last executing test programs: 2m40.446772967s ago: executing program 32 (id=2218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000007c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x729add6b00ab277b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000000) 2m40.078406812s ago: executing program 33 (id=2230): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd35, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x203, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 2m28.817169926s ago: executing program 5 (id=2589): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x10000}, 0x4c094) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) 2m28.763608437s ago: executing program 5 (id=2591): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x7002002, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 2m28.743113937s ago: executing program 5 (id=2592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x8, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000140)={0x0, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f00000000c0)="01", 0x400000}]) 2m28.55238845s ago: executing program 5 (id=2600): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000340)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x10909d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000600)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x21800, 0x0) umount2(&(0x7f0000000040)='./file0/../file0\x00', 0x0) 2m28.55183297s ago: executing program 5 (id=2601): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 2m28.405114342s ago: executing program 5 (id=2610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcf) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 2m28.362101743s ago: executing program 34 (id=2610): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xcf) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x268, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x23c, 0x4, 0x0, 0x1, [{0x238, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x228, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_INFO={0x214, 0x3, "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"}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x290}}, 0x4048010) 1m49.913429817s ago: executing program 2 (id=4071): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x5, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r2, &(0x7f0000000040)}, 0x20) 1m49.815113909s ago: executing program 2 (id=4073): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 1m48.873455563s ago: executing program 2 (id=4099): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x67d0, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000000)=0xb, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xbbc, 0x4) recvmmsg(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/21, 0x15}}], 0x1, 0x45833af92e4b39bd, 0x0) 1m48.848479714s ago: executing program 2 (id=4100): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 1m48.824814224s ago: executing program 2 (id=4103): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) socket$netlink(0x10, 0x3, 0x8000000004) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x60100, 0x30) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x5, 0x2}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m48.554870838s ago: executing program 2 (id=4110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}], 0x1}}], 0x1, 0x4000000) 1m48.514061279s ago: executing program 35 (id=4110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r2, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b", 0x2}], 0x1}}], 0x1, 0x4000000) 1m27.903865457s ago: executing program 7 (id=4759): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 1m27.133109149s ago: executing program 7 (id=4790): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1m27.03015775s ago: executing program 7 (id=4794): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x54, 0x2000, 0x0, {0x0, 0xa}, {0x1, 0xb}, @period={0x59, 0xa, 0x1, 0x0, 0x400, {0x2, 0x1, 0x10, 0x5}, 0x0, 0x0}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1m26.256248292s ago: executing program 7 (id=4807): syz_open_dev$loop(0x0, 0x9, 0x12d600) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugBj3VbCGGhhtZECJFqDF5MDImejUcT/wJvXox6MvGqd0NClAvoqWZmZ2C77PaFbncr+/kkA8+z83Sf57vPPDPPzLMbQN8ayf5JInZExG8RMVTPLi0wUv/vxrUL1b+vXagmsbj41p9JXu76tQvVsmj5d9uLzGgakX6SFJUsNXfu/KmpWm3mbJEfnz/93vjcufPPnjw9dWLmxMyZySNHDh+aeOH5yec6EmcW1/V9H87u3/vaO5dfrx67/O5P32bt3VHsb4yjU0aywP9azDXve6LTlfXYzoZ0MtDDhrAmlYjIumswH/9DUYlbnTcUr37c08YBGyq7Nm1tv3thEbiLJdHrFgC9UV7os/vfcuvS1GNTuPpS/QYoi/tGsdX3DERalBlsur/tpJGIOLbwz1fZFhv0HAIAoNFn1S+PxjOt5n9p3N9QblexhjIcEfdExO6IuDci9kTEfRF52Qci4sE11t+8NHT7/Ce9ckeBrVI2/3uxWNtaOv8rZ38xXClyO/P4B5PjJ2szB4vPZDQGt2b5iWXq+P6VXz9vt69x/pdtWf3lXLBox5WBpgd001PzU/mktAOufhSxb6BV/MnNlYAkIvZGxL61vfWuMnHyqW/2tyu0cvzL6MA60+LXEU/W+38hmuIvJcuvT47/L2ozB8fLo+J2P/9y6c129a8r/g7I+n/b0uO/uchw0rheO7f2Oi79/mnbe5o7Pf63JG/n56Oyoz6Ymp8/OxGxJTmav1geGvnrk7f+tsyX5bP4Rw+0Hv+741YFD0VEdhA/HBGPRMSjRdsfi4jHI+LAMvH/+HL7fZuh/6dbnv9uHv9N/b/2ROXUD9+1q391/X84T40Wr+TnvxWstoHr+ewAAADgvyLNvwOfpGM302k6Nlb/Dv+e2JbWZufmnz4++/6Z6fp35YdjMC2fdA01PA+dSBaKd6znJ4tnxeX+Q8Vz4y8q/8/zY9XZ2nSPY4d+t73N+M/8Uel164AN12odbXJLDxoCdF3z+E+XZi++0c3GAF3l99rQv1YY/2m32gF0n+s/9K9W4/9iU95aANydXP+hfxn/0L+Mf+hfxj/0pfX8rl+inxORbopmSGxQotdnJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM74NwAA//+8yu7V") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m25.126560309s ago: executing program 7 (id=4825): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) 1m24.517974069s ago: executing program 7 (id=4838): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) socket$packet(0x11, 0xa, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1m24.47259732s ago: executing program 36 (id=4838): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x50) socket$packet(0x11, 0xa, 0x300) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 1m21.86142155s ago: executing program 6 (id=4895): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1/file2\x00', 0xffffffffffffff9c, 0x0, 0x0) 1m21.783394011s ago: executing program 6 (id=4900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/sctp\x00') r2 = open_tree(r1, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20) syz_open_procfs(0x0, &(0x7f0000000040)='net/sctp\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") 1m21.524928285s ago: executing program 6 (id=4910): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x280}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m21.043641473s ago: executing program 6 (id=4925): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x0, 0x573, &(0x7f0000000ec0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file1\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x21a509d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r1, &(0x7f0000000080)='./file0\x00', 0x8000, &(0x7f00000000c0)={0x1, 0x89, 0x100000}, 0x20) 1m20.901473925s ago: executing program 6 (id=4928): r0 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r2 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r2}, &(0x7f0000044000)=0x0) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 1m20.5786236s ago: executing program 6 (id=4949): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1m20.57795167s ago: executing program 37 (id=4949): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 56.241401387s ago: executing program 1 (id=5572): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x27, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x7}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @tail_call, @map_fd={0x18, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @jmp={0x5, 0x0, 0x5, 0x4, 0x7, 0x50, 0x9ca96316ea541f2c}, @jmp={0x5, 0x1, 0xd, 0x8, 0x5, 0x4, 0x8}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='syzkaller\x00', 0x9, 0x9b, &(0x7f0000000280)=""/155, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000540)=[{0x0, 0x4, 0x0, 0x3}, {0x0, 0x3, 0x10, 0xa}], 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) symlink(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./file1\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000ffffffec00000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 56.209616158s ago: executing program 1 (id=5579): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0xe000, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 55.740079995s ago: executing program 1 (id=5591): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2]}}) 55.561878428s ago: executing program 1 (id=5593): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 55.500111359s ago: executing program 1 (id=5594): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x61000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x7}, 0xa100, 0xc8, 0x3, 0x0, 0x8001, 0x46, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa32"], 0xfdef) 55.376605441s ago: executing program 1 (id=5598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) close(r1) 55.315406892s ago: executing program 38 (id=5598): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) close(r1) 1.362091679s ago: executing program 0 (id=7239): mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xec\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\blTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJ\x14\xba\x11~\xeb0s\xf2\xe7\x1bt\xd0s\xc4\xe8\x88=\xb6%\xc4\xd1G.\x85\x9eL\x1bz\xb0g\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xae\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xaec\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\x0e5J\x89hF?\xba\x1c\xca\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0\x0f\xe4\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\x02\x00\x00\x00\x00\x00\x00\x00\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2\x00\x00\x00\x00\x00\x00\xec\x04\xd4\xca O\x11[\xce-t\xce\x0e\xce\x84+\xdda\xf22~N\x9bd\x12\xc9\xce\xb9v\xa4\xe9\xac\a\t\x8d\x046\xfb)\xa3\f=\x14\xcc\xb7\x00\xef\xc4\xe0\x8a\xf4\n\xecn\xbc\xb8\\z\xa3s9', 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x128, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r2, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0xfc, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0x1, 0x1, 0x3, 0x1, 0x4, 0x102, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x0, 0x53, 0xa9, 0x1}]}}, @TCA_U32_SEL={0xc4, 0x5, {0x10, 0x9, 0x6, 0x10da, 0xa760, 0x0, 0x10, 0x100, [{0x1000, 0xe, 0xfffff000, 0x9f6}, {0x4, 0x4, 0x39849ac8, 0x1}, {0x4, 0x1000, 0x7, 0xd443d0e8}, {0x200, 0x3ff, 0x3, 0x4}, {0x6, 0x7fff, 0x9, 0x7}, {0xac, 0xfffff08a, 0x8, 0x3}, {0x6, 0x5, 0x8, 0x7}, {0x7, 0x7ff, 0x5, 0xc7}, {0x6, 0x0, 0x2, 0x1}, {0x7, 0x2, 0x5, 0x2}, {0x7, 0x2, 0x7, 0x7}]}}]}}]}, 0x128}}, 0x24040084) 1.28975216s ago: executing program 0 (id=7242): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 1.209896761s ago: executing program 0 (id=7244): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='sched_switch\x00', r0, 0x0, 0x40000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 1.170353232s ago: executing program 9 (id=7246): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) mknod$loop(0x0, 0x80, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 1.131760692s ago: executing program 9 (id=7247): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x4c}}, 0x800) 905.718366ms ago: executing program 4 (id=7252): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 886.728956ms ago: executing program 4 (id=7253): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000001640)=ANY=[@ANYBLOB="1802000020000000000000000000000085000000360000008500000005000000950000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000400)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x1}, 0x4}, 0xe) connect$bt_l2cap(r2, 0x0, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000100)) 868.329577ms ago: executing program 4 (id=7254): openat$tun(0xffffffffffffff9c, 0x0, 0xccc0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) syz_io_uring_setup(0x4cd, &(0x7f0000000100)={0x0, 0x10645c, 0x800, 0x400040, 0x240}, 0x0, 0x0) 859.515357ms ago: executing program 9 (id=7255): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2074, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001c40)="0349ee47", 0x4}], 0x1}}], 0x1, 0xc010) 806.965968ms ago: executing program 4 (id=7256): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_open_dev$sg(0x0, 0x0, 0x2000) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000280)={0x0, 0x0, 0x3080, 0x8003, 0x25f}, &(0x7f0000000240)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x3, r2, 0x0, 0x0, 0x0, 0x1, 0x1, {0x2}}) io_uring_enter(r2, 0x6e2, 0x620, 0x1, 0x0, 0x0) 806.174288ms ago: executing program 4 (id=7257): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080), 0x10, 0x0}, 0x0) 801.522448ms ago: executing program 4 (id=7258): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r1 = syz_io_uring_setup(0x10f, &(0x7f0000000300)={0x0, 0x5885, 0x80, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r0, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 494.440572ms ago: executing program 3 (id=7262): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0x24, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}}, 0x24}}, 0x0) 473.294343ms ago: executing program 3 (id=7263): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x20000}, 0x18) r2 = open_tree(0xffffffffffffff9c, 0x0, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r3, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 440.383353ms ago: executing program 3 (id=7264): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x24, r3, 0xc4fc9e906872338b, 0x70bd2d, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x24}}, 0x0) 378.851984ms ago: executing program 3 (id=7265): r0 = syz_io_uring_setup(0x1104, &(0x7f0000000700)={0x0, 0x0, 0x400, 0x10, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r5, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 366.084454ms ago: executing program 0 (id=7266): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 329.145965ms ago: executing program 0 (id=7267): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x204, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0xf, 0x0, 0x0, 0x7995}, 0x10007, 0x0, 0x0, 0x48000000, 0x0, 0x40000000, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4004550c, 0x0) 263.539726ms ago: executing program 0 (id=7268): rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r0 = gettid() timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) r1 = gettid() poll(0x0, 0x0, 0xffffffffffbffff8) timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(r2, 0x1, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x12) 263.209306ms ago: executing program 3 (id=7269): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x2, 