last executing test programs: 2m27.727295692s ago: executing program 32 (id=167): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = inotify_init1(0x800) inotify_add_watch(r2, &(0x7f00000002c0)='./file0\x00', 0x100080c) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2m4.434887923s ago: executing program 0 (id=585): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2m4.350022805s ago: executing program 0 (id=587): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1, 0x0, 0x107}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r4, 0x0, 0x8, 0x3) write(r2, 0x0, 0x0) 2m3.482555011s ago: executing program 0 (id=607): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) 2m3.00955376s ago: executing program 0 (id=616): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8a3ffffbfa400000000000007140000f0ffffffb70200001800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2m2.762136405s ago: executing program 0 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) r2 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x20) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2m2.192095126s ago: executing program 0 (id=632): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00'], 0x1c}}, 0x0) 2m2.148124536s ago: executing program 33 (id=632): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0200}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00'], 0x1c}}, 0x0) 1m41.35155296s ago: executing program 1 (id=989): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$selinux_context(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) 1m41.292044741s ago: executing program 1 (id=993): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(0x0, &(0x7f00000001c0)='./file0\x00', 0x1809049, 0x0, 0xff, 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000040)=@v3, 0x18, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 1m41.240018342s ago: executing program 1 (id=994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) inotify_init() r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xe, 0xb}}}, 0x24}}, 0x800) 1m40.948255928s ago: executing program 1 (id=1004): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) unshare(0x22020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x1}], 0x1) 1m40.050888005s ago: executing program 1 (id=1022): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0xfff3, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x9000000) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) setgroups(0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 1m39.946240897s ago: executing program 1 (id=1023): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m39.946042587s ago: executing program 34 (id=1023): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xb00000000000000, &(0x7f0000000300)=@base={0x8, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m36.60010479s ago: executing program 5 (id=1067): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) 1m36.533885471s ago: executing program 5 (id=1068): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x79, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0, 0x81, 0x1080a422012f758f}) r2 = syz_io_uring_setup(0x17dc, &(0x7f0000000240)={0x0, 0x5bc4, 0x10000, 0x2, 0x2d6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, 0x1}) io_uring_enter(r2, 0x3035, 0x1558, 0x20, 0x0, 0x0) 1m36.494171612s ago: executing program 5 (id=1069): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000004c0)=[{{0x1, 0x1}, {0x2, 0x1, 0x1}}], 0x8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m36.350420205s ago: executing program 5 (id=1071): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) unshare(0x22020400) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x1}], 0x1) 1m35.323374314s ago: executing program 5 (id=1082): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getresuid(0x0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@mcast2, @in=@local, 0x4e20, 0x400, 0x4e21, 0xfffe, 0xa, 0x80, 0x40, 0x2f}, {0xfff, 0x401, 0x7, 0x2, 0x5, 0x2, 0x9277, 0xa676}, {0x80000000, 0x6, 0xffff, 0x5}, 0x27, 0x6e6bb2, 0x2, 0x1, 0x3, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d2, 0x32}, 0x2, @in6=@remote, 0x3504, 0x10b43197a60a3a06, 0x2, 0x2, 0x81, 0xffffffa0, 0x2}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m35.078800189s ago: executing program 5 (id=1085): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00') bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 1m35.078571629s ago: executing program 35 (id=1085): r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000000000000000180100", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000ec0)='net/vlan/config\x00') bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) 1m18.608349721s ago: executing program 3 (id=1392): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000780), &(0x7f0000000000)='./bus\x00', 0x90, &(0x7f0000000140)=ANY=[], 0x6, 0x2d7, &(0x7f0000000340)="$eJzs3T9rJGUYAPBnNrN/1GJTWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2Fe4g4h+cu0rsbCz9BILgB7GxsxRsBTsjBEZmdia7m4ybjWQjmt+vSN688zzzPvPOJJkmT957cXpwP4uHTz//JQaDJDqjfsRREtvRicaTWDL6OgCA/7Kjoojfi5mWwz9/tSJ3sMG6AIDNOef3fy2tPt4rI364utoAgM24e+/tN3f39m6/lWWDuDP98nCcRET5eXZ892F8EJN4EDdjGMcR1YtCN6q3hXJ4pyiKPM1K2/HKND8cl5nTd3+sz7/7W0SVvxPD2K6mTt42qvw39m7vZDML+XlZx7P1+qMy/1YM4/mT5KX8Wy35Me7Fqy8v1H8jhvHT+/FRTOJ+VcQ8/4udLHu9+OaPz94pyyvzk/xw3K/i5oqtZvH8iu8RAAAAAAAAAAAAAAAAAAAAAAD/Pzfq3jn9qPr3lFN1/52t4/KLbmSNeX+fDzt50x8oaU407w8UnaIo8iK+bfrr3MyyrKgD5/190nghrRsLAgAAAAAAAAAAAAAAAAAAwDX3+JNPD/YnkwePLmXQdANII+LPuxH/9DyjhZmXYnVwv15zfzLp1MPlmHRxJraamCRiZRnlRVzStpw3eOZMzfXgu+/PBidPZjcujbYTDs5ftNu+1gUHH3dn+9ga0zxdB/tJ+x72T4oflDcuTt+4XrSv3o1TM72/q7B5FNe7nF7roeGFt6X3XDXIV8REsur74rVfZ2UvXMVSTK/a1db0bj1YSD/1bKz1PMdgln72Z0WiWwcAAAAAAAAAAAAAAAAAAGzU/K9/Ww4+XZnaKfobKwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtT8//+vM0iXk9fI6sWjx//WtQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9/BUAAP//gxtVEw==") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r2, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) ftruncate(r2, 0x81fd) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x4000, 0xa00}]) 1m18.380724545s ago: executing program 3 (id=1397): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x30) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r4, 0x402, 0x40000029) fcntl$notify(r3, 0x402, 0x1c) open(&(0x7f0000000140)='./bus\x00', 0x141bc2, 0x1c0) 1m18.356636336s ago: executing program 3 (id=1398): unshare(0x28000600) flock(0xffffffffffffffff, 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendto(r0, &(0x7f0000000040)="4edb00eaa446073e7aef9c4c9ee0947777e97696679bdf3d4db3a59be352b06129cac0f0b13bfc14abc478d8a4", 0x2d, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) timerfd_create(0x5, 0x80000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x4001, 0x0) 1m18.259095628s ago: executing program 3 (id=1400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) 1m18.108746891s ago: executing program 3 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d000000000000000002000000000000060000000008001e0002"], 0x30}}, 0x4090) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006800d50300000000000000000a0000000000000004000b000800010002"], 0x24}}, 0x0) prctl$PR_SET_MM_MAP(0x21, 0xe, &(0x7f0000000740)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f000085b000/0x1000)=nil, &(0x7f0000c65000/0x3000)=nil, &(0x7f00008d1000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f00006bd000/0x2000)=nil, &(0x7f0000f86000/0x3000)=nil, 0x0}, 0x68) 1m17.830778186s ago: executing program 3 (id=1414): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 1m17.830385576s ago: executing program 36 (id=1414): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r3}, 0x10) r5 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[], [], 0x6b}}) 19.369837833s ago: executing program 4 (id=2395): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_io_uring_setup(0xbc4, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x0, 0x3c8}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffb, 0x0, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @multicast2}}, 0x5, 0x0, 0xffffffff, 0x5, 0x20, 0x0, 0x2}, 0x9c) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340)=0x0, &(0x7f0000000140)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r5, r4, &(0x7f0000000000)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x2, 0x0, 0x1, 0x20, 0x1}) io_uring_enter(r2, 0x47fb, 0x0, 0x0, 0x0, 0x0) 19.201202186s ago: executing program 4 (id=2396): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1, 0x45}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000012700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) 18.98768125s ago: executing program 4 (id=2397): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0xfffffffffffffe4a, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 18.923423971s ago: executing program 4 (id=2398): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@sg0, 0x0, 0x0, 0x200000, 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$cgroup2(0x0, 0x0, 0x0, 0x81, 0x0) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) 18.847885613s ago: executing program 4 (id=2400): setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 18.714933735s ago: executing program 4 (id=2403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 18.714724555s ago: executing program 37 (id=2403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) 4.243602029s ago: executing program 8 (id=2618): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000660000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x6}, 0x94) 4.228120419s ago: executing program 6 (id=2619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setpriority(0x2, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000002000000000f40600000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) 4.162747331s ago: executing program 6 (id=2620): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x26000400) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 3.515049603s ago: executing program 6 (id=2627): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 2.792349586s ago: executing program 2 (id=2630): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000ffffffff20", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x94) 2.791835887s ago: executing program 6 (id=2640): r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0xd, 0xfffffffffffffffd, 0x5, 0x1000000000000000, 0xda, 0xfffffffffffffffc}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4, 0x100000000}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0x7, 0x0, &(0x7f00000006c0)="63eced8e000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.791627037s ago: executing program 7 (id=2631): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000540)={&(0x7f0000000200)=@name, 0x10, 0x0}, 0x4) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) munmap(&(0x7f00007b2000/0x3000)=nil, 0x3000) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2.473207613s ago: executing program 2 (id=2633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x3800480, &(0x7f0000000680), 0x45, 0x792, &(0x7f0000001740)="$eJzs3c9rXNUeAPDvnfxO+17y4MF7dRUQNFA6MTW2Ci4qLkSwUNC1bZhMQ80kUzKT0oSALSK4EVRcCHbTtT/qzq0/tvpfuJCWqmmx4kIidzKTTJqZdNJmZmr7+cDNnHPPnTnne8/9cTL3MjeAx9ZY+icTcSgiPkgiRqrzk4joq6R6I05sLHdnbTWXTkmsr7/+a1JZ5vbaai7q3pM6UM38PyK+ezficGZnvaXllbnpQiG/WM1PlOfPT5SWV46cm5+ezc/mF45NTk0dPf7c8WP7F+vvP64cvPHhK09/eeLPd/537f3vkzgRB6tl9XHsl7EYq66TvnQVbvPyflfWZcnuxQ22AB4Gacf0bOzlcShGoqeSamKoky0DANrl7YhYb6anaQkA8I+WND//AwCPpNr3ALfXVnO1qbvfSHTWzZciYnAj/tr1zY2S3uo1u8HKddDh28m2KyNJRIzuQ/1jEXHl6zc/T6do03VIgEYuXY6IM6NjO4//yY57Fra5khm812c/00L9Y3flHf+gc75Jxz/PNxr/ZTbHP9Fg/DPQYN+9H/fe/zPX96GaptLx34t197bdqYu/arSnmvtXZczXl5w9V8inx7Z/R8R49A2k+cld6hi/9detZmX147/fPnrrs7T+9HVricz13oHt75mZLk8/SMz1bl6OeKK3UfzJZv8nTca/p1qs49UX3vu0WVkafxpvbdoZf3utX414qmH/b93Rlux6f+JEZXOYqG0UDXz10yfDzeqv7/90Suuv/S/QCWn/DzeKv29zkdGk/n7N0t7r+OHqyLfNyu4df+Ptvz95o5Lur867OF0uL05G9Cev7Zx/dOu9tXxt+TT+8Scb7/+7bf/p6jnTYvy9N3754v7jb680/pndt/+7+n/viWt35nqa1d9a/09VUuPVOa0c/1pt4IOsOwAAAAAAAAAAAAAAAAAAAAAAAABoVSYiDkaSyW6mM5lsduMZ3v+N4UyhWCofPltcWpiJyrOyR6MvU/upy5G630OdrP4efi1/9K78sxHxn4j4eGCoks/mioWZbgcPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFUHmjz/P/XzQLdbBwC0zWBPt1sAAHTaYG+3WwAAdNrgnpYeals7AIDO2dv5HwB4FDj/A8Djx/kfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANjt18mQ6rf+xtppL8zMXlpfmiheOzORLc9n5pVw2V1w8n50tFmcL+WyuON/0gy5tvBSKxfNTsbB0caKcL5UnSssrp+eLSwvl0+fmp2fzp/N9HYsMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFpXWl6Zmy4U8osSEhJ7TsSljf3oYWnP/iWif+soMdS14xMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAw+7vAAAA///CgSeR") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f00000001c0)=0x8) 2.438216123s ago: executing program 8 (id=2635): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x5000000) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 2.234908607s ago: executing program 2 (id=2636): pipe2(&(0x7f0000000040), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) clock_getres(0x2, 0x0) epoll_create(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) ioperm(0x7fff, 0x5, 0x4) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 2.234153897s ago: executing program 9 (id=2647): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.222477368s ago: executing program 8 (id=2637): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xdffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socket$inet6(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r5 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000010c0)=r5, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 2.128662849s ago: executing program 9 (id=2638): socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x4000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.917787303s ago: executing program 7 (id=2639): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) lseek(0xffffffffffffffff, 0x1000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) read(r1, &(0x7f0000032440)=""/102364, 0x18fdc) read(r1, &(0x7f0000000440)=""/52, 0x34) 1.917303933s ago: executing program 9 (id=2641): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0xd) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f00000010c0)="9c", 0x1}], 0x1, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000000)={0x2, 0x0, 0x1c, 0x0, 0x1d1, &(0x7f0000000680)="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"}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r1, 0xc038943b, &(0x7f0000000200)={0x5, 0x0, '\x00', 0x1, &(0x7f00000001c0)}) bpf$MAP_CREATE(0x0, 