last executing test programs: 7m49.762141417s ago: executing program 32 (id=2697): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x1) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0/..\x00', &(0x7f0000000080)={0x200000, 0x0, 0x11}, 0x18) 7m48.755206623s ago: executing program 33 (id=2740): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000002e00), &(0x7f0000000000), 0x8, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0x66, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd48, 0x0, 0x0, 0x0, 0x1000000, 0x8, 0x0, 0x0}}, 0x10) 7m15.84625853s ago: executing program 34 (id=3801): prctl$PR_SET_NAME(0xf, &(0x7f0000000980)='\xff\x00\x00\x00\x00\x00\x000`\x14\x99\x06\xc0\x7fs\x00\t\x14\x17\xc3\xf5\xc9\v\x85\xe7\x00\x00\x18\x88\x06\x94\x98\xa9\xe7\x1c\x8a\x89\xdc\xcc\xf7L\xbd%\xc3!\x0e\x91S\xb2~8\"\xe2\xed\xbf\x12\x1a\\6p\'p\xef\x1a\n\x99\x12\xe8\'\x1c\x97M\xa5N\xd9\xbeV&\x1c2K?\x95\xd9\"\xbe\x050+\xca\xea\'\xe9)\xfe\xeb\x9c\xb5\xa0F`\xe4D\x10F\x831\xec\\v\xf0\xab_M\b\x03\xc3\n\x89\x01E`\xd35Q2\xecZz\xdc\x065p\x1c\x8f\x9b\x99IGXO\x00\x00\v\xed\xb0\xc5\xd4\xc7,\x1a\xb3}CMOO\x8a\xa8kh\x7f\x05c\xfc\xebb\xc8\xa2\xa9\xbf\xb3\x9b\xafE\xbd\xc5\xdc\xde\xbe_') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000005e00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x30}}], 0x1, 0x0) 7m13.176466396s ago: executing program 35 (id=4385): unshare(0x24020400) socket$netlink(0x10, 0x3, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 7m7.342646991s ago: executing program 36 (id=4593): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x5, 0x6, 0x8, 0xad, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x48) 6m29.835927316s ago: executing program 37 (id=6470): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, 0x0, 0x0) 6m3.097570946s ago: executing program 38 (id=7704): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x181, 0xfffffffb}) syz_io_uring_setup(0x2c0d, &(0x7f0000000400)={0x0, 0xc890, 0x4000, 0x4}, 0x0, 0x0) 6m2.28785742s ago: executing program 39 (id=7727): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 5m16.969142452s ago: executing program 40 (id=8909): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x110, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xfc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x5, 0x0, 0x3, 0x1000, {0x0, 0x2, 0x0, 0x0, 0x5}, {0x2, 0x0, 0xff, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffff7}}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x44, 0x3, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3ff, 0x9, 0x2, 0x7, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x110}}, 0x0) 4m48.547408892s ago: executing program 41 (id=9622): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x800700, &(0x7f0000000580)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x3}}, {@norecovery}, {@noinit_itable}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@minixdf}, {@usrjquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@errors_continue}, {@dioread_lock}, {@noblock_validity}, {@noquota}]}, 0x3, 0x465, &(0x7f0000000f00)="$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") chdir(&(0x7f0000000400)='./file0\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 4m39.546221256s ago: executing program 42 (id=9933): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x0, 0x3938700}, 0xfffffffffffffffe) 4m37.333028809s ago: executing program 43 (id=9986): r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000080)=0x1, 0x4) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000200)={0x1d, r1}, 0x10) close(0x3) 4m31.904354532s ago: executing program 44 (id=10469): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) 3m56.719661362s ago: executing program 8 (id=12036): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}, {0x0, 0x0, 0x81}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) 3m56.698039122s ago: executing program 8 (id=12039): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m56.664664333s ago: executing program 8 (id=12040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000140)) 3m56.628192493s ago: executing program 8 (id=12043): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x378, 0x0, 0x0, 0x7, 0x5, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000ffff0000000200", "b7326736181c20820700000000000000000000000000f0ffffffefbf4e4300", [0x4, 0x3]}) write$P9_RREAD(r0, &(0x7f00000006c0)={0xb, 0x75, 0x2}, 0xb) 3m56.050883227s ago: executing program 8 (id=12060): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xffff}, 0x18) read(r1, &(0x7f0000000040)=""/190, 0xbe) 3m55.867531368s ago: executing program 8 (id=12064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) syz_usbip_server_init(0x4) 3m55.847201008s ago: executing program 45 (id=12064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x9}, 0x18) syz_usbip_server_init(0x4) 38.37574731s ago: executing program 2 (id=20782): r0 = syz_io_uring_setup(0x2ad6, &(0x7f00000006c0)={0x0, 0x7758, 0x1000, 0x8004, 0x1bf}, &(0x7f0000000440)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x2001064, 0x1000, 0x7, 0x40227}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0xf) syz_io_uring_submit(r3, r2, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 38.283346981s ago: executing program 2 (id=20783): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f626174616476000400038018000380040001000d000500c47a61125e05081a94000000a0000380"], 0xe8}}, 0x0) 38.268706571s ago: executing program 2 (id=20784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x54, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0xe6a7}, "085da0"}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 38.156057132s ago: executing program 2 (id=20785): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') 38.155517521s ago: executing program 2 (id=20788): r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50) write$binfmt_script(r0, &(0x7f0000000340)={'#! ', './file0'}, 0xb) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 37.905897703s ago: executing program 2 (id=20801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) close(r1) 37.905766033s ago: executing program 46 (id=20801): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x143142, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) close(r1) 37.542700795s ago: executing program 3 (id=20815): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000280), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000014000200626f6e643000000000000000000005000900010073"], 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r2, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) 37.355449356s ago: executing program 3 (id=20816): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000300)=ANY=[]) 37.274736977s ago: executing program 3 (id=20817): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) close_range(r0, 0xffffffffffffffff, 0x0) 37.229240667s ago: executing program 3 (id=20818): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) 37.228372947s ago: executing program 3 (id=20819): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r2) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 37.056953128s ago: executing program 3 (id=20823): unshare(0x20060400) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 37.011669808s ago: executing program 47 (id=20823): unshare(0x20060400) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000100000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) 20.776873125s ago: executing program 5 (id=21382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000980)='syzkaller\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="1307", 0x2}], 0x1}, 0x4051) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) recvmsg$unix(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x14006) 19.93363866s ago: executing program 4 (id=21389): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 19.893699861s ago: executing program 4 (id=21390): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f00000002c0)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x13, 0xffffffffffffffff, 0xe581b000) syz_clone(0x8009080, 0x0, 0x0, 0x0, 0x0, 0x0) 19.685483742s ago: executing program 5 (id=21395): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) personality(0x400000b) 19.542141123s ago: executing program 5 (id=21397): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000080), 0x1, 0x78c, &(0x7f0000001300)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) 19.284027334s ago: executing program 5 (id=21400): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) syz_clone(0x24011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 19.130411615s ago: executing program 5 (id=21402): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x7ffff000) 19.129997895s ago: executing program 4 (id=21405): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) fcntl$setpipe(r1, 0x407, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, 0x1, 0x9, 0x101}, 0x14}}, 0x0) 18.919788077s ago: executing program 5 (id=21414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 18.919618837s ago: executing program 48 (id=21414): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(r0) 18.917619327s ago: executing program 4 (id=21417): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0xa95058, 0x0) syz_clone(0x24011, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x181097, 0x0) 18.728764468s ago: executing program 4 (id=21425): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c250000000000202c207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 18.497860169s ago: executing program 4 (id=21436): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80ad}, 0x1c) 18.479176009s ago: executing program 49 (id=21436): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1}]}, 0x10) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80ad}, 0x1c) 1.277218882s ago: executing program 9 (id=22045): bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) close(r1) 1.276800752s ago: executing program 7 (id=22046): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x5dd93000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r0, 0x2000, 0x0) 1.255629742s ago: executing program 9 (id=22047): timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x70080, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.219786733s ago: executing program 9 (id=22048): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x303}, "cee14e125823a3de", "fa04dab1397bfde90fc1b063be81e685aa9a19fd82cbebe583535c68b8ff62d7", "1e45f72a", "4550d32b91922a75"}, 0x38) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.204995613s ago: executing program 7 (id=22050): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0900000004000000040000000c"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x100) syz_usb_disconnect(r2) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40095505, 0x0) 491.963067ms ago: executing program 0 (id=22077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc005}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)=@newtfilter={0x1cc, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, r3, {0x6, 0xf}, {}, {0x4, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x1a0, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xffee}}, @TCA_FW_INDEV={0x14, 0x3, 'bond_slave_1\x00'}, @TCA_FW_ACT={0x154, 0x4, [@m_skbedit={0x150, 0x12, 0x0, 0x0, {{0xc}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x5, 0x6, 0x10000000, 0x1000, 0x100000}}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x3}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x10}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x3, 0xb}}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x4, 0x5, 0x0, 0x80000000, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xffffff7f}]}, {0xbb, 0x6, "ae208a2aebced6c4ba69286f08e8afd43f8977d890bf33b03523c2043571ef268d0f20c26eea6eb3b67033764411d462afbfc7178b5d498984f64c6a633b00a8f3a73917fb410ed0a4e1c80f9c214d1308c2bc23e00502301345c73b3236f5609128310d183f9435ba1b04540fc7487ee659cbff100869842ea273411295a961c0b2fb4ca16a9498618dcae37cdcde73640b125d7b5dc4704c92b000b216ace9c999e9c35bc467e7a5e6f72be8ef352c2da39b96e90330"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_FW_INDEV={0x5, 0x3, 'team_slave_1\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0xa}}, @TCA_FW_MASK={0x8, 0x5, 0x1ff}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0xfff2}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x24000004}, 0x880) 461.216207ms ago: executing program 1 (id=22078): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local, 0x9}}, 0x0, 0x0, 0x1c, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 434.436077ms ago: executing program 1 (id=22081): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r3, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private2}]}, 0x38}}, 0x4000001) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)={0x38, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4818}, 0x20000084) 383.240578ms ago: executing program 9 (id=22082): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000540), 0x1, 0x783, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e}, 0x20) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) creat(&(0x7f00000003c0)='./file1\x00', 0x11) 383.124428ms ago: executing program 0 (id=22084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x40404) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 383.048618ms ago: executing program 1 (id=22086): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x609e495c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000010000304000300"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e00000000180002800c0002001e0000001d00000006000100fe0f000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x58}}, 0x8000) 382.921678ms ago: executing program 6 (id=22087): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0xe01, 0x70bd2d, 0x25dfdbfc}, 0x1c}}, 0x24048800) 382.538258ms ago: executing program 7 (id=22088): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000680)={'#! ', '.'