5f2a41977ece8fdadcf89ce331ce59bebae5f53513d0e10485d7ddbda60513bf339602510b3a23ea29a0d5d03a61e34d12942ea4a847c884b27b5344a456d02a55f8929cc567e7c792c01fab7a7b32780a14c361000609b817dd91507b04d875279527946fdb8fb92a512485e234d092c28f1d0a0498731ccc0eb10515d510e8945839307b46512ceca6f495fdd2c6ae5eb2ef3b2a40ebdc7edf0048e3fb5e3d97a9ea5113a6b70d20ad5c43f0df95d88c0f121a1884da21a21f0ba47420f8391a97921cc51871dbb272e43710fe71d5e342c3afd10608a8b02f00e8fbd8d570b6faace86c494ecea8913233391e7b7cec3d571bb3032181ed58e1b513e511f79ee562c8cde9b3b74c2e95dcde7fadb5a666bdc0c1684794620ce8cf0c0aee8e90b3ef6e7160d3f055cb4d1ced32e4edc15e7d102952d3237e6c02c591a95a182bf190c0124abc7f1225332ff1c5e1b94e4e9bf02c1a18bd7bfce20707f7298da322560bc1a4cf298d46f5bf8ff41da21e25aa17f65f9ee43ca890b5ef6a3ccf3efedf3ca60a9acef1352ad0c43e6cf375108cf0974ce89a99adba7e6a3f8949dc573440fafe0e3abdd0066057a2d868e8386080f18a421568d8e7a89536a4173861bd55245c8fcf7dcba18edce36d2e85b9630fbc218db9ebd16abb11ac06fdbf2bc3e6394d4c6e7ae71813d30772d487743a2856348fee09989ce03331e7848770fc91e62191c20fe5f4a73c5dae467dd612bdb63b1e50921d38271305d7412103d5a6214d6d534d1d530b9169f882b6926bbd338f0282a8bd9a44603934e5249e83f1d0947b39f82a7843d2b6f796d8abf7ff3e66cfd4519324d71cebbf6580dffc10d555e479e9acaa12c3c59e3732c181aa4223d0fcdac514e9d7c7963c2634964520286b028f60a4ae612b8e6049315139e884cbffd6836253094ad023329183496cf663366ad4d7f7f5f1bd2db9b0d33f106c041fba4494c7da404d45d8955e5459ca4a62862721ec1fa534fd95e262c5814426816e60000000000000000001aa4fb6f40ec24f42f6949cc28d2a0d4eb61cb1664627582d962523586539445b81e9759321652280ecb", 0xffe3, 0x0, 0x0, 0x0) 1.796509073s ago: executing program 8 (id=8504): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2, &(0x7f0000010140)={[{@oldalloc}, {@noquota}, {@lazytime}, {@jqfmt_vfsv1}, {@i_version}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@stripe={'stripe', 0x3d, 0x20}}, {@lazytime}, {@max_batch_time={'max_batch_time', 0x3d, 0x7f}}, {@usrquota}, {@bsdgroups}]}, 0x1, 0x562, &(0x7f0000001080)="$eJzs3c1rHOUfAPDvbHb7/vs1hVJURAI9WKndNIkvFTzUo2ixoPe6JNNQsumW7KY0sWB7sBcvUgQRC+Jd7x6L/4B/RUELRUrQg5fIbGbTbbObt26abffzgWmfZ2aSZ77zzPfJMzu7bAADayT7pxDxckR8k0QcbttWjHzjyMp+Sw+vT2ZLEsvLn/6VRJKva+2f5P8fzCsvRcRvX0WcLKxtt76wOFOpVtO5vD7amL0yWl9YPHVptjKdTqeXxycmzrw9Mf7eu+/0LNY3zv/z/Sd3Pzzz9fGl7365f+R2EmfjUL6tPY6ncKO9MhIj+TkpxdkndhzrQWP9JNntA2BbhvI8L0U2BhwutbIeePF9GRHLwIBKtpj/e40X8IJozQNa9/Y9ug9+bjz4YOUGaG38xZXXRmJf897owFLy2J1Rdr873IP2szZ+/fPO7WyJ3r0OAbChGzcj4nSxuHb8S/Lxb/tOb2KfJ9sw/sGzczeb/7zZaf5TWJ3/RIf5z8EOubsdG+d/4X4Pmukqm/+933H+u/rQangor/2vOecrJRcvVdNsbPt/RJyI0t6svt7znDNL95a7bWuf/2VL1n5rLpgfx/3i3sd/ZqrSqDxNzO0e3Ix4peP8N1nt/6RD/2fn4/wm2ziW3nmt27aN499Zyz9FvN6x/x890UrWfz452rweRltXxVp/3zr2e7f2dzv+rP8PrB//cNL+vLa+9TZ+3Pdv2m3bdq//PclnzfKefN21SqMxNxaxJ/l47frxRz/bqrf2z+I/cXz98a/T9b8/Ij7fZPy3jv786vbj31lZ/FNb6v+tF+599MUP3drfXP+/1SydyNdsZvzb7AE+zbkDAAAAAACAflOIiEORFMqr5UKhXF55f8fROFCo1uqNkxdr85enovlZ2eEoFVpPug+3vR9iLH8/bKs+/kR9IiKORMS3Q/ub9fJkrTq128EDAAAAAAAAAAAAAAAAAABAnzjY5fP/mT+GdvvogB3nK79hcG2Y/734piegL/n7D4NL/sPgkv8wuOQ/DC75D4NL/sPgkv8wuOQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NT5c+eyZXnp4fXJrD51dWF+pnb11FRanynPzk+WJ2tzV8rTtdp0NS1P1mY3+n3VWu3K2HjMXxttpPXGaH1h8cJsbf5y48Kl2cp0eiEtPZOoAAAAAAAAAAAAAAAAAAAA4PlSX1icqVSr6VyPCoWI6OkvVFhTyPrtRrFfznOxPw5DoceF3R6ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCR/wIAAP//f14x3A==") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000010000008a000000c9e7000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000800000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28], 0x48) unshare(0x44040200) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000380)=ANY=[], 0x700, 0x0) 1.530438866s ago: executing program 8 (id=8509): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a5000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.204486832s ago: executing program 3 (id=8515): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) sendfile(r0, r0, 0x0, 0xb) 1.170273602s ago: executing program 3 (id=8518): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e0, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) 871.755996ms ago: executing program 9 (id=8526): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 822.291197ms ago: executing program 5 (id=8529): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000fc", @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003"], 0xc0}}, 0x0) 775.001288ms ago: executing program 9 (id=8530): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) 770.037048ms ago: executing program 5 (id=8531): mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 729.365209ms ago: executing program 9 (id=8532): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000006000000080000000c"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r3, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x8810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f00000000c0)='bridge0\x00') 276.407426ms ago: executing program 0 (id=8533): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) recvmsg$unix(r1, &(0x7f0000001c00)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000040)="a5", 0x1}], 0x1}, 0x11) sendmsg$inet(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000080)='\b', 0x1}], 0x1}, 0x0) 276.273406ms ago: executing program 8 (id=8534): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef35"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 276.143646ms ago: executing program 5 (id=8535): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000200000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x400}, 0x18) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x8, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) 276.040126ms ago: executing program 9 (id=8536): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 240.008676ms ago: executing program 9 (id=8537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0xf20, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x229}, &(0x7f0000ff8000), &(0x7f0000ff7000)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x811ffb60ab54d16e}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r2, &(0x7f0000000140)) 217.068617ms ago: executing program 3 (id=8538): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x200c840, &(0x7f0000000240), 0x64, 0x537, &(0x7f0000000f80)="$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") r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 211.712076ms ago: executing program 9 (id=8539): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000140), 0x12) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 191.101347ms ago: executing program 0 (id=8540): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) set_mempolicy(0x6, &(0x7f00000003c0)=0x8000000000000001, 0xe0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="dcc809d4a52d3ebfca0f55d36ade8df34565579b2129ea79548c3009ec4ef30d59d491070435ce3e8235895ac5f8f30bd48037e7e417ded21a8e0afaeae66df1706b10bd5cf6b0431e60dd121d7c92dd718b2d2e8c90085b308e83619a99147085257cc6f33e126e7bbc3e3b9c072cd44370c5c2b776ded99ea02381be0c6d2d35450a144d2cb7c7ed3c0eeb7cafd14452f10321df4aa0fd1ff10eed4964f966f482262ef71e687b3f5f23653f2f5873959a33841ca68478fa3632bce3a36bf86d374160133c6f06b35952556c66c4ad4f5dc7699fe3a03da27f9165e0b2c2b22874cc4c5a82eba8f573d44331", @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) epoll_create1(0x80000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x0, 0x0, 0xfcffffff, 0xe33, 0x4000000, 0x1, 0x0, 0x0, 0x3}) 166.325367ms ago: executing program 0 (id=8541): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00001d8000/0x2000)=nil, 0x2000, 0x8, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0)={'#! ', './file0'}, 0xb) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x3200, 0x10001, 0x3, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x5}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 110.079608ms ago: executing program 3 (id=8542): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='inet_sock_set_state\x00', r0, 0x0, 0x9}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000800)=0x100000001) semget$private(0x0, 0x4000, 0x555) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="380100001000130700000000000000007f000001c22300830406dd7e40ab000000000000000000ac1e", @ANYRES32=0x0, @ANYRES32=0x0], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) 78.531009ms ago: executing program 3 (id=8543): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x8, &(0x7f0000002780)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480f3f887afcfcb5e6286c941006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) connect(0xffffffffffffffff, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x2000) socket$inet6(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='cdg\x00', 0x4) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 77.950799ms ago: executing program 5 (id=8544): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r4, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x4040014, &(0x7f0000000140)={0x11, 0x8100, r4, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x14) 61.096559ms ago: executing program 0 (id=8545): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setattr(0x0, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r2, 0x0, 0x0, 0x180, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000640)='inet_sk_error_report\x00', r1}, 0x18) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x3000d041) 50.845039ms ago: executing program 3 (id=8546): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) r1 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x0, 0x72}}]}}}]}}]}}, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8000001, 0x2) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000040)={0xc408, 0xe, [{0x1, 0x1}, {0x2}, {0xb, 0x1}, {0x7}, {0xd}, {0xb}, {0x9, 0x1}, {0x8}, {0xf, 0x1}, {}, {0x9, 0x1}, {0xa, 0x1}, {0x3}, {0xc, 0x1}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) 6.45806ms ago: executing program 0 (id=8547): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='locks_get_lock_context\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)) 6.20123ms ago: executing program 5 (id=8548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 5.81986ms ago: executing program 0 (id=8549): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 5 (id=8550): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000000)={[{@minixdf}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e0, &(0x7f0000001200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) kernel console output (not intermixed with test programs): 4533][T18159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6112'. [ 226.622513][T18169] netlink: 'syz.8.6115': attribute type 10 has an invalid length. [ 226.752764][T18189] dummy0: entered promiscuous mode [ 226.763896][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x4 [ 226.771803][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x2 [ 226.776327][T18189] macsec1: entered allmulticast mode [ 226.784836][T18189] dummy0: entered allmulticast mode [ 226.790610][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.798335][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.806023][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.813751][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.821547][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.829264][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.836984][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.844671][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.852381][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.860103][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.867820][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.875483][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.883170][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.890870][ T9] hid-generic 0000:3000000:0000.0012: unknown main item tag 0x0 [ 226.914676][ T9] hid-generic 0000:3000000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 227.115937][T18216] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 227.446780][T18252] netlink: 'syz.0.6160': attribute type 10 has an invalid length. [ 227.454657][T18252] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6160'. [ 227.492016][T18256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6150'. [ 227.533956][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 227.533972][ T29] audit: type=1326 audit(1742928281.610:5061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 227.604987][ T29] audit: type=1326 audit(1742928281.650:5062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 227.628647][ T29] audit: type=1326 audit(1742928281.650:5063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 227.652223][ T29] audit: type=1326 audit(1742928281.650:5064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 227.675836][ T29] audit: type=1326 audit(1742928281.650:5065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 227.699435][ T29] audit: type=1326 audit(1742928281.650:5066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 227.723529][ T29] audit: type=1326 audit(1742928281.810:5067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 227.747131][ T29] audit: type=1326 audit(1742928281.810:5068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18258 comm="syz.0.6152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fdb1dd169 code=0x7ffc0000 [ 228.008155][T18294] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6166'. [ 228.119005][T18311] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6170'. [ 228.296745][T18325] bond0: entered promiscuous mode [ 228.301819][T18325] bond0: entered allmulticast mode [ 228.307406][T18325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.336766][T18325] bond0 (unregistering): Released all slaves [ 228.370067][T18339] hub 9-0:1.0: USB hub found [ 228.374870][T18339] hub 9-0:1.0: 8 ports detected [ 228.401333][T18345] syzkaller0: entered promiscuous mode [ 228.406971][T18345] syzkaller0: entered allmulticast mode [ 228.422522][T18348] IPv4: Oversized IP packet from 127.202.26.0 [ 228.498734][ T29] audit: type=1326 audit(1742928282.580:5069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.8.