0x0, 0x48) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3bd, 0x9, 0xa, 0x4, 0x6, 0x5, 0x632, 0x7}, &(0x7f0000000300)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000340)={[0x6]}, 0x8}) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 1.862999864s ago: executing program 6 (id=2642): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x8010) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1.862413585s ago: executing program 8 (id=2643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r0}, 0x10) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.151872638s ago: executing program 2 (id=2644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 959.105702ms ago: executing program 6 (id=2645): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x46, 0x0, 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 958.782701ms ago: executing program 7 (id=2646): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x50, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'bridge_slave_0\x00'}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 958.590442ms ago: executing program 9 (id=2648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 958.416292ms ago: executing program 7 (id=2649): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1b96aadc3618c72}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a32000000007c010000020a01"], 0x250}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 952.197541ms ago: executing program 9 (id=2650): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x2, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x100000004, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) rt_sigsuspend(&(0x7f00000002c0)={[0x225c17d03]}, 0x8) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f0000000140)={[{@acl}, {@barrier_val={'barrier', 0x3d, 0x1003}}, {@errors_remount}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x1, 0x4e4, &(0x7f0000002d40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='kfree\x00'}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) 946.658662ms ago: executing program 8 (id=2651): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 854.736644ms ago: executing program 7 (id=2652): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 854.308934ms ago: executing program 2 (id=2653): mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) bind$packet(r1, &(0x7f0000000300)={0x11, 0x63dcbf62d8600606, r3, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) close_range(r0, 0xffffffffffffffff, 0x0) 743.551216ms ago: executing program 7 (id=2654): prlimit64(0x0, 0x2, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x140) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, 0x0, 0xfffffffc) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) 82.889028ms ago: executing program 9 (id=2655): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xdffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) socket$inet6(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x5c5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0xfffffffd}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) r5 = eventfd(0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x7, &(0x7f00000010c0)=r5, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x4, &(0x7f0000000280), 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 783.72µs ago: executing program 2 (id=2656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0x2a94, 0x10100, 0x2, 0x1fe}, &(0x7f0000000200)=0x0, &(0x7f00000006c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) 0s ago: executing program 8 (id=2666): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xfffffeffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010012000000010000001a0000000c00018008000100", @ANYRES32=r4], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) kernel console output (not intermixed with test programs): sim1: renamed from eth1 [ 121.254743][ T7665] Alternate GPT is invalid, using primary GPT. [ 121.258547][ T7609] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 121.261241][ T7665] loop8: p2 p3 p7 [ 121.278348][ T7609] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 121.333373][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1432'. [ 121.672718][ T7676] wg2: entered promiscuous mode [ 121.677626][ T7676] wg2: entered allmulticast mode [ 121.826355][ T7609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.870288][ T7694] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.898679][ T7609] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.210562][ T7694] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.273757][ T4764] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.281077][ T4764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.284732][ T7699] loop7: detected capacity change from 0 to 2048 [ 122.306940][ T4734] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.314124][ T4734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.327159][ T7699] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.347240][ T7699] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.358689][ T7694] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.388832][ T7609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.403719][ T7699] EXT4-fs error (device loop7): ext4_free_inode:354: comm syz.7.1442: bit already cleared for inode 15 [ 122.433158][ T7694] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.444694][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.478530][ T7712] bridge0: port 3(gretap0) entered blocking state [ 122.485189][ T7712] bridge0: port 3(gretap0) entered disabled state [ 122.493043][ T7712] gretap0: entered allmulticast mode [ 122.499257][ T7712] gretap0: entered promiscuous mode [ 122.514138][ T7609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.524108][ T7712] gretap0: left allmulticast mode [ 122.529244][ T7712] gretap0: left promiscuous mode [ 122.534364][ T7712] bridge0: port 3(gretap0) entered disabled state [ 122.679094][ T7609] veth0_vlan: entered promiscuous mode [ 122.685367][ T7735] loop7: detected capacity change from 0 to 1024 [ 122.694658][ T7609] veth1_vlan: entered promiscuous mode [ 122.710498][ T7609] veth0_macvtap: entered promiscuous mode [ 122.722307][ T7735] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.723316][ T7609] veth1_macvtap: entered promiscuous mode [ 122.742514][ T29] kauditd_printk_skb: 389 callbacks suppressed [ 122.742528][ T29] audit: type=1400 audit(1757264613.087:5209): avc: denied { read } for pid=7734 comm="syz.7.1449" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 122.776302][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.789571][ T7609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.802458][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.812873][ T4770] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.825973][ T4770] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.853722][ T4770] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.863042][ T4770] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.922660][ T7750] tipc: Started in network mode [ 122.924096][ T7752] netlink: 5 bytes leftover after parsing attributes in process `syz.7.1454'. [ 122.927604][ T7750] tipc: Node identity ac14140f, cluster identity 4711 [ 122.944902][ T7750] tipc: New replicast peer: 255.255.255.83 [ 122.950849][ T7750] tipc: Enabled bearer , priority 10 [ 122.961436][ T7752] 0ªX¹¦D: renamed from gretap0 [ 122.971856][ T7752] 0ªX¹¦D: entered allmulticast mode [ 122.980075][ T7752] net_ratelimit: 1 callbacks suppressed [ 122.980093][ T7752] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 123.067606][ T29] audit: type=1400 audit(1757264613.407:5210): avc: denied { create } for pid=7755 comm="syz.9.1456" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.088502][ T29] audit: type=1400 audit(1757264613.407:5211): avc: denied { write } for pid=7755 comm="syz.9.1456" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.111268][ T29] audit: type=1400 audit(1757264613.407:5212): avc: denied { open } for pid=7755 comm="syz.9.1456" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.134013][ T29] audit: type=1400 audit(1757264613.407:5213): avc: denied { ioctl } for pid=7755 comm="syz.9.1456" path="/2/file0" dev="tmpfs" ino=28 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.227605][ T29] audit: type=1400 audit(1757264613.567:5214): avc: denied { connect } for pid=7760 comm="syz.7.1459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.257892][ T29] audit: type=1400 audit(1757264613.597:5215): avc: denied { append } for pid=7762 comm="syz.4.1458" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.340542][ T29] audit: type=1400 audit(1757264613.597:5216): avc: denied { open } for pid=7762 comm="syz.4.1458" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.364698][ T29] audit: type=1400 audit(1757264613.597:5217): avc: denied { ioctl } for pid=7762 comm="syz.4.1458" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 123.390229][ T29] audit: type=1400 audit(1757264613.657:5218): avc: denied { unlink } for pid=7609 comm="syz-executor" name="file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 123.588846][ T7772] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1462'. [ 123.706327][ T7781] tipc: Started in network mode [ 123.711406][ T7781] tipc: Node identity ac14140f, cluster identity 4711 [ 123.718574][ T7781] tipc: New replicast peer: 255.255.255.83 [ 123.724750][ T7781] tipc: Enabled bearer , priority 10 [ 123.761545][ T7785] : renamed from bond0 [ 123.820491][ T1084] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.833559][ T1084] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.848802][ T1084] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.866780][ T1084] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.999265][ T3391] tipc: Node number set to 2886997007 [ 124.007678][ T7803] netlink: 'syz.6.1474': attribute type 10 has an invalid length. [ 124.017644][ T7803] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1474'. [ 124.031769][ T7803] dummy0: entered promiscuous mode [ 124.079006][ T7803] bridge0: port 3(dummy0) entered blocking state [ 124.089137][ T7803] bridge0: port 3(dummy0) entered disabled state [ 124.097799][ T7803] dummy0: entered allmulticast mode [ 124.111242][ T7815] loop7: detected capacity change from 0 to 1764 [ 124.124465][ T7803] bridge0: port 3(dummy0) entered blocking state [ 124.131625][ T7803] bridge0: port 3(dummy0) entered forwarding state [ 124.155620][ T7813] : renamed from bond0 (while UP) [ 124.226857][ T7825] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1486'. [ 124.314921][ T7838] ref_ctr increment failed for inode: 0x1e1 offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a879cc0 [ 124.337459][ T7837] uprobe: syz.7.1491:7837 failed to unregister, leaking uprobe [ 124.376790][ T7842] netlink: 'syz.9.1493': attribute type 10 has an invalid length. [ 124.385741][ T7842] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1493'. [ 124.395555][ T7842] dummy0: entered promiscuous mode [ 124.405999][ T7842] bridge0: port 3(dummy0) entered blocking state [ 124.417558][ T7842] bridge0: port 3(dummy0) entered disabled state [ 124.428110][ T7842] dummy0: entered allmulticast mode [ 124.438620][ T7842] bridge0: port 3(dummy0) entered blocking state [ 124.445210][ T7842] bridge0: port 3(dummy0) entered forwarding state [ 124.512462][ T7852] : renamed from bond0 (while UP) [ 124.525806][ T7854] veth0: entered promiscuous mode [ 124.531626][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1497'. [ 124.661346][ T7858] vlan2: entered allmulticast mode [ 124.681986][ T7864] 9pnet: p9_errstr2errno: server reported unknown error [ 124.798458][ T7869] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 124.811152][ T7869] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 124.839303][ T3406] tipc: Node number set to 2886997007 [ 124.912429][ T7877] netlink: 'syz.8.1508': attribute type 10 has an invalid length. [ 124.926488][ T7877] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1508'. [ 124.937224][ T7877] dummy0: entered promiscuous mode [ 124.948732][ T7877] bridge0: port 1(dummy0) entered blocking state [ 124.956470][ T7877] bridge0: port 1(dummy0) entered disabled state [ 124.965345][ T7877] dummy0: entered allmulticast mode [ 124.985685][ T7877] bridge0: port 1(dummy0) entered blocking state [ 124.993052][ T7877] bridge0: port 1(dummy0) entered forwarding state [ 125.040517][ T7886] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.270016][ T7894] team1: entered promiscuous mode [ 125.275129][ T7894] team1: entered allmulticast mode [ 125.363984][ T7904] loop8: detected capacity change from 0 to 1024 [ 125.381596][ T7904] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.398221][ T7904] SELinux: Context Ü is not valid (left unmapped). [ 125.430093][ T6674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.454189][ T7909] geneve2: entered promiscuous mode [ 125.459498][ T7909] geneve2: entered allmulticast mode [ 125.467040][ T1084] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.476975][ T1084] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.485553][ T1084] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.494170][ T1084] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 125.653202][ T7886] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.715695][ T7923] netlink: 'syz.7.1530': attribute type 17 has an invalid length. [ 125.736910][ T7886] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.808366][ T7886] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.848785][ T7929] ref_ctr increment failed for inode: 0x21a offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88810a9bd640 [ 125.856807][ T7931] bridge0: port 4(gretap0) entered blocking state [ 125.866436][ T7931] bridge0: port 4(gretap0) entered disabled state [ 125.866549][ T7929] ref_ctr increment failed for inode: 0x21a offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88810a9bd640 [ 125.876095][ T7931] gretap0: entered allmulticast mode [ 125.890554][ T7931] gretap0: entered promiscuous mode [ 125.896038][ T7931] bridge0: port 4(gretap0) entered blocking state [ 125.902589][ T7931] bridge0: port 4(gretap0) entered forwarding state [ 125.912290][ T7928] uprobe: syz.7.1534:7928 failed to unregister, leaking uprobe [ 125.921550][ T7931] gretap0: left allmulticast mode [ 125.926669][ T7931] gretap0: left promiscuous mode [ 125.932156][ T7931] bridge0: port 4(gretap0) entered disabled state [ 125.949836][ T1084] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.962568][ T1084] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.977869][ T1084] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.989453][ T7928] uprobe: syz.7.1534:7928 failed to unregister, leaking uprobe [ 125.997929][ T1084] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.029019][ T7936] cgroup: Invalid name [ 126.355101][ T7966] loop7: detected capacity change from 0 to 512 [ 126.362239][ T7966] EXT4-fs: Ignoring removed mblk_io_submit option [ 126.386013][ T7966] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 126.400819][ T7966] EXT4-fs (loop7): 1 truncate cleaned up [ 126.413801][ T7966] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.209377][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.230771][ T7999] loop7: detected capacity change from 0 to 128 [ 127.257513][ T7999] syz.7.1561: attempt to access beyond end of device [ 127.257513][ T7999] loop7: rw=0, sector=121, nr_sectors = 8 limit=128 [ 127.387985][ T8005] IPv4: Oversized IP packet from 127.202.26.0 [ 127.523802][ T8023] tipc: New replicast peer: 255.255.255.83 [ 127.529999][ T8023] tipc: Enabled bearer , priority 10 [ 127.585757][ T8029] __nla_validate_parse: 6 callbacks suppressed [ 127.585777][ T8029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1575'. [ 127.599565][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1571'. [ 127.610067][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1571'. [ 127.611645][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1575'. [ 127.619028][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1571'. [ 127.649590][ T8030] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1571'. [ 127.716711][ T8033] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.763913][ T8037] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1578'. [ 127.774635][ T8033] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.787912][ T8037] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1578'. [ 127.831606][ T8033] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.880779][ T8033] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.963463][ T4718] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.974560][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 127.974576][ T29] audit: type=1326 audit(1757264618.327:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 127.987582][ T4718] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.004867][ T29] audit: type=1326 audit(1757264618.357:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.042261][ T29] audit: type=1326 audit(1757264618.367:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.066051][ T29] audit: type=1326 audit(1757264618.367:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.089995][ T29] audit: type=1326 audit(1757264618.367:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.113963][ T29] audit: type=1326 audit(1757264618.367:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.137644][ T29] audit: type=1326 audit(1757264618.367:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.161378][ T29] audit: type=1326 audit(1757264618.367:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.185035][ T29] audit: type=1326 audit(1757264618.367:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.208711][ T29] audit: type=1326 audit(1757264618.367:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8054 comm="syz.6.1583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 128.244761][ T4718] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.253533][ T4718] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.398925][ T8066] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 128.407517][ T8068] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1588'. [ 128.450517][ T8070] syzkaller0: entered allmulticast mode [ 128.539223][ T3414] tipc: Node number set to 2886997007 [ 128.663161][ T8071] syzkaller0 (unregistering): left allmulticast mode [ 129.022419][ T8074] lo speed is unknown, defaulting to 1000 [ 129.211720][ T8091] v: renamed from ip6_vti0 (while UP) [ 129.233264][ T8063] lo speed is unknown, defaulting to 1000 [ 129.290908][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1597'. [ 129.450052][ T8119] loop4: detected capacity change from 0 to 512 [ 129.464372][ T8119] EXT4-fs: Ignoring removed oldalloc option [ 129.495911][ T8119] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.1606: Parent and EA inode have the same ino 15 [ 129.510576][ T8118] loop8: detected capacity change from 0 to 8192 [ 129.525445][ T8118] syz.8.1603: attempt to access beyond end of device [ 129.525445][ T8118] loop8: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 129.529357][ T8119] EXT4-fs (loop4): Remounting filesystem read-only [ 129.547771][ T8119] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -30) [ 129.566591][ T8118] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 129.566655][ T8119] EXT4-fs (loop4): 1 orphan inode deleted [ 129.574859][ T8118] FAT-fs (loop8): Filesystem has been set read-only [ 129.584236][ T8118] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 129.588013][ T8119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.602809][ T8118] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 129.720114][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.747430][ T8134] lo speed is unknown, defaulting to 1000 [ 129.793867][ T8137] lo speed is unknown, defaulting to 1000 [ 129.925081][ T8126] lo speed is unknown, defaulting to 1000 [ 129.944416][ T8153] netlink: 'syz.9.1609': attribute type 6 has an invalid length. [ 129.959682][ T8155] capability: warning: `syz.8.1621' uses 32-bit capabilities (legacy support in use) [ 130.309732][ T8176] loop4: detected capacity change from 0 to 8192 [ 130.339623][ T8176] loop4: p1 p2[DM] p4 [ 130.343756][ T8176] loop4: p1 size 196608 extends beyond EOD, truncated [ 130.351218][ T8176] loop4: p2 start 4292936063 is beyond EOD, truncated [ 130.358090][ T8176] loop4: p4 size 50331648 extends beyond EOD, truncated [ 130.403224][ T8180] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.503853][ T8180] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.592437][ T8180] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.662888][ T8180] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.061051][ T8225] netlink: 'syz.9.1649': attribute type 10 has an invalid length. [ 131.071774][ T8225] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.080076][ T8225] : (slave team0): Enslaving as an active interface with an up link [ 131.092852][ T8225] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 131.388896][ T8243] netlink: 'syz.9.1657': attribute type 10 has an invalid length. [ 131.404470][ T8247] netlink: 'syz.6.1659': attribute type 1 has an invalid length. [ 131.435582][ T8243] bridge0: port 3(dummy0) entered disabled state [ 131.439586][ T8248] netlink: 'syz.9.1657': attribute type 10 has an invalid length. [ 131.455327][ T8243] dummy0: left allmulticast mode [ 131.463725][ T8243] dummy0: left promiscuous mode [ 131.472226][ T8243] bridge0: port 3(dummy0) entered disabled state [ 131.534583][ T8243] team0: Port device dummy0 added [ 131.558732][ T8248] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 131.573754][ T8248] team0: Failed to send options change via netlink (err -105) [ 131.587590][ T8248] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 131.602324][ T8248] team0: Port device dummy0 removed [ 131.611124][ T8248] : (slave dummy0): Enslaving as an active interface with an up link [ 131.637794][ T8254] netlink: 'syz.6.1661': attribute type 3 has an invalid length. [ 131.663827][ T8254] netlink: 'syz.6.1661': attribute type 3 has an invalid length. [ 131.760149][ T8259] syzkaller0: entered promiscuous mode [ 131.765718][ T8259] syzkaller0: entered allmulticast mode [ 131.795324][ T8260] dummy0: left allmulticast mode [ 131.800895][ T8260] bridge0: port 3(dummy0) entered disabled state [ 131.814559][ T8260] bridge_slave_0: left allmulticast mode [ 131.820424][ T8260] bridge_slave_0: left promiscuous mode [ 131.826164][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.840935][ T8265] loop8: detected capacity change from 0 to 2048 [ 131.850404][ T8260] bridge_slave_1: left allmulticast mode [ 131.856086][ T8260] bridge_slave_1: left promiscuous mode [ 131.861902][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.871002][ T8265] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.900289][ T8260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.907713][ T8260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.933648][ T8260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.941143][ T8260] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.952312][ T8269] EXT4-fs (loop8): shut down requested (0) [ 131.983701][ T8260] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 131.990976][ T8260] batman_adv: batadv0: Removing interface: veth1_vlan [ 132.014344][ T8260] bond0: (slave ip6gretap1): Releasing active interface [ 132.066399][ T8271] loop7: detected capacity change from 0 to 512 [ 132.074264][ T8271] /dev/loop7: Can't open blockdev [ 132.108668][ T1084] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.127877][ T8277] pim6reg: entered allmulticast mode [ 132.133707][ T1084] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.142821][ T8277] pim6reg: left allmulticast mode [ 132.161871][ T1084] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.177713][ T8283] bridge0: port 1(vlan1) entered blocking state [ 132.184237][ T8283] bridge0: port 1(vlan1) entered disabled state [ 132.193386][ T8283] vlan1: entered allmulticast mode [ 132.198565][ T8283] bridge0: entered allmulticast mode [ 132.205906][ T8283] vlan1: left allmulticast mode [ 132.210956][ T8283] bridge0: left allmulticast mode [ 132.218982][ T1084] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.681345][ T6674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.743611][ T8310] __nla_validate_parse: 4 callbacks suppressed [ 132.743626][ T8310] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.1684'. [ 133.266839][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 133.266856][ T29] audit: type=1326 audit(1757264623.607:5684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8324 comm="syz.4.1690" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc6ada6ebe9 code=0x0 [ 133.311380][ T8327] loop9: detected capacity change from 0 to 1756 [ 133.329507][ T8327] iso9660: Unknown parameter '†wÐmÁ°¸uE9' [ 133.335650][ T8328] loop4: detected capacity change from 0 to 512 [ 133.346952][ T8328] EXT4-fs: test_dummy_encryption option not supported [ 133.360288][ T8327] ªªªªª»: renamed from bond_slave_1 (while UP) [ 133.476213][ T8338] netlink: 272 bytes leftover after parsing attributes in process `syz.7.1696'. [ 133.641169][ T29] audit: type=1326 audit(1757264623.987:5685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.664850][ T29] audit: type=1326 audit(1757264623.987:5686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.724560][ T29] audit: type=1326 audit(1757264624.037:5687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.748023][ T29] audit: type=1326 audit(1757264624.067:5688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.772067][ T29] audit: type=1326 audit(1757264624.067:5689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.867606][ T29] audit: type=1326 audit(1757264624.137:5690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.891156][ T29] audit: type=1326 audit(1757264624.137:5691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.914600][ T29] audit: type=1326 audit(1757264624.137:5692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 133.938232][ T29] audit: type=1326 audit(1757264624.137:5693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8348 comm="syz.7.1700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 134.138440][ T8364] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1704'. [ 134.153614][ T8369] loop4: detected capacity change from 0 to 512 [ 134.192816][ T8369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.210685][ T8369] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.328514][ T8382] batadv1: entered promiscuous mode [ 134.364131][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.924284][ T8410] ref_ctr increment failed for inode: 0xec offset: 0xb ref_ctr_offset: 0x82 of mm: 0xffff88811a87d080 [ 134.939756][ T8410] ref_ctr increment failed for inode: 0xec offset: 0xf ref_ctr_offset: 0x82 of mm: 0xffff88811a87d080 [ 134.959957][ T8409] uprobe: syz.9.1723:8409 failed to unregister, leaking uprobe [ 135.006349][ T8418] loop4: detected capacity change from 0 to 256 [ 135.030961][ T8409] uprobe: syz.9.1723:8409 failed to unregister, leaking uprobe [ 135.240467][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1732'. [ 135.250049][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1732'. [ 135.282513][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1734'. [ 135.333592][ T8441] loop9: detected capacity change from 0 to 1024 [ 135.342239][ T8436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1734'. [ 135.356539][ T8441] EXT4-fs: Ignoring removed orlov option [ 135.382726][ T8441] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.838759][ T7609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.880281][ T8460] loop9: detected capacity change from 0 to 512 [ 135.942235][ T8460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.977499][ T8460] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.071570][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1743'. [ 136.090480][ T8466] netem: change failed [ 136.245658][ T7609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.385014][ T8483] : (slave dummy0): Releasing backup interface [ 136.394750][ T8483] bridge_slave_0: left promiscuous mode [ 136.400623][ T8483] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.404726][ T8485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1751'. [ 136.422940][ T8483] bridge_slave_1: left allmulticast mode [ 136.428682][ T8483] bridge_slave_1: left promiscuous mode [ 136.434595][ T8483] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.454844][ T8487] loop9: detected capacity change from 0 to 164 [ 136.463819][ T8487] Unable to read rock-ridge attributes [ 136.474287][ T8483] : (slave bond_slave_0): Releasing backup interface [ 136.485430][ T8483] : (slave bond_slave_1): Releasing backup interface [ 136.493579][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.504975][ T8483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.526312][ T8491] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8491 comm=syz.4.1751 [ 136.543951][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1752'. [ 137.098492][ T8517] loop4: detected capacity change from 0 to 512 [ 137.133806][ T8517] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1762: Failed to acquire dquot type 1 [ 137.149995][ T8517] EXT4-fs (loop4): 1 truncate cleaned up [ 137.153653][ T8527] netem: change failed [ 137.163507][ T8517] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.184226][ T8517] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.218565][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.474120][ T8581] netlink: 'syz.4.1773': attribute type 17 has an invalid length. [ 137.605937][ T8606] loop4: detected capacity change from 0 to 2048 [ 137.633295][ T8606] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.645748][ T8606] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.723043][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.925406][ T8654] hub 6-0:1.0: USB hub found [ 137.931199][ T8654] hub 6-0:1.0: 8 ports detected [ 137.983175][ T8654] pimreg: entered allmulticast mode [ 138.020449][ T8677] __nla_validate_parse: 4 callbacks suppressed [ 138.020468][ T8677] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1785'. [ 138.079655][ T8681] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1787'. [ 138.395412][ T8723] loop9: detected capacity change from 0 to 1024 [ 138.414094][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 138.414109][ T29] audit: type=1326 audit(1757264628.757:5742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.446431][ T29] audit: type=1326 audit(1757264628.757:5743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.470030][ T29] audit: type=1326 audit(1757264628.757:5744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.493454][ T29] audit: type=1326 audit(1757264628.757:5745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.516996][ T29] audit: type=1326 audit(1757264628.757:5746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.540568][ T29] audit: type=1326 audit(1757264628.757:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.564173][ T29] audit: type=1326 audit(1757264628.757:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.572591][ T8723] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.587588][ T29] audit: type=1326 audit(1757264628.757:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.623802][ T29] audit: type=1326 audit(1757264628.757:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.647268][ T29] audit: type=1326 audit(1757264628.757:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8728 comm="syz.4.1799" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 138.823872][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1803'. [ 139.073002][ T8817] netlink: 'syz.7.1804': attribute type 2 has an invalid length. [ 139.080868][ T8817] netlink: 'syz.7.1804': attribute type 1 has an invalid length. [ 139.088717][ T8817] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1804'. [ 139.108471][ T7609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.113499][ T8819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.137398][ T8819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.685638][ T8847] bond1: entered promiscuous mode [ 139.690862][ T8847] bond1: entered allmulticast mode [ 139.697581][ T8847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.708810][ T8847] bond1 (unregistering): Released all slaves [ 139.738897][ T8853] lo speed is unknown, defaulting to 1000 [ 139.792830][ T8854] loop7: detected capacity change from 0 to 512 [ 139.809688][ T8854] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.827636][ T8854] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.1819: corrupted in-inode xattr: overlapping e_value [ 139.843753][ T8854] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1819: couldn't read orphan inode 15 (err -117) [ 139.856706][ T8854] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.117472][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.131401][ T8867] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 140.375396][ T8874] netlink: 'syz.9.1826': attribute type 17 has an invalid length. [ 140.383532][ T8874] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1826'. [ 140.602926][ T8883] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1829'. [ 140.700149][ T8887] pim6reg1: entered promiscuous mode [ 140.705532][ T8887] pim6reg1: entered allmulticast mode [ 140.771076][ T8891] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1833'. [ 140.980558][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1843'. [ 140.989778][ T8917] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 141.006830][ T8919] loop4: detected capacity change from 0 to 512 [ 141.013674][ T8919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 141.032459][ T8919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.045047][ T8919] ext4 filesystem being mounted at /381/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.068253][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.780705][ T8934] loop8: detected capacity change from 0 to 128 [ 141.791298][ T8934] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.806301][ T8934] ext4 filesystem being mounted at /138/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.867097][ T6674] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.178702][ T8960] netlink: 209836 bytes leftover after parsing attributes in process `syz.7.1862'. [ 142.193920][ T8964] loop4: detected capacity change from 0 to 1024 [ 142.201018][ T8964] EXT4-fs: Ignoring removed orlov option [ 142.211027][ T8964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.383468][ T8974] loop7: detected capacity change from 0 to 512 [ 142.391753][ T8974] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 142.419846][ T8974] EXT4-fs (loop7): failed to open journal device unknown-block(11,131) -6 [ 142.483874][ T8981] syzkaller0: entered allmulticast mode [ 142.489816][ T8981] syzkaller0: entered promiscuous mode [ 142.490714][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.507265][ T8981] syzkaller0 (unregistering): left allmulticast mode [ 142.514235][ T8981] syzkaller0 (unregistering): left promiscuous mode [ 143.432266][ T8997] __nla_validate_parse: 1 callbacks suppressed [ 143.432285][ T8997] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1878'. [ 143.482046][ T9002] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.1879'. [ 143.492794][ T8997] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.500059][ T8997] IPv6: NLM_F_CREATE should be set when creating new route [ 143.507315][ T8997] IPv6: NLM_F_CREATE should be set when creating new route [ 143.533890][ T9006] loop4: detected capacity change from 0 to 164 [ 143.560357][ T9006] syz.4.1880: attempt to access beyond end of device [ 143.560357][ T9006] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 143.576150][ T9006] syz.4.1880: attempt to access beyond end of device [ 143.576150][ T9006] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 143.597851][ T9008] pim6reg1: entered promiscuous mode [ 143.603316][ T9008] pim6reg1: entered allmulticast mode [ 143.689986][ T9016] loop7: detected capacity change from 0 to 1024 [ 143.696961][ T9016] EXT4-fs: Ignoring removed orlov option [ 143.799570][ T9016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.059130][ T29] kauditd_printk_skb: 759 callbacks suppressed [ 144.059176][ T29] audit: type=1400 audit(1757264634.387:6511): avc: denied { execute } for pid=9020 comm="syz.4.1885" path="/cpu.stat" dev="ramfs" ino=27172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 144.131463][ T29] audit: type=1326 audit(1757264634.477:6512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9024 comm="syz.8.1888" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51cbccebe9 code=0x0 [ 144.183518][ T9028] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 144.431455][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.482900][ T9039] netlink: 'syz.4.1892': attribute type 10 has an invalid length. [ 144.492556][ T9039] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 144.628902][ T9044] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 144.848986][ T9054] lo speed is unknown, defaulting to 1000 [ 144.997729][ T29] audit: type=1400 audit(1757264635.337:6513): avc: denied { getopt } for pid=9070 comm="syz.9.1903" lport=46249 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 145.256182][ T29] audit: type=1326 audit(1757264635.597:6514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 145.280730][ T29] audit: type=1326 audit(1757264635.597:6515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 145.304567][ T29] audit: type=1326 audit(1757264635.597:6516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 145.328084][ T29] audit: type=1326 audit(1757264635.597:6517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 145.351679][ T29] audit: type=1326 audit(1757264635.597:6518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 145.375259][ T29] audit: type=1326 audit(1757264635.597:6519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 145.398818][ T29] audit: type=1326 audit(1757264635.597:6520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9097 comm="syz.6.1914" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 145.518113][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1918'. [ 145.527336][ T9106] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1918'. [ 145.537674][ T9104] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.547651][ T9104] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 145.562216][ T9106] bridge0: port 1(vlan0) entered blocking state [ 145.568567][ T9106] bridge0: port 1(vlan0) entered disabled state [ 145.580642][ T9106] vlan0: entered allmulticast mode [ 145.585931][ T9106] bridge0: entered allmulticast mode [ 145.593542][ T9106] vlan0: left allmulticast mode [ 145.598455][ T9106] bridge0: left allmulticast mode [ 145.708560][ T9104] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.718459][ T9104] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 145.760881][ T9112] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1921'. [ 145.789612][ T9112] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9112 comm=syz.6.1921 [ 145.806694][ T9116] netlink: 'syz.7.1923': attribute type 10 has an invalid length. [ 145.815877][ T9104] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.825985][ T9104] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 145.837323][ T9116] netlink: 'syz.7.1923': attribute type 10 has an invalid length. [ 145.846992][ T9116] : (slave dummy0): Enslaving as an active interface with an up link [ 145.881064][ T9104] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.890994][ T9104] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 146.060305][ T3483] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.068769][ T3483] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.099070][ T3483] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.107392][ T3483] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.119820][ T9130] loop9: detected capacity change from 0 to 164 [ 146.126939][ T4751] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.135339][ T4751] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.144192][ T9130] syz.9.1926: attempt to access beyond end of device [ 146.144192][ T9130] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 146.168472][ T4751] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.176900][ T4751] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 146.181572][ T9130] syz.9.1926: attempt to access beyond end of device [ 146.181572][ T9130] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 146.295453][ T9137] loop8: detected capacity change from 0 to 128 [ 146.317259][ T9137] syz.8.1930: attempt to access beyond end of device [ 146.317259][ T9137] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 146.340468][ T9136] syz.8.1930: attempt to access beyond end of device [ 146.340468][ T9136] loop8: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 146.374903][ T9145] pim6reg1: entered promiscuous mode [ 146.380489][ T9145] pim6reg1: entered allmulticast mode [ 146.649211][ T9152] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1937'. [ 147.019261][ T9156] lo speed is unknown, defaulting to 1000 [ 147.085529][ T9165] lo speed is unknown, defaulting to 1000 [ 147.113633][ T9167] netlink: 'syz.7.1939': attribute type 6 has an invalid length. [ 147.211022][ T9168] loop8: detected capacity change from 0 to 256 [ 147.234990][ T9168] FAT-fs (loop8): Directory bread(block 64) failed [ 147.247327][ T9168] FAT-fs (loop8): Directory bread(block 65) failed [ 147.264440][ T9168] FAT-fs (loop8): Directory bread(block 66) failed [ 147.282759][ T9172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 147.294242][ T9168] FAT-fs (loop8): Directory bread(block 67) failed [ 147.317135][ T9168] FAT-fs (loop8): Directory bread(block 68) failed [ 147.328436][ T9172] hsr_slave_1 (unregistering): left promiscuous mode [ 147.345718][ T9168] FAT-fs (loop8): Directory bread(block 69) failed [ 147.358268][ T9168] FAT-fs (loop8): Directory bread(block 70) failed [ 147.374788][ T9168] FAT-fs (loop8): Directory bread(block 71) failed [ 147.390770][ T9168] FAT-fs (loop8): Directory bread(block 72) failed [ 147.404085][ T9168] FAT-fs (loop8): Directory bread(block 73) failed [ 147.922451][ T9178] vlan2: entered allmulticast mode [ 147.928353][ T9178] bridge_slave_0: entered allmulticast mode [ 148.252248][ T9180] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1948'. [ 148.269336][ T9180] netem: change failed [ 148.393738][ T4726] kworker/u8:21: attempt to access beyond end of device [ 148.393738][ T4726] loop8: rw=1, sector=1192, nr_sectors = 32 limit=256 [ 148.449190][ T4726] kworker/u8:21: attempt to access beyond end of device [ 148.449190][ T4726] loop8: rw=1, sector=1256, nr_sectors = 32 limit=256 [ 148.471901][ T4726] kworker/u8:21: attempt to access beyond end of device [ 148.471901][ T4726] loop8: rw=1, sector=1320, nr_sectors = 32 limit=256 [ 148.489296][ T4726] kworker/u8:21: attempt to access beyond end of device [ 148.489296][ T4726] loop8: rw=1, sector=1384, nr_sectors = 32 limit=256 [ 148.755440][ T9192] lo speed is unknown, defaulting to 1000 [ 149.134151][ T9182] lo speed is unknown, defaulting to 1000 [ 149.812795][ T9215] vlan0: entered allmulticast