last executing test programs: 4m43.155200437s ago: executing program 32 (id=1012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 4m41.766504345s ago: executing program 33 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000380), 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0xa, 0x5, 0x7, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r2}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000340), &(0x7f00000004c0)=""/192}, 0x20) 3m13.090070786s ago: executing program 1 (id=3548): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='io_uring_file_get\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xffffffff, 0xffdffffe}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m13.031132297s ago: executing program 1 (id=3549): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000440)="0800eca3486fa3e8", 0x8}], 0x1, &(0x7f0000000640)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x10) 3m12.994771818s ago: executing program 1 (id=3551): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r1 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r1, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'gretap0\x00', 0x1000}) 3m12.893944279s ago: executing program 1 (id=3553): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 3m12.82460363s ago: executing program 1 (id=3554): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x4e21, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m12.732003161s ago: executing program 1 (id=3556): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 3m12.691288082s ago: executing program 34 (id=3556): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x8, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 2m57.28743142s ago: executing program 6 (id=3973): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x51f, &(0x7f0000000700)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 2m57.053777883s ago: executing program 6 (id=3982): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) modify_ldt$write(0x1, 0x0, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) 2m56.586480289s ago: executing program 6 (id=3994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9ab7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000200)=0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)='\x00!', 0x2}], 0x1, 0x7, 0x0) 2m56.48278146s ago: executing program 6 (id=3988): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) 2m56.446649741s ago: executing program 6 (id=3990): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x10010000004e20, 0x0, @local, 0xe}, 0x1c) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m56.238023113s ago: executing program 6 (id=3997): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x8}, 0xc4c, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2m56.237815983s ago: executing program 35 (id=3997): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40006, 0x520, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff01, 0x8}, 0xc4c, 0x0, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2m45.770471778s ago: executing program 2 (id=4255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) r1 = io_uring_setup(0x7a4, &(0x7f00000003c0)={0x0, 0xdf09, 0x800, 0x5}) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x8957) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 2m45.701980789s ago: executing program 2 (id=4256): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x40000000000}, 0x18) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 2m45.680329329s ago: executing program 2 (id=4257): write$sndseq(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) syz_read_part_table(0x60f, &(0x7f0000000740)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x0, 0x0, 0x0) 2m45.562135511s ago: executing program 2 (id=4260): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 2m45.561885531s ago: executing program 2 (id=4261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2a, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 2m43.962609151s ago: executing program 2 (id=4295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 2m43.938805702s ago: executing program 36 (id=4295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000340)='leases_conflict\x00', r3}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) 1m29.551622992s ago: executing program 9 (id=6080): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1m29.470141723s ago: executing program 9 (id=6083): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1m29.241835466s ago: executing program 9 (id=6091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x7, 0x80, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 1m29.230124236s ago: executing program 9 (id=6093): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000ec0)='./file0\x00', 0x2) 1m29.189762856s ago: executing program 9 (id=6094): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x0, 0x0, 0x8000c62) write$binfmt_elf64(r2, 0x0, 0x478) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 1m29.004774129s ago: executing program 9 (id=6096): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.983618159s ago: executing program 37 (id=6096): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48848}, 0x20004804) close_range(r0, 0xffffffffffffffff, 0x0) 20.711452712s ago: executing program 8 (id=7909): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @multicast}) 20.672853802s ago: executing program 8 (id=7910): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180100001100000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='signal_generate\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 20.655595413s ago: executing program 8 (id=7911): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0x2, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x64) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r3}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 20.634016813s ago: executing program 8 (id=7913): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) 20.615353023s ago: executing program 8 (id=7915): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$KDDELIO(r2, 0x4b35, 0x0) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r3, &(0x7f0000000340)={0xf97cff8c, 0x8}, 0x2000) 20.486118265s ago: executing program 8 (id=7917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 20.485942795s ago: executing program 38 (id=7917): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x9, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 3.269022147s ago: executing program 7 (id=8340): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sendfile(r4, r3, 0x0, 0x7ffff000) 2.812091283s ago: executing program 7 (id=8343): bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) pause() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f40)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) write$binfmt_register(r0, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) 2.587814526s ago: executing program 3 (id=8352): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000500000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000020300000400000085000000060000009500000000000000"], 0x0, 0xcdb, 0x0, 0x0, 0x40f00, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000070000006a0000000800000001"], 0x50) r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.442878268s ago: executing program 3 (id=8353): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_mcast\x00') r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xc2, 0x42, 0x7a, 0x20, 0x46d, 0x960, 0xa5af, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6f, 0x35, 0x1f}}]}}]}}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r3, 0xffffffffffffffff, 0x0) 1.965750894s ago: executing program 7 (id=8366): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) 1.854834896s ago: executing program 3 (id=8367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x1, 0x830bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.781779037s ago: executing program 3 (id=8368): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r4}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 1.326425103s ago: executing program 0 (id=8373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9, 0xfff1}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x681e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0x7, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 1.280728003s ago: executing program 0 (id=8374): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a000000070000000300000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 1.257996204s ago: executing program 0 (id=8375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000280)={'fscrypt:', @desc2}, &(0x7f0000000740)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0x1c}, 0x48, 0xffffffffffffffff) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800"}, 0x48, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x4, r3, r2, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f00000003c0), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x8f, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r2, r4, 0x0, 0x0) 1.244983834s ago: executing program 0 (id=8376): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = inotify_init1(0x0) fcntl$setstatus(r1, 0x4, 0x4a000) r2 = gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={[0xfffffffffffffffd]}, 0x0, 0x8) fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x0, r2}) prlimit64(0x0, 0xb, &(0x7f000002fff0), 0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0xa2002874) fcntl$notify(r1, 0xa, 0x34) fsetxattr$security_capability(r0, &(0x7f0000000000), 0x0, 0x0, 0x0) 1.230770174s ago: executing program 0 (id=8377): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x8, 0xc0100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x13}, 0x400, 0xffffffff, 0x6, 0x4, 0x6, 0x1, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) nanosleep(&(0x7f0000000000)={0x0, 0x3938700}, 0x0) 1.110784475s ago: executing program 7 (id=8381): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x1ffffdf3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) 1.094088106s ago: executing program 0 (id=8382): sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, 0x0, 0x4004000) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.035003036s ago: executing program 5 (id=8386): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) r3 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r3, &(0x7f0000000140)=""/248, 0x1ffd4, 0x0, 0x0, 0x0) 1.023834396s ago: executing program 7 (id=8387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r4) sendmsg$NL80211_CMD_GET_WIPHY(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 1.006234757s ago: executing program 5 (id=8389): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 962.136627ms ago: executing program 7 (id=8390): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000680)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 933.219157ms ago: executing program 3 (id=8392): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x8000000000}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x18) open(&(0x7f00009e1000)='./file0\x00', 0x1e5041, 0x0) 893.431348ms ago: executing program 3 (id=8394): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x2004}) epoll_wait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x1fffc002) 890.218238ms ago: executing program 5 (id=8395): r0 = io_uring_setup(0xaff, &(0x7f0000000380)={0x0, 0xeb9e, 0x400, 0xffffffff, 0x10000003}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r1 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0xdb69, 0x0, 0x0, 0x2cb}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) 833.065269ms ago: executing program 5 (id=8397): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x14}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x0) 766.37076ms ago: executing program 5 (id=8398): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000180), 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) r4 = getpgid(0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x21, 0x0, 0x4) 481.551143ms ago: executing program 4 (id=8402): bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x20, r5, 0x1, 0x0, 0x80000004, {0x1b}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000080}, 0x24004044) 467.019773ms ago: executing program 5 (id=8403): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) 429.449444ms ago: executing program 4 (id=8404): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) r0 = open(&(0x7f0000000300)='.\x00', 0xa000, 0x124) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x145) mkdirat(r1, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 329.352406ms ago: executing program 4 (id=8405): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x54}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r1, @ANYBLOB="0100000000000000240012000c000100627269646765000e14000200080007004a"], 0x44}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket(0x10, 0x2, 0x6) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x128}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xa3) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendto$inet6(r2, &(0x7f0000000100)="0503460008003e00000002008100", 0x36, 0x0, 0x0, 0x0) 179.098377ms ago: executing program 4 (id=8406): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='\xac\xed\x00\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 82.308049ms ago: executing program 4 (id=8407): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) close(r2) 0s ago: executing program 4 (id=8408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) unshare(0x2040600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): logical block 1337, lost async page write [ 270.297098][T20951] Buffer I/O error on dev loop7, logical block 1338, lost async page write [ 270.325916][T20951] I/O error, dev loop7, sector 11656 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 270.342253][T20951] I/O error, dev loop7, sector 12680 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 270.355145][T20951] I/O error, dev loop7, sector 13704 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 270.384269][T20951] I/O error, dev loop7, sector 14728 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 270.412359][T20951] I/O error, dev loop7, sector 15752 op 0x1:(WRITE) flags 0x800 phys_seg 79 prio class 0 [ 270.436174][T20951] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.444300][T20977] batadv_slave_0: entered promiscuous mode [ 270.450398][T20951] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 270.460316][T20951] loop7: unable to read partition table [ 270.468292][T20977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6298'. [ 270.472712][T20951] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á“;Ûo×ÿ) failed (rc=-5) [ 270.496713][T20977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.525781][T20977] batadv_slave_0 (unregistering): left promiscuous mode [ 270.541234][T20977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.595629][T20984] syz_tun: entered allmulticast mode [ 270.602096][T20983] syz_tun: left allmulticast mode [ 270.629837][T20988] 9pnet_fd: Insufficient options for proto=fd [ 270.787094][T20992] lo speed is unknown, defaulting to 1000 [ 270.882455][T20996] program syz.3.6306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.893940][T20996] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 270.965603][T21004] netlink: 'syz.3.6309': attribute type 10 has an invalid length. [ 270.973568][T21004] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6309'. [ 271.047157][T21004] dummy0: entered promiscuous mode [ 271.062733][T21004] bridge0: port 1(dummy0) entered blocking state [ 271.069961][T21004] bridge0: port 1(dummy0) entered disabled state [ 271.118983][T21004] dummy0: entered allmulticast mode [ 271.125167][T21004] bridge0: port 1(dummy0) entered blocking state [ 271.131562][T21004] bridge0: port 1(dummy0) entered forwarding state [ 271.393137][T21016] SELinux: ebitmap: truncated map [ 271.402890][T21016] SELinux: failed to load policy [ 271.554385][T21031] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 271.601501][T21036] wg2: left promiscuous mode [ 271.606211][T21036] wg2: left allmulticast mode [ 271.651485][T21036] wg2: entered promiscuous mode [ 271.656385][T21036] wg2: entered allmulticast mode [ 271.701078][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 271.701091][ T29] audit: type=1326 audit(1746307102.780:18456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.766748][ T29] audit: type=1326 audit(1746307102.790:18457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.790546][ T29] audit: type=1326 audit(1746307102.790:18458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.814536][ T29] audit: type=1326 audit(1746307102.790:18459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.838122][ T29] audit: type=1326 audit(1746307102.790:18460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.861719][ T29] audit: type=1326 audit(1746307102.790:18461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.885420][ T29] audit: type=1326 audit(1746307102.800:18462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.909041][ T29] audit: type=1326 audit(1746307102.800:18463): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.933015][ T29] audit: type=1326 audit(1746307102.800:18464): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 271.956940][ T29] audit: type=1326 audit(1746307102.800:18465): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21043 comm="syz.5.6327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 272.376282][T21077] tipc: Started in network mode [ 272.381204][T21077] tipc: Node identity ac14140f, cluster identity 4711 [ 272.388170][T21077] tipc: New replicast peer: 255.255.255.255 [ 272.394976][T21077] tipc: Enabled bearer , priority 10 [ 272.682842][T21091] vlan4: entered allmulticast mode [ 272.913731][T21114] hub 2-0:1.0: USB hub found [ 272.918737][T21114] hub 2-0:1.0: 8 ports detected [ 272.957941][T21120] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6359'. [ 273.092587][T21140] loop7: detected capacity change from 0 to 512 [ 273.101240][T21140] EXT4-fs: Ignoring removed i_version option [ 273.107646][T21140] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 273.121864][T21142] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6367'. [ 273.122873][T21140] EXT4-fs (loop7): 1 truncate cleaned up [ 273.138139][T21140] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.175592][ T3382] IPVS: starting estimator thread 0... [ 273.205018][T21146] hub 2-0:1.0: USB hub found [ 273.216422][T21146] hub 2-0:1.0: 8 ports detected [ 273.269572][T21149] IPVS: using max 2400 ests per chain, 120000 per kthread [ 273.509564][T10802] tipc: Node number set to 2886997007 [ 273.682869][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6377'. [ 273.781917][T21165] lo speed is unknown, defaulting to 1000 [ 273.944701][T18103] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.103635][T21190] loop7: detected capacity change from 0 to 512 [ 274.143672][T21190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.165348][T21190] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.213785][T18103] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.272143][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6393'. [ 274.373151][T21204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6395'. [ 274.383233][T21204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6395'. [ 274.398204][T21204] netlink: 2 bytes leftover after parsing attributes in process `syz.0.6395'. [ 274.424637][T21207] syz_tun: entered allmulticast mode [ 274.432254][T21206] syz_tun: left allmulticast mode [ 274.456691][T21209] netlink: 'syz.0.6397': attribute type 13 has an invalid length. [ 274.518652][T21209] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.525884][T21209] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.542636][T21213] loop7: detected capacity change from 0 to 512 [ 274.551385][T21213] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 274.573234][T21213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.582178][T21209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.591522][T21213] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 274.619440][T21209] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.628500][T21209] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.637507][T21209] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.646519][T21209] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.698491][T18103] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.870552][T21243] ref_ctr_offset mismatch. inode: 0x4cf offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000040 [ 275.270569][T21259] SELinux: failed to load policy [ 275.609667][T21284] pim6reg1: entered promiscuous mode [ 275.615044][T21284] pim6reg1: entered allmulticast mode [ 275.718232][T21290] netlink: 'syz.0.6431': attribute type 4 has an invalid length. [ 275.731213][T21290] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6431'. [ 275.762930][T21290] : renamed from bond0 [ 275.786980][T21298] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6436'. [ 275.888549][T21312] syz_tun: entered allmulticast mode [ 275.904107][T21311] syz_tun: left allmulticast mode [ 275.933378][T21316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21316 comm=syz.5.6444 [ 276.124031][T21337] lo speed is unknown, defaulting to 1000 [ 276.133608][T21339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6453'. [ 276.360596][T21341] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.368913][T21341] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.377089][T21341] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.385324][T21341] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.658240][T21369] bond2: entered promiscuous mode [ 276.663336][T21369] bond2: entered allmulticast mode [ 276.672671][T21369] 8021q: adding VLAN 0 to HW filter on device bond2 [ 276.705977][T21369] bond2 (unregistering): Released all slaves [ 276.781501][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 276.781513][ T29] audit: type=1400 audit(1746307107.870:18681): avc: denied { create } for pid=21373 comm="syz.0.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.817490][ T29] audit: type=1400 audit(1746307107.900:18682): avc: denied { setopt } for pid=21373 comm="syz.0.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.837424][ T29] audit: type=1400 audit(1746307107.900:18683): avc: denied { bind } for pid=21373 comm="syz.0.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.856911][ T29] audit: type=1400 audit(1746307107.900:18684): avc: denied { write } for pid=21373 comm="syz.0.6478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 276.877471][T21376] geneve0: entered allmulticast mode [ 276.924492][ T29] audit: type=1400 audit(1746307108.010:18685): avc: denied { create } for pid=21380 comm="syz.5.6471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.944267][ T29] audit: type=1400 audit(1746307108.010:18686): avc: denied { connect } for pid=21380 comm="syz.5.6471" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.965376][ T29] audit: type=1400 audit(1746307108.010:18687): avc: denied { write } for pid=21380 comm="syz.5.6471" path="socket:[64966]" dev="sockfs" ino=64966 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 276.974536][T21384] syzkaller1: entered promiscuous mode [ 276.995151][T21384] syzkaller1: entered allmulticast mode [ 277.034782][ T29] audit: type=1400 audit(1746307108.050:18688): avc: denied { ioctl } for pid=21383 comm="syz.5.6473" path="socket:[64977]" dev="sockfs" ino=64977 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 277.071249][ T29] audit: type=1400 audit(1746307108.150:18689): avc: denied { read write } for pid=21386 comm="syz.0.6474" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.095843][ T29] audit: type=1400 audit(1746307108.150:18690): avc: denied { open } for pid=21386 comm="syz.0.6474" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 277.153045][T21394] netlink: 'syz.0.6476': attribute type 11 has an invalid length. [ 277.192371][T21397] pim6reg1: entered promiscuous mode [ 277.197735][T21397] pim6reg1: entered allmulticast mode [ 277.225635][T21399] lo speed is unknown, defaulting to 1000 [ 277.277754][T21402] pim6reg: entered allmulticast mode [ 277.287499][T21402] pim6reg: left allmulticast mode [ 277.472391][T21417] loop7: detected capacity change from 0 to 16384 [ 277.629676][T21417] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 277.631771][T21420] I/O error, dev loop7, sector 8448 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 277.647929][T21417] I/O error, dev loop7, sector 12032 op 0x0:(READ) flags 0x80700 phys_seg 27 prio class 0 [ 277.649528][T21420] buffer_io_error: 711 callbacks suppressed [ 277.649542][T21420] Buffer I/O error on dev loop7, logical block 1056, lost async page write [ 277.660293][T21417] I/O error, dev loop7, sector 11776 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.665344][T21420] Buffer I/O error on dev loop7, logical block 1057, lost async page write [ 277.673962][T21417] Buffer I/O error on dev loop7, logical block 1472, async page read [ 277.683436][T21420] Buffer I/O error on dev loop7, logical block 1058, lost async page write [ 277.708748][T21420] Buffer I/O error on dev loop7, logical block 1059, lost async page write [ 277.717477][T21420] Buffer I/O error on dev loop7, logical block 1060, lost async page write [ 277.726140][T21420] Buffer I/O error on dev loop7, logical block 1061, lost async page write [ 277.734772][T21420] Buffer I/O error on dev loop7, logical block 1062, lost async page write [ 277.743404][T21420] Buffer I/O error on dev loop7, logical block 1063, lost async page write [ 277.752103][T21420] Buffer I/O error on dev loop7, logical block 1064, lost async page write [ 277.766969][T21420] I/O error, dev loop7, sector 9472 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 277.783633][T21420] I/O error, dev loop7, sector 10496 op 0x1:(WRITE) flags 0x800 phys_seg 128 prio class 0 [ 277.798604][T21420] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.807951][T21420] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 277.817181][T21420] loop7: unable to read partition table [ 277.822921][T21420] loop_reread_partitions: partition scan of loop7 ((õÉêä¾A«ÒÚi½åŒ×¯@ý pªÁ.½[ºvcÄ5¯ùG“Ýתà~ó_Á“;Ûo×ÿ) failed (rc=-5) [ 277.878218][T21416] I/O error, dev loop7, sector 11520 op 0x1:(WRITE) flags 0x800 phys_seg 32 prio class 0 [ 278.617723][T21482] __nla_validate_parse: 7 callbacks suppressed [ 278.617739][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6515'. [ 278.863469][T21498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6522'. [ 278.872914][T21498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6522'. [ 278.901491][T21501] bridge: RTM_NEWNEIGH with invalid ether address [ 278.917990][T21503] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6524'. [ 278.945898][T21507] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6526'. [ 279.123659][T21520] RDS: rds_bind could not find a transport for ::ffff:172.20.20.27, load rds_tcp or rds_rdma? [ 279.279437][T21528] netlink: 'syz.7.6536': attribute type 11 has an invalid length. [ 279.287627][T21528] netlink: 448 bytes leftover after parsing attributes in process `syz.7.6536'. [ 279.389622][T21536] SELinux: ebitmap: truncated map [ 279.395987][T21536] SELinux: failed to load policy [ 279.405545][T21538] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6540'. [ 279.510758][T21546] loop7: detected capacity change from 0 to 164 [ 279.517851][T21546] Unable to read rock-ridge attributes [ 279.527545][T21546] Unable to read rock-ridge attributes [ 279.533685][T21546] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 279.547303][T21546] block device autoloading is deprecated and will be removed. [ 279.556231][T21546] syz.7.6544: attempt to access beyond end of device [ 279.556231][T21546] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 279.638513][T21550] loop7: detected capacity change from 0 to 4096 [ 279.659128][T21550] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 279.701600][T21550] EXT4-fs (loop7): resizing filesystem from 512 to 0 blocks [ 279.708978][T21550] EXT4-fs warning (device loop7): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 279.738117][T18103] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.767416][T21560] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6549'. [ 279.826778][T21568] netlink: 'syz.7.6551': attribute type 13 has an invalid length. [ 279.890513][T21568] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.958447][T21568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.972019][T21568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.020068][T21568] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.029274][T21568] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.038290][T21568] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.047277][T21568] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.153296][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6555'. [ 280.163899][T21575] hsr_slave_0: left promiscuous mode [ 280.170384][T21575] hsr_slave_1: left promiscuous mode [ 280.322642][T21592] netlink: 'syz.0.6563': attribute type 39 has an invalid length. [ 280.360890][T21600] netlink: 'syz.8.6566': attribute type 13 has an invalid length. [ 280.405840][T21600] bridge0: port 3(dummy0) entered disabled state [ 