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = epoll_create1(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = fcntl$dupfd(r3, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES32=r2, @ANYBLOB="11"], 0x14) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="11"], 0x11) 262.931786ms ago: executing program 3 (id=7270): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$caif_seqpacket(0x25, 0x5, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) unshare(0x480) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 209.226027ms ago: executing program 8 (id=7273): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000500)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) write$UHID_DESTROY(r2, 0x0, 0x0) 153.969468ms ago: executing program 8 (id=7274): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x89, 0x40000, {r3}}, 0x20) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 138.107938ms ago: executing program 8 (id=7275): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00000003000000020000000800000000000000", @ANYRES32, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f00000004c0)="a5e1", 0x2, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private0, 0x2}, 0x1c) 115.427558ms ago: executing program 8 (id=7276): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 96.618959ms ago: executing program 8 (id=7277): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a01f4ff000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 77.432699ms ago: executing program 8 (id=7278): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x818000, &(0x7f0000000300)={[{@nouid32}, {@grpjquota}]}, 0x1, 0x722, &(0x7f0000002640)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) mq_timedreceive(r1, 0x0, 0xfffffffffffffee3, 0x2000000, 0x0) fsopen(0x0, 0x5de1ec6b73a80871) 6.95272ms ago: executing program 9 (id=7279): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdir(&(0x7f0000000140)='./control\x00', 0x8) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) close(r2) 6.73548ms ago: executing program 9 (id=7280): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 0s ago: executing program 9 (id=7281): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x14, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0xffffffffffffff22, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) kernel console output (not intermixed with test programs): 0: Port device team_slave_1 added [ 184.115846][T15002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.122941][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.149766][T15002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.314470][T14993] tipc: Failed to remove unknown binding: 66,1,1/2130706433:35274536/35274538 [ 184.323522][T14993] tipc: Failed to remove unknown binding: 66,1,1/2130706433:35274536/35274538 [ 184.347415][T15002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.354532][T15002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.380612][T15002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.467778][T15002] hsr_slave_0: entered promiscuous mode [ 184.478299][T15002] hsr_slave_1: entered promiscuous mode [ 184.484716][T15002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.508390][T15002] Cannot create hsr debugfs directory [ 184.677143][T15002] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 184.741831][T15002] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 184.782437][T15002] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 184.793450][T15067] netlink: 'syz.4.4864': attribute type 4 has an invalid length. [ 184.802150][T15067] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4864'. [ 184.822615][T15002] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 184.870993][T15075] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4866'. [ 184.980862][T15002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.007054][T15002] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.038978][ T8744] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.046477][ T8744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.086370][ T8744] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.093582][ T8744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.241881][T15102] SELinux: failed to load policy [ 185.256120][T15002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.278454][ T6539] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=6539 comm=kworker/1:13 [ 185.291692][T15107] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 185.539768][T15127] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4883'. [ 185.553580][T15002] veth0_vlan: entered promiscuous mode [ 185.566953][T15002] veth1_vlan: entered promiscuous mode [ 185.612051][T15132] loop8: detected capacity change from 0 to 512 [ 185.619908][T15002] veth0_macvtap: entered promiscuous mode [ 185.626841][T15132] EXT4-fs: Ignoring removed bh option [ 185.640428][T15132] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.649667][T15132] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 185.661381][T15002] veth1_macvtap: entered promiscuous mode [ 185.676944][T15002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.687635][T15132] EXT4-fs (loop8): warning: mounting unchecked fs, running e2fsck is recommended [ 185.713086][T15002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.723660][T15132] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 185.797923][T15132] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 185.812625][T15002] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.821465][T15002] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.830244][T15002] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.838997][T15002] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.873398][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.294437][T15176] vlan2: entered allmulticast mode [ 186.319908][T15176] dummy0: entered allmulticast mode [ 186.363023][T15184] loop6: detected capacity change from 0 to 512 [ 186.408342][T15184] EXT4-fs: Ignoring removed orlov option [ 186.444201][T15184] EXT4-fs error (device loop6): ext4_orphan_get:1393: inode #15: comm syz.6.4900: casefold flag without casefold feature [ 186.469283][T15184] EXT4-fs error (device loop6): ext4_orphan_get:1398: comm syz.6.4900: couldn't read orphan inode 15 (err -117) [ 186.494661][T15184] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.528519][T15184] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.567128][T15194] vlan2: entered allmulticast mode [ 186.710838][T15210] loop9: detected capacity change from 0 to 512 [ 186.721801][T15213] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4914'. [ 186.732372][T15210] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 186.753555][T15210] EXT4-fs (loop9): 1 truncate cleaned up [ 186.760067][ T8741] dummy0: left promiscuous mode [ 186.766987][T15210] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.896244][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.963495][T15224] netlink: 404 bytes leftover after parsing attributes in process `syz.9.4921'. [ 187.086041][T15232] loop6: detected capacity change from 0 to 1024 [ 187.156103][T15232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.253063][T15244] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 187.254340][T11499] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.262768][T15244] SELinux: failed to load policy [ 187.331992][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 187.332008][ T29] audit: type=1400 audit(1473.579:5526): avc: denied { read } for pid=15252 comm="syz.8.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 187.600812][ T29] audit: type=1400 audit(1473.863:5527): avc: denied { setopt } for pid=15282 comm="syz.8.4951" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 187.756699][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4957'. [ 187.807762][T15299] IPVS: Unknown mcast interface: vcan0 [ 187.893555][T15288] lo speed is unknown, defaulting to 1000 [ 187.989674][T15325] 9p: Unknown Cache mode or invalid value m [ 188.004425][T15322] Falling back ldisc for ttyS3. [ 188.066700][T15288] chnl_net:caif_netlink_parms(): no params data found [ 188.096045][T15332] netlink: 'syz.4.4970': attribute type 27 has an invalid length. [ 188.143638][T15332] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.152136][T15332] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.160639][T15332] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.169215][T15332] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.222266][T15332] geneve2: left promiscuous mode [ 188.231324][T15332] macvtap1: left promiscuous mode [ 188.236489][T15332] macvtap1: left allmulticast mode [ 188.329157][T15345] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4972'. [ 188.395563][T15338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.423322][ T29] audit: type=1400 audit(1474.724:5528): avc: denied { name_connect } for pid=15349 comm="syz.1.4974" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 188.446041][T15338] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.458433][T15338] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.493548][ T6540] lo speed is unknown, defaulting to 1000 [ 188.499442][ T6540] syz0: Port: 1 Link ACTIVE [ 188.599775][ T6540] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.634426][T15288] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.641570][T15288] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.663620][T15359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4977'. [ 188.676500][T15288] bridge_slave_0: entered allmulticast mode [ 188.683580][T15360] netlink: 'syz.8.4975': attribute type 10 has an invalid length. [ 188.694226][T15288] bridge_slave_0: entered promiscuous mode [ 188.704615][ T8737] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.731562][T15360] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 188.732293][T15355] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4975'. [ 188.740360][T15288] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.740389][T15288] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.764804][T15288] bridge_slave_1: entered allmulticast mode [ 188.771765][T15288] bridge_slave_1: entered promiscuous mode [ 188.791929][T15355] bond0: (slave bridge0): Releasing backup interface [ 188.811432][T15363] vhci_hcd: invalid port number 23 [ 188.865792][T15288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.883935][T15367] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 188.895267][T15288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.914334][ T29] audit: type=1400 audit(1475.249:5529): avc: denied { name_bind } for pid=15365 comm="syz.1.4988" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 188.961832][T15288] team0: Port device team_slave_0 added [ 188.969096][T15288] team0: Port device team_slave_1 added [ 188.989552][T15288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.996592][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.023518][T15288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.037085][T15288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.044144][T15288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.071091][T15288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.112286][T15288] hsr_slave_0: entered promiscuous mode [ 189.118987][T15288] hsr_slave_1: entered promiscuous mode [ 189.124970][T15288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.139562][T15288] Cannot create hsr debugfs directory [ 189.183650][ T29] audit: type=1400 audit(1475.522:5530): avc: denied { name_bind } for pid=15376 comm="syz.4.4983" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 189.225185][T15379] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4982'. [ 189.305161][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4990'. [ 189.339365][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4991'. [ 189.366736][ T6533] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.431596][ T29] audit: type=1400 audit(1475.784:5531): avc: denied { cmd } for pid=15401 comm="syz.4.4995" path="socket:[46238]" dev="sockfs" ino=46238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 189.473991][T15288] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.487743][T15288] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.498209][ T29] audit: type=1400 audit(1475.858:5532): avc: denied { connect } for pid=15406 comm="syz.4.4998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.518913][T15288] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.524505][T15409] netlink: 'syz.8.4999': attribute type 7 has an invalid length. [ 189.533752][ T29] audit: type=1400 audit(1475.889:5533): avc: denied { write } for pid=15406 comm="syz.4.4998" path="socket:[46407]" dev="sockfs" ino=46407 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 189.545739][T15288] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.615269][T15288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.638536][T15288] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.654544][ T8741] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.661751][ T8741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.685964][ T8733] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.693137][ T8733] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.708820][ T8732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.716897][ T8732] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 189.846947][ T29] audit: type=1400 audit(1476.225:5534): avc: denied { mounton } for pid=15440 comm="syz.8.5009" path="/proc/414/task" dev="proc" ino=45346 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 189.896583][ T29] audit: type=1326 audit(1476.277:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15446 comm="syz.8.5012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 189.923232][T15288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.990383][T15445] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 190.064238][T15463] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 190.075524][T15465] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 190.086130][T15288] veth0_vlan: entered promiscuous mode [ 190.102393][T15288] veth1_vlan: entered promiscuous mode [ 190.137163][T15288] veth0_macvtap: entered promiscuous mode [ 190.157754][T15288] veth1_macvtap: entered promiscuous mode [ 190.182241][T15288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.194634][T15288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.206048][T15288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.215128][T15288] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.223971][T15288] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.232836][T15288] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.313326][T15489] sd 0:0:1:0: device reset [ 190.379783][T15496] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5031'. [ 