}, 0x5) perf_event_open(&(0x7f0000000a40)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x2, 0x0, 0x8000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 343.950568ms ago: executing program 6 (id=22089): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) unshare(0x8000000) semop(0x0, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}], 0x1) unshare(0x2c040000) 327.685318ms ago: executing program 0 (id=22090): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x101, 0x10000, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000080)='./bus\x00', 0x0) fsetxattr$trusted_overlay_nlink(r1, &(0x7f00000018c0), 0x0, 0x0, 0x1) 262.776489ms ago: executing program 1 (id=22091): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000014c0)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 262.628989ms ago: executing program 6 (id=22092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x1070bd24, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0x4}, {0x1, 0xffff}}}, 0x24}}, 0x4) 262.055769ms ago: executing program 7 (id=22093): r0 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r0, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 257.965888ms ago: executing program 9 (id=22094): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) 223.753839ms ago: executing program 9 (id=22095): syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x22, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x8000103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r1, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 205.239169ms ago: executing program 7 (id=22096): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2b}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 191.634679ms ago: executing program 0 (id=22097): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x8000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r2}) 161.735919ms ago: executing program 0 (id=22098): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x8102, 0x1) sendfile(r2, r2, 0x0, 0x6) 161.581369ms ago: executing program 0 (id=22099): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 151.649489ms ago: executing program 6 (id=22100): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffff6, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 121.573299ms ago: executing program 1 (id=22101): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x3d9f, &(0x7f0000000000)={0x0, 0xbd60, 0x8, 0x80007, 0x2bb}, &(0x7f00000003c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, 0x6000}) io_uring_enter(r2, 0x1c39, 0x106a, 0x22, 0x0, 0x0) 89.60456ms ago: executing program 6 (id=22102): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 86.0152ms ago: executing program 1 (id=22103): r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='rpcb_getport\x00'}, 0x18) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x200000, 0x0}) 67.924ms ago: executing program 6 (id=22104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4, 0x0, 0x2, 0x0, {0xa, 0x4e21, 0x8000, @empty}}}, 0x32) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 0s ago: executing program 7 (id=22105): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) kernel console output (not intermixed with test programs): pe=1400 audit(521.452:24487): avc: denied { unmount } for pid=27900 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 507.519607][ T29] audit: type=1326 audit(521.484:24488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.19425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 507.542806][ T29] audit: type=1326 audit(521.484:24489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.19425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 507.573034][ T29] audit: type=1326 audit(521.536:24490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.19425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 507.596212][ T29] audit: type=1326 audit(521.536:24491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.19425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 507.619318][ T29] audit: type=1326 audit(521.536:24492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.19425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 507.624112][T15769] __nla_validate_parse: 12 callbacks suppressed [ 507.624127][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19428'. [ 507.721900][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19431'. [ 507.744060][T15785] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 507.764963][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19431'. [ 507.796523][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19431'. [ 507.798280][T15791] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19437'. [ 507.808096][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19431'. [ 507.830284][T15781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19431'. [ 507.844127][T15794] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15794 comm=syz.9.19438 [ 507.965224][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19450'. [ 507.983462][T15814] loop3: detected capacity change from 0 to 512 [ 507.990961][T15819] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19451'. [ 508.003712][T15821] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 508.010363][T15814] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 508.038449][T15814] EXT4-fs (loop3): 1 truncate cleaned up [ 508.046347][T15814] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 508.099957][T15830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19456'. [ 508.222029][ T1670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 508.286055][T15851] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.032179][T15891] vhci_hcd: invalid port number 255 [ 509.037433][T15891] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 509.089076][T15894] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 509.179329][T15916] loop2: detected capacity change from 0 to 1024 [ 509.196096][T15916] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 509.207051][T15916] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 509.241874][T15924] vlan2: entered allmulticast mode [ 509.253856][T15916] JBD2: no valid journal superblock found [ 509.259634][T15916] EXT4-fs (loop2): Could not load journal inode [ 509.401690][T15944] loop3: detected capacity change from 0 to 512 [ 509.427089][T15944] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.19508: inode has both inline data and extents flags [ 509.456653][T15944] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.19508: couldn't read orphan inode 15 (err -117) [ 509.484151][T15944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.756482][ T1670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 509.999882][T16041] netlink: 'syz.3.19530': attribute type 13 has an invalid length. [ 510.044845][ T4185] lo speed is unknown, defaulting to 1000 [ 510.050695][ T4185] syz2: Port: 1 Link DOWN [ 510.055246][ T57] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.065033][ T57] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.079965][ T4185] lo speed is unknown, defaulting to 1000 [ 510.089491][ T57] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.107325][ T57] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 510.230164][T16086] loop3: detected capacity change from 0 to 1024 [ 510.238032][T16086] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 510.249788][T16086] JBD2: no valid journal superblock found [ 510.255628][T16086] EXT4-fs (loop3): Could not load journal inode [ 510.354467][T16119] netem: incorrect gi model size [ 510.359519][T16119] netem: change failed [ 510.582590][T16165] loop6: detected capacity change from 0 to 512 [ 510.599041][T16165] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 510.622026][T16165] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.19559: bg 0: block 104: invalid block bitmap [ 510.658575][T16165] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 510.683729][T16165] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.19559: invalid indirect mapped block 1 (level 1) [ 510.705940][T16165] EXT4-fs (loop6): 1 truncate cleaned up [ 510.727921][T16181] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 510.739127][T16165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 510.803942][T27900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.868302][T16202] netlink: 'syz.1.19562': attribute type 1 has an invalid length. [ 510.894536][T16204] loop3: detected capacity change from 0 to 512 [ 510.921435][T16204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 510.957373][ T1670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.128383][T16224] lo speed is unknown, defaulting to 1000 [ 511.439164][T16306] vlan1: entered allmulticast mode [ 511.444498][T16306] hsr0: entered allmulticast mode [ 511.447345][T16308] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 511.449521][T16306] hsr_slave_0: entered allmulticast mode [ 511.449552][T16306] hsr_slave_1: entered allmulticast mode [ 511.467291][T16308] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.475033][T16308] vhci_hcd vhci_hcd.0: Device attached [ 511.486833][T16309] vhci_hcd: connection closed [ 511.487044][ T5623] vhci_hcd: stop threads [ 511.496054][ T5623] vhci_hcd: release socket [ 511.500459][ T5623] vhci_hcd: disconnect device [ 511.523772][T16315] pimreg: entered allmulticast mode [ 511.536422][T16315] pimreg: left allmulticast mode [ 511.657489][T16336] vhci_hcd: invalid port number 255 [ 511.662721][T16336] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 511.745505][T16332] lo speed is unknown, defaulting to 1000 [ 511.840219][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 511.840234][ T29] audit: type=1326 audit(526.019:24643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 511.894195][ T29] audit: type=1326 audit(526.019:24644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 511.917339][ T29] audit: type=1326 audit(526.040:24645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 511.940489][ T29] audit: type=1326 audit(526.050:24646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 511.963533][ T29] audit: type=1326 audit(526.050:24647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 511.986599][ T29] audit: type=1326 audit(526.050:24648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 512.009737][ T29] audit: type=1326 audit(526.050:24649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 512.032787][ T29] audit: type=1326 audit(526.050:24650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16369 comm="syz.9.19600" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 512.059556][T16380] netlink: 'syz.2.19601': attribute type 1 has an invalid length. [ 512.076312][T16409] netlink: 'syz.9.19603': attribute type 12 has an invalid length. [ 512.109051][ T29] audit: type=1400 audit(526.292:24651): avc: denied { relabelto } for pid=16410 comm="syz.2.19604" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 512.134774][ T29] audit: type=1400 audit(526.292:24652): avc: denied { associate } for pid=16410 comm="syz.2.19604" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 512.225747][T16428] netlink: 'syz.2.19606': attribute type 3 has an invalid length. [ 512.308124][T16449] program syz.2.19613 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 512.367604][T16459] vlan1: entered allmulticast mode [ 512.432185][T16478] __nla_validate_parse: 14 callbacks suppressed [ 512.432208][T16478] netlink: 256 bytes leftover after parsing attributes in process `+}[@'. [ 512.850134][T16579] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 513.121701][T16607] lo speed is unknown, defaulting to 1000 [ 513.229831][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19664'. [ 513.246373][ T57] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.254894][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19664'. [ 513.263993][ T57] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.286215][ T57] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.321890][ T57] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.332314][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19668'. [ 513.359649][T16657] netlink: 312 bytes leftover after parsing attributes in process `syz.3.19668'. [ 513.368844][T16657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19668'. [ 513.385242][T16669] loop1: detected capacity change from 0 to 128 [ 513.764184][ T5615] bio_check_eod: 32 callbacks suppressed [ 513.764197][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.764197][ T5615] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 513.804231][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.804231][ T5615] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 513.831076][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.831076][ T5615] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 513.871696][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.871696][ T5615] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 513.902678][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.902678][ T5615] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 513.930095][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.930095][ T5615] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 513.957034][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.957034][ T5615] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 513.998269][ T5615] kworker/u8:54: attempt to access beyond end of device [ 513.998269][ T5615] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 514.027685][ T5615] kworker/u8:54: attempt to access beyond end of device [ 514.027685][ T5615] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 514.041684][ T5615] kworker/u8:54: attempt to access beyond end of device [ 514.041684][ T5615] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 514.089124][T16746] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19695'. [ 514.161971][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19701'. [ 514.426873][T16788] vhci_hcd: invalid port number 0 [ 514.460145][T16790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19714'. [ 514.490753][T16790] bridge_slave_1: left allmulticast mode [ 514.496513][T16790] bridge_slave_1: left promiscuous mode [ 514.502299][T16790] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.520956][T16790] bridge_slave_0: left promiscuous mode [ 514.526641][T16790] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.583246][T16800] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16800 comm=syz.2.19718 [ 514.696327][T16806] loop3: detected capacity change from 0 to 1024 [ 514.710427][T16809] loop2: detected capacity change from 0 to 512 [ 514.717329][T16809] EXT4-fs: Ignoring removed bh option [ 514.723349][T16809] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 514.732329][T16806] EXT4-fs: Ignoring removed orlov option [ 514.739129][T16809] EXT4-fs (loop2): 1 truncate cleaned up [ 514.745412][T16809] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.759914][T16806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 514.796223][T27361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.833834][ T1670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 514.897243][T16828] loop2: detected capacity change from 0 to 512 [ 514.927511][T16828] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.19730: inode has both inline data and extents flags [ 514.941859][T16828] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.19730: couldn't read orphan inode 15 (err -117) [ 515.015386][T16844] loop6: detected capacity change from 0 to 512 [ 515.039131][T16844] EXT4-fs: Ignoring removed bh option [ 515.048794][T16828] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.059496][T16844] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 515.072396][T16857] loop3: detected capacity change from 0 to 512 [ 515.080325][T16854] loop1: detected capacity change from 0 to 512 [ 515.087389][T16844] EXT4-fs (loop6): 1 truncate cleaned up [ 515.093155][T16854] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 515.093771][T16844] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.132127][T16857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.161720][T16854] EXT4-fs (loop1): 1 truncate cleaned up [ 515.180356][T16854] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.231254][T27900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.281750][ T1670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.370575][T27361] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.505897][T16890] 9pnet_fd: Insufficient options for proto=fd [ 515.530845][T26403] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.679398][T16892] lo speed is unknown, defaulting to 1000 [ 515.731164][T16920] netlink: '+}[@': attribute type 3 has an invalid length. [ 515.836383][T16932] vhci_hcd: default hub control req: 040b v007f i0001 l0 [ 515.894832][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19774'. [ 515.924961][ T4185] hid_parser_main: 17 callbacks suppressed [ 515.925014][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.938313][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.945811][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.953323][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.960930][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.968521][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.975945][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.983422][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.990857][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 515.998273][ T4185] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 516.053475][ T4185] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz0] on syz1 [ 516.098498][T16950] loop3: detected capacity change from 0 to 128 [ 516.247622][T16966] bridge_slave_1: left allmulticast mode [ 516.253284][T16966] bridge_slave_1: left promiscuous mode [ 516.259200][T16966] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.269063][T16966] bridge_slave_0: left promiscuous mode [ 516.275000][T16966] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.300701][T16966] bridge0 (unregistering): left allmulticast mode [ 516.333959][T16970] vlan1: entered allmulticast mode [ 516.393275][T16981] netlink: 'syz.6.19792': attribute type 12 has an invalid length. [ 516.455089][T16991] xt_hashlimit: max too large, truncated to 1048576 [ 516.549604][T17009] netlink: 'syz.3.19806': attribute type 1 has an invalid length. [ 516.563697][T17009] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.577631][T17009] bond1: (slave geneve0): making interface the new active one [ 516.586482][T17009] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 516.595211][ T57] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.605136][ T57] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.613456][ T57] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.622137][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 516.622155][ T29] audit: type=1326 audit(531.037:24810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.2.19795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 516.651514][ T29] audit: type=1326 audit(531.037:24811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.2.19795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 516.676293][ T57] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.684520][ T29] audit: type=1326 audit(531.037:24812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.2.19795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 516.707751][ T29] audit: type=1326 audit(531.037:24813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.2.19795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 516.730892][ T29] audit: type=1326 audit(531.047:24814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16986 comm="syz.2.19795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 516.766501][T17016] netlink: 'syz.3.19808': attribute type 12 has an invalid length. [ 516.798085][ T29] audit: type=1400 audit(531.226:24815): avc: denied { watch watch_reads } for pid=17022 comm="syz.9.19812" path="/3469/file1" dev="tmpfs" ino=17776 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 516.823802][ T29] audit: type=1326 audit(531.247:24816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.1.19810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 516.847005][ T29] audit: type=1326 audit(531.247:24817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.1.19810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 516.877678][ T29] audit: type=1326 audit(531.299:24818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.1.19810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 516.900852][ T29] audit: type=1326 audit(531.310:24819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17019 comm="syz.1.19810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 517.084290][T17057] program syz.3.19827 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 517.653446][T17118] __nla_validate_parse: 6 callbacks suppressed [ 517.653462][T17118] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19855'. [ 517.745335][T17120] loop3: detected capacity change from 0 to 512 [ 517.809358][T17120] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 517.875782][T17120] EXT4-fs (loop3): mount failed [ 518.058665][T17132] ip6gre1: entered promiscuous mode [ 518.063967][T17132] ip6gre1: entered allmulticast mode [ 518.094031][ T5630] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.101591][ T5630] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.110085][T17132] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.121445][ T4170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.536985][T17205] netlink: 14 bytes leftover after parsing attributes in process `syz.3.19893'. [ 518.547868][T17205] hsr_slave_0: left promiscuous mode [ 518.557905][T17205] hsr_slave_1: left promiscuous mode [ 518.626138][ T4170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.639384][T17224] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19901'. [ 518.648684][T17222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19903'. [ 518.755922][T17243] netlink: 'syz.6.19912': attribute type 1 has an invalid length. [ 518.763877][T17243] netlink: 224 bytes leftover after parsing attributes in process `syz.6.19912'. [ 518.831087][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19915'. [ 518.845497][ T4170] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.879415][T17260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.19918'. [ 518.897480][T17258] loop1: detected capacity change from 0 to 256 [ 519.033301][T17280] smc: net device bond0 applied user defined pnetid SYZ0 [ 519.057746][T17289] geneve3: entered promiscuous mode [ 519.062990][T17289] geneve3: entered allmulticast mode [ 519.073254][T17280] smc: net device bond0 erased user defined pnetid SYZ0 [ 519.080573][T17280] smc: ib device syz2 ibport 1 erased user defined pnetid S [ 519.358837][T17322] loop6: detected capacity change from 0 to 128 [ 519.367546][T17322] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 519.395200][T27900] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 519.420796][T17330] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17330 comm=syz.6.19948 [ 519.433521][T17330] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17330 comm=syz.6.19948 [ 520.040163][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19957'. [ 520.051913][T17352] dummy0: left allmulticast mode [ 520.058282][T17352] dummy0: left promiscuous mode [ 520.063328][T17352] bridge0: port 3(dummy0) entered disabled state [ 520.070841][T17352] bridge_slave_1: left allmulticast mode [ 520.076569][T17352] bridge_slave_1: left promiscuous mode [ 520.082345][T17352] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.090512][T17352] bridge_slave_0: left promiscuous mode [ 520.096779][T17352] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.105669][T17352] bridge0 (unregistering): left allmulticast mode [ 520.152087][T17360] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19961'. [ 520.161303][T17360] netlink: 196 bytes leftover after parsing attributes in process `syz.6.19961'. [ 520.346842][T17397] IPVS: Error connecting to the multicast addr [ 521.048665][T17417] bridge0 (unregistering): left allmulticast mode [ 521.156320][T17435] tipc: Enabling of bearer rejected, already enabled [ 521.269399][T17455] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 521.277979][T17455] vhci_hcd: invalid port number 96 [ 521.283116][T17455] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 521.395344][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 521.395358][ T29] audit: type=1400 audit(536.040:25072): avc: denied { write } for pid=17481 comm="syz.6.20016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 521.428934][T17485] 0ªX¹¦À: renamed from !60ªX¹¦À [ 521.435721][T17485] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 521.482971][ T29] audit: type=1326 audit(536.134:25073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.506077][ T29] audit: type=1326 audit(536.134:25074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.529267][ T29] audit: type=1326 audit(536.134:25075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.552322][ T29] audit: type=1326 audit(536.134:25076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.575532][ T29] audit: type=1326 audit(536.145:25077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.598701][ T29] audit: type=1326 audit(536.145:25078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.621823][ T29] audit: type=1326 audit(536.145:25079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.644901][ T29] audit: type=1326 audit(536.145:25080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.668010][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 521.675520][ T29] audit: type=1326 audit(536.145:25081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17490 comm="syz.6.20020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 521.691308][T17496] sd 0:0:1:0: device reset [ 522.290509][T17557] IPVS: Error connecting to the multicast addr [ 522.641990][T17583] __nla_validate_parse: 11 callbacks suppressed [ 522.642005][T17583] netlink: 24 bytes leftover after parsing attributes in process `syz.9.20054'. [ 522.683304][T17585] netlink: 4472 bytes leftover after parsing attributes in process `syz.9.20065'. [ 522.692639][T17585] netlink: 4472 bytes leftover after parsing attributes in process `syz.9.20065'. [ 522.745818][T17591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20066'. [ 522.857314][T17610] tipc: New replicast peer: 255.255.255.83 [ 522.863260][T17610] tipc: Enabled bearer , priority 10 [ 522.944721][T17620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.20080'. [ 522.981576][T17625] netlink: 40 bytes leftover after parsing attributes in process `syz.1.20082'. [ 523.092672][T17642] netlink: 19 bytes leftover after parsing attributes in process `syz.9.20091'. [ 523.172517][T17646] SELinux: failed to load policy [ 523.483062][T17676] SELinux: failed to load policy [ 523.542839][T17681] rtc_cmos 00:00: Alarms can be up to one day in the future [ 523.550782][ T4169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 523.558294][ T4169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 523.565863][ T4169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 523.573361][ T4169] rtc_cmos 00:00: Alarms can be up to one day in the future [ 523.580650][ T4169] rtc rtc0: __rtc_set_alarm: err=-22 [ 524.168510][T17719] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 524.197007][T17723] x_tables: duplicate underflow at hook 1 [ 524.387059][T17760] sd 0:0:1:0: device reset [ 524.739502][T17787] loop3: detected capacity change from 0 to 32768 [ 524.756439][T17798] netlink: 277 bytes leftover after parsing attributes in process `syz.1.20158'. [ 524.779953][T17787] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 524.785249][T17787] loop3: p1 start 460800 is beyond EOD, truncated [ 524.791777][T17787] loop3: p2 size 83886080 extends beyond EOD, truncated [ 524.800837][T17787] loop3: p5 start 460800 is beyond EOD, truncated [ 524.807284][T17787] loop3: p6 size 83886080 extends beyond EOD, truncated [ 524.907564][T17808] loop6: detected capacity change from 0 to 164 [ 525.173110][T17845] netlink: 'syz.6.20173': attribute type 3 has an invalid length. [ 525.663485][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20191'. [ 525.683749][T17887] netlink: 32 bytes leftover after parsing attributes in process `syz.1.20191'. [ 525.713416][T17891] loop6: detected capacity change from 0 to 512 [ 525.768705][T17891] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.839361][T17891] EXT4-fs error (device loop6): ext4_empty_dir:3077: inode #12: comm syz.6.20193: invalid size [ 525.921462][T27900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.978331][T17929] netlink: 'syz.9.20210': attribute type 4 has an invalid length. [ 526.172092][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 526.172109][ T29] audit: type=1400 audit(541.065:25323): avc: denied { read } for pid=17948 comm="syz.1.20218" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 526.201250][ T29] audit: type=1400 audit(541.065:25324): avc: denied { open } for pid=17948 comm="syz.1.20218" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 526.237203][ T29] audit: type=1400 audit(541.128:25325): avc: denied { ioctl } for pid=17948 comm="syz.1.20218" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 526.307762][ T29] audit: type=1400 audit(541.202:25326): avc: denied { connect } for pid=17957 comm="syz.1.20222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 526.408768][ T29] audit: type=1400 audit(541.317:25327): avc: denied { setopt } for pid=17957 comm="syz.1.20222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 526.517120][T17966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17966 comm=syz.1.20224 [ 526.529854][T17966] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17966 comm=syz.1.20224 [ 526.562556][T17968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17968 comm=syz.3.20225 [ 526.575318][T17968] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17968 comm=syz.3.20225 [ 526.623634][ T29] audit: type=1326 audit(541.538:25328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17972 comm="syz.1.20228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 526.677250][ T29] audit: type=1326 audit(541.569:25329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17972 comm="syz.1.20228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 526.700385][ T29] audit: type=1326 audit(541.569:25330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17972 comm="syz.1.20228" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 526.780029][ T29] audit: type=1400 audit(541.695:25331): avc: denied { execute } for pid=17982 comm="syz.3.20232" path="/1232/memory.events" dev="tmpfs" ino=6328 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 526.803195][ T29] audit: type=1400 audit(541.695:25332): avc: denied { create } for pid=17982 comm="syz.3.20232" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 526.892425][T17991] netlink: 'syz.2.20236': attribute type 3 has an invalid length. [ 527.171306][T18031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18031 comm=syz.1.20256 [ 527.207043][T18033] netlink: 'syz.3.20257': attribute type 10 has an invalid length. [ 527.226250][T18033] team0: Port device dummy0 added [ 527.236332][T18033] netlink: 'syz.3.20257': attribute type 10 has an invalid length. [ 527.248385][T18033] team0: Port device dummy0 removed [ 527.260548][T18033] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 