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 228.522440][ T29] audit: type=1326 audit(1742928282.580:5070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18356 comm="syz.8.6193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 229.010117][T18409] serio: Serial port ptm0 [ 229.081307][T18090] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 229.097271][T18090] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 229.169993][T18434] geneve0: entered allmulticast mode [ 229.429851][T18485] syzkaller0: left promiscuous mode [ 229.435126][T18485] syzkaller0: left allmulticast mode [ 229.829992][T18568] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18568 comm=syz.2.6251 [ 230.804319][T18678] sd 0:0:1:0: device reset [ 230.825943][T18684] netlink: 'syz.3.6286': attribute type 1 has an invalid length. [ 230.871484][T18684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.932707][T18694] bond0: (slave gretap2): making interface the new active one [ 231.015370][T18694] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 231.330455][T18720] __nla_validate_parse: 2 callbacks suppressed [ 231.330471][T18720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6301'. [ 231.515701][T18731] netlink: 'syz.9.6305': attribute type 1 has an invalid length. [ 231.578656][T18731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.610932][T18743] bond0: (slave gretap1): making interface the new active one [ 231.621293][T18743] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 231.677222][T18750] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6312'. [ 231.826648][T18754] bridge0: port 3(syz_tun) entered blocking state [ 231.833195][T18754] bridge0: port 3(syz_tun) entered disabled state [ 231.856208][T18754] syz_tun: entered allmulticast mode [ 231.862390][T18754] syz_tun: entered promiscuous mode [ 231.868731][T18754] bridge0: port 3(syz_tun) entered blocking state [ 231.875321][T18754] bridge0: port 3(syz_tun) entered forwarding state [ 232.102793][ T3375] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0 [ 232.110382][ T3375] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0 [ 232.117878][ T3375] hid-generic 0000:0004:0000.0014: unknown main item tag 0x0 [ 232.130363][ T3375] hid-generic 0000:0004:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 232.197977][T18767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6318'. [ 232.330592][T18773] syzkaller0: Caught tx_queue_len zero misconfig [ 232.463582][T18782] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 232.545332][T18796] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 232.565094][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 232.565112][ T29] audit: type=1400 audit(1742928286.640:5109): avc: denied { map } for pid=18797 comm="syz.3.6331" path="socket:[54886]" dev="sockfs" ino=54886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 232.631095][ T29] audit: type=1326 audit(1742928286.710:5110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.654733][ T29] audit: type=1326 audit(1742928286.710:5111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.657498][T18810] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 232.679703][ T29] audit: type=1326 audit(1742928286.760:5112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.713184][ T29] audit: type=1326 audit(1742928286.760:5113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.737311][ T29] audit: type=1326 audit(1742928286.760:5114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.760917][ T29] audit: type=1326 audit(1742928286.760:5115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.790697][ T29] audit: type=1326 audit(1742928286.870:5116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.814243][ T29] audit: type=1326 audit(1742928286.870:5117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.846547][ T29] audit: type=1326 audit(1742928286.870:5118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18806 comm="syz.3.6337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=94 compat=0 ip=0x7f2843cdd169 code=0x7ffc0000 [ 232.870512][T18808] bridge: RTM_NEWNEIGH with invalid ether address [ 232.901814][T18820] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 233.002196][T18837] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6349'. [ 233.097139][T18854] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6356'. [ 233.252985][T18875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6367'. [ 233.254408][T18872] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 233.584416][T18925] serio: Serial port ptm0 [ 233.863342][T18936] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6393'. [ 234.166042][ T23] IPVS: starting estimator thread 0... [ 234.275992][T18969] IPVS: using max 1920 ests per chain, 96000 per kthread [ 234.311197][T18983] netlink: 68 bytes leftover after parsing attributes in process `syz.2.6413'. [ 234.624190][T19006] pim6reg1: entered promiscuous mode [ 234.629678][T19006] pim6reg1: entered allmulticast mode [ 234.854834][T19023] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6433'. [ 234.913393][ T9] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 234.924701][T19028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.943508][ T9] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 234.963261][T19028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.964238][T19033] tls_set_device_offload_rx: netdev not found [ 235.265821][T19062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6448'. [ 235.578275][T19094] IPv4: Oversized IP packet from 127.202.26.0 [ 236.105988][T19105] serio: Serial port ptm0 [ 236.316007][T19116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.323517][T19116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.343278][T19116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.350840][T19116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.514376][T19129] SELinux: failed to load policy [ 236.608532][ T3375] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 236.637186][ T3375] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 237.567191][T19219] batadv_slave_0: entered allmulticast mode [ 237.573583][T19219] batadv_slave_0: left allmulticast mode [ 237.599401][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 237.599418][ T29] audit: type=1400 audit(1742928291.680:5319): avc: denied { create } for pid=19224 comm="syz.0.6521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.606142][T19228] __nla_validate_parse: 2 callbacks suppressed [ 237.606160][T19228] netlink: 2048 bytes leftover after parsing attributes in process `syz.9.6517'. [ 237.641735][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6517'. [ 237.651763][ T29] audit: type=1400 audit(1742928291.730:5320): avc: denied { setopt } for pid=19220 comm="syz.8.6519" lport=47014 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.721413][ T29] audit: type=1400 audit(1742928291.780:5321): avc: denied { write } for pid=19224 comm="syz.0.6521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 237.821986][ T29] audit: type=1400 audit(1742928291.900:5322): avc: denied { mounton } for pid=19240 comm="syz.0.6527" path="/1326/file0" dev="tmpfs" ino=6865 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 237.863966][ T29] audit: type=1400 audit(1742928291.940:5323): avc: denied { mount } for pid=19243 comm="syz.2.6529" name="/" dev="ramfs" ino=56619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 237.904703][ T29] audit: type=1400 audit(1742928291.980:5324): avc: denied { getopt } for pid=19251 comm="syz.2.6531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 237.924489][ T29] audit: type=1400 audit(1742928291.980:5325): avc: denied { name_connect } for pid=19251 comm="syz.2.6531" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 237.945638][ T29] audit: type=1400 audit(1742928292.030:5326): avc: denied { map } for pid=19253 comm="syz.0.6532" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.970785][ T29] audit: type=1400 audit(1742928292.030:5327): avc: denied { read write } for pid=19253 comm="syz.0.6532" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=56620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 237.995826][ T29] audit: type=1400 audit(1742928292.030:5328): avc: denied { execmem } for pid=19253 comm="syz.0.6532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 238.404630][T19294] sd 0:0:1:0: device reset [ 238.495439][T19303] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6554'. [ 238.610428][T19327] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6564'. [ 238.703019][T19337] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6568'. [ 238.897428][T19369] serio: Serial port ptm0 [ 239.245351][T19420] netlink: 1196 bytes leftover after parsing attributes in process `syz.9.6603'. [ 239.534618][T19441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6614'. [ 239.838246][T19444] vlan0: entered allmulticast mode [ 239.843517][T19444] hsr0: entered allmulticast mode [ 239.848686][T19444] hsr_slave_0: entered allmulticast mode [ 239.854329][T19444] hsr_slave_1: entered allmulticast mode [ 239.861889][T19444] hsr0: left allmulticast mode [ 239.866816][T19444] hsr_slave_0: left allmulticast mode [ 239.872262][T19444] hsr_slave_1: left allmulticast mode [ 240.137697][T19468] SELinux: ebitmap: truncated map [ 240.143396][T19468] SELinux: failed to load policy [ 240.237021][T19477] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 240.263231][T19477] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 240.336929][T19490] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6636'. [ 240.455298][T19497] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 240.588067][T19514] xt_hashlimit: overflow, try lower: 18446744073709551615/7 [ 241.091469][ T10] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 241.100665][T19563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.115894][ T10] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 241.148391][T19563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.249096][T19583] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.300533][T19583] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.357276][T19583] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.427926][T19583] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.493523][T19583] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.506482][T19583] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.519482][T19583] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.532330][T19583] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.709249][T19595] serio: Serial port ptm1 [ 241.930744][T19609] ip6gre1: entered allmulticast mode [ 241.984068][T19614] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6683'. [ 242.016605][T19614] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 242.563853][T19662] sch_tbf: burst 5 is lower than device bond0 mtu (1514) ! [ 242.661649][T19674] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.671570][T19674] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.719706][T19674] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.729630][T19674] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.749789][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 242.749806][ T29] audit: type=1326 audit(1742928296.830:5482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.9.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 242.779932][ T29] audit: type=1326 audit(1742928296.830:5483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.9.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 242.828313][T19674] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.838154][T19674] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 242.918532][T19691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6715'. [ 242.927869][T19691] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6715'. [ 242.937099][ T29] audit: type=1326 audit(1742928296.890:5484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.9.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 242.960718][ T29] audit: type=1326 audit(1742928296.900:5485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.9.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 242.984282][ T29] audit: type=1326 audit(1742928296.900:5486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.9.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f698fb1fa25 code=0x7ffc0000 [ 243.007873][ T29] audit: type=1326 audit(1742928296.900:5487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19680 comm="syz.9.