190.432877][ T6524] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 190.562509][T15508] loop8: detected capacity change from 0 to 8192 [ 191.007702][T15539] netlink: zone id is out of range [ 191.021150][T15539] netlink: zone id is out of range [ 191.287757][T15539] netlink: zone id is out of range [ 191.294917][T15539] netlink: del zone limit has 8 unknown bytes [ 191.735291][T15566] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.742649][T15566] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.889038][T15566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.913253][T15566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.977259][T15566] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.986451][T15566] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.995613][T15566] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.004537][T15566] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.081655][T15575] __nla_validate_parse: 7 callbacks suppressed [ 192.081671][T15575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5065'. [ 192.133615][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 192.133632][ T29] audit: type=1400 audit(1478.629:5585): avc: denied { create } for pid=15576 comm="syz.9.5067" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.179498][ T29] audit: type=1400 audit(1478.671:5586): avc: denied { mounton } for pid=15576 comm="syz.9.5067" path="/22/file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.248179][ T29] audit: type=1400 audit(1478.713:5587): avc: denied { unlink } for pid=15002 comm="syz-executor" name="file0" dev="tmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 192.270573][ T29] audit: type=1400 audit(1478.713:5588): avc: denied { write } for pid=15579 comm="syz.1.5066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 192.294344][T15586] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5069'. [ 192.628391][ T29] audit: type=1400 audit(1478.818:5589): avc: denied { map } for pid=15582 comm="syz.9.5068" path="socket:[45534]" dev="sockfs" ino=45534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.651613][ T29] audit: type=1400 audit(1478.818:5590): avc: denied { read } for pid=15582 comm="syz.9.5068" path="socket:[45534]" dev="sockfs" ino=45534 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 192.870286][ T29] audit: type=1400 audit(1479.395:5591): avc: denied { ioctl } for pid=15605 comm="syz.1.5079" path="socket:[45604]" dev="sockfs" ino=45604 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.874195][T15613] netlink: 'syz.1.5079': attribute type 1 has an invalid length. [ 192.903278][T15613] netlink: 'syz.1.5079': attribute type 2 has an invalid length. [ 192.978624][ T29] audit: type=1400 audit(1479.479:5592): avc: denied { write } for pid=15611 comm="syz.9.5081" path="socket:[46861]" dev="sockfs" ino=46861 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.150554][ T29] audit: type=1400 audit(1479.689:5593): avc: denied { ioctl } for pid=15634 comm="syz.9.5091" path="socket:[45650]" dev="sockfs" ino=45650 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 193.206960][ T29] audit: type=1326 audit(1479.721:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15634 comm="syz.9.5091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 193.404759][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.630380][T15653] loop8: detected capacity change from 0 to 256 [ 193.645343][T15653] FAT-fs (loop8): Directory bread(block 64) failed [ 193.652121][T15653] FAT-fs (loop8): Directory bread(block 65) failed [ 193.660568][T15653] FAT-fs (loop8): Directory bread(block 66) failed [ 193.667858][T15653] FAT-fs (loop8): Directory bread(block 67) failed [ 193.676134][T15653] FAT-fs (loop8): Directory bread(block 68) failed [ 193.683223][T15653] FAT-fs (loop8): Directory bread(block 69) failed [ 193.689947][T15653] FAT-fs (loop8): Directory bread(block 70) failed [ 193.698307][T15653] FAT-fs (loop8): Directory bread(block 71) failed [ 193.705065][T15653] FAT-fs (loop8): Directory bread(block 72) failed [ 193.713706][T15653] FAT-fs (loop8): Directory bread(block 73) failed [ 193.734905][T15653] bio_check_eod: 15 callbacks suppressed [ 193.734922][T15653] syz.8.5098: attempt to access beyond end of device [ 193.734922][T15653] loop8: rw=524288, sector=1800, nr_sectors = 20 limit=256 [ 193.765399][T15653] syz.8.5098: attempt to access beyond end of device [ 193.765399][T15653] loop8: rw=0, sector=1800, nr_sectors = 8 limit=256 [ 194.123192][T15672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5107'. [ 194.181654][T15676] loop9: detected capacity change from 0 to 164 [ 194.194823][T15676] syz.9.5109: attempt to access beyond end of device [ 194.194823][T15676] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 194.212051][T15676] syz.9.5109: attempt to access beyond end of device [ 194.212051][T15676] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 194.292145][T15684] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5113'. [ 195.087241][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5145'. [ 195.217967][T15760] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15760 comm=syz.9.5143 [ 195.537895][T15786] netlink: 96 bytes leftover after parsing attributes in process `syz.1.5155'. [ 196.521324][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5176'. [ 196.550471][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5176'. [ 196.639108][T15841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5180'. [ 196.656806][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5180'. [ 196.823630][T15846] netlink: 'syz.0.5182': attribute type 4 has an invalid length. [ 197.504610][T15879] __nla_validate_parse: 1 callbacks suppressed [ 197.504630][T15879] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5197'. [ 197.526832][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5195'. [ 197.533806][T15881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5195'. [ 197.617471][T15887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5199'. [ 197.675403][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 197.675420][ T29] audit: type=1326 audit(1484.445:5920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 197.737087][ T29] audit: type=1326 audit(1484.476:5921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 197.737121][ T29] audit: type=1326 audit(1484.487:5922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 197.737153][ T29] audit: type=1326 audit(1484.487:5923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 197.737252][ T29] audit: type=1326 audit(1484.487:5924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 197.737377][ T29] audit: type=1326 audit(1484.487:5925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=64 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 197.737410][ T29] audit: type=1326 audit(1484.487:5926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15893 comm="syz.1.5204" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 197.897144][ T29] audit: type=1326 audit(1484.676:5927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.0.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 197.897290][ T29] audit: type=1326 audit(1484.676:5928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.0.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 197.897322][ T29] audit: type=1326 audit(1484.676:5929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15900 comm="syz.0.5208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 197.996549][T15905] loop9: detected capacity change from 0 to 1024 [ 198.015998][T15905] EXT4-fs: Ignoring removed oldalloc option [ 198.036637][T15905] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 198.066175][T15905] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.096229][T15913] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5211'. [ 198.117822][T15913] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5211'. [ 198.442893][T15928] netlink: 'syz.1.5217': attribute type 10 has an invalid length. [ 198.451026][T15928] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5217'. [ 198.470141][T15928] dummy0: entered promiscuous mode [ 198.476281][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.526319][T15936] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.884592][T15972] netlink: 'syz.0.5237': attribute type 4 has an invalid length. [ 198.893386][T15972] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5237'. [ 198.895572][T15974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5238'. [ 199.897818][T16016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5257'. [ 199.931458][T16016] IPVS: Error joining to the multicast group [ 199.947818][T16020] netlink: 'syz.8.5259': attribute type 10 has an invalid length. [ 199.961537][T16020] dummy0: entered promiscuous mode [ 199.968396][T16020] bond1: (slave dummy0): Releasing active interface [ 200.398690][T16042] loop9: detected capacity change from 0 to 8192 [ 200.434827][T16042] loop9: p3 [ 200.438313][T16042] loop9: p3 size 196608 extends beyond EOD, truncated [ 200.864728][T16064] netlink: 'syz.4.5276': attribute type 1 has an invalid length. [ 200.872553][T16064] netlink: 'syz.4.5276': attribute type 2 has an invalid length. [ 200.880491][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 201.714823][T16109] netlink: 'syz.9.5297': attribute type 7 has an invalid length. [ 202.199427][T16136] ipvlan2: entered promiscuous mode [ 202.218267][T16136] bridge0: port 1(ipvlan2) entered blocking state [ 202.224878][T16136] bridge0: port 1(ipvlan2) entered disabled state [ 202.240397][T16136] ipvlan2: entered allmulticast mode [ 202.246464][T16136] bridge0: entered allmulticast mode [ 202.277755][T16136] ipvlan2: left allmulticast mode [ 202.282873][T16136] bridge0: left allmulticast mode [ 202.402656][T16142] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 202.504070][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 202.504085][ T29] audit: type=1400 audit(2001.519:6496): avc: denied { read } for pid=16147 comm="syz.8.5313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.590281][ T29] audit: type=1326 audit(2001.593:6497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.613351][ T29] audit: type=1326 audit(2001.603:6498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.636339][ T29] audit: type=1326 audit(2001.603:6499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.659624][ T29] audit: type=1326 audit(2001.603:6500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.682685][ T29] audit: type=1326 audit(2001.603:6501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.705902][ T29] audit: type=1326 audit(2001.603:6502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.735900][ T29] audit: type=1326 audit(2001.603:6503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.759017][ T29] audit: type=1326 audit(2001.603:6504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 202.782482][ T29] audit: type=1326 audit(2001.603:6505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16157 comm="syz.1.5321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c273e929 code=0x7ffc0000 [ 202.814225][T16166] loop8: detected capacity change from 0 to 512 [ 202.822350][T16166] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 202.842180][ T6525] IPVS: starting estimator thread 0... [ 202.851260][T16166] EXT4-fs (loop8): 1 truncate cleaned up [ 202.859665][T16166] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.949903][T16171] IPVS: using max 2160 ests per chain, 108000 per kthread [ 202.995195][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.039528][T16183] loop8: detected capacity change from 0 to 2048 [ 203.104965][T16183] loop8: p1 < > p4 [ 203.109441][T16183] loop8: p4 size 8388608 extends beyond EOD, truncated [ 203.183254][T16208] __nla_validate_parse: 7 callbacks suppressed [ 203.183274][T16208] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5340'. [ 203.224940][T16211] loop9: detected capacity change from 0 to 1024 [ 203.243819][T16211] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 203.257216][T16211] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 203.301156][T16219] vhci_hcd: invalid port number 23 [ 203.350242][ T6525] IPVS: starting estimator thread 0... [ 203.415886][T16234] netlink: 'syz.8.5354': attribute type 27 has an invalid length. [ 203.446015][T16227] IPVS: using max 2208 ests per chain, 110400 per kthread [ 203.453350][T16236] loop9: detected capacity change from 0 to 2048 [ 203.506116][T16234] dummy0: left promiscuous mode [ 203.513925][T16236] loop9: p1 < > p4 [ 203.525062][T16236] loop9: p4 size 8388608 extends beyond EOD, truncated [ 203.630843][T16234] netdevsim netdevsim8 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.639500][T16234] netdevsim netdevsim8 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.647962][T16234] netdevsim netdevsim8 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.656369][T16234] netdevsim netdevsim8 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.685128][T16249] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 203.761211][T16237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.771464][T16237] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.808243][T16237] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.875947][ T1035] IPVS: starting estimator thread 0... [ 203.959287][T16264] IPVS: using max 1920 ests per chain, 96000 per kthread [ 204.002926][T16276] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 204.011533][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5381'. [ 204.127729][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5375'. [ 204.137039][T16288] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5375'. [ 204.153454][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5375'. [ 204.157725][T16286] loop8: detected capacity change from 0 to 1024 [ 204.164592][T16288] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5375'. [ 204.178838][T16288] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5375'. [ 204.188464][T16286] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 204.210599][T16286] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 204.591868][T16307] loop9: detected capacity change from 0 to 8192 [ 204.655115][T16320] netlink: 'syz.0.5391': attribute type 10 has an invalid length. [ 204.668032][T16320] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 204.679367][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5393'. [ 204.704333][T16325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5391'. [ 204.711337][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5393'. [ 204.729616][T16325] bridge_slave_1: left allmulticast mode [ 204.735504][T16325] bridge_slave_1: left promiscuous mode [ 204.741534][T16325] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.752988][T16325] bridge_slave_0: left allmulticast mode [ 204.758718][T16325] bridge_slave_0: left promiscuous mode [ 204.764540][T16325] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.784974][T16325] bond0: (slave bridge0): Releasing backup interface [ 204.861736][T16327] netlink: 'syz.9.5392': attribute type 27 has an invalid length. [ 204.886391][T16333] sd 0:0:1:0: device reset [ 204.952344][T16327] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.959740][T16327] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.067124][T16327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.086975][T16327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.136610][T16327] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.145614][T16327] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.154658][T16327] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.163653][T16327] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.220212][T16330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.243286][T16330] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.255029][T16330] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.389809][T16354] loop9: detected capacity change from 0 to 512 [ 205.410846][T16354] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 205.438121][T16354] EXT4-fs (loop9): 1 truncate cleaned up [ 205.444359][T16354] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 205.615862][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.278290][T16410] netlink: 'syz.4.5428': attribute type 1 has an invalid length. [ 206.426726][ T6538] lo speed is unknown, defaulting to 1000 [ 206.432549][ T6538] syz0: Port: 1 Link DOWN [ 206.500231][T16425] pim6reg: entered allmulticast mode [ 206.534718][T16425] pim6reg: left allmulticast mode [ 207.316921][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 207.316936][ T29] audit: type=1326 audit(2006.569:6584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.0.