280.412326][T21600] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.448345][T21600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.462952][T21600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.502464][T21600] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.510861][T21600] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.519243][T21600] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.527700][T21600] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.541181][T21600] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.549668][T21600] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.557917][T21600] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.566365][T21600] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 280.682994][T21618] sd 0:0:1:0: device reset [ 280.755532][T21624] netlink: 'syz.7.6586': attribute type 4 has an invalid length. [ 280.763950][T21624] netlink: 152 bytes leftover after parsing attributes in process `syz.7.6586'. [ 280.776113][T21624] : renamed from $Hÿ [ 280.921290][T21638] program syz.7.6582 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.931084][T21638] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 280.985042][T21641] SELinux: failed to load policy [ 281.013894][T21644] lo speed is unknown, defaulting to 1000 [ 281.104469][T21649] SELinux: failed to load policy [ 281.415999][T10802] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 281.424952][T10802] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 281.623322][T21688] lo speed is unknown, defaulting to 1000 [ 281.811115][ T29] kauditd_printk_skb: 1086 callbacks suppressed [ 281.811129][ T29] audit: type=1400 audit(1746307112.900:19777): avc: denied { read } for pid=21701 comm="syz.3.6610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 281.855672][ T29] audit: type=1400 audit(1746307112.940:19778): avc: denied { create } for pid=21714 comm="syz.3.6615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 281.882534][ T29] audit: type=1400 audit(1746307112.940:19779): avc: denied { connect } for pid=21714 comm="syz.3.6615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 281.903127][ T29] audit: type=1400 audit(1746307112.980:19780): avc: denied { write } for pid=21714 comm="syz.3.6615" path="socket:[65635]" dev="sockfs" ino=65635 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 281.962013][ T29] audit: type=1400 audit(1746307113.040:19781): avc: denied { name_bind } for pid=21719 comm="syz.7.6618" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 281.983963][ T29] audit: type=1400 audit(1746307113.040:19782): avc: denied { node_bind } for pid=21719 comm="syz.7.6618" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 282.005657][ T29] audit: type=1400 audit(1746307113.040:19783): avc: denied { create } for pid=21719 comm="syz.7.6618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.026593][ T29] audit: type=1400 audit(1746307113.050:19784): avc: denied { write } for pid=21719 comm="syz.7.6618" path="socket:[66581]" dev="sockfs" ino=66581 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.051740][ T29] audit: type=1400 audit(1746307113.050:19785): avc: denied { nlmsg_write } for pid=21719 comm="syz.7.6618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 282.112587][ T29] audit: type=1326 audit(1746307113.190:19786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21726 comm="syz.3.6620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 282.188535][T21737] netlink: 'syz.3.6625': attribute type 13 has an invalid length. [ 282.263603][T21737] bridge0: port 1(dummy0) entered disabled state [ 282.306922][T21737] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 282.315486][T21737] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 282.323804][T21737] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 282.332459][T21737] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 282.515013][T21770] sd 0:0:1:0: device reset [ 282.588864][T11251] page_pool_release_retry() stalled pool shutdown: id 131, 2 inflight 60 sec [ 282.688032][T21779] tipc: Enabled bearer , priority 0 [ 282.695565][T21778] tipc: Resetting bearer [ 282.706967][T21778] tipc: Disabling bearer [ 283.282432][T10802] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 283.299245][T10802] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 283.447239][T21827] pim6reg1: entered promiscuous mode [ 283.452738][T21827] pim6reg1: entered allmulticast mode [ 283.690513][T21844] SELinux: failed to load policy [ 283.925405][T21860] pim6reg1: entered promiscuous mode [ 283.930926][T21860] pim6reg1: entered allmulticast mode [ 284.088019][T21868] __nla_validate_parse: 6 callbacks suppressed [ 284.088036][T21868] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6682'. [ 284.134830][T21874] netlink: 'syz.3.6685': attribute type 10 has an invalid length. [ 284.143078][T21874] dummy0: left allmulticast mode [ 284.148122][T21874] dummy0: left promiscuous mode [ 284.153347][T21874] bridge0: port 1(dummy0) entered disabled state [ 284.161844][T21874] dummy0: entered allmulticast mode [ 284.167195][T21874] : (slave dummy0): Enslaving as an active interface with an up link [ 284.318387][T21891] macvlan2: entered promiscuous mode [ 284.324412][T21891] bridge0: entered promiscuous mode [ 284.330200][T21891] bridge0: port 1(macvlan2) entered blocking state [ 284.336814][T21891] bridge0: port 1(macvlan2) entered disabled state [ 284.343466][T21891] macvlan2: entered allmulticast mode [ 284.349620][T21891] bridge0: entered allmulticast mode [ 284.355360][T21891] macvlan2: left allmulticast mode [ 284.360532][T21891] bridge0: left allmulticast mode [ 284.365921][T21891] bridge0: left promiscuous mode [ 284.501720][T10802] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 284.510319][T10802] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 284.982547][T21908] netlink: 'syz.5.6699': attribute type 13 has an invalid length. [ 285.066868][T21908] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.075470][T21908] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.083943][T21908] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.092305][T21908] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.128405][T11241] lo speed is unknown, defaulting to 1000 [ 285.134258][T11241] syz0: Port: 1 Link DOWN [ 285.147644][ T3380] lo speed is unknown, defaulting to 1000 [ 285.735138][T21953] wireguard1: entered promiscuous mode [ 285.805113][T21958] syzkaller0: entered promiscuous mode [ 285.810702][T21958] syzkaller0: entered allmulticast mode [ 285.906557][T21967] tipc: New replicast peer: 255.0.0.255 [ 285.912181][T21967] tipc: Enabled bearer , priority 10 [ 286.058305][T21975] SELinux: ebitmap: truncated map [ 286.088442][T21975] SELinux: failed to load policy [ 286.416115][T21995] lo speed is unknown, defaulting to 1000 [ 286.472247][T21999] bond0: entered promiscuous mode [ 286.477386][T21999] bond0: entered allmulticast mode [ 286.493009][T21999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.510339][T21999] bond0 (unregistering): Released all slaves [ 286.618353][T22005] pim6reg1: entered promiscuous mode [ 286.623875][T22005] pim6reg1: entered allmulticast mode [ 286.654386][T22017] pim6reg1: entered promiscuous mode [ 286.659817][T22017] pim6reg1: entered allmulticast mode [ 286.775138][T22027] lo speed is unknown, defaulting to 1000 [ 286.866552][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 286.866568][ T29] audit: type=1400 audit(1746307117.950:20202): avc: denied { write } for pid=22036 comm="syz.0.6756" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 286.922550][T22040] ref_ctr increment failed for inode: 0x315 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810446d280 [ 286.936842][T22036] uprobe: syz.0.6756:22036 failed to unregister, leaking uprobe [ 287.107582][ T29] audit: type=1326 audit(1746307118.190:20203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8feae6e969 code=0x7ffc0000 [ 287.135641][ T29] audit: type=1326 audit(1746307118.220:20204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8feae6e969 code=0x7ffc0000 [ 287.159299][ T29] audit: type=1326 audit(1746307118.220:20205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8feae6e969 code=0x7ffc0000 [ 287.183044][ T29] audit: type=1404 audit(1746307118.220:20206): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 287.198178][ T29] audit: type=1400 audit(1746307118.250:20207): avc: denied { create } for pid=22053 comm="syz.5.6763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 287.218569][ T29] audit: type=1400 audit(1746307118.250:20208): avc: denied { create } for pid=22053 comm="syz.5.6763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 287.242425][ T29] audit: type=1404 audit(1746307118.290:20209): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 287.257499][ T29] audit: type=1326 audit(1746307118.290:20210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8feae6e969 code=0x7ffc0000 [ 287.281792][ T29] audit: type=1326 audit(1746307118.290:20211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22051 comm="syz.0.6762" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8feae6e969 code=0x7ffc0000 [ 287.338331][T22058] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6765'. [ 287.348180][T22056] lo speed is unknown, defaulting to 1000 [ 287.498698][T22069] syzkaller0: entered promiscuous mode [ 287.504429][T22069] syzkaller0: entered allmulticast mode [ 287.666436][T22081] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22081 comm=syz.8.6774 [ 287.758485][T22093] syzkaller0: entered promiscuous mode [ 287.764639][T22093] syzkaller0: entered allmulticast mode [ 288.012111][T22127] syzkaller0: entered allmulticast mode [ 288.017822][T22127] syzkaller0: entered promiscuous mode [ 288.025081][T22127] syzkaller0 (unregistering): left promiscuous mode [ 288.031847][T22127] syzkaller0 (unregistering): left allmulticast mode [ 288.678578][T22153] bridge0: port 1(macvlan2) entered blocking state [ 288.685966][T22153] bridge0: port 1(macvlan2) entered disabled state [ 288.699486][T22153] macvlan2: entered allmulticast mode [ 288.715718][T22153] macvlan2: left allmulticast mode [ 289.056364][T22191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6817'. [ 289.157860][T22197] netlink: 'syz.8.6821': attribute type 1 has an invalid length. [ 289.289486][T22214] bridge_slave_0: left allmulticast mode [ 289.295198][T22214] bridge_slave_0: left promiscuous mode [ 289.300904][T22214] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.333580][T22214] bridge_slave_1: left allmulticast mode [ 289.339372][T22214] bridge_slave_1: left promiscuous mode [ 289.345041][T22214] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.364322][T22214] : (slave bond_slave_0): Releasing backup interface [ 289.375414][T22219] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6828'. [ 289.390401][T22214] : (slave bond_slave_1): Releasing backup interface [ 289.404265][T22214] team0: Port device team_slave_0 removed [ 289.415865][T22214] team0: Port device team_slave_1 removed [ 289.421973][T22214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.432623][T22219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.440878][T22219] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.572633][T22224] netlink: 'syz.3.6831': attribute type 4 has an invalid length. [ 289.581112][T22224] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.6831'. [ 290.037903][T22252] random: crng reseeded on system resumption [ 290.089582][T22253] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6843'. [ 290.203240][T22258] lo speed is unknown, defaulting to 1000 [ 290.404063][T22265] binfmt_misc: register: failed to install interpreter file ./file2 [ 290.447367][T22269] xt_hashlimit: size too large, truncated to 1048576 [ 290.836947][T22279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.848421][T22279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.693804][T22301] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6864'. [ 291.702980][T22301] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 291.962197][T22318] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 291.976255][T22318] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 291.997489][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 291.997502][ T29] audit: type=1326 audit(1746307123.080:20710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.030232][ T29] audit: type=1326 audit(1746307123.090:20711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.053927][ T29] audit: type=1326 audit(1746307123.090:20712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.077637][ T29] audit: type=1326 audit(1746307123.090:20713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.101321][ T29] audit: type=1326 audit(1746307123.090:20714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.125173][ T29] audit: type=1326 audit(1746307123.090:20715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.148802][ T29] audit: type=1326 audit(1746307123.090:20716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.172437][ T29] audit: type=1326 audit(1746307123.090:20717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.196136][ T29] audit: type=1326 audit(1746307123.090:20718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.219859][ T29] audit: type=1326 audit(1746307123.090:20719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22319 comm="syz.3.6871" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 292.251842][T22322] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 292.258374][T22322] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 292.266697][T22322] vhci_hcd vhci_hcd.0: Device attached [ 292.375664][T22328] vhci_hcd: connection closed [ 292.375859][ T4173] vhci_hcd: stop threads [ 292.384842][ T4173] vhci_hcd: release socket [ 292.389332][ T4173] vhci_hcd: disconnect device [ 292.448904][T10802] vhci_hcd: vhci_device speed not set [ 292.666323][T22335] hub 2-0:1.0: USB hub found [ 292.674097][T22335] hub 2-0:1.0: 8 ports detected [ 292.738018][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x4 [ 292.746396][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x2 [ 292.754532][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.762252][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.770599][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.778232][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.785994][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.793741][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.802090][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.809827][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.817463][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.825265][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.833496][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.841238][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.848910][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.856740][ T10] hid-generic 0000:3000000:0000.001A: unknown main item tag 0x0 [ 292.867241][ T10] hid-generic 