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 243.036514][T19674] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.046498][T19674] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 243.111880][T19674] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.120247][T19674] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.121949][ T29] audit: type=1326 audit(1742928297.040:5488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19685 comm="syz.9.6712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 243.143678][T19674] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.160255][T19674] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.196211][ T29] audit: type=1400 audit(1742928297.210:5489): avc: denied { mount } for pid=19700 comm="syz.9.6719" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 243.224912][T19674] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.233384][T19674] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.333906][T19674] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 243.342339][T19674] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 243.744339][T19722] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6738'. [ 243.888931][ T29] audit: type=1400 audit(1742928297.970:5490): avc: denied { connect } for pid=19731 comm="syz.0.6731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 243.909428][ T29] audit: type=1400 audit(1742928297.990:5491): avc: denied { write } for pid=19731 comm="syz.0.6731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 244.712256][T19795] netlink: 'syz.3.6759': attribute type 3 has an invalid length. [ 245.325151][T19829] SELinux: security policydb version 17 (MLS) not backwards compatible [ 245.344560][T19829] SELinux: failed to load policy [ 245.487682][T19831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6777'. [ 245.509520][T19831] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.518391][T19831] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.527176][T19831] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.536071][T19831] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.557797][T19831] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.566844][T19831] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.575858][T19831] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.584810][T19831] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 245.618118][T19837] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6779'. [ 245.824887][T19849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6785'. [ 245.913630][T19851] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.932490][T19851] bridge0: entered allmulticast mode [ 245.964215][T19851] bridge_slave_0: left allmulticast mode [ 245.970165][T19851] bridge_slave_0: left promiscuous mode [ 245.975932][T19851] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.136383][T19864] netlink: 'syz.0.6790': attribute type 10 has an invalid length. [ 246.144266][T19864] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6790'. [ 246.162545][T19866] macsec0: entered promiscuous mode [ 246.629854][T19901] pimreg: entered allmulticast mode [ 246.638288][T19901] pimreg: left allmulticast mode [ 246.804151][T19916] netlink: 20 bytes leftover after parsing attributes in process `syz.8.6812'. [ 246.906008][T19917] Falling back ldisc for ttyS3. [ 247.775585][T19980] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6854'. [ 247.807116][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 247.807130][ T29] audit: type=1400 audit(1742928301.890:5571): avc: denied { create } for pid=19984 comm="syz.2.6846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.843423][ T29] audit: type=1400 audit(1742928301.910:5572): avc: denied { getopt } for pid=19984 comm="syz.2.6846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.863302][ T29] audit: type=1400 audit(1742928301.910:5573): avc: denied { setopt } for pid=19984 comm="syz.2.6846" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.909580][ T29] audit: type=1400 audit(1742928301.960:5574): avc: denied { create } for pid=19989 comm="syz.0.6847" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.930957][ T29] audit: type=1400 audit(1742928301.960:5575): avc: denied { map } for pid=19989 comm="syz.0.6847" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.955284][ T29] audit: type=1400 audit(1742928301.960:5576): avc: denied { read write } for pid=19989 comm="syz.0.6847" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58898 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 247.980349][ T29] audit: type=1400 audit(1742928301.980:5577): avc: denied { execute } for pid=19987 comm="syz.2.6848" path="/432/cgroup.stat" dev="tmpfs" ino=2242 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.003863][ T29] audit: type=1400 audit(1742928301.990:5579): avc: denied { watch } for pid=19977 comm="syz.8.6843" path="/1009/file1" dev="tmpfs" ino=5224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 248.026652][ T29] audit: type=1400 audit(1742928301.990:5578): avc: denied { connect } for pid=19987 comm="syz.2.6848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 248.046382][ T29] audit: type=1400 audit(1742928301.990:5580): avc: denied { name_connect } for pid=19987 comm="syz.2.6848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 248.908203][T20047] pimreg: entered allmulticast mode [ 248.915260][T20047] pimreg: left allmulticast mode [ 249.001121][T20057] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.067476][T20057] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.136863][T20057] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.201414][T20057] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.263283][T20057] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.305011][T20057] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.324309][T20057] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.350623][T20057] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.372767][T20095] ------------[ cut here ]------------ [ 249.378416][T20095] WARNING: CPU: 1 PID: 20095 at mm/page_alloc.c:4716 __alloc_frozen_pages_noprof+0x71/0x340 [ 249.388583][T20095] Modules linked in: [ 249.392666][T20095] CPU: 1 UID: 0 PID: 20095 Comm: syz.3.6895 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 249.405125][T20095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 249.415339][T20095] RIP: 0010:__alloc_frozen_pages_noprof+0x71/0x340 [ 249.421937][T20095] Code: 00 20 00 00 75 0f 41 83 fd 0b 72 09 f6 05 47 6d 50 05 01 74 0d 41 83 fd 0a 76 18 31 ed e9 85 01 00 00 c6 05 31 6d 50 05 01 90 <0f> 0b 90 41 83 fd 0a 77 e8 23 1d f0 63 54 05 65 4c 8b 24 25 08 50 [ 249.441613][T20095] RSP: 0018:ffffc90000edba70 EFLAGS: 00010246 [ 249.447996][T20095] RAX: a745960b38896300 RBX: 0000000000040dc0 RCX: ffffffff88db5020 [ 249.456010][T20095] RDX: 0000000000000000 RSI: 0000000000000016 RDI: 0000000000040dc0 [ 249.464073][T20095] RBP: 0000000000040dc0 R08: ffffffff81ce423e R09: 0000000000000000 [ 249.472099][T20095] R10: ffff888116ecd040 R11: 0001888116ecd050 R12: ffffffff88db5020 [ 249.480156][T20095] R13: 0000000000000016 R14: 0000000000000000 R15: 0000000000000000 [ 249.488173][T20095] FS: 00007f28423476c0(0000) GS:ffff8882aef5f000(0000) knlGS:0000000000000000 [ 249.497165][T20095] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.503765][T20095] CR2: 0000200000001000 CR3: 000000010b452000 CR4: 00000000003506f0 [ 249.511803][T20095] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 249.519825][T20095] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 249.527849][T20095] Call Trace: [ 249.531955][T20095] [ 249.535008][T20095] ? __warn+0x141/0x350 [ 249.539250][T20095] ? report_bug+0x318/0x420 [ 249.543809][T20095] ? __alloc_frozen_pages_noprof+0x71/0x340 [ 249.549788][T20095] ? __alloc_frozen_pages_noprof+0x71/0x340 [ 249.555702][T20095] ? __alloc_frozen_pages_noprof+0x73/0x340 [ 249.561719][T20095] ? handle_bug+0x89/0x170 [ 249.566209][T20095] ? exc_invalid_op+0x1a/0x50 [ 249.570999][T20095] ? asm_exc_invalid_op+0x1a/0x20 [ 249.576219][T20095] ? hashtab_init+0x4e/0xf0 [ 249.580768][T20095] ? __alloc_frozen_pages_noprof+0x71/0x340 [ 249.586799][T20095] __alloc_pages_noprof+0x9/0x20 [ 249.591785][T20095] ___kmalloc_large_node+0x83/0x130 [ 249.597040][T20095] __kmalloc_large_node_noprof+0x17/0xa0 [ 249.602682][T20095] __kmalloc_noprof+0x2bb/0x410 [ 249.607559][T20095] ? hashtab_init+0x82/0xf0 [ 249.612238][T20095] hashtab_init+0x82/0xf0 [ 249.616687][T20095] symtab_init+0x2a/0x40 [ 249.620982][T20095] policydb_read+0x528/0x1350 [ 249.625688][T20095] security_load_policy+0xc1/0x8d0 [ 249.630851][T20095] ? rep_movs_alternative+0x4a/0x70 [ 249.636175][T20095] sel_write_load+0x1f7/0x3c0 [ 249.640902][T20095] ? __pfx_sel_write_load+0x10/0x10 [ 249.646168][T20095] vfs_write+0x295/0x950 [ 249.650448][T20095] ? __fget_files+0x186/0x1c0 [ 249.655130][T20095] ksys_write+0xeb/0x1b0 [ 249.659500][T20095] __x64_sys_write+0x42/0x50 [ 249.664179][T20095] x64_sys_call+0x2a45/0x2e10 [ 249.668877][T20095] do_syscall_64+0xc9/0x1c0 [ 249.673459][T20095] ? clear_bhb_loop+0x25/0x80 [ 249.678224][T20095] ? clear_bhb_loop+0x25/0x80 [ 249.682948][T20095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.688856][T20095] RIP: 0033:0x7f2843cdd169 [ 249.693383][T20095] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.713041][T20095] RSP: 002b:00007f2842347038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.721490][T20095] RAX: ffffffffffffffda RBX: 00007f2843ef5fa0 RCX: 00007f2843cdd169 [ 249.729567][T20095] RDX: 0000000000002000 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.737561][T20095] RBP: 00007f2843d5e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 249.745540][T20095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.753578][T20095] R13: 0000000000000000 R14: 00007f2843ef5fa0 R15: 00007fff43722dc8 [ 249.761637][T20095] [ 249.764658][T20095] ---[ end trace 0000000000000000 ]--- [ 249.770142][T20095] SELinux: failed to load policy [ 249.929155][T20126] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6910'. [ 250.221577][T20167] bridge0: port 3(syz_tun) entered disabled state [ 250.228237][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.235583][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.243884][T20167] bridge0: entered allmulticast mode [ 250.284280][T20167] syz_tun: left allmulticast mode [ 250.289407][T20167] syz_tun: left promiscuous mode [ 250.294537][T20167] bridge0: port 3(syz_tun) entered disabled state [ 250.303100][T20167] bridge_slave_1: left allmulticast mode [ 250.308869][T20167] bridge_slave_1: left promiscuous mode [ 250.314900][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.324708][T20167] bridge_slave_0: left allmulticast mode [ 250.330638][T20167] bridge_slave_0: left promiscuous mode [ 250.336429][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.577152][T20192] bond1: entered promiscuous mode [ 250.582301][T20192] bond1: entered allmulticast mode [ 250.588120][T20192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.600111][T20192] bond1 (unregistering): Released all slaves [ 250.902986][T20206] vlan0: entered allmulticast mode [ 250.929201][T20206] bond0: entered allmulticast mode [ 250.938396][T20206] bond0: left allmulticast mode [ 251.114308][T20222] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6952'. [ 251.688097][T20255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.697424][T20255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.244224][T20298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6986'. [ 252.536272][T20327] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6999'. [ 252.540955][T20326] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6998'. [ 252.704846][T20344] netlink: 268 bytes leftover after parsing attributes in process `syz.3.7007'. [ 252.807755][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7011'. [ 252.816831][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7011'. [ 252.836105][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7011'. [ 252.856622][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7011'. [ 252.926989][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 252.927087][ T29] audit: type=1400 audit(1742928307.000:5739): avc: denied { write } for pid=20361 comm="syz.2.7016" lport=37762 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 252.998044][ T29] audit: type=1400 audit(1742928307.080:5740): avc: denied { name_bind } for pid=20365 comm="syz.3.7018" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 253.320384][ T29] audit: type=1400 audit(1742928307.400:5741): avc: denied { write } for pid=20383 comm="syz.2.7023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 253.390640][ T29] audit: type=1400 audit(1742928307.470:5742): avc: denied { read write } for pid=20385 comm="syz.2.7024" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 253.435529][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x7 [ 253.443434][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.451282][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.459090][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.466883][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.474636][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.482434][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.490227][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.498028][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.505806][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.513562][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.521362][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.529169][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.537004][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.544763][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.545853][ T29] audit: type=1400 audit(1742928307.500:5743): avc: denied { open } for pid=20385 comm="syz.2.7024" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 253.552626][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.583773][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.591540][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.599323][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.607096][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.614895][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.621604][T20390] bond1: entered promiscuous mode [ 253.622717][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.627763][T20390] bond1: entered allmulticast mode [ 253.635444][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.640784][T20390] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.648366][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.662925][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.670800][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.678603][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.686406][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.694193][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.701963][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.709816][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.717638][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.725487][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.733247][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.741114][T18090] hid-generic 0000:007F:FFFFFFFE.0018: unknown main item tag 0x0 [ 253.756866][T18090] hid-generic 0000:007F:FFFFFFFE.