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 207.346261][ T29] audit: type=1326 audit(2006.569:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.0.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 207.369463][ T29] audit: type=1326 audit(2006.569:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.0.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 207.392530][ T29] audit: type=1326 audit(2006.569:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16452 comm="syz.0.5447" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 207.452686][T16458] netlink: 'syz.0.5448': attribute type 27 has an invalid length. [ 207.544122][T16458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.554287][T16458] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.564326][T16458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 207.838563][T16477] bond2: (slave wireguard0): Releasing backup interface [ 207.856354][T16477] netlink: 'syz.4.5454': attribute type 10 has an invalid length. [ 207.871458][T16477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.889180][T16477] team0: Port device bond0 added [ 208.107001][ T29] audit: type=1400 audit(2007.398:6588): avc: denied { ioctl } for pid=16490 comm="syz.8.5462" path="socket:[49101]" dev="sockfs" ino=49101 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 208.165402][ T29] audit: type=1326 audit(2007.451:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.4.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 208.215978][ T29] audit: type=1326 audit(2007.482:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.4.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 208.239936][ T29] audit: type=1326 audit(2007.482:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.4.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 208.262999][ T29] audit: type=1326 audit(2007.482:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.4.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 208.286865][ T29] audit: type=1326 audit(2007.482:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16494 comm="syz.4.5464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 208.604444][T16535] netlink: 'syz.4.5484': attribute type 10 has an invalid length. [ 208.627416][T16535] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 208.670533][T16535] __nla_validate_parse: 8 callbacks suppressed [ 208.670549][T16535] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5484'. [ 208.712268][T16535] bond0: (slave bridge0): Releasing backup interface [ 208.904754][T16573] vlan2: entered allmulticast mode [ 209.590982][T16616] bond0: (slave bond_slave_0): Releasing backup interface [ 209.615491][T16616] bond0: (slave bond_slave_1): Releasing backup interface [ 209.630937][T16616] team0: Port device team_slave_0 removed [ 209.642766][T16620] netlink: 'syz.0.5520': attribute type 10 has an invalid length. [ 209.656579][T16616] team0: Port device team_slave_1 removed [ 209.683775][T16616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.696586][T16616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.765033][T16620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.895694][T16620] team0: Port device bond0 added [ 210.448530][T16674] netlink: 'syz.1.5543': attribute type 10 has an invalid length. [ 210.480587][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5546'. [ 210.489694][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5546'. [ 210.500871][T16674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.550250][T16674] team0: Port device bond0 added [ 210.712692][T16688] loop8: detected capacity change from 0 to 1024 [ 210.773578][T16688] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.922497][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.395700][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 212.395732][ T29] audit: type=1400 audit(2011.891:6641): avc: denied { bind } for pid=16783 comm="syz.1.5591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.454554][ T29] audit: type=1400 audit(2011.902:6642): avc: denied { setopt } for pid=16783 comm="syz.1.5591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 212.676196][T16795] netlink: 'syz.8.5596': attribute type 10 has an invalid length. [ 212.707824][T16795] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 212.819658][T16802] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5600'. [ 212.934166][ T29] audit: type=1400 audit(2012.458:6643): avc: denied { append } for pid=16805 comm="syz.9.5603" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 213.393164][T16807] lo speed is unknown, defaulting to 1000 [ 213.612280][T16807] chnl_net:caif_netlink_parms(): no params data found [ 213.718003][T16807] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.725165][T16807] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.742071][T16807] bridge_slave_0: entered allmulticast mode [ 213.749375][T16807] bridge_slave_0: entered promiscuous mode [ 213.762010][T16807] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.769134][T16807] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.788127][T16807] bridge_slave_1: entered allmulticast mode [ 213.799666][T16807] bridge_slave_1: entered promiscuous mode [ 213.808761][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 213.840834][T16828] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5606'. [ 213.893684][T16837] loop8: detected capacity change from 0 to 512 [ 213.916160][T16807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.945499][T16807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.955500][T16837] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.989360][ T29] audit: type=1326 audit(2013.560:6644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 214.014712][T16807] team0: Port device team_slave_0 added [ 214.028919][T16807] team0: Port device team_slave_1 added [ 214.053606][T16807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.060674][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.086787][T16807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.098390][T16807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.105417][T16807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.108668][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.131546][T16807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.143122][ T29] audit: type=1326 audit(2013.602:6645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 214.174228][ T29] audit: type=1326 audit(2013.602:6646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 214.196726][ T29] audit: type=1326 audit(2013.602:6647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 214.219194][ T29] audit: type=1326 audit(2013.602:6648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 214.241586][ T29] audit: type=1326 audit(2013.602:6649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 214.264054][ T29] audit: type=1326 audit(2013.602:6650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16845 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 214.304329][T16849] rdma_op ffff8881502cbd80 conn xmit_rdma 0000000000000000 [ 214.332466][T16852] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.339731][T16852] IPv6: NLM_F_CREATE should be set when creating new route [ 214.356382][T16807] hsr_slave_0: entered promiscuous mode [ 214.366280][T16807] hsr_slave_1: entered promiscuous mode [ 214.377681][T16807] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.407263][T16807] Cannot create hsr debugfs directory [ 214.507318][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5618'. [ 214.529990][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813f28ac00: rx timeout, send abort [ 214.803326][T16862] vcan0: entered promiscuous mode [ 214.803349][ C0] vcan0: j1939_session_tx_dat: 0xffff88810c31ea00: queue data error: -100 [ 214.808448][T16862] vcan0: entered allmulticast mode [ 215.014661][ C0] vcan0: j1939_tp_rxtimer: 0xffff88813f28ac00: abort rx timeout. Force session deactivation [ 215.028105][T16874] loop9: detected capacity change from 0 to 512 [ 215.056360][T16874] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.113697][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.183718][T16807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 215.194925][T16807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 215.204803][T16807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 215.217305][T16807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 215.342774][T16807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.367575][T16807] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.401522][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.408693][ T8718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.468506][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.475713][ T8718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.682639][T16925] netem: change failed [ 215.728023][T16807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.795568][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5648'. [ 215.820410][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5648'. [ 215.860573][T16945] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5651'. [ 215.867837][T16948] syz_tun: entered allmulticast mode [ 215.877042][T16947] syz_tun: left allmulticast mode [ 215.960265][T16955] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 215.973092][T16807] veth0_vlan: entered promiscuous mode [ 215.980793][T16958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16958 comm=syz.9.5656 [ 215.983062][T16807] veth1_vlan: entered promiscuous mode [ 216.070033][T16807] veth0_macvtap: entered promiscuous mode [ 216.089666][T16807] veth1_macvtap: entered promiscuous mode [ 216.124056][T16807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.159658][T16807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.188373][T16807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.197308][T16807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.206856][T16807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.215671][T16807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.425438][T16985] syz_tun: entered allmulticast mode [ 216.458584][T16983] syz_tun: left allmulticast mode [ 216.558559][T16998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.567532][T16998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.593778][T17000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5672'. [ 216.602952][T17000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5672'. [ 216.613422][T17002] loop9: detected capacity change from 0 to 128 [ 216.625391][T17000] wireguard1: entered promiscuous mode [ 216.630955][T17000] wireguard1: entered allmulticast mode [ 216.664341][T17002] syz.9.5673: attempt to access beyond end of device [ 216.664341][T17002] loop9: rw=0, sector=121, nr_sectors = 120 limit=128 [ 216.711445][ T8726] kworker/u8:41: attempt to access beyond end of device [ 216.711445][ T8726] loop9: rw=1, sector=241, nr_sectors = 800 limit=128 [ 216.754034][T17016] wg2: entered promiscuous mode [ 216.758968][T17016] wg2: entered allmulticast mode [ 216.867043][T17034] netlink: 'syz.9.5686': attribute type 1 has an invalid length. [ 216.897463][T17039] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5688'. [ 216.906501][T17039] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5688'. [ 216.920856][T17039] wireguard0: entered promiscuous mode [ 216.926564][T17039] wireguard0: entered allmulticast mode [ 217.065231][T17063] netlink: 'syz.4.5699': attribute type 1 has an invalid length. [ 217.154705][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5702'. [ 217.167124][T17070] wireguard0: entered promiscuous mode [ 217.172922][T17070] wireguard0: entered allmulticast mode [ 217.237654][T17081] wg2: entered promiscuous mode [ 217.242698][T17081] wg2: entered allmulticast mode [ 217.358480][T17090] netlink: 'syz.0.5712': attribute type 1 has an invalid length. [ 217.395832][T17095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.404462][T17095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.440335][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 217.440352][ T29] audit: type=1326 audit(2017.193:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17099 comm="syz.9.5716" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x0 [ 217.646677][ T29] audit: type=1326 audit(2017.403:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.669778][ T29] audit: type=1326 audit(2017.403:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.693485][ T29] audit: type=1326 audit(2017.455:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.716765][ T29] audit: type=1326 audit(2017.455:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.739803][ T29] audit: type=1326 audit(2017.455:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.764335][ T29] audit: type=1326 audit(2017.455:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.787595][ T29] audit: type=1326 audit(2017.455:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.810808][ T29] audit: type=1326 audit(2017.455:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 217.833997][ T29] audit: type=1326 audit(2017.455:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17111 comm="syz.8.5720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 218.713219][T17127] netlink: 'syz.8.5726': attribute type 1 has an invalid length. [ 219.120503][T17190] netlink: 'syz.0.5757': attribute type 7 has an invalid length. [ 219.296807][T17220] loop8: detected capacity change from 0 to 164 [ 219.306486][T17220] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 219.319104][T17222] netlink: 'syz.9.5771': attribute type 7 has an invalid length. [ 219.376847][T17233] loop8: detected capacity change from 0 to 128 [ 219.643216][T17270] loop9: detected capacity change from 0 to 128 [ 219.646259][T17267] bond1: entered promiscuous mode [ 219.654914][T17267] bond1: entered allmulticast mode [ 219.660678][T17267] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.670975][T17267] bond1 (unregistering): Released all slaves [ 219.738400][T17278] __nla_validate_parse: 3 callbacks suppressed [ 219.738421][T17278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5795'. [ 219.999624][T17308] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.5815'. [ 220.009050][T17308] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5815'. [ 220.048236][T17314] lo speed is unknown, defaulting to 1000 [ 220.069643][T17318] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5811'. [ 220.214343][T17314] pimreg: entered allmulticast mode [ 220.318147][ T8704] pimreg (unregistering): left allmulticast mode [ 220.344641][T17334] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5819'. [ 220.363128][T17334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5819'. [ 220.369903][T17337] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5820'. [ 220.472794][T17346] syzkaller1: entered promiscuous mode [ 220.478624][T17346] syzkaller1: entered allmulticast mode [ 220.633712][T17359] lo speed is unknown, defaulting to 1000 [ 220.757291][T17359] pimreg: entered allmulticast mode [ 221.013816][ T8726] pimreg (unregistering): left allmulticast mode [ 221.410123][T17412] loop9: detected capacity change from 0 to 512 [ 221.418723][T17412] EXT4-fs: Ignoring removed bh option [ 221.430177][T17412] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 221.439318][T17412] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 221.460328][T17418] loop8: detected capacity change from 0 to 512 [ 221.469532][T17412] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 221.482017][T17412] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 221.494316][T17412] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.494853][T17418] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.5852: corrupted in-inode xattr: invalid ea_ino [ 221.524360][T17418] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.5852: couldn't read orphan inode 15 (err -117) [ 221.538245][T17418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.555961][T17423] 9pnet_fd: Insufficient options for proto=fd [ 221.590842][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.632691][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 221.813894][T17461] futex_wake_op: syz.3.5866 tries to shift op by -1; fix this program [ 221.855903][T17465] serio: Serial port ptm0 [ 221.929802][T17470] loop8: detected capacity change from 0 to 512 [ 221.968075][T17470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.027007][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.506541][T17504] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5886'. [ 222.662723][T17519] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5901'. [ 222.707643][T17519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5901'. [ 223.059252][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 223.059271][ T29] audit: type=1400 audit(2023.093:6896): avc: denied { read } for pid=17538 comm="syz.9.5911" path="socket:[52906]" dev="sockfs" ino=52906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 223.091730][T17541] IPVS: Error joining to the multicast group [ 223.153673][ T29] audit: type=1400 audit(2023.198:6897): avc: denied { create } for pid=17547 comm="syz.3.5904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 223.182896][ T29] audit: type=1400 audit(2023.219:6898): avc: denied { sys_admin } for pid=17547 comm="syz.3.5904" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 223.189584][T17548] lo speed is unknown, defaulting to 1000 [ 223.211039][T17550] serio: Serial port ptm0 [ 223.387152][T17568] syzkaller1: entered promiscuous mode [ 223.392866][T17568] syzkaller1: entered allmulticast mode [ 223.538379][T17579] serio: Serial port ptm0 [ 223.560821][T17581] lo speed is unknown, defaulting to 1000 [ 223.616007][T17585] netlink: 'syz.4.5921': attribute type 7 has an invalid length. [ 223.651806][T17585] netlink: 'syz.4.5921': attribute type 7 has an invalid length. [ 224.005087][T17607] netlink: 'syz.9.5929': attribute type 39 has an invalid length. [ 224.433054][ T29] audit: type=1400 audit(2024.499:6899): avc: denied { remount } for pid=17614 comm="syz.4.5932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 224.548453][T17618] lo speed is unknown, defaulting to 1000 [ 224.641365][T17621] loop9: detected capacity change from 0 to 512 [ 224.692679][ T29] audit: type=1400 audit(2024.804:6900): avc: denied { associate } for pid=17622 comm="syz.4.5933" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 224.802708][T17621] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.953940][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.107269][T17631] loop9: detected capacity change from 0 to 128 [ 225.133211][T17631] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 225.184696][T17631] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 225.226862][T17635] __nla_validate_parse: 5 callbacks suppressed [ 225.226879][T17635] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5939'. [ 225.308391][T17638] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 225.422747][T17643] netlink: 'syz.0.5945': attribute type 7 has an invalid length. [ 225.431564][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5945'. [ 225.483023][T17643] netlink: 'syz.0.5945': attribute type 7 has an invalid length. [ 225.490956][T17643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5945'. [ 225.508131][T17650] tipc: Enabling of bearer rejected, failed to enable media [ 225.891643][T17668] syzkaller0: entered promiscuous mode [ 225.897233][T17668] syzkaller0: entered allmulticast mode [ 226.110802][T17680] openvswitch: netlink: Message has 6 unknown bytes. [ 226.130035][T17678] loop8: detected capacity change from 0 to 1024 [ 226.150636][T17678] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 226.161663][T17678] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 226.225086][T17678] JBD2: no valid journal superblock found [ 226.230971][T17678] EXT4-fs (loop8): Could not load journal inode [ 226.238661][T17686] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5961'. [ 226.265758][T17678] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 226.290005][T17685] syzkaller1: entered promiscuous mode [ 226.295620][T17685] syzkaller1: entered allmulticast mode [ 226.409808][T17693] netlink: 68 bytes leftover after parsing attributes in process `+}[@'. [ 226.721763][T17715] 9pnet: p9_errstr2errno: server reported unknown error þLì²¼ O€!Ýë [ 226.843216][ T29] audit: type=1326 audit(2027.061:6901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.3.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 226.870504][ T29] audit: type=1326 audit(2027.061:6902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.3.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 226.894460][ T29] audit: type=1400 audit(2027.061:6903): avc: denied { ioctl } for pid=17718 comm="syz.0.5976" path="socket:[53143]" dev="sockfs" ino=53143 ioctlcmd=0x7213 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.948202][ T29] audit: type=1326 audit(2027.092:6904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.3.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 226.971312][ T29] audit: type=1326 audit(2027.092:6905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17722 comm="syz.3.5978" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 227.020254][T17736] netlink: zone id is out of range [ 227.025531][T17736] netlink: zone id is out of range [ 227.030798][T17736] netlink: zone id is out of range [ 227.035945][T17736] netlink: zone id is out of range [ 227.041117][T17736] netlink: zone id is out of range [ 227.046346][T17736] netlink: zone id is out of range [ 227.051518][T17736] netlink: zone id is out of range [ 227.056658][T17736] netlink: zone id is out of range [ 227.061870][T17736] netlink: zone id is out of range [ 227.196121][T17750] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 227.215236][T17758] netlink: 96 bytes leftover after parsing attributes in process `syz.8.5995'. [ 227.427046][T17786] loop9: detected capacity change from 0 to 256 [ 227.446547][T17786] syz.9.6018: attempt to access beyond end of device [ 227.446547][T17786] loop9: rw=2049, sector=256, nr_sectors = 12 limit=256 [ 227.493674][T17791] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6009'. [ 227.548097][T17795] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 227.678752][T17821] ref_ctr increment failed for inode: 0x81f offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881099f33c0 [ 227.713506][T17820] uprobe: syz.8.6025:17820 failed to unregister, leaking uprobe [ 227.746406][T17829] loop9: detected capacity change from 0 to 128 [ 227.755990][T17829] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.896600][T15002] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 227.948734][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 227.948813][ T29] audit: type=1326 audit(2028.226:6950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.0.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 228.007882][ T29] audit: type=1326 audit(2028.258:6951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.0.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 228.011772][T17846] syzkaller0: entered promiscuous mode [ 228.030864][ T29] audit: type=1326 audit(2028.258:6952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.0.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 228.030901][ T29] audit: type=1326 audit(2028.258:6953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.0.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 228.030986][ T29] audit: type=1326 audit(2028.258:6954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.0.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 228.031019][ T29] audit: type=1326 audit(2028.258:6955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17842 comm="syz.0.6035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 228.131246][T17846] syzkaller0: entered allmulticast mode [ 228.143278][T17849] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 228.224602][T17858] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.272172][T17858] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.320227][T17858] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.369354][T17858] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.418568][T17858] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.430715][T17858] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.443044][T17858] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.454350][T17858] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.928213][T17870] loop8: detected capacity change from 0 to 128 [ 228.932578][T17869] loop9: detected capacity change from 0 to 512 [ 228.943155][T17870] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.956635][T17872] netlink: 'syz.3.6046': attribute type 298 has an invalid length. [ 228.967915][T17869] Quota error (device loop9): v2_read_file_info: Free block number 1 out of range (1, 6). [ 228.990644][T17869] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 229.011908][T17869] EXT4-fs (loop9): mount failed [ 229.098442][T13258] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 229.177427][T17900] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6057'. [ 229.182300][T17901] smc: net device bond0 applied user defined pnetid SYZ0 [ 229.216732][T17901] smc: net device bond0 erased user defined pnetid SYZ0 [ 229.250368][T17911] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.302632][T17915] loop9: detected capacity change from 0 to 4096 [ 229.311740][T17915] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.336657][T17921] loop8: detected capacity change from 0 to 512 [ 229.349410][ T29] audit: type=1400 audit(2029.696:6956): avc: denied { link } for pid=17914 comm="syz.9.6075" name="file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.374182][T17921] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 229.376654][T17922] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 229.387046][T17921] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 229.408856][T17921] EXT4-fs (loop8): mount failed [ 229.431384][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.521157][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6072'. [ 229.531296][T17936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6072'. [ 229.544414][T17936] netlink: 'syz.4.6072': attribute type 6 has an invalid length. [ 229.673975][T17949] smc: net device bond0 applied user defined pnetid SYZ0 [ 229.688314][T17949] smc: net device bond0 erased user defined pnetid SYZ0 [ 229.754860][ T29] audit: type=1400 audit(2030.126:6957): avc: denied { read } for pid=17952 comm="syz.4.6080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 229.978877][T17988] netlink: 'syz.9.6095': attribute type 11 has an invalid length. [ 230.293382][T18010] netlink: 'syz.4.6103': attribute type 298 has an invalid length. [ 230.404546][T18018] geneve0: entered allmulticast mode [ 230.684639][T18035] loop8: detected capacity change from 0 to 1024 [ 230.720907][T18035] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.762522][T18035] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.6114: Allocating blocks 449-513 which overlap fs metadata [ 230.780160][T18034] EXT4-fs (loop8): pa ffff888106da3930: logic 48, phys. 177, len 21 [ 230.788950][T18034] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 230.812072][T18045] SELinux: failed to load policy [ 230.813478][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.290007][T18060] pimreg: entered