mode [ 149.834929][ T9223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1965'. [ 149.938616][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 149.938633][ T29] audit: type=1400 audit(1757264640.277:6757): avc: denied { read } for pid=9224 comm="syz.4.1966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 150.042777][ T9233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1966'. [ 150.130918][ T29] audit: type=1400 audit(1757264640.477:6758): avc: denied { connect } for pid=9240 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 150.189344][ T29] audit: type=1326 audit(1757264640.537:6759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.212951][ T29] audit: type=1326 audit(1757264640.537:6760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.261412][ T29] audit: type=1326 audit(1757264640.577:6761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.284947][ T29] audit: type=1326 audit(1757264640.577:6762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.308536][ T29] audit: type=1326 audit(1757264640.577:6763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.332214][ T29] audit: type=1326 audit(1757264640.577:6764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.355648][ T29] audit: type=1326 audit(1757264640.577:6765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.379764][ T29] audit: type=1326 audit(1757264640.577:6766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9249 comm="syz.6.1975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 150.534000][ T9261] IPVS: stopping master sync thread 6501 ... [ 151.092639][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1984'. [ 152.303952][ T9316] syzkaller0: entered promiscuous mode [ 152.309556][ T9316] syzkaller0: entered allmulticast mode [ 152.476637][ T9325] serio: Serial port ptm0 [ 152.497824][ T9327] loop9: detected capacity change from 0 to 128 [ 152.504984][ T9327] EXT4-fs: Ignoring removed nobh option [ 152.512256][ T9327] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.524826][ T9327] ext4 filesystem being mounted at /96/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 152.553939][ T7609] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.679800][ T9341] syzkaller0: entered allmulticast mode [ 152.685743][ T9341] syzkaller0: entered promiscuous mode [ 152.696840][ T9341] syzkaller0 (unregistering): left allmulticast mode [ 152.703680][ T9341] syzkaller0 (unregistering): left promiscuous mode [ 152.905039][ T9349] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2015'. [ 153.325126][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2031'. [ 153.685220][ T9403] netlink: 'syz.9.2036': attribute type 1 has an invalid length. [ 153.701617][ T9403] bond0: entered promiscuous mode [ 153.706959][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.761723][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.783765][ T9403] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 153.794391][ T9403] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 153.831365][ T9411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.838810][ T9411] IPv6: NLM_F_CREATE should be set when creating new route [ 153.846058][ T9411] IPv6: NLM_F_CREATE should be set when creating new route [ 153.855147][ T9411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 153.863141][ T9413] netlink: 'syz.7.2038': attribute type 4 has an invalid length. [ 153.866829][ T9403] bond0: (slave wireguard0): making interface the new active one [ 153.878703][ T9403] wireguard0: entered promiscuous mode [ 153.887796][ T9403] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 153.905718][ T9409] netlink: 'syz.7.2038': attribute type 4 has an invalid length. [ 153.918417][ T9400] lo speed is unknown, defaulting to 1000 [ 153.944474][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2040'. [ 153.949916][ T9411] bond0: (slave wireguard1): The slave device specified does not support setting the MAC address [ 153.970314][ T9411] bond0: (slave wireguard1): Enslaving as a backup interface with an up link [ 154.010142][ T9423] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.060854][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2040'. [ 154.120405][ T9421] v: renamed from ip6_vti0 (while UP) [ 154.159831][ T9401] lo speed is unknown, defaulting to 1000 [ 154.203386][ T9422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.259588][ T9422] bond1: (slave bond2): Enslaving as an active interface with an up link [ 154.301174][ T9426] bond1 (unregistering): (slave bond2): Releasing backup interface [ 154.353702][ T9426] bond1 (unregistering): Released all slaves [ 154.662488][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2047'. [ 154.678159][ T4763] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.678190][ T9438] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2047'. [ 154.719009][ T4722] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.768073][ T4722] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 154.843790][ T4722] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.055992][ T9456] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.078009][ T9458] pim6reg: entered allmulticast mode [ 155.108125][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 155.108141][ T29] audit: type=1400 audit(1757264645.447:6874): avc: denied { write } for pid=9457 comm="syz.8.2055" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 155.140525][ T9456] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.161269][ T9468] pim6reg: left allmulticast mode [ 155.181460][ T9456] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.251710][ T9456] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.264368][ T29] audit: type=1326 audit(1757264645.617:6875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9465 comm="syz.7.2058" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdfbb63ebe9 code=0x0 [ 155.365012][ T4742] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.383915][ T4742] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.403995][ T4742] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.420834][ T4742] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.592520][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2062'. [ 155.605928][ T9482] : (slave team0): Releasing backup interface [ 155.619311][ T9482] team0 (unregistering): Port device team_slave_0 removed [ 155.628833][ T9482] team0 (unregistering): Port device team_slave_1 removed [ 155.656497][ T9487] Set syz0 is full, maxelem 0 reached [ 155.864434][ T9490] netlink: 'syz.6.2075': attribute type 83 has an invalid length. [ 155.870373][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2066'. [ 155.910333][ T9492] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.918429][ T9492] bond1: (slave bond2): Enslaving as an active interface with an up link [ 155.933782][ T9492] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2066'. [ 155.947230][ T9492] bond1 (unregistering): (slave bond2): Releasing backup interface [ 155.960410][ T9492] bond1 (unregistering): Released all slaves [ 155.973682][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2068'. [ 156.008096][ T4775] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.018211][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2068'. [ 156.028399][ T4775] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.036830][ T4775] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.042211][ T29] audit: type=1326 audit(1757264646.377:6876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.045140][ T4775] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.069004][ T29] audit: type=1326 audit(1757264646.377:6877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.100503][ T29] audit: type=1326 audit(1757264646.377:6878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.124145][ T29] audit: type=1326 audit(1757264646.377:6879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.127458][ T9] Process accounting resumed [ 156.147722][ T29] audit: type=1326 audit(1757264646.377:6880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.147765][ T29] audit: type=1326 audit(1757264646.377:6881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.147795][ T29] audit: type=1326 audit(1757264646.377:6882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.222656][ T29] audit: type=1326 audit(1757264646.377:6883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9500 comm="syz.7.2069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 156.411523][ T9502] lo speed is unknown, defaulting to 1000 [ 156.603004][ T9520] lo speed is unknown, defaulting to 1000 [ 157.652060][ T9493] lo speed is unknown, defaulting to 1000 [ 158.422925][ T9545] loop9: detected capacity change from 0 to 512 [ 158.459183][ T9547] loop4: detected capacity change from 0 to 512 [ 158.522466][ T9547] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 158.541263][ T9545] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.585518][ T9545] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 158.613666][ T9547] EXT4-fs (loop4): 1 truncate cleaned up [ 158.642294][ T9547] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 158.725739][ T7609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.773853][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.908451][ T9557] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 158.989606][ T9580] loop4: detected capacity change from 0 to 1024 [ 159.022266][ T9583] netlink: 'syz.9.2102': attribute type 21 has an invalid length. [ 159.032095][ T9583] netlink: 132 bytes leftover after parsing attributes in process `syz.9.2102'. [ 159.046165][ T9580] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.283995][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.368510][ T9599] tipc: New replicast peer: 255.255.255.255 [ 159.374734][ T9599] tipc: Enabled bearer , priority 10 [ 159.422430][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2107'. [ 159.431637][ T9599] tipc: Disabling bearer [ 159.438473][ T9599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2107'. [ 159.517357][ T9601] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.539133][ T36] page_pool_release_retry() stalled pool shutdown: id 56, 1 inflight 61 sec [ 159.600919][ T9601] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.651191][ T9601] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.667275][ T9604] loop4: detected capacity change from 0 to 8192 [ 159.689625][ T9604] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 159.710862][ T9601] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.802385][ T4773] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.868792][ T4773] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.904701][ T4773] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.929250][ T4773] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.967266][ T9614] loop4: detected capacity change from 0 to 256 [ 160.167490][ T9630] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2122'. [ 160.270800][ T9630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.301603][ T9636] macvlan2: entered promiscuous mode [ 160.306942][ T9636] macvlan2: entered allmulticast mode [ 160.339332][ T9636] bond0: (slave macvlan2): Opening slave failed [ 161.090813][ T9660] tipc: Enabled bearer , priority 0 [ 161.099461][ T9660] tipc: Disabling bearer [ 161.105819][ T29] kauditd_printk_skb: 339 callbacks suppressed [ 161.105832][ T29] audit: type=1326 audit(1757264651.447:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 161.157973][ T9662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2130'. [ 161.168754][ T9662] bridge0: port 1(dummy0) entered disabled state [ 161.178303][ T29] audit: type=1326 audit(1757264651.477:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 161.201179][ T29] audit: type=1326 audit(1757264651.477:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 161.224064][ T29] audit: type=1326 audit(1757264651.477:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9657 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb79eebe9 code=0x7ffc0000 [ 161.247729][ T9662] bridge0: port 1(dummy0) entered disabled state [ 161.385713][ T9670] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2133'. [ 161.394914][ T9670] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2133'. [ 161.424295][ T9673] loop4: detected capacity change from 0 to 512 [ 161.424848][ T29] audit: type=1326 audit(1757264651.767:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 161.454225][ T29] audit: type=1326 audit(1757264651.767:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 161.477825][ T29] audit: type=1326 audit(1757264651.767:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 161.478595][ T9673] EXT4-fs: Ignoring removed orlov option [ 161.501493][ T29] audit: type=1326 audit(1757264651.767:7230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 161.530964][ T29] audit: type=1326 audit(1757264651.767:7231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 161.554706][ T29] audit: type=1326 audit(1757264651.767:7232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9672 comm="syz.4.2135" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fc6ada6ebe9 code=0x7ffc0000 [ 161.565346][ T9673] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 161.579620][ T9666] lo speed is unknown, defaulting to 1000 [ 161.629582][ T9670] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2133'. [ 161.638608][ T9670] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2133'. [ 161.652133][ T9677] lo speed is unknown, defaulting to 1000 [ 161.690792][ T9673] EXT4-fs (loop4): 1 truncate cleaned up [ 161.696872][ T9673] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.733493][ T9655] v: renamed from ip6_vti0 (while UP) [ 161.757418][ T9670] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2133'. [ 161.766565][ T9670] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2133'. [ 161.817490][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.836477][ T9686] netlink: 'syz.6.2140': attribute type 1 has an invalid length. [ 161.898257][ T9686] bond1: entered promiscuous mode [ 161.903702][ T9686] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.918427][ T9692] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 161.931045][ T9692] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 161.941475][ T9692] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 162.094744][ T9708] netlink: 'syz.6.2147': attribute type 1 has an invalid length. [ 162.100633][ T9707] netlink: 'syz.9.2148': attribute