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 253.768344][T20390] bond1 (unregistering): Released all slaves [ 253.946394][T20403] veth0_macvtap: left promiscuous mode [ 253.972461][ T29] audit: type=1400 audit(1742928308.050:5744): avc: denied { name_bind } for pid=20404 comm="syz.9.7032" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 254.038869][T20411] vlan0: entered allmulticast mode [ 254.048210][T20411] : (slave vlan0): Opening slave failed [ 254.127717][ T3298] block device autoloading is deprecated and will be removed. [ 254.140494][ T29] audit: type=1400 audit(1742928308.200:5745): avc: denied { append } for pid=20420 comm="syz.9.7040" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 254.164366][ T29] audit: type=1400 audit(1742928308.200:5746): avc: denied { open } for pid=20420 comm="syz.9.7040" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 254.188488][ T29] audit: type=1400 audit(1742928308.220:5747): avc: denied { ioctl } for pid=20420 comm="syz.9.7040" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 254.240864][ T29] audit: type=1326 audit(1742928308.320:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20426 comm="syz.2.7042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a1c5d169 code=0x7ffc0000 [ 254.517512][T20449] wireguard0: entered promiscuous mode [ 254.523037][T20449] wireguard0: entered allmulticast mode [ 254.551191][T20452] bond1: entered promiscuous mode [ 254.556304][T20452] bond1: entered allmulticast mode [ 254.561811][T20452] 8021q: adding VLAN 0 to HW filter on device bond1 [ 254.580986][T20452] bond1 (unregistering): Released all slaves [ 255.189138][T20516] __nla_validate_parse: 3 callbacks suppressed [ 255.189152][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7080'. [ 255.219511][T20517] ref_ctr_offset mismatch. inode: 0x1d30 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 255.333812][T20529] vlan0: entered allmulticast mode [ 255.353595][T20529] bond0: entered allmulticast mode [ 255.358908][T20529] bond_slave_0: entered allmulticast mode [ 255.364709][T20529] bond_slave_1: entered allmulticast mode [ 255.379823][T20529] bond0: left allmulticast mode [ 255.384759][T20529] bond_slave_0: left allmulticast mode [ 255.390372][T20529] bond_slave_1: left allmulticast mode [ 255.660049][T20552] bond2: entered promiscuous mode [ 255.665248][T20552] bond2: entered allmulticast mode [ 255.676424][T20552] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.694824][T20552] bond2 (unregistering): Released all slaves [ 255.971462][T20575] vlan0: entered allmulticast mode [ 255.978865][T20575] : (slave vlan0): Opening slave failed [ 256.084278][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x7 [ 256.092138][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.100027][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.107922][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.115762][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.123523][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.131306][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.139162][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.146947][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.154755][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.162562][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.170389][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.178213][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.186003][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.193827][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.201618][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.209408][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.217246][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.224997][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.232791][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.240601][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.248458][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.256304][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.264070][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.271887][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.279684][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.287526][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.295282][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.303106][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.310948][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.318755][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.326550][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.334308][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.342167][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.350023][T18090] hid-generic 0000:007F:FFFFFFFE.0019: unknown main item tag 0x0 [ 256.442207][T18090] hid-generic 0000:007F:FFFFFFFE.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.654768][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7115'. [ 256.728229][T20617] netlink: 'syz.9.7116': attribute type 1 has an invalid length. [ 256.867697][T20635] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 257.559989][T20655] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.567256][T20655] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.601570][T20649] Set syz1 is full, maxelem 65536 reached [ 257.677741][T20655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.688063][T20655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.714298][T20655] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.722896][T20655] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.731393][T20655] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.739978][T20655] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.749886][T20655] dummy0: left allmulticast mode [ 257.754874][T20655] macsec1: left allmulticast mode [ 257.790482][T20657] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.870883][T20657] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.959714][T20657] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.008713][T20657] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.048928][T20677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7142'. [ 258.090270][T20661] chnl_net:caif_netlink_parms(): no params data found [ 258.127740][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 258.127754][ T29] audit: type=1400 audit(1742928312.210:5878): avc: denied { listen } for pid=20686 comm="syz.9.7145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.156412][T20657] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.168022][T20657] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.176256][ T29] audit: type=1400 audit(1742928312.210:5879): avc: denied { accept } for pid=20686 comm="syz.9.7145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 258.211951][T20657] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.228845][ T29] audit: type=1326 audit(1742928312.300:5880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.252456][ T29] audit: type=1326 audit(1742928312.300:5881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.276263][ T29] audit: type=1326 audit(1742928312.300:5882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.300046][ T29] audit: type=1326 audit(1742928312.300:5883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.323606][ T29] audit: type=1326 audit(1742928312.300:5884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.347125][ T29] audit: type=1326 audit(1742928312.300:5885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.370603][ T29] audit: type=1326 audit(1742928312.300:5886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.394154][ T29] audit: type=1326 audit(1742928312.300:5887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20689 comm="syz.9.7147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 258.441256][T20657] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.464426][T20661] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.471666][T20661] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.484320][T20661] bridge_slave_0: entered allmulticast mode [ 258.496561][T20661] bridge_slave_0: entered promiscuous mode [ 258.507240][T20661] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.514417][T20661] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.527956][T20661] bridge_slave_1: entered allmulticast mode [ 258.534606][T20661] bridge_slave_1: entered promiscuous mode [ 258.580419][T20661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.603157][T20702] syzkaller0: entered promiscuous mode [ 258.608804][T20702] syzkaller0: entered allmulticast mode [ 258.623866][T20661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.673258][T20661] team0: Port device team_slave_0 added [ 258.681585][T20661] team0: Port device team_slave_1 added [ 258.704772][T20661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.711933][T20661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.737999][T20661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 258.751387][T20661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 258.758480][T20661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 258.784479][T20661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.815489][T20661] hsr_slave_0: entered promiscuous mode [ 258.821771][T20661] hsr_slave_1: entered promiscuous mode [ 258.827993][T20661] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.835603][T20661] Cannot create hsr debugfs directory [ 258.994600][T20661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 259.004596][T20661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.051629][T20732] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 259.088620][T20661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 259.098654][T20661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.140584][T20738] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 259.147964][T20738] IPv6: NLM_F_CREATE should be set when creating new route [ 259.187428][T20661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 259.197544][T20661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.214350][T20742] netlink: 9 bytes leftover after parsing attributes in process `+}[@'. [ 259.223501][T20742] 0·: renamed from hsr0 (while UP) [ 259.230705][T20742] 0·: entered allmulticast mode [ 259.235617][T20742] hsr_slave_0: entered allmulticast mode [ 259.241333][T20742] hsr_slave_1: entered allmulticast mode [ 259.248732][T20742] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 259.267476][T20661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 259.277626][T20661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 259.311785][T20748] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7171'. [ 259.439663][T20753] 0ªX¹¦À: left allmulticast mode [ 259.574936][T20753] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.583532][T20753] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.591975][T20753] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.600438][T20753] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.626737][T20753] gretap1: left allmulticast mode [ 259.641622][T20753] ip6gre1: left allmulticast mode [ 259.665603][T20661] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 259.715428][ T4175] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.731059][T20661] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 259.745094][T20661] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 259.760399][T20661] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 259.781215][ T4175] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.822500][ T4175] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.857742][T20661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.865558][ T4175] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.880794][T20661] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.891853][ T4149] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.899027][ T4149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.933111][ T4149] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.940321][ T4149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.979364][ T4175] bridge_slave_0: left allmulticast mode [ 259.985106][ T4175] bridge_slave_0: left promiscuous mode [ 259.990861][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.064126][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7179'. [ 260.076987][ T4175] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 260.328873][ T4175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.339369][ T4175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.348818][ T4175] bond0 (unregistering): Released all slaves [ 260.388375][ T4175] tipc: Disabling bearer [ 260.393451][ T4175] tipc: Left network mode [ 260.428633][T20661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.439233][ T4175] hsr_slave_0: left promiscuous mode [ 260.444955][ T4175] hsr_slave_1: left promiscuous mode [ 260.452825][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.461111][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.514177][ T4175] team0 (unregistering): Port device team_slave_0 removed [ 260.605495][T20661] veth0_vlan: entered promiscuous mode [ 260.613338][T20661] veth1_vlan: entered promiscuous mode [ 260.629506][T20661] veth0_macvtap: entered promiscuous mode [ 260.637344][T20661] veth1_macvtap: entered promiscuous mode [ 260.647928][T20661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.659249][T20661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.668913][T20661] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.677799][T20661] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.686617][T20661] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.695396][T20661] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.037421][T20812] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7190'. [ 261.058752][T20813] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.068646][T20813] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.078507][T20813] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.178825][T20813] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.188719][T20813] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.198511][T20813] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.278448][T20813] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.288330][T20813] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.298114][T20813] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.488743][T20813] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.498669][T20813] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.508519][T20813] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.685065][T20813] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.693520][T20813] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.702052][T20813] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.713542][T20834] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.782534][T20813] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.790949][T20813] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.799265][T20813] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.928125][T20813] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.936397][T20813] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.944742][T20813] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 