0000:3000000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 292.928147][T22342] pim6reg1: entered promiscuous mode [ 292.933606][T22342] pim6reg1: entered allmulticast mode [ 293.212681][T22357] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6886'. [ 294.079163][T22401] lo speed is unknown, defaulting to 1000 [ 294.812304][T22444] pim6reg1: entered promiscuous mode [ 294.817745][T22444] pim6reg1: entered allmulticast mode [ 294.856426][T22452] pim6reg1: entered promiscuous mode [ 294.861895][T22452] pim6reg1: entered allmulticast mode [ 295.123733][T22464] IPv6: sit1: Disabled Multicast RS [ 295.943251][T22498] syzkaller0: entered promiscuous mode [ 295.948868][T22498] syzkaller0: entered allmulticast mode [ 296.107903][T22506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6948'. [ 296.248865][T22514] netlink: 60 bytes leftover after parsing attributes in process `syz.7.6951'. [ 296.384595][T22522] program syz.5.6956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 296.398913][T22522] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 296.406168][T22524] bridge0: port 2() entered blocking state [ 296.413920][T22524] bridge0: port 2() entered disabled state [ 296.421480][T22524] : entered allmulticast mode [ 296.426718][T22524] bond_slave_1: entered allmulticast mode [ 296.443136][ T36] Process accounting resumed [ 296.616755][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6962'. [ 296.784961][T22520] Process accounting resumed [ 297.004277][ T29] kauditd_printk_skb: 889 callbacks suppressed [ 297.004297][ T29] audit: type=1326 audit(1746307128.090:21609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8feae65927 code=0x7ffc0000 [ 297.091253][ T29] audit: type=1326 audit(1746307128.120:21610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8feae0ab39 code=0x7ffc0000 [ 297.115455][ T29] audit: type=1326 audit(1746307128.120:21611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8feae65927 code=0x7ffc0000 [ 297.139064][ T29] audit: type=1326 audit(1746307128.120:21612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8feae0ab39 code=0x7ffc0000 [ 297.163284][ T29] audit: type=1326 audit(1746307128.120:21613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8feae6e969 code=0x7ffc0000 [ 297.186926][ T29] audit: type=1326 audit(1746307128.140:21614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8feae65927 code=0x7ffc0000 [ 297.211009][ T29] audit: type=1326 audit(1746307128.140:21615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8feae0ab39 code=0x7ffc0000 [ 297.234579][ T29] audit: type=1326 audit(1746307128.140:21616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8feae6e969 code=0x7ffc0000 [ 297.258839][ T29] audit: type=1400 audit(1746307128.140:21617): avc: denied { ioctl } for pid=22557 comm="syz.7.6969" path="socket:[68019]" dev="sockfs" ino=68019 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 297.283695][ T29] audit: type=1326 audit(1746307128.140:21618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22508 comm="syz.0.6949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8feae65927 code=0x7ffc0000 [ 297.342764][T22580] openvswitch: netlink: Message has 6 unknown bytes. [ 297.409011][T22583] tipc: Enabled bearer , priority 0 [ 297.440089][T22583] tipc: Disabling bearer [ 297.790060][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6991'. [ 297.799214][T22610] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6991'. [ 297.826458][T22614] pim6reg1: entered promiscuous mode [ 297.831815][T22614] pim6reg1: entered allmulticast mode [ 298.001677][T22628] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7000'. [ 298.170123][T22648] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7008'. [ 298.210289][T22650] bridge0: port 1() entered blocking state [ 298.217158][T22650] bridge0: port 1() entered disabled state [ 298.224543][T22650] : entered allmulticast mode [ 298.229623][T22650] bond_slave_0: entered allmulticast mode [ 298.235579][T22650] bond_slave_1: entered allmulticast mode [ 298.246998][T22650] : entered promiscuous mode [ 298.252495][T22650] bond_slave_0: entered promiscuous mode [ 298.259147][T22650] bond_slave_1: entered promiscuous mode [ 298.541786][T22678] netlink: 'syz.5.7021': attribute type 7 has an invalid length. [ 298.549592][T22678] netlink: 'syz.5.7021': attribute type 8 has an invalid length. [ 298.643976][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7026'. [ 298.652913][T22690] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7026'. [ 298.713037][T22698] netlink: 5 bytes leftover after parsing attributes in process `syz.5.7030'. [ 298.722064][T22698] 0ªX¹¦D: renamed from gretap0 [ 298.730569][T22698] 0ªX¹¦D: entered allmulticast mode [ 298.737489][T22698] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 298.791837][T22708] ref_ctr increment failed for inode: 0x18af offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810ef35d80 [ 298.803756][T22707] uprobe: syz.5.7035:22707 failed to unregister, leaking uprobe [ 299.588955][T22750] netlink: 'syz.8.7053': attribute type 10 has an invalid length. [ 299.934336][T22762] tipc: Enabled bearer , priority 0 [ 299.944726][T22761] tipc: Resetting bearer [ 299.964843][T22761] tipc: Disabling bearer [ 300.307676][T22814] smc: net device bond0 erased user defined pnetid SYZ0 [ 300.350398][T22817] SELinux: failed to load policy [ 300.433586][ T3379] Process accounting resumed [ 300.502431][T22827] block device autoloading is deprecated and will be removed. [ 300.510009][T22827] syz.7.7088: attempt to access beyond end of device [ 300.510009][T22827] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 300.524170][T22827] netlink: 'syz.7.7088': attribute type 4 has an invalid length. [ 301.083343][T22849] pim6reg1: entered promiscuous mode [ 301.088874][T22849] pim6reg1: entered allmulticast mode [ 301.366546][T22864] tipc: Enabled bearer , priority 0 [ 301.379453][T22863] tipc: Resetting bearer [ 301.396040][T22863] tipc: Disabling bearer [ 301.459106][T22873] tipc: Enabled bearer , priority 0 [ 301.483104][T22873] tipc: Disabling bearer [ 301.559597][T22881] smc: net device bond0 applied user defined pnetid SYZ2 [ 301.574996][T22881] smc: net device bond0 erased user defined pnetid SYZ2 [ 301.590356][T22883] loop0: detected capacity change from 0 to 256 [ 301.892459][T22915] loop0: detected capacity change from 0 to 512 [ 301.906009][T22919] __nla_validate_parse: 3 callbacks suppressed [ 301.906072][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7129'. [ 301.924860][T22919] IPVS: Error joining to the multicast group [ 301.948681][T22915] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.971688][T22915] ext4 filesystem being mounted at /212/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 302.068416][ T29] kauditd_printk_skb: 430 callbacks suppressed [ 302.068431][ T29] audit: type=1400 audit(1746307133.150:22049): avc: denied { unmount } for pid=20158 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 302.077990][T20158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.095223][ T29] audit: type=1400 audit(1746307133.150:22050): avc: denied { ioctl } for pid=22939 comm="syz.8.7137" path="socket:[70727]" dev="sockfs" ino=70727 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.152810][ T29] audit: type=1400 audit(1746307133.220:22051): avc: denied { bind } for pid=22939 comm="syz.8.7137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.157761][T22945] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7137'. [ 302.172898][ T29] audit: type=1400 audit(1746307133.220:22052): avc: denied { setopt } for pid=22939 comm="syz.8.7137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.209659][ T29] audit: type=1326 audit(1746307133.300:22053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22952 comm="syz.0.7138" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8feae6e969 code=0x0 [ 302.250044][T22955] lo speed is unknown, defaulting to 1000 [ 302.408595][T22970] netlink: 'syz.8.7145': attribute type 1 has an invalid length. [ 302.416478][T22970] netlink: 224 bytes leftover after parsing attributes in process `syz.8.7145'. [ 302.934134][T22985] netlink: 'syz.5.7150': attribute type 10 has an invalid length. [ 302.942051][T22985] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7150'. [ 302.974190][T22985] dummy0: entered promiscuous mode [ 302.985923][T22985] bridge0: port 1(dummy0) entered blocking state [ 302.992396][T22985] bridge0: port 1(dummy0) entered disabled state [ 303.009034][T22985] dummy0: entered allmulticast mode [ 303.327327][T23002] syzkaller0: entered promiscuous mode [ 303.331708][T23006] netlink: 'syz.5.7161': attribute type 1 has an invalid length. [ 303.333495][T23002] syzkaller0: entered allmulticast mode [ 303.384288][T23006] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.437218][T23008] bond2: (slave veth13): Enslaving as an active interface with a down link [ 303.495183][ T29] audit: type=1400 audit(1746307134.580:22054): avc: denied { create } for pid=23009 comm="syz.0.7162" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 303.516887][ T29] audit: type=1400 audit(1746307134.580:22055): avc: denied { mounton } for pid=23009 comm="syz.0.7162" path="/217/file0" dev="tmpfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 303.548815][T23006] bond2: (slave ip6gretap1): making interface the new active one [ 303.558064][T23006] ip6gretap1: entered promiscuous mode [ 303.566073][T23006] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 303.584361][ T29] audit: type=1400 audit(1746307134.660:22056): avc: denied { unlink } for pid=20158 comm="syz-executor" name="file0" dev="tmpfs" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 303.651379][ T29] audit: type=1400 audit(1746307134.740:22057): avc: denied { name_connect } for pid=23014 comm="syz.5.7164" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 303.820321][T23027] loop0: detected capacity change from 0 to 512 [ 303.830125][T23027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 303.853389][T23027] EXT4-fs (loop0): 1 truncate cleaned up [ 303.870930][T23027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.922307][T20158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.050238][T23039] loop0: detected capacity change from 0 to 2048 [ 304.157686][T23039] loop0: unable to read partition table [ 304.170667][T23039] loop0: partition table beyond EOD, truncated [ 304.176933][T23039] loop_reread_partitions: partition scan of loop0 () failed (rc=-5) [ 304.339429][ T29] audit: type=1400 audit(1746307135.420:22058): avc: denied { accept } for pid=23061 comm="syz.7.7183" path="/402/file0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 304.689011][T23093] loop0: detected capacity change from 0 to 1024 [ 304.704186][T23093] EXT4-fs: Ignoring removed bh option [ 304.715702][T23093] EXT4-fs: inline encryption not supported [ 304.739749][T23093] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 304.771819][T23093] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 304.791954][T23093] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 2: comm syz.0.7195: lblock 2 mapped to illegal pblock 2 (length 1) [ 304.808810][T23093] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 48: comm syz.0.7195: lblock 0 mapped to illegal pblock 48 (length 1) [ 304.843003][T23093] EXT4-fs error (device loop0): ext4_acquire_dquot:6935: comm syz.0.7195: Failed to acquire dquot type 0 [ 304.878056][T23093] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 304.911711][T23098] netlink: 'syz.3.7196': attribute type 13 has an invalid length. [ 304.931851][T23093] EXT4-fs error (device loop0): ext4_evict_inode:259: inode #11: comm syz.0.7195: mark_inode_dirty error [ 304.980510][T23093] EXT4-fs warning (device loop0): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 304.991279][T23093] EXT4-fs (loop0): 1 orphan inode deleted [ 304.994069][T23098] 8021q: adding VLAN 0 to HW filter on device  [ 304.997307][T23093] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.098955][T23098] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.143267][T23093] netlink: 'syz.0.7195': attribute type 10 has an invalid length. [ 305.151222][T23093] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7195'. [ 305.160285][ T4173] EXT4-fs error (device loop0): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:48: lblock 1 mapped to illegal pblock 1 (length 1) [ 305.185351][ T4173] EXT4-fs error (device loop0): ext4_release_dquot:6971: comm kworker/u8:48: Failed to release dquot type 0 [ 305.248031][T23093] dummy0: entered promiscuous mode [ 305.253958][T23093] bridge0: port 1(dummy0) entered blocking state [ 305.261008][T23093] bridge0: port 1(dummy0) entered disabled state [ 305.267683][T23093] dummy0: entered allmulticast mode [ 305.290900][T23102] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7198'. [ 305.337753][T20158] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.357171][T20158] EXT4-fs error (device loop0): __ext4_get_inode_loc:4450: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 305.372735][T23107] netlink: 'syz.7.7202': attribute type 4 has an invalid length. [ 305.397487][T20158] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 305.422426][T20158] EXT4-fs error (device loop0): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 305.435727][T23113] bridge0: port 1() entered blocking state [ 305.442194][T23113] bridge0: port 1() entered disabled state [ 305.465512][T23113] : entered promiscuous mode [ 305.470701][T23113] dummy0: entered promiscuous mode [ 305.491879][T23113] bridge0: port 1() entered blocking state [ 305.498217][T23113] bridge0: port 1() entered forwarding state [ 305.646722][T23131] 9pnet_fd: Insufficient options for proto=fd [ 306.095039][T23162] pim6reg1: entered promiscuous mode [ 306.100440][T23162] pim6reg1: entered allmulticast mode [ 306.581508][T23202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7237'. [ 306.598497][T23188] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7234'. [ 306.794198][T23236] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7254'. [ 306.813085][T23238] bridge0: port 2(vlan0) entered blocking state [ 306.819438][T23238] bridge0: port 2(vlan0) entered disabled state [ 306.825762][T23238] vlan0: entered allmulticast mode [ 306.830969][T23238] bridge0: entered allmulticast mode [ 306.836913][T23238] vlan0: left allmulticast mode [ 306.841807][T23238] bridge0: left allmulticast mode [ 306.868731][T23241] wg2: entered promiscuous mode [ 306.873648][T23241] wg2: entered allmulticast mode [ 307.035450][T23260] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 307.055488][T23265] tipc: Enabled bearer , priority 0 [ 307.067010][T23264] tipc: Resetting bearer [ 307.075602][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.083067][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.091053][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.104485][T23264] tipc: Disabling bearer [ 307.111238][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.118633][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.126742][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.134371][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.141835][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.149872][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.157253][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.164711][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.172258][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.179774][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.189137][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.196621][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.204031][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.212087][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.219570][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.227119][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.234588][T10802] hid-generic 0000:0004:0000.001B: unknown main item tag 0x0 [ 307.246078][T10802] hid-generic 0000:0004:0000.001B: hidraw0: HID v0.02 Device [syz0] on syz1 [ 307.311129][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 307.311144][ T29] audit: type=1400 audit(1746307138.400:22132): avc: denied { create } for pid=23282 comm="syz.3.7274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.351361][ T29] audit: type=1400 audit(1746307138.420:22133): avc: denied { bind } for pid=23282 comm="syz.3.7274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.371479][ T29] audit: type=1400 audit(1746307138.430:22134): avc: denied { write } for pid=23282 comm="syz.3.7274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.397547][T23288] macvlan2: entered promiscuous mode [ 307.403189][T23288] bridge0: entered promiscuous mode [ 307.417667][T23288] bridge0: port 2(macvlan2) entered blocking state [ 307.424980][T23288] bridge0: port 2(macvlan2) entered disabled state [ 307.451441][T23288] macvlan2: entered allmulticast mode [ 307.457382][T23288] bridge0: entered allmulticast mode [ 307.486720][ T29] audit: type=1326 audit(1746307138.570:22135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23294 comm="syz.5.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 307.537326][ T29] audit: type=1326 audit(1746307138.600:22136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23294 comm="syz.5.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 307.561535][ T29] audit: type=1326 audit(1746307138.600:22137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23294 comm="syz.5.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 307.585165][ T29] audit: type=1326 audit(1746307138.600:22138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23294 comm="syz.5.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 307.609437][ T29] audit: type=1326 audit(1746307138.600:22139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23294 comm="syz.5.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 307.633160][ T29] audit: type=1326 audit(1746307138.600:22140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23294 comm="syz.5.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3f59bbe969 code=0x7ffc0000 [ 307.657368][ T29] audit: type=1326 audit(1746307138.600:22141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23294 comm="syz.5.7279" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3f59bbe9a3 code=0x7ffc0000 [ 307.683213][T23288] macvlan2: left allmulticast mode [ 307.688746][T23288] bridge0: left allmulticast mode [ 307.717006][T23288] bridge0: left promiscuous mode [ 307.790859][T23308] syzkaller0: entered promiscuous mode [ 307.796443][T23308] syzkaller0: entered allmulticast mode [ 307.896863][T23320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.912986][T23320] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.121069][T23336] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7294'. [ 308.213013][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7296'. [ 308.222595][T23342] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7296'. [ 308.243781][T23346] netlink: 'syz.7.7298': attribute type 7 has an invalid length. [ 308.252200][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7298'. [ 308.631832][T23381] syzkaller0: create flow: hash 2020369341 index 0 [ 308.700120][T23380] syzkaller0 (unregistered): delete flow: hash 2020369341 index 0 [ 308.861462][T23397] netlink: 'syz.7.7321': attribute type 13 has an invalid length. [ 308.904950][T23397] bridge0: port 2() entered blocking state [ 308.910925][T23397] bridge0: port 2() entered forwarding state [ 308.917228][T23397] 8021q: adding VLAN 0 to HW filter on device  [ 308.943856][T23397] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.965596][T23397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 309.001181][T23409] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7325'. [ 309.011366][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.117525][T23414] lo speed is unknown, defaulting to 1000 [ 309.270531][T23427] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 309.539003][ T4134] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 309.948847][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.136026][T23457] netlink: 'syz.5.7346': attribute type 39 has an invalid length. [ 310.221814][T23470] vlan1: entered promiscuous mode [ 310.226884][T23470] syz_tun: entered promiscuous mode [ 310.352447][T23483] 9pnet: p9_errstr2errno: server reported unknown error [ 310.590864][ T4166] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.598684][ T4166] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.609492][T23500] !: renamed from dummy0 (while UP) [ 310.778955][ T3379] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 310.801283][ T4134] bond0 (unregistering): Released all slaves [ 310.895772][ T4134] hsr_slave_0: left promiscuous mode [ 310.908332][ T4134] hsr_slave_1: left promiscuous mode [ 311.026296][T23524] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7370'. [ 311.145266][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7378'. [ 311.196058][T23541] syzkaller1: entered promiscuous mode [ 311.201667][T23541] syzkaller1: entered allmulticast mode [ 311.492642][T23557] serio: Serial port ptm0 [ 312.023009][T23589] netlink: 'syz.0.7399': attribute type 27 has an invalid length. [ 312.113661][T23605] netlink: 'syz.3.7405': attribute type 39 has an invalid length. [ 312.198025][T23614] netlink: 'syz.5.7411': attribute type 4 has an invalid length. [ 312.206422][T23614] netlink: 'syz.5.7411': attribute type 4 has an invalid length. [ 312.219963][ T3379] lo speed is unknown, defaulting to 1000 [ 312.225876][ T3379] syz0: Port: 1 Link ACTIVE [ 312.244801][ T23] lo speed is unknown, defaulting to 1000 [ 312.300107][T23626] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7417'. [ 312.327172][T23626] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.360629][T23626] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7417'. [ 312.375028][T23626] bond3 (unregistering): Released all slaves [ 312.428045][T23643] netlink: 'syz.0.7424': attribute type 39 has an invalid length. [ 312.496973][T23646] 0ªX¹¦D: left allmulticast mode [ 312.558352][T23646] bridge0: port 1(dummy0) entered blocking state [ 312.564757][T23646] bridge0: port 1(dummy0) entered forwarding state [ 312.614575][T23646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.637036][T23646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 312.736442][T23654] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7428'. [ 312.946850][T23672] 9pnet: p9_errstr2errno: server reported unknown error [ 313.191813][T23687] pim6reg1: entered promiscuous mode [ 313.197145][T23687] pim6reg1: entered allmulticast mode [ 313.417956][T23699] __nla_validate_parse: 1 callbacks suppressed [ 313.417973][T23699] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7447'. [ 313.435189][T23699] : left allmulticast mode [ 313.439864][T23699] bond_slave_1: left allmulticast mode [ 313.445512][T23699] bridge0: port 2() entered disabled state [ 313.457856][T23699] bridge_slave_0: left allmulticast mode [ 313.463580][T23699] bridge_slave_0: left promiscuous mode [ 313.469847][T23699] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.547091][ T29] kauditd_printk_skb: 380 callbacks suppressed [ 313.547106][ T29] audit: type=1400 audit(1746307144.630:22522): avc: denied { read } for pid=23702 comm="syz.8.7449" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 313.618513][T23712] 9pnet: p9_errstr2errno: server reported unknown error [ 313.732120][T23727] 8021q: adding VLAN 0 to HW filter on device  [ 313.740867][T23727] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.752944][T23727] bridge0: port 1(dummy0) entered blocking state [ 313.759368][T23727] bridge0: port 1(dummy0) entered forwarding state [ 313.777010][T23727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 313.935211][ T29] audit: type=1326 audit(1746307145.020:22523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 313.958941][ T29] audit: type=1326 audit(1746307145.020:22524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 313.982516][ T29] audit: type=1326 audit(1746307145.020:22525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 314.006378][ T29] audit: type=1326 audit(1746307145.020:22526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 314.030001][ T29] audit: type=1326 audit(1746307145.020:22527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 314.030033][ T29] audit: type=1326 audit(1746307145.020:22528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 314.054780][ T29] audit: type=1326 audit(1746307145.020:22529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 314.101572][ T29] audit: type=1326 audit(1746307145.020:22530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23740 comm="syz.7.7465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 314.125198][ T29] audit: type=1400 audit(1746307145.090:22531): avc: denied { create } for pid=23742 comm="syz.0.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 314.182950][T23749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26216 sclass=netlink_route_socket pid=23749 comm=syz.5.7469 [ 314.221926][T23751] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7470'. [ 314.268924][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 314.280606][T23756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7472'. [ 314.462046][T23774] ref_ctr_offset mismatch. inode: 0x1ab3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x400000040 [ 314.474744][T23774] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: 0, delta: -1 [ 314.483117][T23774] ref_ctr decrement failed for inode: 0x1ab3 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88810446d800 [ 314.494207][T23774] uprobe: syz.5.7479:23774 failed to unregister, leaking uprobe [ 314.679770][T23790] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7487'. [ 314.700561][T23799] IPv6: Can't replace route, no match found [ 314.744085][T23808] sit0: entered promiscuous mode [ 314.747821][T23806] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7493'. [ 314.779297][T23808] netlink: 'syz.3.7494': attribute type 1 has an invalid length. [ 314.787115][T23808] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7494'. [ 314.827021][T23806] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.859023][ T4144] ip6gretap1: left promiscuous mode [ 315.004943][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7504'. [ 315.027822][T23830] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7504'. [ 315.263691][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7512'. [ 315.275546][T23849] vlan1: entered promiscuous mode [ 315.520843][T23860] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7517'. [ 315.536637][T23860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.551476][T23860] bond0 (unregistering): Released all slaves [ 315.801421][ T4144] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.886654][ T4144] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.941722][ T4144] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.000012][ T4144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.094173][ T4144] gretap0: left allmulticast mode [ 316.099286][ T4144] gretap0: left promiscuous mode [ 316.104412][ T4144] bridge0: port 1(gretap0) entered disabled state [ 316.164801][ T4144] team0: Port device geneve1 removed [ 316.340789][ T4144] bond0 (unregistering): Released all slaves [ 316.367637][T23902] 8021q: adding VLAN 0 to HW filter on device bond3 [ 316.382443][T23905] bond3 (unregistering): Released all slaves [ 316.395200][T23906] tipc: Enabling of bearer rejected, failed to enable media [ 316.403615][ T4144] tipc: Left network mode [ 316.432046][ T4144] hsr_slave_0: left promiscuous mode [ 316.447541][ T4144] hsr_slave_1: left promiscuous mode [ 316.591822][T23911] rdma_op ffff88811e33fd80 conn xmit_rdma 0000000000000000 [ 317.222772][T23961] policy can only be matched on NF_INET_PRE_ROUTING [ 317.222789][T23961] unable to load match [ 317.275177][T23963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.332344][T23963] bond0 (unregistering): Released all slaves [ 317.458144][T23982] vlan0: entered promiscuous mode [ 317.463402][T23982] veth1_to_hsr: entered promiscuous mode [ 317.914125][T24022] syz.5.7588: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 317.928709][T24022] CPU: 0 UID: 0 PID: 24022 Comm: syz.5.7588 Tainted: G W 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 317.928763][T24022] Tainted: [W]=WARN [ 317.928770][T24022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 317.928784][T24022] Call Trace: [ 317.928791][T24022] [ 317.928842][T24022] __dump_stack+0x1d/0x30 [ 317.928859][T24022] dump_stack_lvl+0xe8/0x140 [ 317.928875][T24022] dump_stack+0x15/0x1b [ 317.928888][T24022] warn_alloc+0x12b/0x1a0 [ 317.928916][T24022] ? schedule+0x5f/0xd0 [ 317.928944][T24022] ? futex_unqueue+0xb9/0xf0 [ 317.928997][T24022] __vmalloc_node_range_noprof+0x9c/0xdf0 [ 317.929017][T24022] ? __perf_event_task_sched_in+0xa37/0xaa0 [ 317.929087][T24022] ? save_fpregs_to_fpstate+0x100/0x160 [ 317.929165][T24022] ? xskq_create+0x36/0xe0 [ 317.929188][T24022] vmalloc_user_noprof+0x59/0x70 [ 317.929212][T24022] ? xskq_create+0x80/0xe0 [ 317.929243][T24022] xskq_create+0x80/0xe0 [ 317.929338][T24022] xsk_init_queue+0x95/0xf0 [ 317.929365][T24022] xsk_setsockopt+0x35c/0x510 [ 317.929385][T24022] ? __pfx_xsk_setsockopt+0x10/0x10 [ 317.929437][T24022] __sys_setsockopt+0x181/0x200 [ 317.929508][T24022] __x64_sys_setsockopt+0x64/0x80 [ 317.929542][T24022] x64_sys_call+0x2bd5/0x2fb0 [ 317.929562][T24022] do_syscall_64+0xd0/0x1a0 [ 317.929581][T24022] ? clear_bhb_loop+0x25/0x80 [ 317.929600][T24022] ? clear_bhb_loop+0x25/0x80 [ 