type 4 has an invalid length. [ 162.125053][ T9708] bond2: entered promiscuous mode [ 162.130817][ T9708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.152632][ T9707] netlink: 'syz.9.2148': attribute type 4 has an invalid length. [ 162.188968][ T9708] 8021q: adding VLAN 0 to HW filter on device bond2 [ 162.205651][ T9708] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 162.216339][ T9708] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 162.229252][ T9708] bond2: (slave wireguard0): making interface the new active one [ 162.237148][ T9708] wireguard0: entered promiscuous mode [ 162.254904][ T9715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.262227][ T9715] IPv6: NLM_F_CREATE should be set when creating new route [ 162.262382][ T9714] loop4: detected capacity change from 0 to 512 [ 162.269487][ T9715] IPv6: NLM_F_CREATE should be set when creating new route [ 162.285422][ T9708] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 162.286894][ T9715] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.312276][ T9714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.324896][ T9714] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.354115][ T9715] bond2: (slave wireguard1): The slave device specified does not support setting the MAC address [ 162.381375][ T9721] loop9: detected capacity change from 0 to 2048 [ 162.390085][ T9715] bond2: (slave wireguard1): Enslaving as a backup interface with an up link [ 162.401505][ T9723] tipc: Enabling of bearer rejected, failed to enable media [ 162.422142][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.468663][ T9721] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.492338][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2154'. [ 162.526883][ T9734] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2153'. [ 162.536031][ T9734] netlink: 51 bytes leftover after parsing attributes in process `syz.7.2153'. [ 162.699095][ T9741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.737119][ T9745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.755275][ T9745] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 162.792689][ T7609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.800899][ T9745] bond0: (slave vxcan1): Error -95 calling set_mac_address [ 162.865644][ T9741] macvlan2: entered promiscuous mode [ 162.871162][ T9741] macvlan2: entered allmulticast mode [ 162.897793][ T9741] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 162.984011][ T9760] netlink: 'syz.7.2165': attribute type 4 has an invalid length. [ 163.032972][ T9760] netlink: 'syz.7.2165': attribute type 4 has an invalid length. [ 163.162981][ T9776] loop7: detected capacity change from 0 to 2048 [ 163.505403][ T9776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.681899][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.750588][ T9787] netlink: 'syz.4.2172': attribute type 1 has an invalid length. [ 163.774749][ T9787] bond3: entered promiscuous mode [ 163.790350][ T9787] 8021q: adding VLAN 0 to HW filter on device bond3 [ 163.822461][ T9787] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 163.834969][ T9787] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 163.845681][ T9787] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 163.873607][ T9797] loop8: detected capacity change from 0 to 2048 [ 163.881002][ T9797] EXT4-fs: Ignoring removed orlov option [ 163.910410][ T9797] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 164.004054][ T9807] netlink: 'syz.4.2177': attribute type 13 has an invalid length. [ 164.079661][ T6674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.321079][ T9809] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.366053][ T9812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 164.392440][ T9819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.408056][ T9812] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 164.426682][ T9819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.458418][ T9812] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 164.472551][ T9823] I/O error, dev loop8, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 164.482263][ T9823] EXT4-fs (loop8): unable to read superblock [ 164.493036][ T9814] macvlan2: entered promiscuous mode [ 164.498397][ T9814] macvlan2: entered allmulticast mode [ 164.506092][ T9814] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 164.537954][ T1084] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.554920][ T1084] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.563491][ T1084] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.577623][ T1084] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.147839][ T9830] loop8: detected capacity change from 0 to 1024 [ 165.154564][ T9830] EXT4-fs: Ignoring removed bh option [ 165.160027][ T9830] EXT4-fs: inline encryption not supported [ 165.200620][ T9830] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.270062][ T9830] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.2186: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 32769(4), depth 65535(65535) [ 165.288936][ T9830] EXT4-fs (loop8): get root inode failed [ 165.294655][ T9830] EXT4-fs (loop8): mount failed [ 165.841282][ T9840] vlan2: entered allmulticast mode [ 165.938956][ T9850] netlink: zone id is out of range [ 165.952676][ T9850] netlink: zone id is out of range [ 165.978353][ T9850] netlink: zone id is out of range [ 165.983557][ T9850] netlink: zone id is out of range [ 166.020086][ T9850] netlink: zone id is out of range [ 166.049539][ T9850] netlink: zone id is out of range [ 166.072246][ T9850] netlink: zone id is out of range [ 166.093034][ T9850] netlink: zone id is out of range [ 166.115672][ T9850] netlink: zone id is out of range [ 166.134395][ T9850] netlink: zone id is out of range [ 166.415649][ T9871] loop9: detected capacity change from 0 to 256 [ 166.438303][ T9871] FAT-fs (loop9): Directory bread(block 64) failed [ 166.453252][ T9871] FAT-fs (loop9): Directory bread(block 65) failed [ 166.467615][ T9871] FAT-fs (loop9): Directory bread(block 66) failed [ 166.482609][ T9871] FAT-fs (loop9): Directory bread(block 67) failed [ 166.497862][ T9871] FAT-fs (loop9): Directory bread(block 68) failed [ 166.514650][ T9871] FAT-fs (loop9): Directory bread(block 69) failed [ 166.528844][ T9871] FAT-fs (loop9): Directory bread(block 70) failed [ 166.545555][ T9871] FAT-fs (loop9): Directory bread(block 71) failed [ 166.558220][ T9871] FAT-fs (loop9): Directory bread(block 72) failed [ 166.565195][ T9871] FAT-fs (loop9): Directory bread(block 73) failed [ 166.612475][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 166.612492][ T29] audit: type=1326 audit(1757264656.957:7395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.665365][ T29] audit: type=1326 audit(1757264656.977:7396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.688993][ T29] audit: type=1326 audit(1757264656.977:7397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.689662][ T9879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9879 comm=syz.9.2201 [ 166.712777][ T29] audit: type=1326 audit(1757264656.977:7398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.712823][ T29] audit: type=1326 audit(1757264656.977:7399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.712851][ T29] audit: type=1326 audit(1757264656.977:7400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.712882][ T29] audit: type=1326 audit(1757264656.977:7401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.820731][ T29] audit: type=1326 audit(1757264656.977:7402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.844466][ T29] audit: type=1326 audit(1757264656.977:7403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.867830][ T29] audit: type=1326 audit(1757264656.987:7404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9874 comm="syz.7.2202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfbb63ebe9 code=0x7ffc0000 [ 166.876763][ T9880] __nla_validate_parse: 7 callbacks suppressed [ 166.876784][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2205'. [ 166.906723][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2205'. [ 166.928312][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2205'. [ 166.928738][ T9883] loop7: detected capacity change from 0 to 512 [ 166.937466][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2205'. [ 166.954039][ T9883] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 166.981433][ T9883] EXT4-fs (loop7): 1 truncate cleaned up [ 166.987727][ T9883] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.003552][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2205'. [ 167.012609][ T9880] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2205'. [ 167.191184][ T9906] tipc: Started in network mode [ 167.196090][ T9906] tipc: Node identity 4, cluster identity 4711 [ 167.202339][ T9906] tipc: Node number set to 4 [ 167.317183][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2218'. [ 167.327310][ T9912] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2218'. [ 167.525497][ T9918] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2220'. [ 167.534558][ T9918] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2220'. [ 167.538841][ T9923] loop4: detected capacity change from 0 to 2368 [ 167.602193][ T9929] loop9: detected capacity change from 0 to 128 [ 167.610826][ T9929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 167.650704][ T9929] System zones: 1-3, 19-19, 35-36 [ 167.729670][ T9923] iso9660: Bad value for 'check' [ 167.735246][ T9929] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 167.753515][ T9923] sd 0:0:1:0: device reset [ 167.815403][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.846428][ T9929] ext4 filesystem being mounted at /138/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 167.915145][ T9937] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 167.924994][ T9937] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 167.934985][ T9937] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 167.964388][ T9929] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 168.028052][ T9937] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.037993][ T9937] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 168.047988][ T9937] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 168.105851][ T7609] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 168.146457][ T9937] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.156476][ T9937] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 168.166477][ T9937] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 168.227112][ T9937] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.237067][ T9937] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 168.246952][ T9937] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 168.345330][ T4775] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.353637][ T4775] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.362144][ T4775] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.398759][ T4775] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.407257][ T4775] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.415652][ T4775] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.449421][ T4775] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.457666][ T4775] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.466009][ T4775] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.474582][ T4775] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 168.479362][ T9964] loop4: detected capacity change from 0 to 2048 [ 168.482915][ T4775] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 168.497507][ T4775] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 168.511149][ T9964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 168.562558][ T9970] loop9: detected capacity change from 0 to 2048 [ 168.584646][ T9970] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 168.613253][ T9970] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.638526][ T9975] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 168.655325][ T9975] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1674 with error 28 [ 168.668010][ T9975] EXT4-fs (loop4): This should not happen!! Data will be lost [ 168.668010][ T9975] [ 168.678106][ T9975] EXT4-fs (loop4): Total free blocks count 0 [ 168.684192][ T9975] EXT4-fs (loop4): Free/Dirty block details [ 168.690229][ T9975] EXT4-fs (loop4): free_blocks=2415919104 [ 168.696034][ T9975] EXT4-fs (loop4): dirty_blocks=1680 [ 168.701461][ T9975] EXT4-fs (loop4): Block reservation details [ 168.707470][ T9975] EXT4-fs (loop4): i_reserved_data_blocks=105 [ 168.715809][ T9982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=9982 comm=syz.8.2244 [ 168.745791][ T9982] macvtap0: refused to change device tx_queue_len [ 168.816419][ T1084] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 168.830938][ T7609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 170.354165][T10027] loop8: detected capacity change from 0 to 512 [ 170.400361][T10027] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.447441][T10027] EXT4-fs (loop8): mount failed [ 171.485020][T10070] ref_ctr increment failed for inode: 0x4f1 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810a9bed40 [ 171.541449][T10078] loop4: detected capacity change from 0 to 2048 [ 171.548261][T10078] EXT4-fs: Ignoring removed orlov option [ 171.562101][T10078] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 171.684432][T10084] loop9: detected capacity change from 0 to 2048 [ 171.725458][T10084] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 171.811523][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.891008][T10094] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 171.914595][T10101] __nla_validate_parse: 23 callbacks suppressed [ 171.914620][T10101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2283'. [ 171.934846][T10094] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 988 with error 28 [ 171.947471][T10094] EXT4-fs (loop9): This should not happen!! Data will be lost [ 171.947471][T10094] [ 171.957273][T10094] EXT4-fs (loop9): Total free blocks count 0 [ 171.963336][T10094] EXT4-fs (loop9): Free/Dirty block details [ 171.969365][T10094] EXT4-fs (loop9): free_blocks=2415919104 [ 171.975122][T10094] EXT4-fs (loop9): dirty_blocks=992 [ 171.980540][T10094] EXT4-fs (loop9): Block reservation details [ 171.983511][T10105] netlink: 'syz.4.2284': attribute type 10 has an invalid length. [ 171.986722][T10094] EXT4-fs (loop9): i_reserved_data_blocks=62 [ 172.003583][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2283'. [ 172.017882][T10105] ipvlan0: entered allmulticast mode [ 172.023419][T10105] veth0_vlan: entered allmulticast mode [ 172.087232][ T4727] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 172.110309][T10108] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10108 comm=syz.4.2286 [ 172.128837][T10108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2286'. [ 172.161920][T10112] netlink: 'syz.9.2285': attribute type 13 has an invalid length. [ 172.171516][T10108] macvtap0: refused to change device tx_queue_len [ 172.237739][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.245067][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.261951][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 172.261966][ T29] audit: type=1400 audit(1757264662.607:7724): avc: denied { setattr } for pid=10115 comm="syz.6.2289" name="file0" dev="tmpfs" ino=1896 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 172.297464][ T29] audit: type=1400 audit(1757264662.647:7725): avc: denied { setcheckreqprot } for pid=10090 comm="syz.7.2280" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 172.352657][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.364635][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.464589][ T29] audit: type=1400 audit(1757264662.807:7726): avc: denied { create } for pid=10128 comm="syz.8.