261.958197][T20813] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.966492][T20813] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 261.974789][T20813] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 262.523446][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7227'. [ 262.532488][T20902] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7227'. [ 262.541516][T20902] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7227'. [ 262.550878][T20902] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7227'. [ 262.560034][T20902] netlink: 5 bytes leftover after parsing attributes in process `syz.9.7227'. [ 262.683202][T20925] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7239'. [ 262.776048][ T3375] page_pool_release_retry() stalled pool shutdown: id 111, 1 inflight 60 sec [ 262.853207][T20946] SELinux: ebitmap: truncated map [ 262.869229][T20946] SELinux: failed to load policy [ 263.160893][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 263.160910][ T29] audit: type=1400 audit(1742928317.240:5990): avc: denied { lock } for pid=20973 comm="syz.3.7260" path="socket:[63598]" dev="sockfs" ino=63598 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 263.234710][ T29] audit: type=1400 audit(1742928317.310:5991): avc: denied { create } for pid=20980 comm="syz.8.7263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 263.316417][T20983] Falling back ldisc for ttyS3. [ 263.506620][ T29] audit: type=1400 audit(1742928317.590:5992): avc: denied { getopt } for pid=20993 comm="syz.8.7269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 263.579631][T20995] uprobe: syz.2.7270:20995 failed to unregister, leaking uprobe [ 263.590472][T21004] netlink: 'syz.0.7273': attribute type 4 has an invalid length. [ 263.601054][T21004] netlink: 'syz.0.7273': attribute type 4 has an invalid length. [ 263.629420][T21006] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7274'. [ 263.763226][T21014] syz_tun: entered allmulticast mode [ 263.776344][T21013] syz_tun: left allmulticast mode [ 263.819240][T21017] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 264.040465][T21030] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7285'. [ 264.196507][T21047] 9pnet_fd: Insufficient options for proto=fd [ 264.241726][ T29] audit: type=1326 audit(1742928318.320:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.3.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 264.301061][T21060] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7298'. [ 264.315272][ T29] audit: type=1326 audit(1742928318.350:5994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.3.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 264.339004][ T29] audit: type=1326 audit(1742928318.350:5995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.3.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 264.362693][ T29] audit: type=1326 audit(1742928318.350:5996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.3.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 264.386524][ T29] audit: type=1326 audit(1742928318.350:5997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.3.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 264.410278][ T29] audit: type=1326 audit(1742928318.350:5998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.3.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 264.433843][ T29] audit: type=1326 audit(1742928318.350:5999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21057 comm="syz.3.7297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 264.475246][T21070] IPv4: Oversized IP packet from 127.202.26.0 [ 264.817332][T21114] syzkaller0: entered promiscuous mode [ 264.822848][T21114] syzkaller0: entered allmulticast mode [ 264.935597][T21126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.175956][ T9] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 60 sec [ 265.351926][T21145] netlink: 'syz.0.7337': attribute type 1 has an invalid length. [ 265.364891][T21145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.377009][T21145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 265.384358][T21145] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 265.395928][T21145] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 265.525079][T21153] syzkaller0: entered promiscuous mode [ 265.530795][T21153] syzkaller0: entered allmulticast mode [ 266.028922][T21195] netlink: 'syz.2.7359': attribute type 4 has an invalid length. [ 266.037806][T21195] netlink: 'syz.2.7359': attribute type 4 has an invalid length. [ 266.558346][T21218] IPv4: Oversized IP packet from 127.202.26.0 [ 266.778765][T21233] __nla_validate_parse: 4 callbacks suppressed [ 266.778780][T21233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7372'. [ 266.988186][T21248] block device autoloading is deprecated and will be removed. [ 266.998992][T21248] syz.9.7378: attempt to access beyond end of device [ 266.998992][T21248] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 267.718414][T21309] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7403'. [ 267.734729][T21306] vhci_hcd: default hub control req: 010b v0000 i0000 l0 [ 267.748069][T21311] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.7404'. [ 267.758198][T21311] netlink: zone id is out of range [ 267.763338][T21311] netlink: zone id is out of range [ 267.770847][T21311] netlink: zone id is out of range [ 267.779104][T21311] netlink: del zone limit has 8 unknown bytes [ 267.875008][T21321] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 2, id = 0 [ 268.223815][T21358] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7421'. [ 268.444934][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 268.444952][ T29] audit: type=1326 audit(1742928322.520:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21395 comm="syz.3.7439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x0 [ 268.577035][ T29] audit: type=1400 audit(1742928322.660:6113): avc: denied { search } for pid=21408 comm="syz.8.7445" name="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.599490][ T29] audit: type=1400 audit(1742928322.660:6114): avc: denied { read } for pid=21408 comm="syz.8.7445" name="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.621706][ T29] audit: type=1400 audit(1742928322.660:6115): avc: denied { open } for pid=21408 comm="syz.8.7445" path="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.646906][ T29] audit: type=1400 audit(1742928322.660:6116): avc: denied { watch } for pid=21408 comm="syz.8.7445" path="/" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 268.803358][ T29] audit: type=1400 audit(1742928322.880:6117): avc: denied { getopt } for pid=21429 comm="+}[@" lport=141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 269.620705][T21456] Set syz1 is full, maxelem 65536 reached [ 270.347892][ T29] audit: type=1326 audit(1742928324.430:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21493 comm="syz.3.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 270.404602][ T29] audit: type=1326 audit(1742928324.430:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21493 comm="syz.3.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 270.428187][ T29] audit: type=1326 audit(1742928324.460:6120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21493 comm="syz.3.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 270.451554][ T29] audit: type=1326 audit(1742928324.460:6121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21493 comm="syz.3.7480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 271.703505][T21540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7502'. [ 271.759474][T21547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21547 comm=syz.3.7503 [ 271.853424][T21553] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.863304][T21553] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.873288][T21553] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 271.927924][T21553] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 271.937783][T21553] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 271.947787][T21553] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 272.007507][T21553] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.017400][T21553] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 272.027287][T21553] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 272.150274][T21553] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 272.160176][T21553] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 272.170291][T21553] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 272.222053][T21553] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.230419][T21553] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.238718][T21553] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.251542][T21553] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.259840][T21553] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.268225][T21553] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.287842][T21553] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.296265][T21553] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.304725][T21553] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.320131][T21553] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.328508][T21553] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 272.336853][T21553] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 272.517528][T21592] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 273.143997][T21652] sit3: entered promiscuous mode [ 273.149220][T21652] sit3: entered allmulticast mode [ 273.372491][T21677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.383252][T21679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7554'. [ 273.383694][T21677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.625302][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 273.625319][ T29] audit: type=1326 audit(1742928327.700:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.2.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a1c5d169 code=0x7ffc0000 [ 273.655080][ T29] audit: type=1326 audit(1742928327.700:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.2.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a1c5d169 code=0x7ffc0000 [ 273.678734][ T29] audit: type=1326 audit(1742928327.700:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.2.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f92a1c5d169 code=0x7ffc0000 [ 273.702277][ T29] audit: type=1326 audit(1742928327.700:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.2.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a1c5d169 code=0x7ffc0000 [ 273.725958][ T29] audit: type=1326 audit(1742928327.700:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.2.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f92a1c5d169 code=0x7ffc0000 [ 273.749568][ T29] audit: type=1326 audit(1742928327.700:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21697 comm="syz.2.7564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f92a1c5d169 code=0x7ffc0000 [ 273.806741][T21677] Set syz1 is full, maxelem 65536 reached [ 273.874542][T21709] batadv_slave_0: entered allmulticast mode [ 273.881280][T21709] batadv_slave_0: entered promiscuous mode [ 273.887558][T21709] batadv_slave_0: left promiscuous mode [ 273.893218][T21709] batadv_slave_0: left allmulticast mode [ 274.142259][ T29] audit: type=1400 audit(1742928328.220:6198): avc: denied { bind } for pid=21743 comm="syz.0.7586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.390771][ T29] audit: type=1400 audit(1742928328.470:6199): avc: denied { connect } for pid=21763 comm="syz.3.7596" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 274.410633][ T29] audit: type=1400 audit(1742928328.470:6200): avc: denied { name_connect } for pid=21763 comm="syz.3.7596" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 274.467793][ T29] audit: type=1400 audit(1742928328.550:6201): avc: denied { write } for pid=21763 comm="syz.3.7596" laddr=fe80::f lport=38850 faddr=fe80::bb fport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 274.494806][T21771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7599'. [ 274.509118][T21771] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7599'. [ 274.550259][T21775] netlink: 146340 bytes leftover after parsing attributes in process `%-'$]'. [ 274.560240][T21775] netlink: zone id is out of range [ 274.565425][T21775] netlink: zone id is out of range [ 274.571030][T21775] netlink: zone id is out of range [ 274.577750][T21775] netlink: zone id is out of range [ 274.582914][T21775] netlink: zone id is out of range [ 274.588074][T21775] netlink: zone id is out of range [ 274.593264][T21775] netlink: zone id is out of range [ 274.598475][T21775] netlink: zone id is out of range [ 274.685776][T21775] net_ratelimit: 23 callbacks suppressed [ 274.685796][T21775] netlink: zone id is out of range [ 274.696703][T21775] netlink: zone id is out of range [ 274.701820][T21775] netlink: zone id is out of range [ 274.706963][T21775] netlink: zone id is out of range [ 274.712122][T21775] netlink: zone id is out of range [ 274.772322][T21775] netlink: zone id is out of range [ 274.777591][T21775] netlink: zone id is out of range [ 274.782722][T21775] netlink: zone id is out of range [ 274.787886][T21775] netlink: zone id is out of range [ 274.793161][T21775] netlink: zone id is out of range [ 275.247271][T21797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.264774][T21797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.329115][T21834] pim6reg1: entered promiscuous mode [ 276.334460][T21834] pim6reg1: entered allmulticast mode [ 276.804435][T21857] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7633'. [ 277.153727][T21898] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 277.161023][T21898] IPv6: NLM_F_CREATE should be set when creating new route [ 277.304004][T21920] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7661'. [ 277.579061][T21959] bridge: RTM_NEWNEIGH with invalid ether address [ 277.616999][T21963] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7680'. [ 278.673424][T22029] netlink: 'syz.9.7707': attribute type 10 has an invalid length. [ 278.681497][T22029] netlink: 40 bytes leftover after parsing attributes in process `syz.9.7707'. [ 279.282131][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 279.282148][ T29] audit: type=1400 audit(1742928333.360:6329): avc: denied { mount } for pid=22083 comm="syz.8.7733" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 