317.929672][T24022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.929766][T24022] RIP: 0033:0x7f3f59bbe969 [ 317.929787][T24022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.929801][T24022] RSP: 002b:00007f3f58227038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 317.929884][T24022] RAX: ffffffffffffffda RBX: 00007f3f59de5fa0 RCX: 00007f3f59bbe969 [ 317.929898][T24022] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 317.929912][T24022] RBP: 00007f3f59c40ab1 R08: 0000000000000004 R09: 0000000000000000 [ 317.929925][T24022] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.929938][T24022] R13: 0000000000000000 R14: 00007f3f59de5fa0 R15: 00007ffe11cb3088 [ 317.929995][T24022] [ 318.149676][T24022] Mem-Info: [ 318.152797][T24022] active_anon:37617 inactive_anon:8 isolated_anon:0 [ 318.152797][T24022] active_file:11719 inactive_file:15123 isolated_file:0 [ 318.152797][T24022] unevictable:0 dirty:289 writeback:0 [ 318.152797][T24022] slab_reclaimable:3554 slab_unreclaimable:98272 [ 318.152797][T24022] mapped:28165 shmem:21220 pagetables:981 [ 318.152797][T24022] sec_pagetables:0 bounce:0 [ 318.152797][T24022] kernel_misc_reclaimable:0 [ 318.152797][T24022] free:1488898 free_pcp:9550 free_cma:0 [ 318.197880][T24022] Node 0 active_anon:150468kB inactive_anon:32kB active_file:46876kB inactive_file:60492kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112776kB dirty:1156kB writeback:0kB shmem:84880kB writeback_tmp:0kB kernel_stack:4304kB pagetables:4040kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.227859][T24022] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.255503][T24022] lowmem_reserve[]: 0 2884 7863 7863 [ 318.260856][T24022] Node 0 DMA32 free:2950036kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2953568kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 318.290041][T24022] lowmem_reserve[]: 0 0 4978 4978 [ 318.295148][T24022] Node 0 Normal free:2989756kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB active_anon:150468kB inactive_anon:32kB active_file:46876kB inactive_file:60492kB unevictable:0kB writepending:1156kB present:5242880kB managed:5098244kB mlocked:0kB bounce:0kB free_pcp:34488kB local_pcp:2968kB free_cma:0kB [ 318.326273][T24022] lowmem_reserve[]: 0 0 0 0 [ 318.330924][T24022] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 318.343742][T24022] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2950036kB [ 318.360650][T24022] Node 0 Normal: 781*4kB (ME) 773*8kB (ME) 153*16kB (ME) 476*32kB (UME) 620*64kB (UME) 392*128kB (UME) 308*256kB (UME) 289*512kB (UME) 126*1024kB (UM) 67*2048kB (UM) 581*4096kB (UME) = 2989676kB [ 318.380393][T24022] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 318.390245][T24022] 48060 total pagecache pages [ 318.394933][T24022] 8 pages in swap cache [ 318.399117][T24022] Free swap = 59424kB [ 318.403224][T24022] Total swap = 124996kB [ 318.407382][T24022] 2097051 pages RAM [ 318.411211][T24022] 0 pages HighMem/MovableOnly [ 318.415896][T24022] 80258 pages reserved [ 318.615087][T24053] xt_hashlimit: max too large, truncated to 1048576 [ 318.621835][ T29] kauditd_printk_skb: 298 callbacks suppressed [ 318.621846][ T29] audit: type=1400 audit(1746307149.700:22830): avc: denied { ioctl } for pid=24051 comm="syz.3.7598" path="socket:[73597]" dev="sockfs" ino=73597 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 318.775968][T24068] pim6reg1: entered promiscuous mode [ 318.781970][T24068] pim6reg1: entered allmulticast mode [ 318.814829][T24066] __nla_validate_parse: 11 callbacks suppressed [ 318.814851][T24066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7603'. [ 318.825413][T24072] SELinux: failed to load policy [ 318.947452][ T29] audit: type=1400 audit(1746307150.030:22831): avc: denied { append } for pid=24081 comm="syz.8.7611" name="file0" dev="tmpfs" ino=3638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 318.971081][ T29] audit: type=1400 audit(1746307150.060:22832): avc: denied { open } for pid=24081 comm="syz.8.7611" path="/699/file0" dev="tmpfs" ino=3638 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 319.036373][T24097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7627'. [ 319.046698][T24097] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.055321][T24097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.174731][ T29] audit: type=1326 audit(1746307150.260:22833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24110 comm="syz.7.7622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 319.200634][ T29] audit: type=1326 audit(1746307150.260:22834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24110 comm="syz.7.7622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 319.224290][ T29] audit: type=1326 audit(1746307150.260:22835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24110 comm="syz.7.7622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 319.248810][ T29] audit: type=1326 audit(1746307150.260:22836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24110 comm="syz.7.7622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 319.272995][ T29] audit: type=1326 audit(1746307150.260:22837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24110 comm="syz.7.7622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 319.296642][ T29] audit: type=1326 audit(1746307150.260:22838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24110 comm="syz.7.7622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 319.320283][ T29] audit: type=1326 audit(1746307150.260:22839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24110 comm="syz.7.7622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 319.437421][T24126] netlink: 'syz.0.7629': attribute type 7 has an invalid length. [ 319.445316][T24126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7629'. [ 319.480477][T24128] vlan2: entered allmulticast mode [ 319.485626][T24128] bridge_slave_0: entered allmulticast mode [ 319.876516][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.8.7637'. [ 319.885748][T24146] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 320.705606][T24185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7653'. [ 320.860040][T24194] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24194 comm=syz.7.7657 [ 321.484469][T24234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7675'. [ 321.549031][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 321.678179][T24259] pim6reg1: entered promiscuous mode [ 321.684238][T24259] pim6reg1: entered allmulticast mode [ 321.690686][T24260] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7687'. [ 321.875298][T24275] : left promiscuous mode [ 321.879808][T24275] dummy0: left promiscuous mode [ 321.885135][T24275] bridge0: port 1() entered disabled state [ 321.895104][T24275] : (slave dummy0): Releasing backup interface [ 321.903226][T24275] dummy0: left allmulticast mode [ 321.944448][T24275] vlan0: entered promiscuous mode [ 321.951639][T24275] netlink: 'syz.3.7693': attribute type 10 has an invalid length. [ 322.030522][T24295] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1437546482/1437546483 [ 322.040001][T24295] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1437546482/1437546483 [ 322.165645][T24305] serio: Serial port pts1 [ 322.262913][T24310] tipc: Started in network mode [ 322.268184][T24310] tipc: Node identity ac14140f, cluster identity 4711 [ 322.280910][T24310] tipc: New replicast peer: 255.0.0.255 [ 322.286529][T24310] tipc: Enabled bearer , priority 10 [ 322.636992][T24342] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 322.697130][T24346] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7723'. [ 322.733794][T24351] : (slave bond_slave_1): Releasing backup interface [ 322.740925][T24348] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7724'. [ 322.751161][T24351] bond_slave_1: left promiscuous mode [ 322.760710][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 322.769656][T24351] team0: Port device team_slave_0 removed [ 322.776938][T24351] team0: Port device team_slave_1 removed [ 322.801825][T24351] netlink: 'syz.7.7725': attribute type 10 has an invalid length. [ 322.811330][T24351] : left promiscuous mode [ 322.820255][T24351] 8021q: adding VLAN 0 to HW filter on device  [ 322.852672][T24351] team0: Port device  added [ 323.051027][T24375] IPv4: Oversized IP packet from 127.202.26.0 [ 323.188885][T10802] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 323.229638][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7736'. [ 323.398814][ T36] tipc: Node number set to 2886997007 [ 323.411899][T24398] dummy0: left allmulticast mode [ 323.417053][T24398] dummy0: left promiscuous mode [ 323.422159][T24398] bridge0: port 1(dummy0) entered disabled state [ 323.441273][T24398] bond2: (slave veth13): Releasing active interface [ 323.447887][T24398] bond2: (slave veth13): the permanent HWaddr of slave - 3e:b5:ea:47:07:c8 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 323.464733][T24398] ip6gretap1: entered promiscuous mode [ 323.473974][T24398] bond2: (slave ip6gretap1): Releasing active interface [ 323.485482][T24398] ip6gretap1: left promiscuous mode [ 323.560192][T24410] lo speed is unknown, defaulting to 1000 [ 323.568111][T24398] netlink: 'syz.5.7742': attribute type 10 has an invalid length. [ 323.621035][T24400] xt_CT: You must specify a L4 protocol and not use inversions on it [ 323.780381][T24423] bridge4: entered allmulticast mode [ 323.874858][ T29] kauditd_printk_skb: 2263 callbacks suppressed [ 323.874875][ T29] audit: type=1326 audit(1746307154.960:25103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 323.917739][ T29] audit: type=1326 audit(1746307154.960:25104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 323.941411][ T29] audit: type=1326 audit(1746307154.960:25105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 323.965750][ T29] audit: type=1326 audit(1746307154.960:25106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 323.989608][ T29] audit: type=1326 audit(1746307154.960:25107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 324.014111][ T29] audit: type=1326 audit(1746307154.960:25108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 324.037772][ T29] audit: type=1326 audit(1746307154.960:25109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 324.061543][ T29] audit: type=1326 audit(1746307154.960:25110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 324.085205][ T29] audit: type=1326 audit(1746307154.960:25111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 324.108892][ T29] audit: type=1326 audit(1746307154.960:25112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24428 comm="syz.8.7754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 324.247340][T24440] __nla_validate_parse: 1 callbacks suppressed [ 324.247358][T24440] netlink: 96 bytes leftover after parsing attributes in process `syz.8.7758'. [ 324.331590][T24452] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7764'. [ 324.354999][T24452] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.363801][T24452] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.372082][T24452] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.380334][T24452] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.522330][T24452] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.530810][T24452] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.539196][T24452] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.547607][T24452] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 324.718473][T24468] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7770'. [ 324.830924][T24482] tipc: Enabling of bearer rejected, already enabled [ 324.866514][T24486] Invalid ELF header magic: != ELF [ 325.003874][T24500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=24500 comm=syz.8.7784 [ 325.093191][T24506] netlink: 'syz.8.7787': attribute type 3 has an invalid length. [ 325.404425][T24528] bridge0: port 1(dummy0) entered disabled state [ 326.332839][T24560] serio: Serial port pts0 [ 326.397988][T24563] pim6reg1: entered promiscuous mode [ 326.403436][T24563] pim6reg1: entered allmulticast mode [ 326.495071][T24572] lo speed is unknown, defaulting to 1000 [ 326.524293][T24580] dummy0: left allmulticast mode [ 326.529507][T24580] dummy0: left promiscuous mode [ 326.534580][T24580] bridge0: port 1(dummy0) entered disabled state [ 326.546022][T24580] vlan0: entered promiscuous mode [ 326.552044][T24580] netlink: 'syz.0.7812': attribute type 10 has an invalid length. [ 326.567769][T24580] 8021q: adding VLAN 0 to HW filter on device  [ 326.577921][T24580] team0: Port device  added [ 326.707045][T24597] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7823'. [ 326.719649][T24597] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.727889][T24597] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.736726][T24597] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.745017][T24597] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.757726][T24597] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.766904][T24597] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.775308][T24597] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.783702][T24597] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.905988][T24612] : left allmulticast mode [ 326.910700][T24612] bond_slave_0: left allmulticast mode [ 326.916265][T24612] bond_slave_1: left allmulticast mode [ 326.921856][T24612] : left promiscuous mode [ 326.926272][T24612] bond_slave_0: left promiscuous mode [ 326.931957][T24612] bond_slave_1: left promiscuous mode [ 326.937691][T24612] bridge0: port 1() entered disabled state [ 326.946692][T24612] dummy0: left allmulticast mode [ 326.951889][T24612] bridge0: port 3(dummy0) entered disabled state [ 326.959103][T24612] bridge_slave_1: left allmulticast mode [ 326.964847][T24612] bridge_slave_1: left promiscuous mode [ 326.970694][T24612] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.980228][T24612] : (slave bond_slave_0): Releasing backup interface [ 326.989813][T24612] : (slave bond_slave_1): Releasing backup interface [ 326.999217][T24614] vlan0: entered promiscuous mode [ 327.013354][T24612] netlink: 'syz.8.7828': attribute type 10 has an invalid length. [ 327.036857][T24616] netlink: 71 bytes leftover after parsing attributes in process `syz.8.7829'. [ 327.099393][T24623] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7831'. [ 327.115772][T24625] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7842'. [ 327.254812][T24635] netlink: 664 bytes leftover after parsing attributes in process `syz.8.7835'. [ 327.455781][T24645] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7840'. [ 327.519047][T24651] pim6reg1: entered promiscuous mode [ 327.524411][T24651] pim6reg1: entered allmulticast mode [ 327.738207][T24661] serio: Serial port pts0 [ 328.100264][T24669] dummy0: left promiscuous mode [ 328.107520][T24669] wg2: left promiscuous mode [ 328.112148][T24669] wg2: left allmulticast mode [ 328.117105][T24679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.118249][T24669] vlan0: left promiscuous mode [ 328.125600][T24679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.130849][T24669] macsec0: left promiscuous mode [ 328.143789][T24669] geneve2: left promiscuous mode [ 328.148737][T24669] geneve2: left allmulticast mode [ 328.153960][T24669] ip6gre1: left allmulticast mode [ 328.159420][T24669] ip6gre2: left allmulticast mode [ 328.187695][T24669] bridge4: left allmulticast mode [ 328.527257][T24687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7857'. [ 328.887155][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 328.887170][ T29] audit: type=1326 audit(1746307159.970:25217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24720 comm="syz.8.