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 172.486041][ T29] audit: type=1400 audit(1757264662.827:7727): avc: denied { bind } for pid=10132 comm="syz.6.2296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 172.505975][ T29] audit: type=1400 audit(1757264662.827:7728): avc: denied { name_bind } for pid=10132 comm="syz.6.2296" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 172.527223][ T29] audit: type=1400 audit(1757264662.827:7729): avc: denied { node_bind } for pid=10132 comm="syz.6.2296" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 172.551367][ T29] audit: type=1400 audit(1757264662.897:7730): avc: denied { write } for pid=10129 comm="syz.4.2295" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.611323][ T4775] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.627581][ T4732] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.656155][ T4732] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.671905][ T4732] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.683386][T10141] loop7: detected capacity change from 0 to 512 [ 172.692978][T10141] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.2300: Invalid inode bitmap blk 4 in block_group 0 [ 172.706558][T10141] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.725702][ T29] audit: type=1400 audit(1757264663.067:7731): avc: denied { remount } for pid=10140 comm="syz.7.2300" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 172.758225][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.833879][T10155] loop8: detected capacity change from 0 to 1024 [ 172.869998][T10155] EXT4-fs: Ignoring removed nobh option [ 172.907122][T10155] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 172.918240][T10155] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 172.962762][T10155] JBD2: no valid journal superblock found [ 172.968624][T10155] EXT4-fs (loop8): Could not load journal inode [ 172.989452][T10175] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2311'. [ 173.005779][T10172] lo speed is unknown, defaulting to 1000 [ 173.099999][T10180] netlink: 'syz.8.2313': attribute type 13 has an invalid length. [ 173.178436][T10180] bridge0: port 1(dummy0) entered disabled state [ 173.237654][T10180] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 173.271320][ T4775] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.280034][ T4775] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.288505][ T4775] netdevsim netdevsim8 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.344758][ T4775] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.353316][ T4775] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.361847][ T4775] netdevsim netdevsim8 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.371752][ T4775] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.380373][ T4775] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.388837][ T4775] netdevsim netdevsim8 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.402311][ T4775] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.410932][ T4775] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 173.419580][ T4775] netdevsim netdevsim8 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 173.704164][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2322'. [ 173.766189][ T29] audit: type=1326 audit(1757264664.087:7732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cbccebe9 code=0x7ffc0000 [ 173.789666][ T29] audit: type=1326 audit(1757264664.087:7733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10206 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51cbccebe9 code=0x7ffc0000 [ 173.821195][T10211] loop7: detected capacity change from 0 to 512 [ 173.846736][T10213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=10213 comm=syz.6.2325 [ 173.867635][T10216] loop8: detected capacity change from 0 to 512 [ 173.890888][T10213] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2325'. [ 173.893972][T10211] EXT4-fs warning (device loop7): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.915357][T10218] loop9: detected capacity change from 0 to 512 [ 173.922761][T10213] macvtap0: refused to change device tx_queue_len [ 173.931764][T10211] EXT4-fs (loop7): mount failed [ 173.937270][T10216] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.954869][T10218] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 173.963237][T10218] EXT4-fs (loop9): orphan cleanup on readonly fs [ 173.978388][T10216] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.001888][T10218] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2327: corrupted inode contents [ 174.028156][T10218] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #16: comm syz.9.2327: mark_inode_dirty error [ 174.049936][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.067465][T10218] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2327: corrupted inode contents [ 174.079543][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.091837][T10218] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #16: comm syz.9.2327: mark_inode_dirty error [ 174.123111][T10218] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2327: corrupted inode contents [ 174.162448][T10218] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem [ 174.206289][T10218] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #16: comm syz.9.2327: corrupted inode contents [ 174.231876][T10218] EXT4-fs error (device loop9): ext4_truncate:4666: inode #16: comm syz.9.2327: mark_inode_dirty error [ 174.268094][T10218] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem [ 174.297440][T10218] EXT4-fs (loop9): 1 truncate cleaned up [ 174.303593][ T4732] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:27: Failed to release dquot type 1 [ 174.330764][T10218] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 174.489742][ T7609] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.630980][ T6674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.098286][T10252] loop9: detected capacity change from 0 to 128 [ 175.122887][T10250] loop4: detected capacity change from 0 to 8192 [ 175.161954][T10250] loop4: p3 p4 < > [ 175.165916][T10250] loop4: p3 size 33554432 extends beyond EOD, truncated [ 175.686301][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.696554][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.711459][T10274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.721053][T10274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.873541][T10289] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2355'. [ 175.942283][T10291] lo speed is unknown, defaulting to 1000 [ 176.307356][T10298] loop7: detected capacity change from 0 to 1024 [ 176.349231][T10298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 176.366741][T10298] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.2358: Allocating blocks 497-513 which overlap fs metadata [ 176.383379][T10298] EXT4-fs (loop7): pa ffff8881005a6a10: logic 256, phys. 369, len 9 [ 176.391635][T10298] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1 [ 176.404402][T10298] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 176.452564][ T6486] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 176.738366][T10324] loop4: detected capacity change from 0 to 128 [ 176.746274][T10324] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 176.754945][T10324] System zones: 1-3, 19-19, 35-36 [ 176.760908][T10324] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 176.816563][T10324] ext4 filesystem being mounted at /491/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.952171][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 177.076307][T10350] lo speed is unknown, defaulting to 1000 [ 177.270508][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 177.270541][ T29] audit: type=1326 audit(1757264667.617:7977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d4ea55ba7 code=0x7ffc0000 [ 177.398959][ T29] audit: type=1326 audit(1757264667.647:7978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4e9fadb9 code=0x7ffc0000 [ 177.422744][ T29] audit: type=1326 audit(1757264667.647:7979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d4ea55ba7 code=0x7ffc0000 [ 177.446169][ T29] audit: type=1326 audit(1757264667.647:7980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4e9fadb9 code=0x7ffc0000 [ 177.469819][ T29] audit: type=1326 audit(1757264667.647:7981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1d4ea5ebe9 code=0x7ffc0000 [ 177.493370][ T29] audit: type=1326 audit(1757264667.657:7982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d4ea55ba7 code=0x7ffc0000 [ 177.516779][ T29] audit: type=1326 audit(1757264667.657:7983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4e9fadb9 code=0x7ffc0000 [ 177.540204][ T29] audit: type=1326 audit(1757264667.657:7984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f1d4ea5ebe9 code=0x7ffc0000 [ 177.563794][ T29] audit: type=1326 audit(1757264667.667:7985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1d4ea55ba7 code=0x7ffc0000 [ 177.587396][ T29] audit: type=1326 audit(1757264667.667:7986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10327 comm="syz.9.2368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1d4e9fadb9 code=0x7ffc0000 [ 177.682072][T10359] bond3: left promiscuous mode [ 177.835480][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2389'. [ 177.880672][T10378] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2389'. [ 177.936396][T10382] serio: Serial port ptm0 [ 177.961778][T10383] lo speed is unknown, defaulting to 1000 [ 177.982852][T10383] lo speed is unknown, defaulting to 1000 [ 177.994495][T10383] lo speed is unknown, defaulting to 1000 [ 178.010460][T10383] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.039344][T10389] wireguard2: entered promiscuous mode [ 178.044884][T10389] wireguard2: entered allmulticast mode [ 178.055126][T10383] lo speed is unknown, defaulting to 1000 [ 178.061822][T10383] lo speed is unknown, defaulting to 1000 [ 178.068121][T10383] lo speed is unknown, defaulting to 1000 [ 178.074555][T10383] lo speed is unknown, defaulting to 1000 [ 178.080746][T10383] lo speed is unknown, defaulting to 1000 [ 178.087132][T10383] lo speed is unknown, defaulting to 1000 [ 178.120749][T10391] bridge3: entered promiscuous mode [ 178.258791][T10395] bond0: left promiscuous mode [ 178.263990][T10395] wireguard0: left promiscuous mode [ 178.868354][T10412] netlink: 'syz.7.2404': attribute type 4 has an invalid length. [ 178.893828][T10412] netlink: 'syz.7.2404': attribute type 4 has an invalid length. [ 179.042332][T10416] lo speed is unknown, defaulting to 1000 [ 179.097343][T10434] netlink: 'syz.9.2410': attribute type 1 has an invalid length. [ 179.112012][T10434] 8021q: adding VLAN 0 to HW filter on device bond4 [ 179.120389][T10416] lo speed is unknown, defaulting to 1000 [ 179.126853][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2410'. [ 179.139160][T10434] bond4 (unregistering): Released all slaves [ 179.192979][T10416] chnl_net:caif_netlink_parms(): no params data found [ 179.237154][T10416] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.244393][T10416] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.251705][T10416] bridge_slave_0: entered allmulticast mode [ 179.258263][T10416] bridge_slave_0: entered promiscuous mode [ 179.265414][T10416] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.272525][T10416] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.279875][T10416] bridge_slave_1: entered allmulticast mode [ 179.286443][T10416] bridge_slave_1: entered promiscuous mode [ 179.304935][T10416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.315563][T10416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.337387][T10416] team0: Port device team_slave_0 added [ 179.344281][T10416] team0: Port device team_slave_1 added [ 179.362594][T10416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.369675][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.395745][T10416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.407091][T10416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.414389][T10416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.440694][T10416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.472827][T10416] hsr_slave_0: entered promiscuous mode [ 179.479413][T10416] hsr_slave_1: entered promiscuous mode [ 179.485412][T10416] debugfs: 'hsr0' already exists in 'hsr' [ 179.491230][T10416] Cannot create hsr debugfs directory [ 179.767951][T10416] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.779323][T10416] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.797383][T10416] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.822052][T10416] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.890008][T10416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.905166][T10416] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.915418][ T4775] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.922573][ T4775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.948494][T10416] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 