279.349105][T22089] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7735'. [ 279.652397][ T29] audit: type=1326 audit(1742928333.730:6330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.676072][ T29] audit: type=1326 audit(1742928333.730:6331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.712569][ T29] audit: type=1326 audit(1742928333.730:6332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.736344][ T29] audit: type=1326 audit(1742928333.730:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.759969][ T29] audit: type=1326 audit(1742928333.730:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.783559][ T29] audit: type=1326 audit(1742928333.730:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.807144][ T29] audit: type=1326 audit(1742928333.730:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.830785][ T29] audit: type=1326 audit(1742928333.730:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.854331][ T29] audit: type=1326 audit(1742928333.730:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22105 comm="syz.3.7742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 279.905047][T22124] bridge0: port 3(syz_tun) entered blocking state [ 279.911685][T22124] bridge0: port 3(syz_tun) entered disabled state [ 279.918519][T22124] syz_tun: entered allmulticast mode [ 279.924336][T22124] syz_tun: entered promiscuous mode [ 280.323893][T22143] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7759'. [ 280.607961][T22165] tipc: Started in network mode [ 280.613097][T22165] tipc: Node identity 3a46d8e24848, cluster identity 4711 [ 280.620362][T22165] tipc: Enabled bearer , priority 0 [ 280.678226][T22165] tipc: Disabling bearer [ 280.945835][ T9] page_pool_release_retry() stalled pool shutdown: id 120, 30 inflight 60 sec [ 281.394572][T22195] chnl_net:caif_netlink_parms(): no params data found [ 281.523111][T22195] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.523212][T22195] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.523408][T22195] bridge_slave_0: entered allmulticast mode [ 281.524009][T22195] bridge_slave_0: entered promiscuous mode [ 281.525260][T22195] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.525291][T22195] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.525562][T22195] bridge_slave_1: entered allmulticast mode [ 281.546768][T22195] bridge_slave_1: entered promiscuous mode [ 281.616351][T22195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.629304][T22195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.651270][T22195] team0: Port device team_slave_0 added [ 281.658565][T22195] team0: Port device team_slave_1 added [ 281.680819][T22195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.687986][T22195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.714008][T22195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.727051][T22195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.734046][T22195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.760123][T22195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.810181][T22195] hsr_slave_0: entered promiscuous mode [ 281.816924][T22195] hsr_slave_1: entered promiscuous mode [ 281.822896][T22195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.830736][T22195] Cannot create hsr debugfs directory [ 282.205234][T22195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.220329][T22195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.239326][T22195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.252643][T22195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.337893][T22195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.383038][T22195] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.403164][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.410341][ T4175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.447553][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.454679][ T4176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.544478][T22195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.744100][T22195] veth0_vlan: entered promiscuous mode [ 282.766634][T22195] veth1_vlan: entered promiscuous mode [ 282.798130][T22310] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7821'. [ 282.800590][T22195] veth0_macvtap: entered promiscuous mode [ 282.847656][T22314] netlink: 3 bytes leftover after parsing attributes in process `syz.8.7822'. [ 282.857294][T22195] veth1_macvtap: entered promiscuous mode [ 282.871988][T22314] 0ªX¹¦À: renamed from caif0 [ 282.882010][T22314] 0ªX¹¦À: entered allmulticast mode [ 282.887375][T22314] net_ratelimit: 315 callbacks suppressed [ 282.887426][T22314] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 282.917667][T22195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.928142][T22195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.956362][T22195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.972908][T22195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.983497][T22195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.995688][T22195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.008444][T22195] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.017348][T22195] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.026104][T22195] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.034894][T22195] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.109509][T22324] vlan0: entered allmulticast mode [ 283.114683][T22324] bridge_slave_0: entered allmulticast mode [ 283.137147][T22324] bridge_slave_0: left allmulticast mode [ 283.148506][T22328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7783'. [ 283.182913][T22332] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7827'. [ 283.286700][T22344] loop5: detected capacity change from 0 to 2048 [ 283.307718][T22344] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 283.319969][T22344] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.470873][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7838'. [ 283.479963][T22369] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7838'. [ 283.508877][T22371] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7842'. [ 283.639415][T22362] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7829: bg 0: block 345: padding at end of block bitmap is not set [ 283.654756][T22362] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 283.667267][T22362] EXT4-fs (loop5): This should not happen!! Data will be lost [ 283.667267][T22362] [ 283.735046][ T4180] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 283.747874][ T4180] EXT4-fs (loop5): This should not happen!! Data will be lost [ 283.747874][ T4180] [ 283.804797][ T4180] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 283.817647][ T4180] EXT4-fs (loop5): This should not happen!! Data will be lost [ 283.817647][ T4180] [ 283.827353][ T4180] EXT4-fs (loop5): Total free blocks count 0 [ 283.833347][ T4180] EXT4-fs (loop5): Free/Dirty block details [ 283.839304][ T4180] EXT4-fs (loop5): free_blocks=0 [ 283.867732][T22399] __nla_validate_parse: 1 callbacks suppressed [ 283.867748][T22399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7854'. [ 284.169076][T22419] loop5: detected capacity change from 0 to 2048 [ 284.196966][T22423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7865'. [ 284.207103][T22423] hsr_slave_0: left promiscuous mode [ 284.212914][T22423] hsr_slave_1: left promiscuous mode [ 284.230256][T22419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.242557][T22419] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.380972][T22442] bond_slave_1: mtu less than device minimum [ 284.435024][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 284.435063][ T29] audit: type=1400 audit(1742928338.510:6439): avc: denied { getopt } for pid=22445 comm="syz.8.7873" lport=40957 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 284.587034][T22438] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7863: bg 0: block 345: padding at end of block bitmap is not set [ 284.604443][T22438] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 284.617172][T22438] EXT4-fs (loop5): This should not happen!! Data will be lost [ 284.617172][T22438] [ 284.680485][ T4176] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 284.693193][ T4176] EXT4-fs (loop5): This should not happen!! Data will be lost [ 284.693193][ T4176] [ 284.722176][ T4176] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 284.735041][ T4176] EXT4-fs (loop5): This should not happen!! Data will be lost [ 284.735041][ T4176] [ 284.744802][ T4176] EXT4-fs (loop5): Total free blocks count 0 [ 284.750824][ T4176] EXT4-fs (loop5): Free/Dirty block details [ 284.756760][ T4176] EXT4-fs (loop5): free_blocks=0 [ 284.821444][T22452] sit1: entered promiscuous mode [ 284.826490][T22452] sit1: entered allmulticast mode [ 284.964181][T22462] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 284.964310][T22461] IPVS: stopping master sync thread 22462 ... [ 285.095560][ T29] audit: type=1400 audit(1742928339.170:6440): avc: denied { bind } for pid=22470 comm="syz.3.7883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 285.177148][T22482] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7887'. [ 285.228300][T22488] netlink: 'syz.9.7890': attribute type 29 has an invalid length. [ 285.237299][T22488] netlink: 'syz.9.7890': attribute type 29 has an invalid length. [ 285.246181][T22488] netlink: 508 bytes leftover after parsing attributes in process `syz.9.7890'. [ 285.394596][ T29] audit: type=1400 audit(1742928339.470:6441): avc: denied { write } for pid=22500 comm="syz.0.7896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 285.418607][T22503] bridge0: port 4(vlan0) entered blocking state [ 285.425099][T22503] bridge0: port 4(vlan0) entered disabled state [ 285.441111][T22503] vlan0: entered allmulticast mode [ 285.447945][T22503] vlan0: left allmulticast mode [ 285.511979][T22511] tipc: Enabling of bearer rejected, failed to enable media [ 285.552176][T22515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.600458][T22515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.660331][T22515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.674340][T22525] sit3: entered promiscuous mode [ 285.679399][T22525] sit3: entered allmulticast mode [ 285.720379][T22515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.772313][T22534] loop5: detected capacity change from 0 to 512 [ 285.773408][T22515] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.779362][T22534] EXT4-fs: Ignoring removed oldalloc option [ 285.805527][T22515] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.818926][T22515] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.832523][T22534] EXT4-fs error (device loop5): ext4_xattr_inode_iget:436: comm syz.5.7911: Parent and EA inode have the same ino 15 [ 285.835704][T22515] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.860514][T22534] EXT4-fs (loop5): Remounting filesystem read-only [ 285.867196][T22534] EXT4-fs warning (device loop5): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 285.883377][T22534] EXT4-fs (loop5): 1 orphan inode deleted [ 285.909492][T22534] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.921755][T22534] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 285.923173][ T29] audit: type=1326 audit(1742928340.000:6442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.9.7917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 285.931099][T22534] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.953636][ T29] audit: type=1326 audit(1742928340.030:6443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.9.7917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 285.984781][ T29] audit: type=1326 audit(1742928340.040:6444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.9.7917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 286.008594][ T29] audit: type=1326 audit(1742928340.040:6445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.9.7917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 286.032151][ T29] audit: type=1326 audit(1742928340.040:6446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.9.7917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 286.055861][ T29] audit: type=1326 audit(1742928340.040:6447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.9.7917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 286.079548][ T29] audit: type=1326 audit(1742928340.040:6448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22546 comm="syz.9.7917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 286.143688][T22551] IPv4: Oversized IP packet from 127.202.26.0 [ 286.353849][T22570] netlink: 'syz.5.7924': attribute type 29 has an invalid length. [ 286.740599][T22609] netlink: 'syz.8.7942': attribute type 27 has an invalid length. [ 286.819475][T22609] 0ªX¹¦À: left allmulticast mode [ 286.873845][T22609] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.882388][T22609] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.890803][T22609] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.899266][T22609] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 286.913207][T22609] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.921966][T22609] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.930535][T22609] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.939211][T22609] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 286.958858][T22609] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.967391][T22609] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.975984][T22609] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.984471][T22609] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 286.993192][T22609] geneve2: left promiscuous mode [ 286.998362][T22609] geneve2: left allmulticast mode [ 287.533415][T22658] loop5: detected capacity change from 0 to 164 [ 287.577443][T22658] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 287.589955][T22658] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 287.605734][T22658] rock: directory entry would overflow storage [ 287.611940][T22658] rock: sig=0x4f50, size=4, remaining=3 [ 287.617642][T22658] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 287.737200][T22675] syzkaller0: entered promiscuous mode [ 287.742725][T22675] syzkaller0: entered allmulticast mode [ 287.754612][T22678] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.801752][T22678] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.815803][T22690] netlink: 