allmulticast mode [ 231.296928][T18060] pimreg: left allmulticast mode [ 231.462598][T18065] loop9: detected capacity change from 0 to 8192 [ 231.498293][T18065] loop9: p1 p2 p3 p4 [ 231.502478][T18065] loop9: p1 start 51379968 is beyond EOD, truncated [ 231.510116][T18065] loop9: p2 start 4293394690 is beyond EOD, truncated [ 231.517173][T18065] loop9: p3 size 100663552 extends beyond EOD, truncated [ 231.527064][T18065] loop9: p4 size 50331648 extends beyond EOD, truncated [ 231.543889][T18072] ref_ctr increment failed for inode: 0x4c7 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881099f2e00 [ 231.557643][T18071] uprobe: syz.0.6129:18071 failed to unregister, leaking uprobe [ 231.834142][T18094] pimreg: entered allmulticast mode [ 231.873301][T18094] pimreg: left allmulticast mode [ 231.994807][T18102] __nla_validate_parse: 3 callbacks suppressed [ 231.994854][T18102] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6144'. [ 232.505065][T18119] wireguard0: entered promiscuous mode [ 232.510906][T18119] wireguard0: entered allmulticast mode [ 232.903596][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 232.903637][ T29] audit: type=1326 audit(2033.423:6981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16bcc558e7 code=0x7ffc0000 [ 232.942196][ T29] audit: type=1326 audit(2033.454:6982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16bcbfab19 code=0x7ffc0000 [ 232.965978][ T29] audit: type=1326 audit(2033.454:6983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16bcc558e7 code=0x7ffc0000 [ 232.989098][ T29] audit: type=1326 audit(2033.465:6984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16bcbfab19 code=0x7ffc0000 [ 233.012881][ T29] audit: type=1326 audit(2033.465:6985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 233.036061][ T29] audit: type=1326 audit(2033.465:6986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 233.059826][ T29] audit: type=1326 audit(2033.465:6987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 233.083461][ T29] audit: type=1326 audit(2033.465:6988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 233.106534][ T29] audit: type=1326 audit(2033.465:6989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 233.130464][ T29] audit: type=1326 audit(2033.465:6990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18157 comm="syz.9.6167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 233.183568][T18160] wireguard0: entered promiscuous mode [ 233.190036][T18160] wireguard0: entered allmulticast mode [ 233.321483][T18163] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6170'. [ 233.583582][T18180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.594039][T18180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.781945][T18191] netlink: 76 bytes leftover after parsing attributes in process `syz.8.6181'. [ 233.902626][T18202] macsec0: entered promiscuous mode [ 233.950729][T18208] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6190'. [ 234.032621][T18213] netem: change failed [ 234.090828][T18221] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6196'. [ 234.132615][T18223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6197'. [ 234.318998][T18234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6202'. [ 234.522473][T18249] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6208'. [ 234.659319][T18257] syzkaller1: entered promiscuous mode [ 234.664970][T18257] syzkaller1: entered allmulticast mode [ 234.764248][T18264] netlink: 76 bytes leftover after parsing attributes in process `syz.9.6214'. [ 234.871930][T18275] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6221'. [ 235.636816][T18328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.661081][T18328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.386591][T18340] 8021q: adding VLAN 0 to HW filter on device team1 [ 236.517586][T18348] ref_ctr_offset mismatch. inode: 0x564 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 236.584686][T18359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18359 comm=syz.4.6256 [ 236.904465][T18398] ipvlan2: entered promiscuous mode [ 236.941588][T18398] bridge0: port 3(ipvlan2) entered blocking state [ 236.948158][T18398] bridge0: port 3(ipvlan2) entered disabled state [ 236.972640][T18398] ipvlan2: entered allmulticast mode [ 236.978063][T18398] bridge0: entered allmulticast mode [ 236.996326][T18398] ipvlan2: left allmulticast mode [ 237.001428][T18398] bridge0: left allmulticast mode [ 237.191928][T18414] lo speed is unknown, defaulting to 1000 [ 237.207531][T18417] syzkaller1: entered promiscuous mode [ 237.213094][T18417] syzkaller1: entered allmulticast mode [ 237.523065][T18433] netlink: 'syz.3.6283': attribute type 10 has an invalid length. [ 237.543910][T18433] team0: Port device dummy0 added [ 237.685749][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 237.685776][ T29] audit: type=1400 audit(2038.441:7040): avc: denied { append } for pid=18451 comm="syz.9.6290" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 237.743499][T18453] lo speed is unknown, defaulting to 1000 [ 237.791656][T18456] __nla_validate_parse: 5 callbacks suppressed [ 237.791675][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6292'. [ 237.807537][T18456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6292'. [ 237.863116][T18460] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6293'. [ 237.879686][T18464] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 237.880394][ T29] audit: type=1326 audit(2038.651:7041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 237.920090][T18465] loop9: detected capacity change from 0 to 512 [ 237.927747][ T29] audit: type=1326 audit(2038.651:7042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 237.950939][ T29] audit: type=1326 audit(2038.693:7043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 237.974031][ T29] audit: type=1326 audit(2038.693:7044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 237.997179][ T29] audit: type=1326 audit(2038.693:7045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 238.020188][ T29] audit: type=1326 audit(2038.693:7046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 238.043263][ T29] audit: type=1326 audit(2038.693:7047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 238.066544][ T29] audit: type=1326 audit(2038.693:7048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 238.089762][ T29] audit: type=1326 audit(2038.693:7049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18463 comm="syz.9.6296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f16bcc5e929 code=0x7ffc0000 [ 238.095539][T18471] netlink: 'syz.8.6298': attribute type 10 has an invalid length. [ 238.131387][T18465] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.6296: Parent and EA inode have the same ino 15 [ 238.184953][T18471] bond0: (slave dummy0): Releasing backup interface [ 238.205831][T18471] team0: Port device dummy0 added [ 238.234540][T18465] EXT4-fs error (device loop9): ext4_xattr_inode_iget:433: comm syz.9.6296: Parent and EA inode have the same ino 15 [ 238.263456][T18465] EXT4-fs (loop9): 1 orphan inode deleted [ 238.276988][T18465] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.297134][T18486] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6304'. [ 238.330015][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.436960][T18505] loop8: detected capacity change from 0 to 1024 [ 238.446725][T18505] EXT4-fs: Ignoring removed nobh option [ 238.473282][T18505] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.501825][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.655495][T18522] lo speed is unknown, defaulting to 1000 [ 238.833331][T18531] loop8: detected capacity change from 0 to 512 [ 238.846648][T18531] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.6319: Parent and EA inode have the same ino 15 [ 238.862386][T18531] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.6319: Parent and EA inode have the same ino 15 [ 238.875037][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'. [ 238.875057][T18533] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6318'. [ 238.893681][T18531] EXT4-fs (loop8): 1 orphan inode deleted [ 238.901259][T18531] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.935610][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.987666][T18543] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 238.994327][T18543] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 239.002762][T18543] vhci_hcd vhci_hcd.0: Device attached [ 239.012619][T18544] vhci_hcd: connection closed [ 239.012881][T16639] vhci_hcd: stop threads [ 239.022248][T16639] vhci_hcd: release socket [ 239.027410][T16639] vhci_hcd: disconnect device [ 239.111727][T18554] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 239.554088][T18562] lo speed is unknown, defaulting to 1000 [ 239.684115][T18576] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6336'. [ 239.720940][T18578] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 239.793250][T18586] loop9: detected capacity change from 0 to 1024 [ 239.800140][T18586] EXT4-fs: Ignoring removed orlov option [ 239.806642][T18586] EXT4-fs: Ignoring removed nomblk_io_submit option [ 239.825184][T18586] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.854476][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.906983][T18595] netlink: 'syz.9.6357': attribute type 39 has an invalid length. [ 239.929601][T18599] lo speed is unknown, defaulting to 1000 [ 240.222537][T18618] loop9: detected capacity change from 0 to 512 [ 240.231014][T18618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.255352][T18618] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.284079][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.388650][T18635] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 240.514633][T18662] loop8: detected capacity change from 0 to 512 [ 240.523876][T18662] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 240.540536][T18662] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.575338][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.639684][T18676] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6376'. [ 240.648769][T18676] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6376'. [ 240.677626][T18678] loop9: detected capacity change from 0 to 128 [ 240.690034][T18678] syz.9.6377: attempt to access beyond end of device [ 240.690034][T18678] loop9: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 240.705134][T18678] syz.9.6377: attempt to access beyond end of device [ 240.705134][T18678] loop9: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 240.724306][T18680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6378'. [ 240.773092][T18684] syzkaller0: entered promiscuous mode [ 240.779473][T18684] syzkaller0: entered allmulticast mode [ 241.064781][T18716] syzkaller0: entered promiscuous mode [ 241.070409][T18716] syzkaller0: entered allmulticast mode [ 241.114190][T18722] ref_ctr_offset mismatch. inode: 0x2bb offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 241.160292][T18728] lo speed is unknown, defaulting to 1000 [ 241.235791][T18732] pimreg: entered allmulticast mode [ 241.250400][T18732] pimreg: left allmulticast mode [ 241.326935][T18740] wireguard1: entered promiscuous mode [ 241.527247][T18753] loop8: detected capacity change from 0 to 164 [ 241.553515][T18753] syz.8.6409: attempt to access beyond end of device [ 241.553515][T18753] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 241.595438][T18753] syz.8.6409: attempt to access beyond end of device [ 241.595438][T18753] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 241.676143][T18761] block device autoloading is deprecated and will be removed. [ 241.979271][T18776] ref_ctr_offset mismatch. inode: 0x670 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 242.032412][T18788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.048524][T18788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.258832][T18815] ref_ctr_offset mismatch. inode: 0x1c68 offset: 0x0 ref_ctr_offset(old): 0x3070 ref_ctr_offset(new): 0x0 [ 242.479282][T18836] loop8: detected capacity change from 0 to 512 [ 242.487523][T18836] EXT4-fs (loop8): orphan cleanup on readonly fs [ 242.496906][T18836] EXT4-fs error (device loop8): ext4_orphan_get:1419: comm syz.8.6444: bad orphan inode 13 [ 242.507534][T18836] ext4_test_bit(bit=12, block=18) = 1 [ 242.513113][T18836] is_bad_inode(inode)=0 [ 242.517500][T18836] NEXT_ORPHAN(inode)=2130706432 [ 242.522496][T18836] max_ino=32 [ 242.525726][T18836] i_nlink=1 [ 242.530273][T18836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 242.548981][T18836] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 242.566926][T18836] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.6444: bg 0: block 248: padding at end of block bitmap is not set [ 242.581755][T18836] __quota_error: 285 callbacks suppressed [ 242.581773][T18836] Quota error (device loop8): write_blk: dquota write failed [ 242.595779][T18836] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 242.605737][T18836] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.6444: Failed to acquire dquot type 1 [ 242.617851][T18836] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 242.645728][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.735113][T18848] syzkaller0: entered promiscuous mode [ 242.740744][T18848] syzkaller0: entered allmulticast mode [ 242.821397][ T29] audit: type=1326 audit(2043.837:7335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 242.845316][ T29] audit: type=1326 audit(2043.837:7336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 242.868340][ T29] audit: type=1326 audit(2043.837:7337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 242.892275][ T29] audit: type=1326 audit(2043.837:7338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 242.915323][ T29] audit: type=1326 audit(2043.837:7339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 242.939310][ T29] audit: type=1326 audit(2043.868:7340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efe6188e963 code=0x7ffc0000 [ 242.962350][ T29] audit: type=1326 audit(2043.868:7341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efe6188e963 code=0x7ffc0000 [ 242.985907][ T29] audit: type=1326 audit(2043.868:7342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18853 comm="syz.8.6453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6188e929 code=0x7ffc0000 [ 243.209790][T18877] __nla_validate_parse: 4 callbacks suppressed [ 243.209809][T18877] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6464'. [ 243.318856][T18889] loop9: detected capacity change from 0 to 512 [ 243.336305][T18889] EXT4-fs (loop9): orphan cleanup on readonly fs [ 243.343846][T18889] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.6469: bad orphan inode 13 [ 