527.386379][T18053] SELinux: failed to load policy [ 527.593501][T18088] loop6: detected capacity change from 0 to 256 [ 527.615517][T18088] FAT-fs (loop6): bogus number of FAT sectors [ 527.621644][T18088] FAT-fs (loop6): Can't find a valid FAT filesystem [ 527.749654][T18111] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18111 comm=syz.3.20291 [ 527.988331][T18139] block device autoloading is deprecated and will be removed. [ 528.131047][T18143] loop1: detected capacity change from 0 to 128 [ 528.139490][T18143] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 528.168090][T26403] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 528.382280][T18181] serio: Serial port ptm0 [ 528.446270][T18193] __nla_validate_parse: 2 callbacks suppressed [ 528.446340][T18193] netlink: 68 bytes leftover after parsing attributes in process `syz.1.20324'. [ 528.473869][T18196] netlink: 'syz.6.20326': attribute type 29 has an invalid length. [ 528.482763][T18196] netlink: 'syz.6.20326': attribute type 29 has an invalid length. [ 528.491494][T18196] netlink: 500 bytes leftover after parsing attributes in process `syz.6.20326'. [ 528.520011][T18199] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 528.716169][T18222] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 528.824438][T18239] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 528.851903][T18242] netlink: 24 bytes leftover after parsing attributes in process `syz.9.20346'. [ 528.869475][T18242] IPVS: Unknown mcast interface: ipvlan1 [ 528.942881][T18260] netlink: 12 bytes leftover after parsing attributes in process `syz.6.20355'. [ 529.050947][T18272] SELinux: failed to load policy [ 529.095220][T18276] loop6: detected capacity change from 0 to 164 [ 529.126936][T18280] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 529.151226][T18282] loop2: detected capacity change from 0 to 1764 [ 529.209082][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.643820][T18334] netlink: 27 bytes leftover after parsing attributes in process `syz.1.20386'. [ 529.884663][T18345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.893358][T18345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.012069][T18353] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20396'. [ 530.091902][T18361] SELinux: failed to load policy [ 530.133627][T18369] program wÞ£ÿ is using a deprecated SCSI ioctl, please convert it to SG_IO [ 530.143510][T18371] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20404'. [ 530.170114][T18374] batadv_slave_1: entered promiscuous mode [ 530.176203][T18374] batadv_slave_1: left promiscuous mode [ 530.219592][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20410'. [ 530.228670][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20410'. [ 530.237771][T18384] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20410'. [ 530.313935][T18393] netlink: 'syz.6.20412': attribute type 12 has an invalid length. [ 530.960676][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 530.960688][ T29] audit: type=1400 audit(546.084:25550): avc: denied { ioctl } for pid=18477 comm="syz.3.20449" path="socket:[171149]" dev="sockfs" ino=171149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 531.014414][T18481] loop6: detected capacity change from 0 to 1764 [ 531.059308][ T29] audit: type=1400 audit(546.115:25551): avc: denied { ioctl } for pid=18483 comm="syz.9.20451" path="socket:[170861]" dev="sockfs" ino=170861 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.083987][ T29] audit: type=1326 audit(546.147:25552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.107291][ T29] audit: type=1326 audit(546.147:25553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.130355][ T29] audit: type=1326 audit(546.147:25554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.153539][ T29] audit: type=1326 audit(546.147:25555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.176591][ T29] audit: type=1326 audit(546.147:25556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.199768][ T29] audit: type=1326 audit(546.147:25557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.222911][ T29] audit: type=1326 audit(546.147:25558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.245998][ T29] audit: type=1326 audit(546.178:25559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18482 comm="syz.2.20450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 531.413840][T18508] loop3: detected capacity change from 0 to 1024 [ 531.451267][T18508] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.580055][T18528] Process accounting resumed [ 531.947340][ T1670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.016279][T18580] $Hÿ: renamed from bond0 [ 532.031954][T18580] $Hÿ: entered promiscuous mode [ 532.037008][T18580] bond_slave_0: entered promiscuous mode [ 532.042777][T18580] bond_slave_1: entered promiscuous mode [ 532.124083][T18593] netlink: 'syz.9.20494': attribute type 12 has an invalid length. [ 532.456967][T18632] rdma_op ffff88811a476580 conn xmit_rdma 0000000000000000 [ 532.738595][T18669] ref_ctr_offset mismatch. inode: 0x48fd offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 533.012436][T18708] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 533.031645][T18708] bond_slave_0: left promiscuous mode [ 533.044704][T18708] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 533.091927][T18708] bond_slave_1: left promiscuous mode [ 533.098381][T18708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.107415][T18708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 533.124964][T18708] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.680539][T18803] __nla_validate_parse: 13 callbacks suppressed [ 533.680556][T18803] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20586'. [ 533.773613][T18808] loop3: detected capacity change from 0 to 1024 [ 533.787433][T18808] EXT4-fs: Ignoring removed oldalloc option [ 533.794006][T18808] EXT4-fs: Ignoring removed oldalloc option [ 533.811423][T18810] netlink: 48 bytes leftover after parsing attributes in process `syz.1.20588'. [ 533.830831][T18808] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.865026][T18814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 533.889668][T18808] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 15: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 533.950683][ T1670] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.127847][T18831] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 534.183314][T18837] netlink: 'syz.1.20601': attribute type 1 has an invalid length. [ 534.201776][T18837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.210354][T18837] bond5: (slave batadv0): making interface the new active one [ 534.219243][T18837] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 534.230152][T18837] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20601'. [ 534.241077][T18837] bond5 (unregistering): (slave batadv0): Releasing active interface [ 534.256408][T18837] bond5 (unregistering): Released all slaves [ 534.340506][T18861] netlink: 'syz.1.20609': attribute type 30 has an invalid length. [ 534.568519][T18899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20622'. [ 534.581274][T18888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20622'. [ 534.601118][T18902] sctp: [Deprecated]: syz.6.20623 (pid 18902) Use of struct sctp_assoc_value in delayed_ack socket option. [ 534.601118][T18902] Use struct sctp_sack_info instead [ 534.767883][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20636'. [ 534.778174][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20636'. [ 534.787822][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20636'. [ 534.797255][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20636'. [ 534.809052][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20636'. [ 535.030006][T18949] Falling back ldisc for ttyS3. [ 535.089393][T18965] sd 0:0:1:0: device reset [ 535.095884][T18963] loop3: detected capacity change from 0 to 256 [ 535.330777][T19004] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=19004 comm=syz.1.20672 [ 535.582720][T19020] netlink: 'syz.3.20682': attribute type 1 has an invalid length. [ 535.981769][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 535.981812][ T29] audit: type=1400 audit(551.364:25717): avc: denied { connect } for pid=19060 comm="syz.6.20700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 536.012900][ T29] audit: type=1400 audit(551.375:25718): avc: denied { read } for pid=19060 comm="syz.6.20700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 536.102559][T19079] geneve0: entered promiscuous mode [ 536.107966][T19079] geneve0: entered allmulticast mode [ 536.205746][T19101] loop6: detected capacity change from 0 to 512 [ 536.245325][ T29] audit: type=1326 audit(551.626:25719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19104 comm="syz.2.20718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 536.268506][ T29] audit: type=1326 audit(551.626:25720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19104 comm="syz.2.20718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 536.291520][ T29] audit: type=1326 audit(551.626:25721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19104 comm="syz.2.20718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e4caefc9 code=0x7ffc0000 [ 536.314680][ T29] audit: type=1400 audit(551.637:25722): avc: denied { read } for pid=19102 comm="syz.3.20717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 536.340643][T19101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.357296][T19101] EXT4-fs warning (device loop6): ext4_group_add:1716: Can't resize non-sparse filesystem further [ 536.373414][T19101] netlink: 'syz.6.20716': attribute type 3 has an invalid length. [ 536.381298][T19101] netlink: 'syz.6.20716': attribute type 3 has an invalid length. [ 536.410989][T27900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.431248][T19122] smc: net device bond0 applied user defined pnetid SYZ0 [ 536.439204][ T29] audit: type=1326 audit(551.836:25723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.1.20725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 536.462306][ T29] audit: type=1326 audit(551.847:25724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.1.20725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 536.465702][T19122] smc: net device bond0 erased user defined pnetid SYZ0 [ 536.485947][ T29] audit: type=1326 audit(551.847:25725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.1.20725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 536.516159][ T29] audit: type=1326 audit(551.920:25726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19123 comm="syz.1.20725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29386eefc9 code=0x7ffc0000 [ 536.589454][T19130] SELinux: failed to load policy [ 536.798569][T19158] $Hÿ: renamed from bond0 [ 536.804612][T19158] $Hÿ: entered promiscuous mode [ 536.809670][T19158] bond_slave_0: entered promiscuous mode [ 536.815534][T19158] bond_slave_1: entered promiscuous mode [ 536.821274][T19158] dummy0: entered promiscuous mode [ 536.965602][T19175] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 537.290846][T19223] loop3: detected capacity change from 0 to 2048 [ 537.299002][T19207] netlink: 'syz.9.20762': attribute type 4 has an invalid length. [ 537.335706][T19223] loop3: p3 p4 < > [ 537.339565][T19223] loop3: p3 start 3221225472 is beyond EOD, truncated [ 537.365254][T19230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.374275][T19230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.252680][T19277] xt_hashlimit: max too large, truncated to 1048576 [ 538.259879][T19277] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 538.373911][T19288] SELinux: failed to load policy [ 538.393734][ T5606] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.424715][T19295] 1ªî{X¹¦: renamed from 30ªî{X¹¦ [ 538.433105][T19295] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 538.459801][ T5606] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.508797][ T5606] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.583764][ T5606] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.607883][T19299] lo speed is unknown, defaulting to 1000 [ 538.697387][T19299] chnl_net:caif_netlink_parms(): no params data found [ 538.736952][ T5606] bond5 (unregistering): (slave geneve0): Releasing active interface [ 538.840941][ T5606] $Hÿ (unregistering): Released all slaves [ 538.850034][ T5606] bond1 (unregistering): Released all slaves [ 538.859131][ T5606] bond2 (unregistering): (slave bond3): Releasing backup interface [ 538.867080][ T5606] bond3 (unregistering): left promiscuous mode [ 538.873752][ T5606] bond2 (unregistering): Released all slaves [ 538.882475][ T5606] bond3 (unregistering): Released all slaves [ 538.892031][ T5606] bond4 (unregistering): (slave vxcan3): Releasing backup interface [ 538.900135][ T5606] vxcan3: left promiscuous mode [ 538.905337][ T5606] bond4 (unregistering): Released all slaves [ 538.914375][ T5606] bond5 (unregistering): Released all slaves [ 538.928352][T19333] smc: net device bond0 applied user defined pnetid S [ 538.935411][T19334] smc: net device bond0 erased user defined pnetid S [ 538.948310][ T5606] tipc: Left network mode [ 538.948554][T19299] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.959879][T19299] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.967563][T19299] bridge_slave_0: entered allmulticast mode [ 538.974431][T19299] bridge_slave_0: entered promiscuous mode [ 538.981330][T19299] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.988456][T19299] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.995811][T19299] bridge_slave_1: entered allmulticast mode [ 539.002503][T19299] bridge_slave_1: entered promiscuous mode [ 539.004017][T19339] program syz.3.20816 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 539.031870][T19299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.050846][T19299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 539.075314][ T5606] hsr_slave_0: left promiscuous mode [ 539.081210][ T5606] hsr_slave_1: left promiscuous mode [ 539.102564][ T5606] pim6reg (unregistering): left allmulticast mode [ 539.120763][T19345] __nla_validate_parse: 15 callbacks suppressed [ 539.120776][T19345] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20820'. [ 539.143518][ T5630] smc: removing ib device syz0 [ 539.160068][ T5576] smc: removing ib device syz! [ 539.228705][T19299] team0: Port device team_slave_0 added [ 539.244097][T19299] team0: Port device team_slave_1 added [ 539.324229][T19299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 539.331218][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.357194][T19299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 539.376371][T19299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 539.383379][T19299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 539.409394][T19299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.424675][T19358] netlink: 'syz.9.20827': attribute type 1 has an invalid length. [ 539.501955][T19366] xt_hashlimit: max too large, truncated to 1048576 [ 539.535114][T19366] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 