146340 bytes leftover after parsing attributes in process `syz.8.7977'. [ 287.825258][T22690] netlink: zone id is out of range [ 287.830462][T22690] netlink: zone id is out of range [ 287.835623][T22690] netlink: zone id is out of range [ 287.841654][T22690] netlink: del zone limit has 8 unknown bytes [ 287.859217][T22678] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.938731][T22678] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.992529][T22678] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.003425][T22678] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.014485][T22678] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.025636][T22678] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.134187][T22702] netlink: 132 bytes leftover after parsing attributes in process `syz.8.7991'. [ 288.766469][T22761] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8006'. [ 288.845625][T22771] netlink: 96 bytes leftover after parsing attributes in process `syz.5.8021'. [ 289.479227][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 289.479243][ T29] audit: type=1400 audit(1742928343.560:6518): avc: denied { getopt } for pid=22787 comm="syz.8.8016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 289.731529][T22802] ALSA: seq fatal error: cannot create timer (-19) [ 289.850869][ T29] audit: type=1400 audit(1742928343.930:6519): avc: denied { mounton } for pid=22811 comm="syz.3.8028" path="/proc/448/task" dev="proc" ino=69240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 289.850885][T22810] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8027'. [ 289.971831][T22817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8031'. [ 290.515521][ T29] audit: type=1326 audit(1742928344.590:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.572387][T22846] netlink: 'syz.3.8043': attribute type 4 has an invalid length. [ 290.586038][ T29] audit: type=1326 audit(1742928344.620:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.609657][ T29] audit: type=1326 audit(1742928344.620:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.633341][ T29] audit: type=1326 audit(1742928344.630:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.656989][ T29] audit: type=1326 audit(1742928344.630:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.680527][ T29] audit: type=1326 audit(1742928344.630:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.704029][ T29] audit: type=1326 audit(1742928344.630:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.727545][ T29] audit: type=1326 audit(1742928344.630:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22837 comm="syz.3.8041" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7f45ebf2d169 code=0x7ffc0000 [ 290.752533][T22849] netlink: 'syz.3.8043': attribute type 4 has an invalid length. [ 292.900134][T23015] netlink: 'syz.8.8103': attribute type 10 has an invalid length. [ 292.908035][T23015] netlink: 40 bytes leftover after parsing attributes in process `syz.8.8103'. [ 292.926365][T23015] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 293.301482][T23043] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.410073][T23050] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8124'. [ 293.547442][T23068] netlink: 96 bytes leftover after parsing attributes in process `syz.9.8133'. [ 293.588098][T23074] tipc: Started in network mode [ 293.593043][T23074] tipc: Node identity 3e9b17b83118, cluster identity 4711 [ 293.600374][T23074] tipc: Enabled bearer , priority 0 [ 293.627804][T23074] tipc: Disabling bearer [ 293.718419][T23085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.759139][T23092] syzkaller0: entered promiscuous mode [ 293.764670][T23092] syzkaller0: entered allmulticast mode [ 293.771948][T23092] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 294.181306][T23114] tipc: Enabling of bearer rejected, failed to enable media [ 294.458060][T23130] netlink: 96 bytes leftover after parsing attributes in process `syz.8.8162'. [ 294.994237][T23148] all: renamed from bridge_slave_0 [ 295.018735][T23150] tipc: Started in network mode [ 295.023670][T23150] tipc: Node identity 92a05e045733, cluster identity 4711 [ 295.031020][T23150] tipc: Enabled bearer , priority 0 [ 295.067247][T23150] tipc: Disabling bearer [ 295.112127][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 295.112143][ T29] audit: type=1326 audit(1742928349.190:6708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.150146][ T29] audit: type=1326 audit(1742928349.190:6709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.173850][ T29] audit: type=1326 audit(1742928349.190:6710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.197437][ T29] audit: type=1326 audit(1742928349.190:6711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.221010][ T29] audit: type=1326 audit(1742928349.190:6712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.244527][ T29] audit: type=1326 audit(1742928349.190:6713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.268128][ T29] audit: type=1326 audit(1742928349.190:6714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.292024][ T29] audit: type=1326 audit(1742928349.190:6715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.315634][ T29] audit: type=1326 audit(1742928349.190:6716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.339663][ T29] audit: type=1326 audit(1742928349.190:6717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23158 comm="syz.5.8173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5e902d169 code=0x7ffc0000 [ 295.482684][ T4152] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.557517][ T4152] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.607424][ T4152] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.660071][ T4152] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.859594][ T4152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.877053][ T4152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.889211][ T4152] bond0 (unregistering): Released all slaves [ 295.904114][T23213] syzkaller0: entered promiscuous mode [ 295.909714][T23213] syzkaller0: entered allmulticast mode [ 295.955299][ T4152] hsr_slave_0: left promiscuous mode [ 295.978309][ T4152] hsr_slave_1: left promiscuous mode [ 295.994161][ T4152] veth1_macvtap: left promiscuous mode [ 296.096901][T23218] vlan2: entered allmulticast mode [ 296.118774][T23222] pim6reg: entered allmulticast mode [ 296.124344][T23221] pim6reg: left allmulticast mode [ 296.283682][T23241] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8211'. [ 296.293157][T23241] 0ªX¹¦À: renamed from caif0 [ 296.307717][T23241] 0ªX¹¦À: entered allmulticast mode [ 296.312979][T23241] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 296.362048][ T4152] IPVS: stop unused estimator thread 0... [ 296.657345][T23261] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8218'. [ 296.710209][T23265] macvlan1: entered promiscuous mode [ 296.716620][T23265] ipvlan0: entered promiscuous mode [ 296.727780][T23265] ipvlan0: left promiscuous mode [ 296.736247][T23265] macvlan1: left promiscuous mode [ 296.867619][T23271] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8232'. [ 297.080194][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8231'. [ 297.089203][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8231'. [ 297.145661][T23319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 297.962005][T23475] pim6reg: entered allmulticast mode [ 297.968059][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8262'. [ 297.971007][T23475] pim6reg: left allmulticast mode [ 297.976979][T23477] netlink: 8 bytes leftover after parsing attributes in process `syz.8.8262'. [ 297.995906][T23479] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8265'. [ 298.542637][T23523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8293'. [ 298.596193][T23528] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8283'. [ 298.944831][T23546] bridge: RTM_NEWNEIGH with invalid ether address [ 298.964327][T23549] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 298.972772][T23549] tipc: Enabled bearer , priority 10 [ 299.170240][T23558] pim6reg: entered allmulticast mode [ 299.183788][T23558] pim6reg: left allmulticast mode [ 299.285159][T23572] loop5: detected capacity change from 0 to 256 [ 299.311390][T23572] vfat: Bad value for 'dmask' [ 299.594258][T23613] netlink: 'syz.8.8321': attribute type 29 has an invalid length. [ 299.720536][T23624] bridge: RTM_NEWNEIGH with invalid ether address [ 299.927672][T23641] bridge0: port 3(vlan2) entered blocking state [ 299.934068][T23641] bridge0: port 3(vlan2) entered disabled state [ 299.940753][T23641] vlan2: entered allmulticast mode [ 299.947564][T23641] vlan2: left allmulticast mode [ 300.130950][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 300.130968][ T29] audit: type=1400 audit(1742928354.210:6841): avc: denied { create } for pid=23651 comm="syz.9.8338" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.168785][ T29] audit: type=1400 audit(1742928354.250:6842): avc: denied { mounton } for pid=23651 comm="syz.9.8338" path="/802/file0" dev="tmpfs" ino=4184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.192173][T23652] 9pnet: Could not find request transport: f [ 300.216733][ T29] audit: type=1400 audit(1742928354.290:6843): avc: denied { unlink } for pid=14438 comm="syz-executor" name="file0" dev="tmpfs" ino=4184 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 300.894005][T23671] bridge0: port 1(vlan0) entered blocking state [ 300.900473][T23671] bridge0: port 1(vlan0) entered disabled state [ 300.907837][T23671] vlan0: entered allmulticast mode [ 300.913649][T23671] vlan0: left allmulticast mode [ 301.015288][T23682] netlink: 'syz.3.8351': attribute type 27 has an invalid length. [ 301.047694][T23682] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.055096][T23682] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.076898][T23682] 0ªX¹¦À: left allmulticast mode [ 301.143184][T23682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.162039][T23682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.200815][T23682] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.209368][T23682] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.217875][T23682] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.226333][T23682] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.250733][T23701] netlink: 'syz.9.8359': attribute type 29 has an invalid length. [ 301.721826][T23750] __nla_validate_parse: 2 callbacks suppressed [ 301.721845][T23750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8380'. [ 301.745772][T23750] hsr_slave_0: left promiscuous mode [ 301.779918][T23750] hsr_slave_1: left promiscuous mode [ 301.900778][T23764] netlink: 'syz.0.8382': attribute type 29 has an invalid length. [ 302.004078][ T29] audit: type=1326 audit(1742928356.080:6844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.9.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 302.027860][ T29] audit: type=1326 audit(1742928356.080:6845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.9.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 302.051512][ T29] audit: type=1326 audit(1742928356.080:6846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.9.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 302.075203][ T29] audit: type=1326 audit(1742928356.080:6847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.9.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 302.098990][ T29] audit: type=1326 audit(1742928356.080:6848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.9.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 302.122688][ T29] audit: type=1326 audit(1742928356.080:6849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.9.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 302.146282][ T29] audit: type=1326 audit(1742928356.080:6850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23774 comm="syz.9.8389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f698faed169 code=0x7ffc0000 [ 302.233633][T23786] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8392'. [ 302.387776][T23795] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8397'. [ 302.552956][T23800] netlink: 'syz.5.8399': attribute type 27 has an invalid length. [ 302.611796][T23800] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.619174][T23800] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.674594][T23800] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.688010][T23800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.728705][T23800] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.737417][T23800] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.746136][T23800] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.754730][T23800] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.767843][T23800] sit1: left promiscuous mode [ 302.772636][T23800] sit1: left allmulticast mode [ 303.042702][T18090] IPVS: starting estimator thread 0... [ 303.145921][T23850] IPVS: using max 2448 ests per chain, 122400 per kthread [ 303.843877][T23896] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8434'. [ 303.883017][T23902] netlink: 'syz.0.8436': attribute type 4 has an invalid length. [ 303.921838][T23902] netlink: 'syz.0.8436': attribute type 4 has an invalid length. [ 304.349862][T16632] syz_tun (unregistering): left allmulticast mode [ 304.356495][T16632] syz_tun (unregistering): left promiscuous mode [ 304.362919][T16632] bridge0: port 3(syz_tun) entered disabled state [ 304.781679][T23943] netlink: 'syz.3.8450': attribute type 29 has an invalid length. [ 304.988087][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8464'. [ 304.997279][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8464'. [ 305.008501][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8464'. [ 305.027402][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8464'. [ 305.036472][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8464'. [ 305.044878][T23942] chnl_net:caif_netlink_parms(): no params data found [ 305.053518][T23969] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8464'. [ 305.066722][T23975] loop5: detected capacity change from 0 to 512 [ 305.088819][T23975] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8464: bg 0: block 248: padding at end of block bitmap is not set [ 