179.959175][T10416] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.020460][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.027571][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.140432][T10471] : (slave dummy0): Releasing backup interface [ 180.261832][T10416] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.532316][T10416] veth0_vlan: entered promiscuous mode [ 180.566489][T10416] veth1_vlan: entered promiscuous mode [ 180.605358][T10416] veth0_macvtap: entered promiscuous mode [ 180.624006][T10416] veth1_macvtap: entered promiscuous mode [ 180.648049][T10416] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.671426][T10416] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.695403][ T4734] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.708785][ T4734] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.741700][ T4734] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.759720][ T4734] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.038441][T10518] loop8: detected capacity change from 0 to 1024 [ 181.086518][T10518] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 181.145693][ T6674] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 181.230982][T10529] SELinux: ebitmap: truncated map [ 181.237330][T10529] SELinux: failed to load policy [ 181.258140][T10531] tipc: Started in network mode [ 181.263246][T10531] tipc: Node identity ac1414aa, cluster identity 4711 [ 181.273193][T10531] tipc: Enabled bearer , priority 10 [ 181.401961][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2444'. [ 181.430628][T10540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2444'. [ 181.890538][T10564] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.269260][ T9] tipc: Node number set to 2886997162 [ 182.284061][T10571] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.2457'. [ 182.355121][T10571] loop7: detected capacity change from 0 to 8192 [ 182.369832][T10576] netlink: 'syz.6.2458': attribute type 10 has an invalid length. [ 182.377775][T10576] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2458'. [ 182.398453][T10573] bond2: (slave wireguard0): Releasing backup interface [ 182.405779][T10573] wireguard0: left promiscuous mode [ 182.411251][T10573] bond2: (slave wireguard1): making interface the new active one [ 182.419381][T10573] wireguard1: entered promiscuous mode [ 182.443431][T10573] bond2: (slave wireguard1): Releasing backup interface [ 182.476800][T10573] wireguard1: left promiscuous mode [ 182.488995][T10576] batman_adv: batadv0: Adding interface: veth1_vlan [ 182.495728][T10576] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.537593][T10576] batman_adv: batadv0: Interface activated: veth1_vlan [ 182.613381][ T29] kauditd_printk_skb: 488 callbacks suppressed [ 182.613396][ T29] audit: type=1400 audit(1757264672.957:8475): avc: denied { relabelto } for pid=10594 comm="syz.7.2466" name="267" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 182.646780][ T29] audit: type=1400 audit(1757264672.957:8476): avc: denied { associate } for pid=10594 comm="syz.7.2466" name="267" dev="tmpfs" ino=1425 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 183.097989][T10595] loop7: detected capacity change from 0 to 512 [ 183.113400][ T29] audit: type=1400 audit(1757264673.457:8477): avc: denied { add_name } for pid=10594 comm="syz.7.2466" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 183.138578][ T29] audit: type=1400 audit(1757264673.457:8478): avc: denied { associate } for pid=10594 comm="syz.7.2466" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 183.165471][T10595] msdos: Unknown parameter '€' [ 183.192137][ T29] audit: type=1400 audit(1757264673.507:8479): avc: denied { mounton } for pid=10594 comm="syz.7.2466" path="/267/file0" dev="tmpfs" ino=1430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 183.216950][ T29] audit: type=1400 audit(1757264673.567:8480): avc: denied { lock } for pid=10594 comm="syz.7.2466" path="/267/bus" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 183.303267][ T29] audit: type=1400 audit(1757264673.627:8481): avc: denied { remove_name } for pid=10594 comm="syz.7.2466" name="bus" dev="tmpfs" ino=1431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 183.391211][T10618] netlink: 'syz.7.2474': attribute type 13 has an invalid length. [ 183.408738][T10618] 0ªX¹¦D: left allmulticast mode [ 183.431666][T10618] 0ªX¹¦D: refused to change device tx_queue_len [ 183.443012][ T29] audit: type=1400 audit(1757264673.677:8482): avc: denied { rmdir } for pid=6486 comm="syz-executor" name="file0" dev="tmpfs" ino=1430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 183.465294][ T29] audit: type=1400 audit(1757264673.677:8483): avc: denied { rmdir } for pid=6486 comm="syz-executor" name="267" dev="tmpfs" ino=1425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 183.511414][T10618] net_ratelimit: 1 callbacks suppressed [ 183.511434][T10618] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 183.662367][T10620] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2475'. [ 183.684645][T10620] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2475'. [ 183.814607][T10624] loop7: detected capacity change from 0 to 1024 [ 183.906502][T10564] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.016081][T10638] lo speed is unknown, defaulting to 1000 [ 184.107982][T10641] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 184.115200][T10641] batman_adv: batadv0: Removing interface: veth1_vlan [ 184.135161][T10638] lo speed is unknown, defaulting to 1000 [ 184.207306][T10641] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 184.399467][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2489'. [ 184.408451][T10664] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2489'. [ 184.541149][T10675] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2494'. [ 184.550684][T10675] netlink: '+}[@': attribute type 6 has an invalid length. [ 184.582793][T10677] lo speed is unknown, defaulting to 1000 [ 184.602366][T10564] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.653349][T10564] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.728574][ T29] audit: type=1400 audit(1757264675.067:8484): avc: denied { getopt } for pid=10683 comm="syz.9.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 184.748589][ T4734] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.758451][T10677] lo speed is unknown, defaulting to 1000 [ 184.770779][ T4734] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.784717][ T4734] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.800546][ T4734] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.135112][T10707] SELinux: ebitmap: truncated map [ 186.175450][T10707] SELinux: failed to load policy [ 186.368544][T10720] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2509'. [ 186.630388][T10709] new mount options do not match the existing superblock, will be ignored [ 186.717535][T10728] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2514'. [ 186.779520][T10730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2515'. [ 186.884987][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2517'. [ 187.339489][T10750] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2523'. [ 187.991425][T10783] IPv6: Can't replace route, no match found [ 188.116928][T10788] IPv6: Can't replace route, no match found [ 188.302298][T10798] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.309655][T10798] IPv6: NLM_F_CREATE should be set when creating new route [ 188.730874][T10830] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2552'. [ 189.573869][T10861] lo speed is unknown, defaulting to 1000 [ 189.596089][T10860] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2564'. [ 189.639738][T10866] netlink: 14 bytes leftover after parsing attributes in process `gtp'. [ 189.676288][T10861] lo speed is unknown, defaulting to 1000 [ 189.713304][T10866] hsr_slave_0: left promiscuous mode [ 189.719297][T10866] hsr_slave_1: left promiscuous mode [ 189.816272][ T29] kauditd_printk_skb: 76 callbacks suppressed [ 189.816324][ T29] audit: type=1326 audit(1757264680.157:8561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 189.847960][ T29] audit: type=1326 audit(1757264680.197:8562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 189.872111][ T29] audit: type=1326 audit(1757264680.197:8563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd06e31ec23 code=0x7ffc0000 [ 189.895537][ T29] audit: type=1326 audit(1757264680.197:8564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd06e31ec23 code=0x7ffc0000 [ 189.920875][ T29] audit: type=1326 audit(1757264680.197:8565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 189.944473][ T29] audit: type=1326 audit(1757264680.197:8566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 189.968180][ T29] audit: type=1326 audit(1757264680.217:8567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 189.991741][ T29] audit: type=1326 audit(1757264680.217:8568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 190.015225][ T29] audit: type=1326 audit(1757264680.217:8569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 190.038883][ T29] audit: type=1326 audit(1757264680.217:8570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10872 comm="syz.2.2570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 190.917328][T10902] lo speed is unknown, defaulting to 1000 [ 191.083248][T10902] lo speed is unknown, defaulting to 1000 [ 191.882785][T10951] : renamed from bond0 [ 193.272519][T10999] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2622'. [ 193.297481][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2622'. [ 193.575939][T11029] tipc: New replicast peer: 10.1.1.2 [ 193.581425][T11029] tipc: Enabled bearer , priority 10 [ 194.168404][T11038] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2627'. [ 194.994590][T11040] 9pnet_fd: p9_fd_create_tcp (11040): problem connecting socket to 127.0.0.1 [ 195.055361][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2632'. [ 195.384143][T11067] tipc: Enabling of bearer rejected, failed to enable media [ 195.393169][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 195.393182][ T29] audit: type=1326 audit(1757264685.727:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.423085][ T29] audit: type=1326 audit(1757264685.727:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.446992][ T29] audit: type=1326 audit(1757264685.727:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.470759][ T29] audit: type=1326 audit(1757264685.727:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.494512][ T29] audit: type=1326 audit(1757264685.727:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.518460][ T29] audit: type=1326 audit(1757264685.727:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.542069][ T29] audit: type=1326 audit(1757264685.727:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.565695][ T29] audit: type=1326 audit(1757264685.727:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.589478][ T29] audit: type=1326 audit(1757264685.727:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.613206][ T29] audit: type=1326 audit(1757264685.727:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11068 comm="syz.2.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd06e31ebe9 code=0x7ffc0000 [ 195.714380][T11080] netlink: 'syz.6.2642': attribute type 27 has an invalid length. [ 195.806359][T11080] sit0: left promiscuous mode [ 195.811269][T11080] sit0: left allmulticast mode [ 195.862162][T11080] dummy0: left promiscuous mode [ 195.888396][T11080] veth0_to_team: left promiscuous mode [ 195.954716][T11080] bond1: left promiscuous mode [ 195.961205][T11080] bond2: left promiscuous mode [ 196.001029][T11089] lo speed is unknown, defaulting to 1000 [ 196.131949][T11089] lo speed is unknown, defaulting to 1000 [ 196.405770][T11085] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 196.428992][ T4762] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.437644][ T4762] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.459451][ T4762] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.467874][ T4762] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.478519][ T4762] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.481566][T11095] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 196.487047][ T4762] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.494741][T11095] netlink: 'syz.2.2644': attribute type 4 has an invalid length. [ 196.494757][T11095] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2644'. [ 196.505961][ T4762] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.529336][ T4762] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.546099][T11095] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 196.553929][T11095] netlink: 'syz.2.2644': attribute type 4 has an invalid length. [ 196.561713][T11095] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2644'. [ 196.682805][T11101] netlink: 360 bytes leftover after parsing attributes in process `syz.7.2649'. [ 197.681068][T11127] ================================================================== [ 197.689266][T11127] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 197.696580][T11127] [ 197.698899][T11127] read-write to 0xffff88810aec3210 of 4 bytes by task 11130 on cpu 1: [ 197.707041][T11127] io_issue_sqe+0x19c/0x970 [ 197.711546][T11127] io_wq_submit_work+0x3f7/0x5f0 [ 197.716498][T11127] io_worker_handle_work+0x44e/0x9b0 [ 197.721793][T11127] io_wq_worker+0x22e/0x870 [ 197.726325][T11127] ret_from_fork+0xda/0x150 [ 197.730854][T11127] ret_from_fork_asm+0x1a/0x30 [ 197.735712][T11127] [ 197.738039][T11127] read to 0xffff88810aec3210 of 4 bytes by task 11127 on cpu 0: [ 197.745697][T11127] io_flush_timeouts+0x56/0x1d0 [ 197.750654][T11127] __io_commit_cqring_flush+0xeb/0x100 [ 197.756146][T11127] io_issue_sqe+0x7cb/0x970 [ 197.760707][T11127] io_wq_submit_work+0x3f7/0x5f0 [ 197.765678][T11127] io_worker_handle_work+0x44e/0x9b0 [ 197.770977][T11127] io_wq_worker+0x22e/0x870 [ 197.775509][T11127] ret_from_fork+0xda/0x150 [ 197.780026][T11127] ret_from_fork_asm+0x1a/0x30 [ 197.784911][T11127] [ 197.787249][T11127] value changed: 0x0000052f -> 0x00000530 [ 197.792980][T11127] [ 197.795306][T11127] Reported by Kernel Concurrency Sanitizer on: [ 197.801456][T11127] CPU: 0 UID: 0 PID: 11127 Comm: iou-wrk-11123 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.811602][T11127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 197.821664][T11127] ==================================================================