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 328.917806][ T29] audit: type=1326 audit(1746307159.970:25218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24720 comm="syz.8.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 328.941549][ T29] audit: type=1326 audit(1746307159.970:25219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24720 comm="syz.8.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 328.965807][ T29] audit: type=1326 audit(1746307159.970:25220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24720 comm="syz.8.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 329.057121][ T29] audit: type=1326 audit(1746307160.050:25221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24720 comm="syz.8.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 329.081235][ T29] audit: type=1326 audit(1746307160.050:25222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24720 comm="syz.8.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 329.104826][ T29] audit: type=1326 audit(1746307160.110:25223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24720 comm="syz.8.7874" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff397b1e969 code=0x7ffc0000 [ 329.129211][ T29] audit: type=1326 audit(1746307160.140:25224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24729 comm="syz.3.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 329.152912][ T29] audit: type=1326 audit(1746307160.140:25225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24729 comm="syz.3.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 329.264463][T24732] netlink: '+}[@': attribute type 3 has an invalid length. [ 329.270205][ T29] audit: type=1326 audit(1746307160.260:25226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24729 comm="syz.3.7876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=163 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 329.475938][T24747] tipc: Enabled bearer , priority 0 [ 329.516937][T24741] tipc: Resetting bearer [ 329.555661][T24741] tipc: Disabling bearer [ 329.630043][T24766] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7886'. [ 329.846254][T24787] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 329.885358][T24793] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7902'. [ 329.894715][T24793] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7902'. [ 329.919954][T24795] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7903'. [ 330.108812][ T36] page_pool_release_retry() stalled pool shutdown: id 158, 1 inflight 60 sec [ 330.208241][T24802] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 330.344397][T24808] veth0_vlan: entered allmulticast mode [ 330.354221][T24808] veth0_vlan: left promiscuous mode [ 330.359549][T24808] veth0_vlan: entered promiscuous mode [ 330.647277][T24824] lo speed is unknown, defaulting to 1000 [ 330.749973][T24824] chnl_net:caif_netlink_parms(): no params data found [ 330.812696][T24824] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.819997][T24824] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.827359][T24824] bridge_slave_0: entered allmulticast mode [ 330.834072][T24824] bridge_slave_0: entered promiscuous mode [ 330.840906][T24824] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.847947][T24824] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.855273][T24824] bridge_slave_1: entered allmulticast mode [ 330.861658][T24824] bridge_slave_1: entered promiscuous mode [ 330.879607][T24824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.890051][T24824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.912555][T24824] team0: Port device team_slave_0 added [ 330.919592][T24824] team0: Port device team_slave_1 added [ 330.937010][T24824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.944805][T24824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.970811][T24824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.984343][T24824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.991328][T24824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.017948][T24824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.050023][T24824] hsr_slave_0: entered promiscuous mode [ 331.056354][T24824] hsr_slave_1: entered promiscuous mode [ 331.288219][T24865] hub 4-0:1.0: USB hub found [ 331.293365][T24865] hub 4-0:1.0: 8 ports detected [ 331.317124][T24824] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 331.327166][T24824] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 331.336854][T24824] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 331.346809][T24824] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 331.397795][T24824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.414722][T24824] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.424668][ T4136] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.431846][ T4136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.446300][ T4136] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.453487][ T4136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.469249][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.476672][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.484124][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.492647][T24824] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.503226][T24824] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.510897][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.521066][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.528570][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.536068][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.543722][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.551240][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.558732][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.566154][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.573653][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.581080][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.588471][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.606236][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.613786][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.621203][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.628673][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.636163][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.643639][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.651054][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.654964][T24824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.658433][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.672635][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.680043][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.687568][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.695045][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.702508][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.710002][ T3379] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 331.719307][ T3379] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 331.795252][T24894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7938'. [ 331.821870][T24898] netlink: 64 bytes leftover after parsing attributes in process `syz.5.7939'. [ 331.884396][T24824] veth0_vlan: entered promiscuous mode [ 331.900064][T24824] veth1_vlan: entered promiscuous mode [ 331.916908][T24824] veth0_macvtap: entered promiscuous mode [ 331.924591][T24824] veth1_macvtap: entered promiscuous mode [ 331.938156][T24824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.949620][T24824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.959689][T24824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.968459][T24824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.977195][T24824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.985975][T24824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.079611][T24926] policy can only be matched on NF_INET_PRE_ROUTING [ 332.079625][T24926] unable to load match [ 332.184593][T24933] SELinux: failed to load policy [ 332.314639][T24950] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7958'. [ 332.449452][T24964] vlan0: left promiscuous mode [ 332.456753][T24964] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7963'. [ 332.467293][T24960] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.7963'. [ 332.923494][T24990] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7975'. [ 333.038992][T25004] sit0: left promiscuous mode [ 333.045395][T25004] vlan0: left promiscuous mode [ 333.053305][T25004] gretap1: left promiscuous mode [ 333.058708][T25004] geneve2: left promiscuous mode [ 333.101188][T25006] SELinux: syz.0.7981 (25006) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 333.448678][T25031] pim6reg1: entered promiscuous mode [ 333.454256][T25031] pim6reg1: entered allmulticast mode [ 333.542280][T25037] bond1: entered promiscuous mode [ 333.547850][T25037] bond1: entered allmulticast mode [ 333.554744][T25037] 8021q: adding VLAN 0 to HW filter on device bond1 [ 333.786413][T25056] team0: Port device  removed [ 333.900273][T25060] SELinux: failed to load policy [ 334.090202][T25080] program syz.7.8013 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.222095][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 334.222108][ T29] audit: type=1400 audit(1746307165.310:25297): avc: denied { write } for pid=25091 comm="syz.7.8019" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 334.323079][ T29] audit: type=1400 audit(1746307165.410:25298): avc: denied { create } for pid=25096 comm="syz.3.8020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 334.350135][ T29] audit: type=1400 audit(1746307165.440:25299): avc: denied { bind } for pid=25096 comm="syz.3.8020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 334.525637][T25107] sg_write: data in/out 122/14 bytes for SCSI command 0x0-- guessing data in; [ 334.525637][T25107] program syz.7.8023 not setting count and/or reply_len properly [ 334.653455][T25111] program syz.5.8035 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 334.670730][T25118] netlink: 'syz.3.8029': attribute type 3 has an invalid length. [ 335.165367][ T29] audit: type=1326 audit(1746307166.240:25300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 335.189015][ T29] audit: type=1326 audit(1746307166.250:25301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 335.213079][ T29] audit: type=1326 audit(1746307166.250:25302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 335.236708][ T29] audit: type=1326 audit(1746307166.250:25303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 335.260610][ T29] audit: type=1326 audit(1746307166.250:25304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 335.284330][ T29] audit: type=1326 audit(1746307166.250:25305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 335.308048][ T29] audit: type=1326 audit(1746307166.250:25306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25155 comm="syz.3.8043" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 335.628829][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 335.928402][T25191] SELinux: policydb version 0 does not match my version range 15-34 [ 335.937954][T25191] SELinux: failed to load policy [ 336.786464][T25223] lo speed is unknown, defaulting to 1000 [ 336.819424][ T23] IPVS: starting estimator thread 0... [ 336.908995][T25225] IPVS: using max 2784 ests per chain, 139200 per kthread [ 337.089038][T25239] SELinux: syz.7.8077 (25239) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 337.124441][T25242] netlink: '+}[@': attribute type 7 has an invalid length. [ 337.131839][T25242] __nla_validate_parse: 8 callbacks suppressed [ 337.131852][T25242] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 337.155414][T25239] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8077'. [ 337.220515][T25248] netlink: 'syz.7.8080': attribute type 1 has an invalid length. [ 337.255521][T25248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.300951][T25248] bond0: (slave veth7): Enslaving as an active interface with a down link [ 337.392724][T25248] vlan0: entered allmulticast mode [ 337.398083][T25248] bond0: entered allmulticast mode [ 337.423800][T25248] bond0: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 338.338926][T25303] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8100'. [ 338.416699][T25313] x_tables: duplicate underflow at hook 2 [ 338.609070][T25330] netlink: 'syz.0.8111': attribute type 10 has an invalid length. [ 338.616952][T25330] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8111'. [ 338.691730][T25330] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.700089][T25330] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.708402][T25330] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.719603][T25330] team0: Failed to send port change of device geneve1 via netlink (err -105) [ 338.728696][T25330] team0: Failed to send options change via netlink (err -105) [ 338.736238][T25330] team0: Port device geneve1 added [ 338.776968][T25327] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.841054][T25327] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.899787][T25327] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.965844][T25327] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.981591][T25327] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.004366][T25327] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.041036][T25327] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.106234][T25342] sd 0:0:1:0: device reset [ 339.535734][T25370] syzkaller0: entered promiscuous mode [ 339.541363][T25370] syzkaller0: entered allmulticast mode [ 339.954724][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 339.954741][ T29] audit: type=1326 audit(1746307171.040:25426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.016390][ T29] audit: type=1326 audit(1746307171.040:25427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.040301][ T29] audit: type=1326 audit(1746307171.040:25428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.064047][ T29] audit: type=1326 audit(1746307171.040:25429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.087653][ T29] audit: type=1326 audit(1746307171.040:25430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.111259][ T29] audit: type=1326 audit(1746307171.040:25431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.135025][ T29] audit: type=1326 audit(1746307171.040:25432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.158721][ T29] audit: type=1326 audit(1746307171.040:25433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.182502][ T29] audit: type=1326 audit(1746307171.040:25434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.206121][ T29] audit: type=1326 audit(1746307171.040:25435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25406 comm="syz.7.8144" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f555586e969 code=0x7ffc0000 [ 340.246918][T25415] netlink: 'syz.0.8148': attribute type 1 has an invalid length. [ 340.273854][T25415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.314624][T25415] bond0: (slave veth5): Enslaving as an active interface with a down link [ 340.352811][T25415] vlan2: entered allmulticast mode [ 340.357942][T25415] bond0: entered allmulticast mode [ 340.366623][T25415] bond0: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 341.068034][T25456] netlink: 'syz.7.8163': attribute type 4 has an invalid length. [ 341.084810][T25450] lo speed is unknown, defaulting to 1000 [ 341.117867][T25456] netlink: 'syz.7.8163': attribute type 4 has an invalid length. [ 341.285409][T25466] all: renamed from lo (while UP) [ 341.490525][T25483] netlink: 'syz.4.8174': attribute type 1 has an invalid length. [ 341.509108][T25483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.537175][T25483] 8021q: adding VLAN 0 to HW filter on device bond2 [ 341.545994][T25483] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 341.557853][T25483] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 341.586709][T25493] ip6erspan0: entered promiscuous mode [ 341.600208][T25493] bond2: (slave ip6erspan0): making interface the new active one [ 341.608277][T25493] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 341.681617][T25501] netlink: 'syz.4.8182': attribute type 4 has an invalid length. [ 341.692698][T25501] netlink: 'syz.4.8182': attribute type 4 has an invalid length. [ 341.801980][T25509] netlink: 'syz.3.8187': attribute type 39 has an invalid length. [ 341.879255][T25526] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8194'. [ 341.888774][T25526] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8194'. [ 341.975028][T25540] random: crng reseeded on system resumption [ 342.226617][T25559] block device autoloading is deprecated and will be removed. [ 342.441397][T25570] -1: renamed from syzkaller0 [ 342.476069][T25576] pim6reg1: entered promiscuous mode [ 342.481523][T25576] pim6reg1: entered allmulticast mode [ 342.631140][T25588] all: renamed from lo [ 343.193827][T25618] lo speed is unknown, defaulting to 1000 [ 343.511419][T25625] netlink: 4 bytes leftover after parsing attributes in process `syz.7.8226'. [ 343.534254][T25629] random: crng reseeded on system resumption [ 343.852327][T11254] hid-generic 0021:0009:0000.001D: unknown main item tag 0x0 [ 343.859883][T11254] hid-generic 0021:0009:0000.001D: unknown main item tag 0x0 [ 343.867319][T11254] hid-generic 0021:0009:0000.001D: unknown main item tag 0x0 [ 343.874830][T11254] hid-generic 0021:0009:0000.001D: unknown main item tag 0x0 [ 343.882322][T11254] hid-generic 0021:0009:0000.001D: unknown main item tag 0x0 [ 343.889755][T11254] hid-generic 0021:0009:0000.001D: unknown main item tag 0x0 [ 343.899278][T11254] hid-generic 0021:0009:0000.001D: hidraw0: HID v0.07 Device [syz0] on syz1 [ 343.912755][T25656] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8242'. [ 343.951130][T25662] sd 0:0:1:0: device reset [ 344.052975][T25669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8247'. [ 344.095673][T25678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8250'. [ 344.273827][T25689] vhci_hcd: invalid port number 96 [ 344.279017][T25689] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 344.618996][T25710] block device autoloading is deprecated and will be removed. [ 345.000014][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.023138][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.059073][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.082052][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.094665][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.108315][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.121915][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.134853][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.167630][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.206720][T25728] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25728 comm=syz.0.8272 [ 345.399070][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 345.399132][ T29] audit: type=1326 audit(1746307176.490:25600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.4.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d29e0e969 code=0x7ffc0000 [ 345.443892][ T29] audit: type=1326 audit(1746307176.520:25601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.4.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d29e0e969 code=0x7ffc0000 [ 345.467565][ T29] audit: type=1326 audit(1746307176.520:25602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.4.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d29e0e969 code=0x7ffc0000 [ 345.491152][ T29] audit: type=1326 audit(1746307176.520:25603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.4.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7f4d29e0e969 code=0x7ffc0000 [ 345.514721][ T29] audit: type=1326 audit(1746307176.520:25604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.4.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d29e0e969 code=0x7ffc0000 [ 345.538357][ T29] audit: type=1326 audit(1746307176.520:25605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.4.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f4d29e0e969 code=0x7ffc0000 [ 345.562105][ T29] audit: type=1326 audit(1746307176.520:25606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25734 comm="syz.4.8273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d29e0e969 code=0x7ffc0000 [ 345.611271][T25742] vlan2: entered allmulticast mode [ 345.779703][T25748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8278'. [ 345.788821][T25748] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8278'. [ 345.797776][T25748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8278'. [ 345.848788][T25748] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8278'. [ 346.066556][T25772] netlink: 'syz.7.8289': attribute type 7 has an invalid length. [ 346.074612][T25772] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8289'. [ 346.161062][ T29] audit: type=1326 audit(1746307177.250:25607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.3.8292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 346.184700][ T29] audit: type=1326 audit(1746307177.250:25608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.3.8292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 346.208250][ T29] audit: type=1326 audit(1746307177.250:25609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25778 comm="syz.3.8292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75b1e3e969 code=0x7ffc0000 [ 346.234041][T25777] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8291'. [ 346.419000][T10802] hid-generic 0021:0009:0000.001E: unknown main item tag 0x0 [ 346.426474][T10802] hid-generic 0021:0009:0000.001E: unknown main item tag 0x0 [ 346.433914][T10802] hid-generic 0021:0009:0000.001E: unknown main item tag 0x0 [ 346.441507][T10802] hid-generic 0021:0009:0000.001E: unknown main item tag 0x0 [ 346.448907][T10802] hid-generic 0021:0009:0000.001E: unknown main item tag 0x0 [ 346.456336][T10802] hid-generic 0021:0009:0000.001E: unknown main item tag 0x0 [ 346.464181][T10802] hid-generic 0021:0009:0000.001E: hidraw0: HID v0.07 Device [syz0] on syz1 [ 346.553750][T25817] syzkaller0: entered promiscuous mode [ 346.559405][T25817] syzkaller0: entered allmulticast mode [ 346.718265][ T3382] hid-generic 0021:0009:0000.001F: unknown main item tag 0x0 [ 346.725853][ T3382] hid-generic 0021:0009:0000.001F: unknown main item tag 0x0 [ 346.733309][ T3382] hid-generic 0021:0009:0000.001F: unknown main item tag 0x0 [ 346.740805][ T3382] hid-generic 0021:0009:0000.001F: unknown main item tag 0x0 [ 346.748202][ T3382] hid-generic 0021:0009:0000.001F: unknown main item tag 0x0 [ 346.755642][ T3382] hid-generic 0021:0009:0000.001F: unknown main item tag 0x0 [ 346.768826][ T3382] hid-generic 0021:0009:0000.001F: hidraw0: HID v0.07 Device [syz0] on syz1 [ 346.816995][T25843] syz_tun: entered allmulticast mode [ 346.825741][T25843] syz_tun (unregistering): left allmulticast mode [ 346.989763][T25853] pim6reg1: entered promiscuous mode [ 346.995180][T25853] pim6reg1: entered allmulticast mode [ 347.023861][T25855] lo speed is unknown, defaulting to 1000 [ 347.213087][T25876] lo: entered allmulticast mode [ 347.222415][T25874] veth1_to_bond: entered allmulticast mode [ 347.237295][T25874] veth1_to_bond: left allmulticast mode [ 347.255573][T25875] lo: left allmulticast mode [ 347.610439][T25896] netlink: 'syz.7.8350': attribute type 1 has an invalid length. [ 347.652376][T25896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.660357][T25896] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 347.683805][T25896] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 347.709583][T25896] bond1 (unregistering): Released all slaves [ 348.319139][T25916] binfmt_misc: register: failed to install interpreter file ./file2 [ 348.481537][T25922] tipc: Started in network mode [ 348.486453][T25922] tipc: Node identity 26edfebd71b, cluster identity 4711 [ 348.493710][T25922] tipc: Enabled bearer , priority 0 [ 348.502790][T25924] netlink: 'syz.5.8351': attribute type 1 has an invalid length. [ 348.523704][T25924] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.536947][T25924] __nla_validate_parse: 11 callbacks suppressed [ 348.536963][T25924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8351'. [ 348.553463][T25920] tipc: Resetting bearer [ 348.578996][T25920] tipc: Disabling bearer [ 348.592436][T25924] bond3 (unregistering): Released all slaves [ 348.616104][ T23] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 348.624013][T25929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.632773][ T23] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 348.639128][T25929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.761020][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8357'. [ 348.769992][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8357'. [ 348.790155][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8357'. [ 349.972341][T25997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8383'. [ 350.049931][T26008] atomic_op ffff88812df51528 conn xmit_atomic 0000000000000000 [ 350.065225][T26010] pim6reg1: entered promiscuous mode [ 350.070559][T26010] pim6reg1: entered allmulticast mode [ 350.157748][T26020] tipc: New replicast peer: 255.255.255.83 [ 350.163669][T26020] tipc: Enabled bearer , priority 10 [ 350.333491][T26034] lo speed is unknown, defaulting to 1000 [ 350.408393][T26039] selinux_netlink_send: 52 callbacks suppressed [ 350.408408][T26039] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26039 comm=syz.4.8400 [ 350.681678][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 350.681693][ T29] audit: type=1400 audit(1746307181.770:25756): avc: denied { unmount } for pid=24824 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 350.750200][T26052] netlink: 'syz.4.8405': attribute type 7 has an invalid length. [ 350.758119][T26052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8405'. [ 351.069339][T26016] ================================================================== [ 351.077522][T26016] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 351.086131][T26016] [ 351.088462][T26016] write to 0xffff8881133640a8 of 8 bytes by task 26012 on cpu 0: [ 351.096188][T26016] shmem_file_splice_read+0x444/0x5d0 [ 351.101570][T26016] splice_direct_to_actor+0x26c/0x680 [ 351.106941][T26016] do_splice_direct+0xda/0x150 [ 351.111699][T26016] do_sendfile+0x380/0x640 [ 351.116124][T26016] __x64_sys_sendfile64+0x105/0x150 [ 351.121326][T26016] x64_sys_call+0xb39/0x2fb0 [ 351.125918][T26016] do_syscall_64+0xd0/0x1a0 [ 351.130427][T26016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.136315][T26016] [ 351.138628][T26016] write to 0xffff8881133640a8 of 8 bytes by task 26016 on cpu 1: [ 351.146333][T26016] shmem_file_splice_read+0x444/0x5d0 [ 351.151707][T26016] splice_direct_to_actor+0x26c/0x680 [ 351.157074][T26016] do_splice_direct+0xda/0x150 [ 351.161831][T26016] do_sendfile+0x380/0x640 [ 351.166251][T26016] __x64_sys_sendfile64+0x105/0x150 [ 351.171458][T26016] x64_sys_call+0xb39/0x2fb0 [ 351.176053][T26016] do_syscall_64+0xd0/0x1a0 [ 351.180570][T26016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.186456][T26016] [ 351.188786][T26016] value changed: 0x0000000000006cc0 -> 0x0000000000006cc6 [ 351.195904][T26016] [ 351.198224][T26016] Reported by Kernel Concurrency Sanitizer on: [ 351.204376][T26016] CPU: 1 UID: 0 PID: 26016 Comm: syz.7.8390 Tainted: G W 6.15.0-rc4-syzkaller-00291-g2a239ffbebb5 #0 PREEMPT(voluntary) [ 351.218443][T26016] Tainted: [W]=WARN [ 351.222239][T26016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 351.232292][T26016] ================================================================== [ 351.240705][ T3382] tipc: Node number set to 1465777853 [ 351.548772][ T3379] page_pool_release_retry() stalled pool shutdown: id 167, 1 inflight 60 sec [ 356.761715][ T4185] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.811194][ T4185] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.871018][ T4185] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.910805][ T4185] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.981604][ T4185] bridge_slave_0: left allmulticast mode [ 356.987332][ T4185] bridge_slave_0: left promiscuous mode [ 356.993082][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.071026][ T4185]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.080604][ T4185]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.089873][ T4185]  (unregistering): Released all slaves [ 357.135290][ T4185] hsr_slave_0: left promiscuous mode [ 357.141018][ T4185] hsr_slave_1: left promiscuous mode [ 357.149007][ T4185] veth1_macvtap: left promiscuous mode [ 357.154470][ T4185] veth0_macvtap: left promiscuous mode [ 357.159999][ T4185] veth1_vlan: left promiscuous mode [ 357.165218][ T4185] veth0_vlan: left promiscuous mode