539.535901][T19367] SELinux: failed to load policy [ 539.616850][T19299] hsr_slave_0: entered promiscuous mode [ 539.631040][T19299] hsr_slave_1: entered promiscuous mode [ 539.637243][T19299] debugfs: 'hsr0' already exists in 'hsr' [ 539.643024][T19299] Cannot create hsr debugfs directory [ 539.657395][ T5606] IPVS: stop unused estimator thread 0... [ 539.757493][T19361] lo speed is unknown, defaulting to 1000 [ 539.766554][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20842'. [ 539.782670][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20842'. [ 539.793775][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20842'. [ 539.803127][T19400] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20842'. [ 539.911307][T19361] chnl_net:caif_netlink_parms(): no params data found [ 539.945502][T19416] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 539.977393][T19361] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.984865][T19361] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.994230][T19361] bridge_slave_0: entered allmulticast mode [ 540.000909][T19361] bridge_slave_0: entered promiscuous mode [ 540.008521][T19361] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.015616][T19361] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.022977][T19361] bridge_slave_1: entered allmulticast mode [ 540.029680][T19361] bridge_slave_1: entered promiscuous mode [ 540.062513][T19361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.075657][T19361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.100925][T19424] netlink: 'syz.6.20851': attribute type 12 has an invalid length. [ 540.120092][T19361] team0: Port device team_slave_0 added [ 540.133487][T19299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 540.154570][T19361] team0: Port device team_slave_1 added [ 540.161729][T19299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 540.186546][T19299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 540.197559][T19361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.204629][T19361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.230775][T19361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.241804][T19299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 540.262820][T19361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.269870][T19361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.295799][T19361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 540.306592][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20854'. [ 540.325812][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20854'. [ 540.335362][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20854'. [ 540.351393][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20854'. [ 540.360954][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.9.20854'. [ 540.388943][T19361] hsr_slave_0: entered promiscuous mode [ 540.395470][T19361] hsr_slave_1: entered promiscuous mode [ 540.401392][T19361] debugfs: 'hsr0' already exists in 'hsr' [ 540.407167][T19361] Cannot create hsr debugfs directory [ 540.421199][T19441] pimreg: tun_chr_ioctl cmd 35111 [ 540.442610][T19299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.481073][T19299] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.512810][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.519892][ T5576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.574216][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.581296][ T5576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.661862][T19454] lo speed is unknown, defaulting to 1000 [ 540.709290][T19299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 540.842468][T19299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.920714][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 540.920764][ T29] audit: type=1400 audit(1069.540:25825): avc: denied { egress } for pid=5588 comm="kworker/u8:29" daddr=ff02::1:ff00:1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 540.949397][T19361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 540.949919][ T29] audit: type=1400 audit(1069.540:25826): avc: denied { sendto } for pid=5588 comm="kworker/u8:29" daddr=ff02::1:ff00:1b netif=gretap0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 540.986487][T19361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 540.998205][T19361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 541.021417][T19361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 541.031173][ T29] audit: type=1400 audit(1069.561:25827): avc: denied { create } for pid=19361 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.051501][ T29] audit: type=1400 audit(1069.561:25828): avc: denied { write } for pid=19361 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.071754][ T29] audit: type=1400 audit(1069.561:25829): avc: denied { read } for pid=19361 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 541.091916][ T29] audit: type=1400 audit(1069.613:25830): avc: denied { recv } for pid=4186 comm="kworker/1:14" saddr=10.128.0.163 src=30036 daddr=10.128.0.159 dest=34150 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 541.117208][ T29] audit: type=1400 audit(1069.613:25831): avc: denied { prog_load } for pid=19495 comm="syz.1.20867" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 541.136188][ T29] audit: type=1400 audit(1069.613:25832): avc: denied { bpf } for pid=19495 comm="syz.1.20867" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 541.156454][ T29] audit: type=1400 audit(1069.613:25833): avc: denied { perfmon } for pid=19495 comm="syz.1.20867" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 541.177251][ T29] audit: type=1400 audit(1069.613:25834): avc: denied { create } for pid=19453 comm="syz.9.20861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 541.365989][T19361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.378792][T19361] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.399232][T19299] veth0_vlan: entered promiscuous mode [ 541.423172][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.430305][ T5630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.443695][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.450816][ T5630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.470360][T19299] veth1_vlan: entered promiscuous mode [ 541.482539][T19361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.492951][T19361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.519729][T19299] veth0_macvtap: entered promiscuous mode [ 541.541600][T19299] veth1_macvtap: entered promiscuous mode [ 541.576035][T19299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.602308][T19299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.624403][ T5601] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.645957][T19361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.662843][ T5601] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.682777][T19548] lo speed is unknown, defaulting to 1000 [ 541.688604][ T5601] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.721734][ T5601] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.740400][T19553] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 541.748622][T19553] SELinux: failed to load policy [ 541.901014][T19361] veth0_vlan: entered promiscuous mode [ 541.909885][T19361] veth1_vlan: entered promiscuous mode [ 541.942392][T19361] veth0_macvtap: entered promiscuous mode [ 541.957946][T19361] veth1_macvtap: entered promiscuous mode [ 541.987328][T19361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.002401][T19361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.016016][ T5576] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.026769][ T5576] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.038410][ T5576] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.057316][ T5576] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.135650][T19594] atomic_op ffff88810c62f128 conn xmit_atomic 0000000000000000 [ 542.212956][T19610] 1ªX¹¦À: renamed from 60ªX¹¦À [ 542.222431][T19610] 1ªX¹¦À: entered allmulticast mode [ 542.227647][T19610] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 542.314866][T19625] bridge_slave_0: entered promiscuous mode [ 542.322652][T19625] batadv_slave_1: entered promiscuous mode [ 542.329871][T19624] batadv_slave_1: left promiscuous mode [ 542.335650][T19624] bridge_slave_0: left promiscuous mode [ 542.436268][T19641] loop5: detected capacity change from 0 to 512 [ 542.452846][T19641] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.20913: Failed to acquire dquot type 1 [ 542.479176][T19641] EXT4-fs (loop5): 1 truncate cleaned up [ 542.485267][T19641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.528200][T19361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.711373][T19671] lo speed is unknown, defaulting to 1000 [ 542.914746][T19701] loop5: detected capacity change from 0 to 128 [ 542.998039][T19707] sch_tbf: burst 36283 is lower than device lo mtu (11337746) ! [ 543.022712][T19708] bio_check_eod: 214 callbacks suppressed [ 543.022788][T19708] syz.5.20939: attempt to access beyond end of device [ 543.022788][T19708] loop5: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 543.059256][T19708] syz.5.20939: attempt to access beyond end of device [ 543.059256][T19708] loop5: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 543.078015][T19708] syz.5.20939: attempt to access beyond end of device [ 543.078015][T19708] loop5: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 543.092102][T19708] syz.5.20939: attempt to access beyond end of device [ 543.092102][T19708] loop5: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 543.105902][T19708] syz.5.20939: attempt to access beyond end of device [ 543.105902][T19708] loop5: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 543.127421][T19711] netlink: 'syz.6.20944': attribute type 10 has an invalid length. [ 543.189838][T19711] loop6: detected capacity change from 0 to 4096 [ 543.209983][T19708] syz.5.20939: attempt to access beyond end of device [ 543.209983][T19708] loop5: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 543.228774][T19711] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 543.254239][T19708] syz.5.20939: attempt to access beyond end of device [ 543.254239][T19708] loop5: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 543.268444][T19711] netlink: 'syz.6.20944': attribute type 10 has an invalid length. [ 543.278542][T19708] syz.5.20939: attempt to access beyond end of device [ 543.278542][T19708] loop5: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 543.297722][T19708] syz.5.20939: attempt to access beyond end of device [ 543.297722][T19708] loop5: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 543.314812][T19708] syz.5.20939: attempt to access beyond end of device [ 543.314812][T19708] loop5: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 543.374407][T19731] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19731 comm=syz.1.20953 [ 543.651508][T19771] 0ªX¹¦À: renamed from caif0 [ 543.710888][T19771] 0ªX¹¦À: entered allmulticast mode [ 543.716103][T19771] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 544.157849][T19808] loop4: detected capacity change from 0 to 2048 [ 544.203370][T19811] lo speed is unknown, defaulting to 1000 [ 544.282342][T19808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.363576][T19817] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.20986: bg 0: block 345: padding at end of block bitmap is not set [ 544.404511][T19817] EXT4-fs (loop4): Remounting filesystem read-only [ 544.450487][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 544.755528][T19825] __nla_validate_parse: 7 callbacks suppressed [ 544.755544][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20991'. [ 544.804604][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.9.20991'. [ 545.208167][T19851] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 545.392085][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21011'. [ 545.571393][T19299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.719779][ T29] kauditd_printk_skb: 726 callbacks suppressed [ 545.719798][ T29] audit: type=1400 audit(1074.589:26559): avc: denied { name_connect } for pid=19905 comm="syz.1.21029" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 545.801221][ T29] audit: type=1400 audit(1074.663:26560): avc: denied { ioctl } for pid=19908 comm="syz.1.21031" path="socket:[176782]" dev="sockfs" ino=176782 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 545.871112][T19916] netlink: 232 bytes leftover after parsing attributes in process `syz.9.21033'. [ 545.927051][ T29] audit: type=1400 audit(1074.768:26561): avc: denied { write } for pid=19914 comm="syz.5.21032" name="vlan0" dev="proc" ino=4026533855 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 546.025184][ T29] audit: type=1400 audit(1074.904:26562): avc: denied { append } for pid=19918 comm="syz.4.21034" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 546.048672][ T29] audit: type=1400 audit(1074.904:26563): avc: denied { open } for pid=19918 comm="syz.4.21034" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 546.072476][ T29] audit: type=1400 audit(1074.904:26564): avc: denied { ioctl } for pid=19918 comm="syz.4.21034" path="/dev/sg0" dev="devtmpfs" ino=137 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 546.115661][ T29] audit: type=1400 audit(1074.999:26565): avc: denied { connect } for pid=19921 comm="syz.9.21035" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.151753][ T29] audit: type=1400 audit(1074.999:26566): avc: denied { write } for pid=19921 comm="syz.9.21035" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 546.190179][T19924] loop2: detected capacity change from 0 to 7 [ 546.205518][T19926] loop4: detected capacity change from 0 to 256 [ 546.222571][T19926] FAT-fs (loop4): bogus number of FAT sectors [ 546.228693][T19926] FAT-fs (loop4): Can't find a valid FAT filesystem [ 546.241991][T19930] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 546.296379][T19939] loop4: detected capacity change from 0 to 512 [ 546.304169][T19939] EXT4-fs (loop4): orphan cleanup on readonly fs [ 546.311221][T19939] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.21043: bg 0: block 248: padding at end of block bitmap is not set [ 546.325858][T19939] Quota error (device loop4): write_blk: dquota write failed [ 546.333580][T19939] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 546.343603][T19939] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.21043: Failed to acquire dquot type 1 [ 546.356097][T19939] EXT4-fs (loop4): 1 truncate cleaned up [ 546.362222][T19939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 546.399879][T19299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 546.791278][T19983] netlink: 'syz.9.21060': attribute type 1 has an invalid length. [ 546.801382][T19987] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=19987 comm=syz.1.21061 [ 546.832357][T19990] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21064'. [ 546.849875][T19990] veth1: entered promiscuous mode [ 546.855086][T19990] veth1: entered allmulticast mode [ 546.873058][T19993] loop4: detected capacity change from 0 to 2048 [ 546.899708][T19993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 