243.376953][T18889] ext4_test_bit(bit=12, block=18) = 1 [ 243.382456][T18889] is_bad_inode(inode)=0 [ 243.386738][T18889] NEXT_ORPHAN(inode)=2130706432 [ 243.391689][T18889] max_ino=32 [ 243.394943][T18889] i_nlink=1 [ 243.399019][T18889] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 243.417084][T18889] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 243.445819][T18889] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.6469: bg 0: block 248: padding at end of block bitmap is not set [ 243.461298][T18889] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6469: Failed to acquire dquot type 1 [ 243.473475][T18889] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.504160][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.759598][T18925] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6483'. [ 243.858644][T18931] syzkaller0: entered promiscuous mode [ 243.864297][T18931] syzkaller0: entered allmulticast mode [ 244.314821][T18968] lo speed is unknown, defaulting to 1000 [ 244.325088][T18970] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6504'. [ 244.880618][T19007] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 244.896840][T19011] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6521'. [ 245.273504][T19048] bridge0: entered promiscuous mode [ 245.278971][T19048] macvlan2: entered promiscuous mode [ 245.286075][T19048] bridge0: port 3(macvlan2) entered blocking state [ 245.292762][T19048] bridge0: port 3(macvlan2) entered disabled state [ 245.299581][T19048] macvlan2: entered allmulticast mode [ 245.304277][T19050] loop9: detected capacity change from 0 to 512 [ 245.305014][T19048] bridge0: entered allmulticast mode [ 245.322002][T19048] macvlan2: left allmulticast mode [ 245.327336][T19048] bridge0: left allmulticast mode [ 245.336358][T19048] bridge0: left promiscuous mode [ 245.345636][T19050] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 245.353683][T19050] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 245.365190][T19050] System zones: 0-1, 15-15, 18-18, 34-34 [ 245.372028][T19050] EXT4-fs (loop9): orphan cleanup on readonly fs [ 245.395835][T19050] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 245.410479][T19050] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 245.424371][T19050] EXT4-fs (loop9): 1 truncate cleaned up [ 245.435521][T19050] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 245.522596][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.536282][T19056] vlan2: entered allmulticast mode [ 245.619233][T19069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6548'. [ 245.784594][T19089] lo speed is unknown, defaulting to 1000 [ 246.256728][T19118] loop9: detected capacity change from 0 to 2048 [ 246.273733][T19118] EXT4-fs: Ignoring removed bh option [ 246.312543][T19118] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.726270][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6581'. [ 246.738530][ T8778] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 246.754788][ T8778] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 246.767075][ T8778] EXT4-fs (loop9): This should not happen!! Data will be lost [ 246.767075][ T8778] [ 246.776875][ T8778] EXT4-fs (loop9): Total free blocks count 0 [ 246.783028][ T8778] EXT4-fs (loop9): Free/Dirty block details [ 246.789038][ T8778] EXT4-fs (loop9): free_blocks=2415919104 [ 246.794805][ T8778] EXT4-fs (loop9): dirty_blocks=8224 [ 246.800164][ T8778] EXT4-fs (loop9): Block reservation details [ 246.806200][ T8778] EXT4-fs (loop9): i_reserved_data_blocks=514 [ 246.825399][ T8778] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 246.962195][T19172] vcan0: entered allmulticast mode [ 246.990772][T19172] vcan0: left allmulticast mode [ 247.087702][T19193] netlink: 'syz.3.6601': attribute type 1 has an invalid length. [ 247.095659][T19193] netlink: 'syz.3.6601': attribute type 4 has an invalid length. [ 247.103478][T19193] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6601'. [ 247.114916][T19193] netlink: 'syz.3.6601': attribute type 1 has an invalid length. [ 247.122804][T19193] netlink: 'syz.3.6601': attribute type 4 has an invalid length. [ 247.130648][T19193] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6601'. [ 247.484129][T19219] netlink: 'syz.0.6614': attribute type 1 has an invalid length. [ 247.502912][T19223] all: renamed from bridge_slave_0 (while UP) [ 247.589325][T19236] lo speed is unknown, defaulting to 1000 [ 247.605393][T19240] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.6620'. [ 247.614690][T19240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6620'. [ 247.844147][T19266] smc: net device bond0 applied user defined pnetid SYZ0 [ 247.870406][T19266] smc: net device bond0 erased user defined pnetid SYZ0 [ 247.940418][T19279] bridge0: port 3(bond0) entered blocking state [ 247.946774][T19279] bridge0: port 3(bond0) entered disabled state [ 247.969577][T19279] bond0: entered allmulticast mode [ 247.974815][T19279] bond_slave_0: entered allmulticast mode [ 247.980920][T19279] bond_slave_1: entered allmulticast mode [ 248.023434][T19279] bond0: entered promiscuous mode [ 248.028694][T19279] bond_slave_0: entered promiscuous mode [ 248.034567][T19279] bond_slave_1: entered promiscuous mode [ 248.050355][T19279] bridge0: port 3(bond0) entered blocking state [ 248.056797][T19279] bridge0: port 3(bond0) entered forwarding state [ 248.063809][T19283] all: renamed from bridge_slave_0 [ 248.076790][T19281] bond0: left allmulticast mode [ 248.081971][T19281] bond_slave_0: left allmulticast mode [ 248.087631][T19281] bond_slave_1: left allmulticast mode [ 248.093289][T19281] bond0: left promiscuous mode [ 248.098104][T19281] bond_slave_0: left promiscuous mode [ 248.104293][T19281] bond_slave_1: left promiscuous mode [ 248.109930][T19281] bridge0: port 3(bond0) entered disabled state [ 248.151741][T19287] hub 6-0:1.0: USB hub found [ 248.156454][T19287] hub 6-0:1.0: 8 ports detected [ 248.403004][T19305] __nla_validate_parse: 2 callbacks suppressed [ 248.403065][T19305] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6652'. [ 248.553527][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 248.553543][ T29] audit: type=1400 audit(2049.852:7561): avc: denied { read write } for pid=19315 comm="syz.8.6657" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 248.582975][ T29] audit: type=1400 audit(2049.852:7562): avc: denied { open } for pid=19315 comm="syz.8.6657" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 248.937885][T19334] all: renamed from bridge_slave_0 [ 248.979959][T19338] netlink: 'syz.4.6668': attribute type 1 has an invalid length. [ 249.251771][T19352] lo speed is unknown, defaulting to 1000 [ 249.268839][ T29] audit: type=1326 audit(2050.608:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19355 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 249.292034][ T29] audit: type=1326 audit(2050.608:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19355 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 249.371495][ T29] audit: type=1400 audit(2050.650:7565): avc: denied { append } for pid=19357 comm="syz.9.6679" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 249.394096][ T29] audit: type=1326 audit(2050.660:7566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19355 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd4a8c4d290 code=0x7ffc0000 [ 249.417194][ T29] audit: type=1326 audit(2050.660:7567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19355 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 249.440201][ T29] audit: type=1326 audit(2050.660:7568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19355 comm="syz.4.6677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 249.572668][T19386] hub 6-0:1.0: USB hub found [ 249.580157][T19386] hub 6-0:1.0: 8 ports detected [ 249.811523][T19398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.820562][T19400] loop8: detected capacity change from 0 to 1024 [ 249.823636][T19398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.838720][T19398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.847758][T19398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.850793][T19400] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.937431][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.011788][T19417] loop8: detected capacity change from 0 to 1024 [ 250.018686][T19417] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 250.203904][T19431] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6703'. [ 250.213248][T19428] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6702'. [ 250.213277][T19428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6702'. [ 250.274717][T19435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6705'. [ 250.322865][T19441] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 250.370527][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6711'. [ 250.380209][T19445] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6711'. [ 250.509090][ T29] audit: type=1326 audit(2051.899:7569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19458 comm="syz.3.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 250.532177][ T29] audit: type=1326 audit(2051.899:7570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19458 comm="syz.3.6728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 250.569767][T19461] lo speed is unknown, defaulting to 1000 [ 250.653941][T19469] loop9: detected capacity change from 0 to 128 [ 250.821437][T19474] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 250.964243][T19495] bridge: RTM_NEWNEIGH with invalid ether address [ 250.995494][T19497] netlink: 'syz.0.6736': attribute type 4 has an invalid length. [ 251.015181][T19497] netlink: 'syz.0.6736': attribute type 4 has an invalid length. [ 251.065621][T19505] lo speed is unknown, defaulting to 1000 [ 251.214875][T19515] loop9: detected capacity change from 0 to 512 [ 251.259559][T19515] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.6741: Failed to acquire dquot type 1 [ 251.276766][T19515] EXT4-fs (loop9): 1 truncate cleaned up [ 251.288013][T19515] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.340413][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.475870][T19539] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6750'. [ 251.529455][T19543] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6751'. [ 251.657270][T19549] lo speed is unknown, defaulting to 1000 [ 251.856704][T19562] loop9: detected capacity change from 0 to 512 [ 251.882221][T19562] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 251.923851][T19562] EXT4-fs (loop9): 1 orphan inode deleted [ 251.929698][T19562] EXT4-fs (loop9): 1 truncate cleaned up [ 251.946454][T19562] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.067902][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.161577][T19584] netlink: 'syz.9.6778': attribute type 4 has an invalid length. [ 252.210363][T19587] netlink: 'syz.9.6778': attribute type 4 has an invalid length. [ 252.461454][T19617] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6785'. [ 252.526744][T19620] lo speed is unknown, defaulting to 1000 [ 253.180084][T19686] __nla_validate_parse: 1 callbacks suppressed [ 253.180104][T19686] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.6789'. [ 253.195613][T19686] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6789'. [ 253.566659][T19719] loop8: detected capacity change from 0 to 1024 [ 253.589225][T19719] ext4: Unknown parameter 'uid<00000000000000000000' [ 253.993931][T19745] loop8: detected capacity change from 0 to 512 [ 254.021757][T19745] EXT4-fs: Ignoring removed mblk_io_submit option [ 254.045504][T19745] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 254.077906][T19745] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 254.116159][T19745] System zones: 1-12 [ 254.154053][T19745] EXT4-fs (loop8): 1 truncate cleaned up [ 254.183860][T19745] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.360597][T19773] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6814'. [ 254.405999][T19773] hsr_slave_0: left promiscuous mode [ 254.433009][T19773] hsr_slave_1: left promiscuous mode [ 254.446667][ T6527] page_pool_release_retry() stalled pool shutdown: id 120, 1 inflight 60 sec [ 254.606869][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.672818][T19801] netlink: 96 bytes leftover after parsing attributes in process `syz.9.6822'. [ 254.761408][T19814] loop8: detected capacity change from 0 to 512 [ 254.786053][T19814] EXT4-fs (loop8): can't mount with data_err=abort, fs mounted w/o journal [ 254.821861][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 254.821967][ T29] audit: type=1400 audit(2056.434:7677): avc: denied { getopt } for pid=19813 comm="syz.8.6827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 254.888263][ T29] audit: type=1400 audit(2056.466:7678): avc: denied { getopt } for pid=19813 comm="syz.8.6827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 255.051187][T19852] lo speed is unknown, defaulting to 1000 [ 255.257970][ T29] audit: type=1326 audit(2056.896:7679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.302600][ T29] audit: type=1326 audit(2056.896:7680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.325924][ T29] audit: type=1326 audit(2056.896:7681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.349013][ T29] audit: type=1326 audit(2056.896:7682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.378235][ T29] audit: type=1326 audit(2056.896:7683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.401346][ T29] audit: type=1326 audit(2056.896:7684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.424532][ T29] audit: type=1326 audit(2056.896:7685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.447598][ T29] audit: type=1326 audit(2056.896:7686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19873 comm="syz.4.6846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 255.638701][T19900] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6858'. [ 255.647788][T19900] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6858'. [ 255.664287][T19900] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6858'. [ 255.677319][T19900] netlink: 108 bytes leftover after parsing attributes in process `syz.8.6858'. [ 255.686503][T19900] netlink: 84 bytes leftover after parsing attributes in process `syz.8.6858'. [ 255.727904][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6860'. [ 256.473100][T20025] loop8: detected capacity change from 0 to 1024 [ 256.482609][T20021] lo speed is unknown, defaulting to 1000 [ 256.488908][T20025] EXT4-fs: Ignoring removed nobh option [ 256.494763][T20025] EXT4-fs: Ignoring removed bh option [ 256.515237][T20025] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.628490][T20025] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.6897: Allocating blocks 497-513 which overlap fs metadata [ 256.848570][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.904623][T20080] netlink: 'syz.8.6901': attribute type 8 has an invalid length. [ 257.020204][T20091] sit0: entered allmulticast mode [ 257.354943][T20118] netlink: 'syz.0.6921': attribute type 10 has an invalid length. [ 257.412474][T20118] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 257.492397][T20131] sch_fq: defrate 4294967295 ignored. [ 257.646765][T20147] syz_tun: entered promiscuous mode [ 257.662657][T20147] syz_tun: left promiscuous mode [ 258.140255][T20194] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 258.140640][T20185] IPVS: stopping master sync thread 20194 ... [ 258.767799][T20235] loop8: detected capacity change from 0 to 1024 [ 258.809891][T20235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.845440][T20235] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.6970: Allocating blocks 497-513 which overlap fs metadata [ 258.867948][T20246] __nla_validate_parse: 7 callbacks suppressed [ 258.867964][T20246] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6974'. [ 258.891869][T20234] EXT4-fs (loop8): pa ffff888106ea07e0: logic 128, phys. 273, len 15 [ 258.900273][T20234] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 258.962622][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.103720][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6982'. [ 259.408666][T20304] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7002'. [ 259.601397][ T29] kauditd_printk_skb: 442 callbacks suppressed [ 259.601470][ T29] audit: type=1400 audit(2061.452:8129): avc: denied { read } for pid=20332 comm="syz.8.7016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 259.637233][T20334] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7016'. [ 259.703670][ T6527] hid-generic 0003:0004:0002.000A: unknown main item tag 0x0 [ 259.711138][ T6527] hid-generic 0003:0004:0002.000A: unknown main item tag 0x0 [ 259.719449][ T6527] hid-generic 0003:0004:0002.000A: unknown main item tag 0x0 [ 259.728364][ T29] audit: type=1326 audit(2061.505:8130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.752214][ T29] audit: type=1326 audit(2061.505:8131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.775369][ T29] audit: type=1326 audit(2061.505:8132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.799362][ T29] audit: type=1326 audit(2061.515:8133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.822555][ T29] audit: type=1326 audit(2061.515:8134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.846406][ T29] audit: type=1326 audit(2061.515:8135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.869759][ T29] audit: type=1326 audit(2061.515:8136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.892992][ T29] audit: type=1326 audit(2061.515:8137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.916736][ T29] audit: type=1326 audit(2061.547:8138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20331 comm="syz.3.7015" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f821be8e929 code=0x7ffc0000 [ 259.940889][ T6527] hid-generic 0003:0004:0002.000A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 260.006518][T20344] loop9: detected capacity change from 0 to 512 [ 260.032339][T20344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.072400][T20344] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.110883][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.161698][T20358] loop9: detected capacity change from 0 to 512 [ 260.168558][T20358] EXT4-fs: Ignoring removed mblk_io_submit option [ 260.176862][T20358] EXT4-fs error (device loop9): ext4_orphan_get:1393: comm syz.9.7026: inode #13: comm syz.9.7026: iget: illegal inode # [ 260.192222][T20358] EXT4-fs (loop9): Remounting filesystem read-only [ 260.211004][T20358] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.726593][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.195705][T20408] loop9: detected capacity change from 0 to 2048 [ 261.219556][T20408] EXT4-fs (loop9): failed to initialize system zone (-117) [ 261.229292][T20408] EXT4-fs (loop9): mount failed [ 261.744020][T20458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7067'. [ 261.757182][T20458] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.766384][T20458] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.774938][T20458] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.783269][T20458] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.796900][T20458] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.805513][T20458] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.813974][T20458] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.823091][T20458] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 262.337079][T20488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7080'. [ 262.383652][T20490] ref_ctr_offset mismatch. inode: 0x916 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 263.132616][T20555] loop8: detected capacity change from 0 to 512 [ 263.147154][T20555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 263.159027][T20559] netlink: 'syz.4.7111': attribute type 8 has an invalid length. [ 263.176130][T20555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 263.188871][T20555] System zones: 0-2, 18-18, 34-34 [ 263.199517][T20555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.261043][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.296177][T20574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7116'. [ 263.577402][T20594] netlink: 596 bytes leftover after parsing attributes in process `syz.8.7125'. [ 263.753456][T20607] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7133'. [ 263.841376][T20613] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7134'. [ 263.858851][T20613] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.867637][T20613] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.877104][T20613] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.885926][T20613] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.933852][T20613] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.942909][T20613] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.951885][T20613] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.961042][T20613] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.240856][T20647] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7149'. [ 264.273680][T20649] lo speed is unknown, defaulting to 1000 [ 264.340698][T20659] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7154'. [ 264.499009][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 264.499027][ T29] audit: type=1400 audit(2066.596:8257): avc: denied { read } for pid=20670 comm="syz.4.7167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 264.588304][T20682] netlink: 'syz.8.7162': attribute type 10 has an invalid length. [ 264.598553][ T29] audit: type=1326 audit(2066.701:8258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.0.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 264.599609][T20682] team0: Port device dummy0 removed [ 264.622516][ T29] audit: type=1326 audit(2066.701:8259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.0.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 264.633389][T20682] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 264.659009][ T29] audit: type=1326 audit(2066.764:8260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.0.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 264.692634][ T29] audit: type=1326 audit(2066.764:8261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.0.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 264.715798][ T29] audit: type=1326 audit(2066.764:8262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20683 comm="syz.0.7163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb820cfe929 code=0x7ffc0000 [ 264.764225][ T29] audit: type=1326 audit(2066.869:8263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 264.787372][ T29] audit: type=1326 audit(2066.869:8264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 264.810816][ T29] audit: type=1326 audit(2066.869:8265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 264.833919][ T29] audit: type=1326 audit(2066.869:8266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20688 comm="syz.4.7164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4a8c4e929 code=0x7ffc0000 [ 265.005120][T20710] loop9: detected capacity change from 0 to 512 [ 265.019022][T20710] EXT4-fs: Ignoring removed nomblk_io_submit option [ 265.065013][T20710] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.108074][T20719] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7179'. [ 265.123957][T20721] netlink: 'syz.3.7181': attribute type 10 has an invalid length. [ 265.137722][T20721] team0: Port device dummy0 removed [ 265.159875][T20721] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 265.173938][T20726] xt_connbytes: Forcing CT accounting to be enabled [ 265.180800][T20726] Cannot find set identified by id 0 to match [ 265.258079][T20731] lo speed is unknown, defaulting to 1000 [ 265.318546][T15002] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.506256][T20756] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.564976][T20756] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.585949][T20761] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7197'. [ 265.613973][T20756] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.668934][T20756] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.741248][T20756] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.750143][T20771] lo speed is unknown, defaulting to 1000 [ 265.760310][T20756] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.782233][T20756] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.798312][T20756] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.831014][T20778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7204'. [ 265.840033][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7204'. [ 265.853875][T20778] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.862293][T20778] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.870565][T20778] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.879530][T20778] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 266.130319][T20810] netlink: 'syz.4.7220': attribute type 12 has an invalid length. [ 266.146817][T20812] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7221'. [ 266.177387][T20812] team1: entered promiscuous mode [ 266.185369][T20812] team1: entered allmulticast mode [ 266.279026][T20821] loop8: detected capacity change from 0 to 1024 [ 266.286586][T20821] EXT4-fs: inline encryption not supported [ 266.362178][T20821] EXT4-fs: Ignoring removed bh option [ 266.429475][T20821] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.560015][T13258] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.645514][T20837] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7234'. [ 267.106256][T20870] dummy0: entered promiscuous mode [ 267.125086][T20870] dummy0: left promiscuous mode [ 267.909141][ T1035] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 267.916644][ T1035] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 267.924391][ T1035] hid-generic 0003:0004:0000.000B: unknown main item tag 0x0 [ 267.932291][ T1035] hid-generic 0003:0004:0000.000B: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 268.044874][T20949] loop8: detected capacity change from 0 to 2048 [ 268.069662][T20949] EXT4-fs (loop8): failed to initialize system zone (-117) [ 268.077588][T20949] EXT4-fs (loop8): mount failed [ 268.108578][T20932] ================================================================== [ 268.116900][T20932] BUG: KCSAN: data-race in do_select / pollwake [ 268.123171][T20932] [ 268.125509][T20932] write to 0xffffc9000300f9e0 of 4 bytes by interrupt on cpu 0: [ 268.133151][T20932] pollwake+0xb6/0x100 [ 268.137235][T20932] __wake_up+0x66/0xb0 [ 268.141324][T20932] bpf_ringbuf_notify+0x22/0x30 [ 268.146210][T20932] irq_work_run+0xdf/0x2d0 [ 268.150682][T20932] __sysvec_irq_work+0x22/0x170 [ 268.155581][T20932] sysvec_irq_work+0x2f/0x80 [ 268.160208][T20932] asm_sysvec_irq_work+0x1a/0x20 [ 268.165171][T20932] native_apic_msr_write+0x3d/0x60 [ 268.170310][T20932] x2apic_send_IPI_self+0x10/0x20 [ 268.175378][T20932] arch_irq_work_raise+0x46/0x50 [ 268.180360][T20932] __irq_work_queue_local+0x10f/0x2c0 [ 268.185754][T20932] irq_work_queue+0x70/0x100 [ 268.190369][T20932] bpf_ringbuf_discard+0xd3/0xf0 [ 268.195347][T20932] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 268.200838][T20932] bpf_trace_run3+0x10c/0x1d0 [ 268.205538][T20932] kmem_cache_free+0x257/0x300 [ 268.210322][T20932] skb_free_head+0x87/0x150 [ 268.214914][T20932] skb_release_data+0x33b/0x370 [ 268.219791][T20932] __kfree_skb+0x44/0x150 [ 268.224144][T20932] tcp_rcv_established+0x953/0xef0 [ 268.229284][T20932] tcp_v4_do_rcv+0x672/0x740 [ 268.233907][T20932] tcp_v4_rcv+0x1bd7/0x1f60 [ 268.238436][T20932] ip_protocol_deliver_rcu+0x397/0x780 [ 268.243914][T20932] ip_local_deliver_finish+0x184/0x220 [ 268.249388][T20932] ip_local_deliver+0xe8/0x1c0 [ 268.254162][T20932] ip_sublist_rcv+0x56b/0x650 [ 268.258890][T20932] ip_list_rcv+0x261/0x290 [ 268.263336][T20932] __netif_receive_skb_list_core+0x4dc/0x500 [ 268.269337][T20932] netif_receive_skb_list_internal+0x487/0x600 [ 268.275511][T20932] napi_complete_done+0x1a3/0x410 [ 268.280555][T20932] virtnet_poll+0x189f/0x1d10 [ 268.285350][T20932] __napi_poll+0x63/0x3a0 [ 268.289696][T20932] net_rx_action+0x391/0x830 [ 268.294329][T20932] handle_softirqs+0xb7/0x290 [ 268.299018][T20932] __irq_exit_rcu+0x3a/0xc0 [ 268.303553][T20932] common_interrupt+0x83/0x90 [ 268.308253][T20932] asm_common_interrupt+0x26/0x40 [ 268.313293][T20932] do_syscall_64+0x9c/0x200 [ 268.317811][T20932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.323718][T20932] [ 268.326055][T20932] read to 0xffffc9000300f9e0 of 4 bytes by task 20932 on cpu 1: [ 268.333694][T20932] do_select+0xe48/0xf50 [ 268.337951][T20932] core_sys_select+0x3d7/0x6e0 [ 268.342727][T20932] __se_sys_pselect6+0x216/0x280 [ 268.347716][T20932] __x64_sys_pselect6+0x78/0x90 [ 268.352581][T20932] x64_sys_call+0x1caa/0x2fb0 [ 268.357277][T20932] do_syscall_64+0xd2/0x200 [ 268.361795][T20932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.367701][T20932] [ 268.370049][T20932] value changed: 0x00000000 -> 0x00000001 [ 268.375776][T20932] [ 268.378105][T20932] Reported by Kernel Concurrency Sanitizer on: [ 268.384273][T20932] CPU: 1 UID: 0 PID: 20932 Comm: syz.3.7270 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 268.396807][T20932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 268.406979][T20932] ==================================================================