305.104092][T23975] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.8464: Failed to acquire dquot type 1 [ 305.118132][T23975] EXT4-fs (loop5): 1 truncate cleaned up [ 305.124581][T23975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.144489][T23975] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.161824][T23942] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.169112][T23942] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.176576][T23942] bridge_slave_0: entered allmulticast mode [ 305.178238][T22195] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.183144][T23942] bridge_slave_0: entered promiscuous mode [ 305.198270][T23942] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.205416][T23942] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.212793][T23942] bridge_slave_1: entered allmulticast mode [ 305.219456][T23942] bridge_slave_1: entered promiscuous mode [ 305.242386][T23942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.253441][T23942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.272411][T23942] team0: Port device team_slave_0 added [ 305.279114][T23942] team0: Port device team_slave_1 added [ 305.297921][T23942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.305006][T23942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.331028][T23942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.342668][T23942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.349661][T23942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.375608][T23942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.400915][T23942] hsr_slave_0: entered promiscuous mode [ 305.407202][T23942] hsr_slave_1: entered promiscuous mode [ 305.413127][T23942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.421175][T23942] Cannot create hsr debugfs directory [ 305.640146][T23942] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 305.648896][T23942] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 305.657869][T23942] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 305.667042][T23942] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 305.682045][T23942] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.689169][T23942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.696563][T23942] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.703726][T23942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.719495][T24000] loop5: detected capacity change from 0 to 128 [ 305.748365][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 305.748381][ T29] audit: type=1400 audit(1742928359.830:6919): avc: denied { mount } for pid=23999 comm="syz.5.8472" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 305.795450][T23942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.819852][T23942] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.834986][ T4165] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.846466][ T4165] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.850993][T24000] syz.5.8472: attempt to access beyond end of device [ 305.850993][T24000] loop5: rw=0, sector=121, nr_sectors = 120 limit=128 [ 305.876180][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.883329][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.904497][ T29] audit: type=1400 audit(1742928359.980:6920): avc: denied { unmount } for pid=22195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 305.925886][ T4165] kworker/u8:31: attempt to access beyond end of device [ 305.925886][ T4165] loop5: rw=1, sector=241, nr_sectors = 800 limit=128 [ 305.926903][T24013] uprobe: syz.3.8479:24013 failed to unregister, leaking uprobe [ 305.944471][T23942] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.957633][T23942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 305.998160][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.005302][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.045491][T24022] netlink: 'syz.5.8477': attribute type 4 has an invalid length. [ 306.065582][T24022] netlink: 'syz.5.8477': attribute type 4 has an invalid length. [ 306.128067][T24036] syz.5.8486: attempt to access beyond end of device [ 306.128067][T24036] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 306.142359][T23942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.213666][ T29] audit: type=1326 audit(1742928360.290:6921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 306.240133][ T29] audit: type=1326 audit(1742928360.320:6922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 306.263755][ T29] audit: type=1326 audit(1742928360.320:6923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 306.287365][ T29] audit: type=1326 audit(1742928360.320:6924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 306.310930][ T29] audit: type=1326 audit(1742928360.320:6925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 306.334529][ T29] audit: type=1326 audit(1742928360.320:6926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 306.358085][ T29] audit: type=1326 audit(1742928360.320:6927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 306.381899][ T29] audit: type=1326 audit(1742928360.320:6928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24048 comm="syz.8.8490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f30dd169 code=0x7ffc0000 [ 306.427424][T24054] syz.5.8491: attempt to access beyond end of device [ 306.427424][T24054] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 306.530318][T24063] bridge0: port 1(geneve0) entered blocking state [ 306.536876][T24063] bridge0: port 1(geneve0) entered disabled state [ 306.544165][T24063] geneve0: entered allmulticast mode [ 306.567881][T24063] geneve0: entered promiscuous mode [ 306.576190][T23942] veth0_vlan: entered promiscuous mode [ 306.599177][T23942] veth1_vlan: entered promiscuous mode [ 306.641585][T23942] veth0_macvtap: entered promiscuous mode [ 306.651397][T23942] veth1_macvtap: entered promiscuous mode [ 306.679076][T23942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.690460][T23942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.702501][T23942] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.711300][T23942] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.720102][T23942] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.728865][T23942] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.350331][T24115] syz.3.8515: attempt to access beyond end of device [ 307.350331][T24115] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 307.738862][T24148] __nla_validate_parse: 4 callbacks suppressed [ 307.738879][T24148] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8529'. [ 307.791518][T24152] netlink: 'syz.5.8531': attribute type 13 has an invalid length. [ 307.862953][T24154] bridge0: port 3(geneve0) entered blocking state [ 307.869489][T24154] bridge0: port 3(geneve0) entered disabled state [ 307.888408][T24154] geneve0: entered allmulticast mode [ 307.894545][T24154] geneve0: entered promiscuous mode [ 307.900084][T24154] bridge0: port 3(geneve0) entered blocking state [ 307.906603][T24154] bridge0: port 3(geneve0) entered forwarding state [ 308.348444][T24171] netlink: 'syz.3.8538': attribute type 27 has an invalid length. [ 308.375949][T24171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.384306][T24171] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.398961][T24171] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 308.480473][T24184] netlink: 'syz.5.8544': attribute type 7 has an invalid length. [ 308.488291][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8544'. [ 308.524132][T24192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.533489][T24192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.564559][T24196] loop5: detected capacity change from 0 to 1024 [ 308.573253][T24196] EXT4-fs error (device loop5): ext4_orphan_get:1415: comm syz.5.8550: bad orphan inode 2304 [ 308.585680][T24196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.778851][T24196] ================================================================== [ 308.787050][T24196] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 308.794197][T24196] [ 308.796531][T24196] write to 0xffff8881062cf8a4 of 4 bytes by task 24198 on cpu 0: [ 308.804275][T24196] xas_set_mark+0x13d/0x150 [ 308.808809][T24196] __folio_start_writeback+0x1ea/0x440 [ 308.814313][T24196] ext4_bio_write_folio+0x591/0x9d0 [ 308.819532][T24196] mpage_process_page_bufs+0x488/0x5d0 [ 308.825030][T24196] mpage_prepare_extent_to_map+0x791/0xb80 [ 308.830886][T24196] ext4_do_writepages+0xa22/0x2130 [ 308.836022][T24196] ext4_writepages+0x15c/0x2f0 [ 308.840816][T24196] do_writepages+0x1d8/0x480 [ 308.845441][T24196] file_write_and_wait_range+0x16e/0x2f0 [ 308.851094][T24196] generic_buffers_fsync_noflush+0x46/0x120 [ 308.857052][T24196] ext4_sync_file+0x1ff/0x6c0 [ 308.861766][T24196] vfs_fsync_range+0x116/0x130 [ 308.866553][T24196] ext4_buffered_write_iter+0x358/0x3c0 [ 308.872118][T24196] ext4_file_write_iter+0x373/0xf60 [ 308.877343][T24196] iter_file_splice_write+0x5f2/0x980 [ 308.882792][T24196] direct_splice_actor+0x160/0x2c0 [ 308.887956][T24196] splice_direct_to_actor+0x305/0x680 [ 308.893380][T24196] do_splice_direct+0xd9/0x150 [ 308.898183][T24196] do_sendfile+0x40a/0x690 [ 308.902633][T24196] __x64_sys_sendfile64+0x113/0x160 [ 308.907860][T24196] x64_sys_call+0xfc3/0x2e10 [ 308.912475][T24196] do_syscall_64+0xc9/0x1c0 [ 308.916990][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.922899][T24196] [ 308.925229][T24196] read to 0xffff8881062cf8a4 of 4 bytes by task 24196 on cpu 1: [ 308.932878][T24196] xas_find_marked+0x614/0x660 [ 308.937684][T24196] find_get_entry+0x54/0x390 [ 308.942296][T24196] filemap_get_folios_tag+0xa0/0x220 [ 308.947607][T24196] mpage_prepare_extent_to_map+0x332/0xb80 [ 308.953463][T24196] ext4_do_writepages+0xa22/0x2130 [ 308.958605][T24196] ext4_writepages+0x15c/0x2f0 [ 308.963413][T24196] do_writepages+0x1d8/0x480 [ 308.968046][T24196] file_write_and_wait_range+0x16e/0x2f0 [ 308.973703][T24196] generic_buffers_fsync_noflush+0x46/0x120 [ 308.979646][T24196] ext4_sync_file+0x1ff/0x6c0 [ 308.984351][T24196] vfs_fsync_range+0x116/0x130 [ 308.989122][T24196] ext4_buffered_write_iter+0x358/0x3c0 [ 308.994702][T24196] ext4_file_write_iter+0x373/0xf60 [ 308.999932][T24196] iter_file_splice_write+0x5f2/0x980 [ 309.005331][T24196] direct_splice_actor+0x160/0x2c0 [ 309.010479][T24196] splice_direct_to_actor+0x305/0x680 [ 309.015888][T24196] do_splice_direct+0xd9/0x150 [ 309.020676][T24196] do_sendfile+0x40a/0x690 [ 309.025119][T24196] __x64_sys_sendfile64+0x113/0x160 [ 309.030340][T24196] x64_sys_call+0xfc3/0x2e10 [ 309.034955][T24196] do_syscall_64+0xc9/0x1c0 [ 309.039492][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.045410][T24196] [ 309.047743][T24196] value changed: 0x0a000021 -> 0x04000021 [ 309.053477][T24196] [ 309.055814][T24196] Reported by Kernel Concurrency Sanitizer on: [ 309.061981][T24196] CPU: 1 UID: 0 PID: 24196 Comm: syz.5.8550 Tainted: G W 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 309.075652][T24196] Tainted: [W]=WARN [ 309.079459][T24196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.089529][T24196] ================================================================== [ 309.244709][T24196] ================================================================== [ 309.252827][T24196] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 309.260848][T24196] [ 309.263187][T24196] write to 0xffff8881062cf8a4 of 4 bytes by task 24198 on cpu 1: [ 309.270918][T24196] xas_set_mark+0x13d/0x150 [ 309.275452][T24196] __folio_start_writeback+0x1ea/0x440 [ 309.280939][T24196] ext4_bio_write_folio+0x591/0x9d0 [ 309.286161][T24196] mpage_process_page_bufs+0x488/0x5d0 [ 309.291647][T24196] mpage_prepare_extent_to_map+0x791/0xb80 [ 309.297494][T24196] ext4_do_writepages+0x6ec/0x2130 [ 309.302628][T24196] ext4_writepages+0x15c/0x2f0 [ 309.307429][T24196] do_writepages+0x1d8/0x480 [ 309.312052][T24196] file_write_and_wait_range+0x16e/0x2f0 [ 309.317711][T24196] generic_buffers_fsync_noflush+0x46/0x120 [ 309.323648][T24196] ext4_sync_file+0x1ff/0x6c0 [ 309.328360][T24196] vfs_fsync_range+0x116/0x130 [ 309.333147][T24196] ext4_buffered_write_iter+0x358/0x3c0 [ 309.338723][T24196] ext4_file_write_iter+0x373/0xf60 [ 309.343953][T24196] iter_file_splice_write+0x5f2/0x980 [ 309.349365][T24196] direct_splice_actor+0x160/0x2c0 [ 309.354511][T24196] splice_direct_to_actor+0x305/0x680 [ 309.359911][T24196] do_splice_direct+0xd9/0x150 [ 309.364702][T24196] do_sendfile+0x40a/0x690 [ 309.369148][T24196] __x64_sys_sendfile64+0x113/0x160 [ 309.374372][T24196] x64_sys_call+0xfc3/0x2e10 [ 309.378982][T24196] do_syscall_64+0xc9/0x1c0 [ 309.383517][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.389468][T24196] [ 309.391804][T24196] read to 0xffff8881062cf8a4 of 4 bytes by task 24196 on cpu 0: [ 309.399456][T24196] file_write_and_wait_range+0x11e/0x2f0 [ 309.405120][T24196] generic_buffers_fsync_noflush+0x46/0x120 [ 309.411050][T24196] ext4_sync_file+0x1ff/0x6c0 [ 309.415762][T24196] vfs_fsync_range+0x116/0x130 [ 309.420550][T24196] ext4_buffered_write_iter+0x358/0x3c0 [ 309.426137][T24196] ext4_file_write_iter+0x373/0xf60 [ 309.431369][T24196] iter_file_splice_write+0x5f2/0x980 [ 309.436782][T24196] direct_splice_actor+0x160/0x2c0 [ 309.441926][T24196] splice_direct_to_actor+0x305/0x680 [ 309.447335][T24196] do_splice_direct+0xd9/0x150 [ 309.452138][T24196] do_sendfile+0x40a/0x690 [ 309.456582][T24196] __x64_sys_sendfile64+0x113/0x160 [ 309.461806][T24196] x64_sys_call+0xfc3/0x2e10 [ 309.466429][T24196] do_syscall_64+0xc9/0x1c0 [ 309.470964][T24196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.476906][T24196] [ 309.479243][T24196] value changed: 0x0a000021 -> 0x04000021 [ 309.484970][T24196] [ 309.487307][T24196] Reported by Kernel Concurrency Sanitizer on: [ 309.493477][T24196] CPU: 0 UID: 0 PID: 24196 Comm: syz.5.8550 Tainted: G W 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(voluntary) [ 309.507130][T24196] Tainted: [W]=WARN [ 309.510946][T24196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.521027][T24196] ================================================================== [ 309.641864][T22195] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.706230][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.136007][T17032] page_pool_release_retry() stalled pool shutdown: id 127, 1 inflight 60 sec [ 318.376161][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)