546.912410][T19993] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.073847][T20034] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 547.147242][T20042] team_slave_0: entered promiscuous mode [ 547.152920][T20042] team_slave_1: entered promiscuous mode [ 547.159799][T20042] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 547.176354][T20042] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 547.505112][ T4171] hid_parser_main: 16 callbacks suppressed [ 547.505129][ T4171] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 547.537930][ T4171] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 547.596582][T20064] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 547.836257][T20083] atomic_op ffff88813a744928 conn xmit_atomic 0000000000000000 [ 547.909695][T20089] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21098'. [ 547.965451][ T4187] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 547.973572][ T4187] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 548.092230][T20111] block device autoloading is deprecated and will be removed. [ 548.199659][T20133] netlink: 'syz.5.21118': attribute type 1 has an invalid length. [ 548.280164][T20153] tipc: New replicast peer: 255.255.255.255 [ 548.286280][T20153] tipc: Enabled bearer , priority 10 [ 548.293127][T20153] netlink: 12 bytes leftover after parsing attributes in process `syz.9.21124'. [ 548.302207][T20153] tipc: Disabling bearer [ 548.345508][T20158] loop6: detected capacity change from 0 to 2048 [ 548.369809][T20158] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.440337][T20157] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 548.455713][T20157] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 10 with error 28 [ 548.468292][T20157] EXT4-fs (loop6): This should not happen!! Data will be lost [ 548.468292][T20157] [ 548.478009][T20157] EXT4-fs (loop6): Total free blocks count 0 [ 548.484020][T20157] EXT4-fs (loop6): Free/Dirty block details [ 548.490067][T20157] EXT4-fs (loop6): free_blocks=2415919504 [ 548.495786][T20157] EXT4-fs (loop6): dirty_blocks=16 [ 548.500930][T20157] EXT4-fs (loop6): Block reservation details [ 548.506904][T20157] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 548.524397][T27900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.564882][T20168] netlink: 76 bytes leftover after parsing attributes in process `syz.1.21130'. [ 549.177717][T20244] netlink: 80 bytes leftover after parsing attributes in process `syz.1.21164'. [ 549.298818][T20259] loop5: detected capacity change from 0 to 4096 [ 549.313930][T20268] wireguard1: entered promiscuous mode [ 549.319626][T20268] wireguard1: entered allmulticast mode [ 549.326009][T20259] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.381889][T19361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.400232][T20282] loop4: detected capacity change from 0 to 1024 [ 549.406937][T20282] EXT4-fs: Ignoring removed orlov option [ 549.417059][T20282] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.429671][T20286] loop6: detected capacity change from 0 to 2048 [ 549.452281][T20286] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.466862][T20286] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.478566][T20293] loop5: detected capacity change from 0 to 512 [ 549.499170][T20293] EXT4-fs (loop5): orphan cleanup on readonly fs [ 549.514953][T20293] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.21184: bad orphan inode 13 [ 549.532385][T20293] ext4_test_bit(bit=12, block=18) = 1 [ 549.537868][T20293] is_bad_inode(inode)=0 [ 549.542064][T20293] NEXT_ORPHAN(inode)=2130706432 [ 549.546974][T20293] max_ino=32 [ 549.550161][T20293] i_nlink=1 [ 549.559264][T20293] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 549.609725][T19361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.627794][T20312] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 549.638623][T19299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.267223][T20404] 9pnet_fd: Insufficient options for proto=fd [ 550.367426][T20420] loop6: detected capacity change from 0 to 764 [ 550.375016][T20420] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 550.384886][T20420] Symlink component flag not implemented [ 550.390709][T20420] Symlink component flag not implemented (7) [ 550.449438][T20428] vlan2: entered allmulticast mode [ 550.493391][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 550.493402][ T29] audit: type=1400 audit(1079.597:26676): avc: denied { mount } for pid=20433 comm="syz.6.21227" name="/" dev="autofs" ino=180342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 550.882782][T20460] netlink: 76 bytes leftover after parsing attributes in process `syz.6.21250'. [ 550.929187][T20463] lo speed is unknown, defaulting to 1000 [ 551.090040][T20477] loop5: detected capacity change from 0 to 2048 [ 551.111060][T20477] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.129579][T20477] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.399317][ T29] audit: type=1400 audit(1080.542:26677): avc: denied { read write } for pid=20514 comm="syz.1.21252" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 551.423379][ T29] audit: type=1400 audit(1080.542:26678): avc: denied { open } for pid=20514 comm="syz.1.21252" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 551.472705][ T29] audit: type=1326 audit(1080.626:26679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.9.21256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 551.517569][ T29] audit: type=1326 audit(1080.647:26680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.9.21256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 551.540805][ T29] audit: type=1326 audit(1080.647:26681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.9.21256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 551.564121][ T29] audit: type=1326 audit(1080.647:26682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.9.21256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 551.587514][ T29] audit: type=1326 audit(1080.647:26683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.9.21256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 551.610902][ T29] audit: type=1326 audit(1080.647:26684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.9.21256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 551.634257][ T29] audit: type=1326 audit(1080.647:26685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20525 comm="syz.9.21256" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 551.739362][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21261'. [ 551.748520][T20545] netlink: 'syz.1.21262': attribute type 16 has an invalid length. [ 551.756550][T20545] netlink: 'syz.1.21262': attribute type 17 has an invalid length. [ 551.789770][T20545] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 551.864963][T20551] loop6: detected capacity change from 0 to 164 [ 551.891786][T20551] bio_check_eod: 33 callbacks suppressed [ 551.891801][T20551] syz.6.21265: attempt to access beyond end of device [ 551.891801][T20551] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 551.918388][T20551] syz.6.21265: attempt to access beyond end of device [ 551.918388][T20551] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 551.995203][T20364] Bluetooth: hci0: command 0x1003 tx timeout [ 551.995336][T12704] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 552.501993][T20578] vlan0: entered allmulticast mode [ 552.548526][T20584] netlink: 332 bytes leftover after parsing attributes in process `syz.4.21279'. [ 552.570396][T20584] netlink: 'syz.4.21279': attribute type 9 has an invalid length. [ 552.578284][T20584] netlink: 108 bytes leftover after parsing attributes in process `syz.4.21279'. [ 552.587474][T20584] netlink: 32 bytes leftover after parsing attributes in process `syz.4.21279'. [ 552.647105][T20592] tipc: Started in network mode [ 552.652146][T20592] tipc: Node identity ac14140f, cluster identity 4711 [ 552.678695][T20592] tipc: New replicast peer: 255.255.255.255 [ 552.684839][T20592] tipc: Enabled bearer , priority 10 [ 552.707590][T20592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21282'. [ 552.716677][T20592] tipc: Disabling bearer [ 552.879147][T20598] 1ªX¹¦À: left allmulticast mode [ 552.884261][T20598] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 552.981854][T20608] loop4: detected capacity change from 0 to 2048 [ 553.025477][T20608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.130104][T20607] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 553.145701][T20607] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 128 with max blocks 2 with error 28 [ 553.158098][T20607] EXT4-fs (loop4): This should not happen!! Data will be lost [ 553.158098][T20607] [ 553.167807][T20607] EXT4-fs (loop4): Total free blocks count 0 [ 553.173769][T20607] EXT4-fs (loop4): Free/Dirty block details [ 553.179689][T20607] EXT4-fs (loop4): free_blocks=2415919504 [ 553.185428][T20607] EXT4-fs (loop4): dirty_blocks=16 [ 553.190530][T20607] EXT4-fs (loop4): Block reservation details [ 553.196580][T20607] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 553.244744][T19299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.262762][T20628] tipc: Enabling of bearer rejected, already enabled [ 553.275028][T20628] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21297'. [ 553.284168][T20628] tipc: Disabling bearer [ 553.413513][T20642] geneve0: entered promiscuous mode [ 553.418972][T20642] geneve0: entered allmulticast mode [ 553.439942][T20651] loop4: detected capacity change from 0 to 512 [ 553.450656][T20651] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 553.462431][T20651] EXT4-fs (loop4): 1 truncate cleaned up [ 553.472825][T20651] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.504710][T19299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.518933][T20660] pimreg: entered allmulticast mode [ 553.525972][T20660] pimreg: left allmulticast mode [ 553.568479][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21318'. [ 553.592159][T20669] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21318'. [ 553.672318][T20684] netlink: 'syz.6.21324': attribute type 13 has an invalid length. [ 553.858753][ T5630] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.899721][ T5630] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.938149][ T5630] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.946545][ T5630] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.969720][T20702] tipc: Enabling of bearer rejected, already enabled [ 553.986628][T20707] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21334'. [ 554.088392][ T5581] Bluetooth: hci0: Frame reassembly failed (-84) [ 554.438065][T20740] macvtap0: entered promiscuous mode [ 554.452649][T20740] macvtap0: left promiscuous mode [ 554.527331][T20742] netlink: 'syz.5.21350': attribute type 16 has an invalid length. [ 554.535371][T20742] netlink: 'syz.5.21350': attribute type 17 has an invalid length. [ 554.614653][T20742] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 554.757954][T20754] loop5: detected capacity change from 0 to 512 [ 554.786170][T20754] EXT4-fs (loop5): 1 orphan inode deleted [ 554.793517][T20754] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.806107][ T5601] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:40: Failed to release dquot type 1 [ 554.850181][T19361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.990859][T20774] netlink: 'syz.1.21363': attribute type 39 has an invalid length. [ 555.237857][T20778] netlink: 'syz.9.21364': attribute type 16 has an invalid length. [ 555.245906][T20778] netlink: 'syz.9.21364': attribute type 17 has an invalid length. [ 555.268486][T20778] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 555.333873][T20784] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 555.364071][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 555.364136][ T29] audit: type=1400 audit(1084.709:26765): avc: denied { create } for pid=20788 comm="syz.9.21368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 555.401338][ T29] audit: type=1400 audit(1084.709:26766): avc: denied { bind } for pid=20788 comm="syz.9.21368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 555.653585][T20807] lo speed is unknown, defaulting to 1000 [ 555.691030][T20810] loop6: detected capacity change from 0 to 1024 [ 555.697652][T20810] EXT4-fs: Ignoring removed orlov option [ 555.728441][T20810] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.913153][T27900] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.033610][T20364] Bluetooth: hci0: command 0x1003 tx timeout [ 556.044068][T12704] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 556.240741][T20828] tipc: Enabling of bearer rejected, already enabled [ 556.515406][ T29] audit: type=1400 audit(1085.917:26767): avc: denied { name_bind } for pid=20843 comm="syz.6.21391" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 556.536859][ T29] audit: type=1400 audit(1085.917:26768): avc: denied { node_bind } for pid=20843 comm="syz.6.21391" saddr=::ffff:172.20.20.11 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 556.654604][ T29] audit: type=1326 audit(1086.063:26769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20851 comm="syz.5.21395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aac4efc9 code=0x7ffc0000 [ 556.677786][ T29] audit: type=1326 audit(1086.063:26770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20851 comm="syz.5.21395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aac4efc9 code=0x7ffc0000 [ 556.703029][ T29] audit: type=1326 audit(1086.063:26771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20851 comm="syz.5.21395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f16aac4efc9 code=0x7ffc0000 [ 556.726214][ T29] audit: type=1326 audit(1086.063:26772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20851 comm="syz.5.21395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aac4efc9 code=0x7ffc0000 [ 556.749417][ T29] audit: type=1326 audit(1086.063:26773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20851 comm="syz.5.21395" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16aac4efc9 code=0x7ffc0000 [ 556.800569][T20856] loop5: detected capacity change from 0 to 2048 [ 556.808888][ T29] audit: type=1400 audit(1086.231:26774): avc: denied { read } for pid=20858 comm="syz.6.21398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 556.843927][T20856] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.968673][T20868] __nla_validate_parse: 1 callbacks suppressed [ 556.968687][T20868] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21409'. [ 556.996193][T19361] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.364330][ T5606] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.427479][ T5606] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.455969][T20908] netlink: 36 bytes leftover after parsing attributes in process `syz.1.21416'. [ 557.495543][ T5606] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.578185][ T5606] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.603594][T20934] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21426'. [ 557.608963][T20910] lo speed is unknown, defaulting to 1000 [ 557.703608][ T5606] bridge_slave_1: left allmulticast mode [ 557.709542][ T5606] bridge_slave_1: left promiscuous mode [ 557.715373][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.734581][ T5606] bridge_slave_0: left promiscuous mode [ 557.740382][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.868386][ T5606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.894080][ T5606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.912573][ T5606] bond0 (unregistering): Released all slaves [ 558.002086][ T5576] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.024840][ T5576] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.040398][ T5576] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.135054][ T5606] hsr_slave_0: left promiscuous mode [ 558.148464][ T5606] hsr_slave_1: left promiscuous mode [ 558.154859][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.162384][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.170804][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.178242][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.189554][ T5606] veth1_macvtap: left promiscuous mode [ 558.195119][ T5606] veth0_macvtap: left promiscuous mode [ 558.210034][ T5606] veth1_vlan: left promiscuous mode [ 558.217097][ T5606] veth0_vlan: left promiscuous mode [ 558.291395][ T5606] team0 (unregistering): Port device team_slave_1 removed [ 558.302641][ T5606] team0 (unregistering): Port device team_slave_0 removed [ 558.334918][ T5576] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.377587][T20910] chnl_net:caif_netlink_parms(): no params data found [ 558.455314][T20960] lo speed is unknown, defaulting to 1000 [ 558.488962][T20910] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.496221][T20910] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.503742][T20910] bridge_slave_0: entered allmulticast mode [ 558.510531][T20910] bridge_slave_0: entered promiscuous mode [ 558.517359][T20910] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.524446][T20910] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.531710][T20910] bridge_slave_1: entered allmulticast mode [ 558.538119][T20910] bridge_slave_1: entered promiscuous mode [ 558.578395][T20910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.624307][T20910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.672662][T20960] chnl_net:caif_netlink_parms(): no params data found [ 558.701530][T20910] team0: Port device team_slave_0 added [ 558.708209][T20910] team0: Port device team_slave_1 added [ 558.750225][T20910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.757373][T20910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.783525][T20910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.795216][T20910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.802179][T20910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 558.828131][T20910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.839447][T20960] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.846521][T20960] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.853972][T20960] bridge_slave_0: entered allmulticast mode [ 558.860549][T20960] bridge_slave_0: entered promiscuous mode [ 558.867338][T20960] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.874427][T20960] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.882336][T20960] bridge_slave_1: entered allmulticast mode [ 558.888746][T20960] bridge_slave_1: entered promiscuous mode [ 558.945938][T20910] hsr_slave_0: entered promiscuous mode [ 558.952306][T20910] hsr_slave_1: entered promiscuous mode [ 558.958385][T20910] debugfs: 'hsr0' already exists in 'hsr' [ 558.964119][T20910] Cannot create hsr debugfs directory [ 558.973874][T20960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.991190][T20960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.025522][T20960] team0: Port device team_slave_0 added [ 559.041582][ T5606] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.060407][T20960] team0: Port device team_slave_1 added [ 559.071828][T21046] bridge: RTM_NEWNEIGH with invalid ether address [ 559.096774][T20960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.103796][T20960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.129822][T20960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.144539][ T5606] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.155788][T21050] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21470'. [ 559.165648][T20960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.172648][T20960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 559.198642][T20960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 559.223088][T21050] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21470'. [ 559.243677][T20960] hsr_slave_0: entered promiscuous mode [ 559.250004][T20960] hsr_slave_1: entered promiscuous mode [ 559.259562][T20960] debugfs: 'hsr0' already exists in 'hsr' [ 559.265338][T20960] Cannot create hsr debugfs directory [ 559.278091][ T5606] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.340714][ T5606] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.423441][ T5606] bridge_slave_1: left allmulticast mode [ 559.429150][ T5606] bridge_slave_1: left promiscuous mode [ 559.434937][ T5606] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.453212][ T5606] bridge_slave_0: left allmulticast mode [ 559.458911][ T5606] bridge_slave_0: left promiscuous mode [ 559.464631][ T5606] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.570174][ T5606] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.580498][ T5606] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.590547][ T5606] bond0 (unregistering): Released all slaves [ 559.635560][ T5606] tipc: Left network mode [ 559.640733][ T5606] IPVS: stopping backup sync thread 20034 ... [ 559.664829][ T5606] hsr_slave_0: left promiscuous mode [ 559.670670][ T5606] hsr_slave_1: left promiscuous mode [ 559.676602][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.684040][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.693445][ T5606] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.700929][ T5606] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.712766][ T5606] team_slave_0: left promiscuous mode [ 559.718174][ T5606] team_slave_1: left promiscuous mode [ 559.723770][ T5606] veth1_macvtap: left promiscuous mode [ 559.729979][ T5606] veth0_macvtap: left promiscuous mode [ 559.737800][ T5606] veth1_vlan: left promiscuous mode [ 559.743343][ T5606] veth0_vlan: left promiscuous mode [ 559.836075][ T5606] team0 (unregistering): Port device team_slave_1 removed [ 559.849370][ T5606] team0 (unregistering): Port device team_slave_0 removed [ 559.969237][T21089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21485'. [ 560.062955][T21098] netlink: 28 bytes leftover after parsing attributes in process `syz.6.21487'. [ 560.102237][T20910] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 560.125623][T20910] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 560.139413][T20910] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 560.149795][T20910] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 560.164737][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 560.164749][ T29] audit: type=1326 audit(1089.748:26829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.197376][ T29] audit: type=1326 audit(1089.780:26830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.220699][ T29] audit: type=1326 audit(1089.780:26831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.243945][ T29] audit: type=1326 audit(1089.780:26832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.267448][ T29] audit: type=1326 audit(1089.811:26833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.290643][ T29] audit: type=1326 audit(1089.811:26834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.314115][ T29] audit: type=1326 audit(1089.811:26835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.337368][ T29] audit: type=1326 audit(1089.811:26836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.360604][ T29] audit: type=1326 audit(1089.811:26837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.383628][ T29] audit: type=1326 audit(1089.811:26838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21107 comm="syz.9.21492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 560.454412][T20910] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.470082][T20910] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.479823][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.486916][ T5601] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.501547][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.508715][ T5601] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.594898][T20960] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 560.614637][T20960] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 560.648563][T20960] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 560.663281][T20960] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 560.673631][T20910] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.726220][T20960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 560.744199][T20960] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.756470][ T5606] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.763555][ T5606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 560.774961][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.782028][ T5588] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.836332][T20910] veth0_vlan: entered promiscuous mode [ 560.848831][T20910] veth1_vlan: entered promiscuous mode [ 560.879608][T20960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.897770][T20910] veth0_macvtap: entered promiscuous mode [ 560.914433][T20910] veth1_macvtap: entered promiscuous mode [ 560.925656][T20910] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.940293][T20910] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.958555][ T5588] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.967660][ T5588] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.984323][ T5588] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.016446][ T5588] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.154101][T20960] veth0_vlan: entered promiscuous mode [ 561.163023][T20960] veth1_vlan: entered promiscuous mode [ 561.178823][T20960] veth0_macvtap: entered promiscuous mode [ 561.186355][T20960] veth1_macvtap: entered promiscuous mode [ 561.202387][T20960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.214752][T20960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.230396][ T5601] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.252306][ T5606] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.268378][ T5606] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.309830][ T5606] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.333349][T21226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=21226 comm=syz.0.21525 [ 561.367637][T21236] pim6reg: entered allmulticast mode [ 561.375780][T21236] pim6reg: left allmulticast mode [ 561.408066][T21238] netlink: 12 bytes leftover after parsing attributes in process `syz.7.21531'. [ 561.548690][T21260] netlink: 28 bytes leftover after parsing attributes in process `syz.7.21542'. [ 561.565115][T21267] netlink: 60 bytes leftover after parsing attributes in process `syz.9.21546'. [ 561.797337][T21291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21291 comm=syz.0.21555 [ 561.815695][T21291] __nla_validate_parse: 1 callbacks suppressed [ 561.815715][T21291] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21555'. [ 562.129575][T21321] IPv6: Can't replace route, no match found [ 562.176246][T21330] netlink: 48 bytes leftover after parsing attributes in process `syz.7.21574'. [ 562.193454][T21331] IPv6: NLM_F_CREATE should be specified when creating new route [ 562.476112][T21376] loop7: detected capacity change from 0 to 2048 [ 562.512959][T21376] Alternate GPT is invalid, using primary GPT. [ 562.519278][T21376] loop7: p1 p2 p3 [ 562.523020][T21376] loop7: partition table partially beyond EOD, truncated [ 562.895509][T21433] SELinux: failed to load policy [ 563.105832][T21463] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.155520][T21463] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.214962][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21638'. [ 563.226353][T21463] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.237642][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21638'. [ 563.266879][T21473] netlink: 64 bytes leftover after parsing attributes in process `syz.0.21639'. [ 563.277908][T21463] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 563.304647][T21475] netlink: 528 bytes leftover after parsing attributes in process `syz.0.21640'. [ 563.313885][T21475] netlink: 8 bytes leftover after parsing attributes in process `syz.0.21640'. [ 563.338999][ T5576] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.356960][ T5601] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.391910][T21477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.427779][T21477] 0ªX¹¦À: left allmulticast mode [ 563.432740][T21477] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 563.468643][ T5601] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.573257][T21484] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21644'. [ 563.602543][ T5601] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.816718][T21506] netlink: 4 bytes leftover after parsing attributes in process `syz.9.21653'. [ 563.846712][T21509] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.346546][T21552] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21673'. [ 564.371145][T21552] hsr_slave_0: left promiscuous mode [ 564.572105][T21578] netlink: 'syz.9.21683': attribute type 13 has an invalid length. [ 564.603404][T21582] program syz.6.21687 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 564.647640][T21590] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 564.647640][T21590] program syz.0.21690 not setting count and/or reply_len properly [ 564.698514][T21584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 564.722301][ T5606] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.734298][ T5606] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.763269][T21597] lo speed is unknown, defaulting to 1000 [ 564.769721][ T5606] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.786576][ T5606] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.904878][T21615] cgroup: Invalid name [ 564.910403][T21607] Process accounting resumed [ 564.969753][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 564.969770][ T29] audit: type=1400 audit(581.790:27057): avc: denied { map } for pid=21622 comm="syz.1.21707" path="socket:[184595]" dev="sockfs" ino=184595 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 565.006479][T21624] rdma_op ffff88811b104180 conn xmit_rdma 0000000000000000 [ 565.085713][ T5581] Bluetooth: hci0: Frame reassembly failed (-84) [ 565.142569][ T29] audit: type=1326 audit(581.979:27058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.165759][ T29] audit: type=1326 audit(581.979:27059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.189155][ T29] audit: type=1326 audit(581.979:27060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.212370][ T29] audit: type=1326 audit(581.979:27061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.249064][ T29] audit: type=1326 audit(582.073:27062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.272176][ T29] audit: type=1326 audit(582.073:27063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.295290][ T29] audit: type=1326 audit(582.073:27064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.318335][ T29] audit: type=1326 audit(582.073:27065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.341476][ T29] audit: type=1326 audit(582.073:27066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21648 comm="syz.9.21720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 565.734968][T21707] netlink: 'syz.0.21745': attribute type 39 has an invalid length. [ 566.152852][T21755] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 566.164158][T21761] bridge: RTM_NEWNEIGH with invalid ether address [ 566.390208][T21784] ÿÿÿÿÿÿ: renamed from vlan1 [ 567.006847][T12704] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 567.006838][ T3683] Bluetooth: hci0: command 0x1003 tx timeout [ 567.379208][T21820] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 567.399948][T21819] 1ªî{X¹¦: left allmulticast mode [ 567.415727][T21819] 0ªX¹¦À: left allmulticast mode [ 567.420767][T21819] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 567.449147][T21822] wireguard0: entered promiscuous mode [ 567.454752][T21822] wireguard0: entered allmulticast mode [ 567.526118][T21836] loop7: detected capacity change from 0 to 512 [ 567.571227][T21836] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 567.637924][T21836] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.21796: Failed to acquire dquot type 1 [ 567.683466][T20960] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.740207][T21852] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 567.782666][T21858] binfmt_misc: register: failed to install interpreter file ./file0 [ 567.808439][T21860] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 567.870010][T21875] __nla_validate_parse: 8 callbacks suppressed [ 567.870025][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21811'. [ 567.899571][T21875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21811'. [ 567.968560][T21883] SELinux: failed to load policy [ 568.144206][T21918] loop7: detected capacity change from 0 to 1024 [ 568.151429][T21918] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 568.162322][T21918] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 568.181162][T21918] JBD2: no valid journal superblock found [ 568.186909][T21918] EXT4-fs (loop7): Could not load journal inode [ 568.206215][T21918] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 568.245281][T21922] SELinux: failed to load policy [ 568.331252][T21935] xt_hashlimit: max too large, truncated to 1048576 [ 568.973568][T21941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21841'. [ 569.363493][T21975] wireguard1: entered promiscuous mode [ 569.369038][T21975] wireguard1: entered allmulticast mode [ 570.367386][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 570.367409][ T29] audit: type=1400 audit(587.459:27155): avc: denied { setopt } for pid=22036 comm="syz.6.21881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 570.570977][ T29] audit: type=1326 audit(587.679:27156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.6.21883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 570.626817][ T29] audit: type=1326 audit(587.679:27157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.6.21883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 570.650026][ T29] audit: type=1326 audit(587.679:27158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.6.21883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 570.673177][ T29] audit: type=1326 audit(587.679:27159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.6.21883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 570.696221][ T29] audit: type=1326 audit(587.679:27160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.6.21883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 570.719303][ T29] audit: type=1326 audit(587.679:27161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.6.21883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 570.742383][ T29] audit: type=1326 audit(587.700:27162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22044 comm="syz.6.21883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 570.765466][ T29] audit: type=1326 audit(587.700:27163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.9.21884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 570.788574][ T29] audit: type=1326 audit(587.700:27164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22046 comm="syz.9.21884" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4a98a7efc9 code=0x7ffc0000 [ 570.834793][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21887'. [ 570.844712][T22053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21887'. [ 571.161033][T22071] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21895'. [ 571.520597][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21915'. [ 571.568518][T22122] ipip0: entered promiscuous mode [ 571.718214][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21924'. [ 571.727292][T22141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21924'. [ 571.737015][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21924'. [ 571.974686][T22154] team0: Port device team_slave_1 removed [ 572.674441][T22199] ipip2: entered promiscuous mode [ 572.702263][T22201] loop6: detected capacity change from 0 to 164 [ 572.715172][T22201] syz.6.21958: attempt to access beyond end of device [ 572.715172][T22201] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 572.730721][T22201] syz.6.21958: attempt to access beyond end of device [ 572.730721][T22201] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 572.765973][T22210] __nla_validate_parse: 3 callbacks suppressed [ 572.765987][T22210] netlink: 87 bytes leftover after parsing attributes in process `syz.6.21949'. [ 572.787478][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21951'. [ 572.818701][T22212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21951'. [ 572.979953][T22230] lo speed is unknown, defaulting to 1000 [ 573.053581][T22236] loop7: detected capacity change from 0 to 164 [ 573.066160][T22236] syz.7.21964: attempt to access beyond end of device [ 573.066160][T22236] loop7: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 573.080858][T22236] syz.7.21964: attempt to access beyond end of device [ 573.080858][T22236] loop7: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 573.197276][T22265] netlink: 20 bytes leftover after parsing attributes in process `syz.6.21978'. [ 573.281592][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21985'. [ 573.322350][T22279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.21985'. [ 573.431317][T22294] loop7: detected capacity change from 0 to 8192 [ 573.547918][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22000'. [ 573.563666][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz.7.22000'. [ 573.809394][T22350] netlink: 'syz.0.22016': attribute type 10 has an invalid length. [ 573.847951][T22350] team0: Port device dummy0 added [ 573.857868][T22350] netlink: 'syz.0.22016': attribute type 10 has an invalid length. [ 573.869239][T22350] team0: Port device dummy0 removed [ 573.877086][T22350] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 574.378676][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22037'. [ 574.415315][T22399] netlink: 8 bytes leftover after parsing attributes in process `syz.0.22037'. [ 575.185593][T22448] macvtap0: refused to change device tx_queue_len [ 575.337056][T22444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.362019][T22444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.386402][T22465] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 575.439049][ T29] kauditd_printk_skb: 888 callbacks suppressed [ 575.439065][ T29] audit: type=1400 audit(592.781:28053): avc: denied { firmware_load } for pid=22468 comm="syz.0.22062" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 575.531733][T22475] SELinux: failed to load policy [ 575.541938][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 575.561431][ T29] audit: type=1326 audit(592.918:28054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22482 comm="syz.6.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 575.584613][ T29] audit: type=1326 audit(592.918:28055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22482 comm="syz.6.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 575.622872][ T29] audit: type=1326 audit(592.918:28056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22482 comm="syz.6.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 575.645947][ T29] audit: type=1326 audit(592.918:28057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22482 comm="syz.6.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 575.669240][ T29] audit: type=1326 audit(592.918:28058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22482 comm="syz.6.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 575.692314][ T29] audit: type=1326 audit(592.918:28059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22482 comm="syz.6.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 575.715577][ T29] audit: type=1326 audit(592.939:28060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22482 comm="syz.6.22069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f276d81efc9 code=0x7ffc0000 [ 575.738694][ T29] audit: type=1404 audit(592.960:28061): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 575.753220][ T29] audit: type=1400 audit(592.960:28062): avc: denied { execmem } for pid=22484 comm="syz.6.22071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 576.081544][T22534] bond5: (slave vxcan1): Releasing backup interface [ 576.088371][T22534] vxcan1 (unregistering): left promiscuous mode [ 576.099403][T22534] bond5: Destroying bond [ 576.105071][T22534] bond5 (unregistering): Released all slaves [ 576.168810][T22550] netlink: 'syz.7.22096': attribute type 30 has an invalid length. [ 576.199494][T22552] netlink: 'syz.6.22100': attribute type 10 has an invalid length. [ 576.207701][T22552] netlink: 'syz.6.22100': attribute type 10 has an invalid length. [ 576.282323][T22561] ================================================================== [ 576.290430][T22561] BUG: KCSAN: data-race in sg_common_write / sg_finish_rem_req [ 576.298002][T22561] [ 576.300313][T22561] write to 0xffff888118f8931d of 1 bytes by task 4185 on cpu 1: [ 576.307926][T22561] sg_finish_rem_req+0x11f/0x270 [ 576.312861][T22561] sg_rq_end_io_usercontext+0x38/0x1c0 [ 576.318316][T22561] process_scheduled_works+0x4ce/0x9d0 [ 576.323774][T22561] worker_thread+0x582/0x770 [ 576.328351][T22561] kthread+0x489/0x510 [ 576.332411][T22561] ret_from_fork+0x122/0x1b0 [ 576.336987][T22561] ret_from_fork_asm+0x1a/0x30 [ 576.341744][T22561] [ 576.344053][T22561] read to 0xffff888118f8931d of 1 bytes by task 22561 on cpu 0: [ 576.351664][T22561] sg_common_write+0x961/0xc30 [ 576.356426][T22561] sg_new_write+0x7b6/0x890 [ 576.360920][T22561] sg_ioctl+0xb81/0x1360 [ 576.365153][T22561] __se_sys_ioctl+0xce/0x140 [ 576.369731][T22561] __x64_sys_ioctl+0x43/0x50 [ 576.374306][T22561] x64_sys_call+0x1816/0x3000 [ 576.378972][T22561] do_syscall_64+0xd2/0x200 [ 576.383463][T22561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.389342][T22561] [ 576.391645][T22561] value changed: 0x01 -> 0x00 [ 576.396300][T22561] [ 576.398605][T22561] Reported by Kernel Concurrency Sanitizer on: [ 576.404739][T22561] CPU: 0 UID: 0 PID: 22561 Comm: syz.1.22103 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 576.416182][T22561] Tainted: [W]=WARN [ 576.419967][T22561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.430005][T22561] ================================================================== [ 576.625689][ T5601] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.687937][ T5601] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.744477][ T5601] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.793444][ T5601] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.877382][ T5601] bridge_slave_1: left allmulticast mode [ 576.883037][ T5601] bridge_slave_1: left promiscuous mode [ 576.888680][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.896485][ T5601] bridge_slave_0: left allmulticast mode [ 576.902145][ T5601] bridge_slave_0: left promiscuous mode [ 576.907874][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.973348][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.983139][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.993125][ T5601] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 577.002062][ T5601] bond0 (unregistering): Released all slaves [ 577.094138][ T5601] hsr_slave_0: left promiscuous mode [ 577.099897][ T5601] hsr_slave_1: left promiscuous mode [ 577.105416][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.112840][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.120371][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.127770][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.136926][ T5601] veth1_macvtap: left promiscuous mode [ 577.142436][ T5601] veth0_macvtap: left promiscuous mode [ 577.147902][ T5601] veth1_vlan: left promiscuous mode [ 577.153180][ T5601] veth0_vlan: left promiscuous mode [ 577.203818][ T5601] team0 (unregistering): Port device team_slave_0 removed [ 577.535379][ T5601] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.592236][ T5601] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.639905][ T5601] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.677824][ T5601] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.735261][ T5601] bridge_slave_1: left allmulticast mode [ 577.740891][ T5601] bridge_slave_1: left promiscuous mode [ 577.746643][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.754146][ T5601] bridge_slave_0: left allmulticast mode [ 577.759809][ T5601] bridge_slave_0: left promiscuous mode [ 577.765488][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.830396][ T5601] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.840145][ T5601] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.849453][ T5601] bond0 (unregistering): Released all slaves [ 577.891247][ T5601] hsr_slave_0: left promiscuous mode [ 577.896944][ T5601] hsr_slave_1: left promiscuous mode [ 577.902487][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.909904][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.917593][ T5601] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.924998][ T5601] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.935405][ T5601] veth1_macvtap: left promiscuous mode [ 577.940866][ T5601] veth0_macvtap: left promiscuous mode [ 577.946382][ T5601] veth1_vlan: left promiscuous mode [ 577.951566][ T5601] veth0_vlan: left promiscuous mode [ 578.003805][ T5601] team0 (unregistering): Port device team_slave_1 removed [ 578.015819][ T5601] team0 (unregistering): Port device team_slave_0 removed