last executing test programs: 1m36.58438093s ago: executing program 2 (id=107): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="06000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1m36.308489974s ago: executing program 2 (id=109): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth0_to_team\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$unix(0x1, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m35.827683861s ago: executing program 2 (id=114): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) 1m35.727656493s ago: executing program 2 (id=117): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xa}, 0x2, 0xe3b, 0x2, 0x0, 0x400, 0x240, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0xa) socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPNiDurJvyeatLzFpfr/2+4GSycw8u7OZSXk27WYv3/3yo0rJ0kp6Q6JJJRERkSuRrEQlEPEfo245IWGH8srMnz+/uL5ZTHoVaiW/8WpOKTU3/8PHn6X8bmfTcpF9//KP3O8Xz148f/nvxodlS5UtVa01lK62a7829G3TULtlq6IptWoaumWoctUy6l77d/52zNreXlPp1d3Z9F7dsCylV5uqYjRVo6Ya9abSP9DLVaVpmppNC25SPF5b0/NDBu+MeDAYk3o9r0+JSKqnpXg8kQEBAICJ6s7/o05KP0z+vyVzhcLymnI6t/P/k5fOGzPvnM75+f9Zol/+/9ov3rY68n/ndKKd/9e884PSzfn/13KH/L83I3pchs7/s2MYDIYzn+ipinQ8c/L/tP/+dR29d7LoFsj/AQAAAAAAAAAAAAAAAAAAAAB4GlzZdsa27UzwGPy0LyHwn+NBGjT/0yKSdGbfZv4fsvXNLUm6F+45c2x+sV/cL3qPfodzETHF+Mfu5qyN4Moj5cjKj+aBH3+wX5xyW/IlKTvxsiQZybrrKRRv2ytvFZaXlMePb12mlA7H5yQjz4Tjv3dXpxOf64z395+QlxdC8Zpk5KcdqYkpu25ke/+fLyn15tuFrviU209Efrv3SQEAAAAAYMQ01dL3/F3TBrV73zKSL7kfExmyKBn5u//5/WLf8/NY5oXYpI8eAAAAAIDHwWp+WtElatTdgmn2K6RkYNMICrGOmriI9O2c6KqJX7flqdAR3nY8CfHuYPJ/j+ub4FW9S1TwjxTOwFtN/h1VZLjxBMfv1kRiw09T5FDcBXAYborKLcJj3YOfdypU384LA7dz5B9Iqyb42Cgx4HWW1d7tRK9ZCfGeGjsy3AJ47qtv/xrdG+T1U38FfHJz5yPTsA/kNpPSVXB20dsUH/svHgAAAAD3rp30BzVvhJvDNxIJ3yyHv9wDAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBCY/lKv67CpI8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFL8FwAA//8GuPOT") bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x60, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x60}}, 0x20000000) 1m35.212626152s ago: executing program 2 (id=126): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet_sctp(0x2, 0x5, 0x84) syz_usbip_server_init(0x4) syz_usbip_server_init(0x4) syz_usbip_server_init(0x2) r0 = syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2, 0x2d5}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd, 0x0, 0x0, 0x7, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x3c, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x7330, 0x0, 0x0, 0x0, 0x0) 1m35.110102613s ago: executing program 2 (id=127): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) 1m35.109897533s ago: executing program 32 (id=127): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400"], 0x48) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x100, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x10) 3.510561574s ago: executing program 4 (id=1146): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) mlockall(0x7) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.54650856s ago: executing program 3 (id=1150): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x215, 0x6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0xfd}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x48}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000240)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free\x00', r0, 0x0, 0xfffffffff7fffffe}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="14000000040000000400000012", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000007963da43a191dbe85155fa891cd4745fc0f5ceae87499a7009ceac3575e086e9406be47d6dfd2f705d5d59288c62496eb1826f1199e34567367237cf441527acdb6aab4d2b7f31f1de67aa8c29d9ef927f9641044439"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580), &(0x7f0000000140), 0x1003, r5}, 0x38) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2082) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000014001080800418e00000004fcff", 0x58}], 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40481c0) 2.366082953s ago: executing program 5 (id=1155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x1c0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bond\x00'}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000000000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000c00)={[{}, {@mb_optimize_scan}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7ff}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@delalloc}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$eJzs289vFFUcAPDvzG4BAdmK+AMEraKx8UdLCyoHPWg08aCJiR7wWNtCkIUaWhMhRKsxeDQk3o1HE/8CT56MejLxqndDQpSYgF5cM7sztLvdLf2xZSv7+SQL7+28nfe+mfdm377XCaBvDWX/JBE7I+LXiKg0ss0Fhhr/Xb96YfLvqxcmk6jV3vwjqZe7dvXCZFG0+NyOPDOcRqSfJnklzWbPnT81Ua1On83zo3On3xudPXf+6ZOnJ05Mn5g+M3706JHDY889O/5MV+LM2nRt34cz+/e++val1yePXXrnx2+y9t57oHF8cRzdMpQF/metrvXYY92urMf+rS3EmZR73RpWqhQR2eUaqI//SpRi4eJV4pVPeto4YENl9+ytnQ/P14DbWBK9bgHQG8UXffb7t3jdoqnHpnDlxcYPoCzu6/mrcaQcaV5mYAPrH4qIY/P/fJm9omUdotZm3QAAYL2+y+Y/Ty2d/9X3RhpFXtiRl61ExGBE3BURuyPi7ojYExH35GXvi4j7V1l/69bQ0vlnenmtsa1ENv97Pt/bap7/FbO/GCzluTvr8Q8kx09Wpw9FxK6IGI6BrVl+rN3Ji1O8/MvnnepfPP/LXln9xVwwP8nlcssC3dTE3ES3JqVXPo7YV24Xf3JjJyDrC3sjYt/qTr2rSJx84uv9nQrdPP5ldGGfqfZVxOON6z8fLfEXkuX3J0e3RXX60GjRK5b66eeLb3Sqf13xd0F2/bc39/+WEpW/ksX7tbOrr+Pib591/E1ZXmP/35K8Vd+z3pK/98HE3NzZsYgtyWv1fNP74wufLfJF+Sz+4YPtx//u/DNZ/A9ERNaJD0TEgxHxUH7tHo6IRyLi4DLx//DSo+92OrYZrv9U2/vfjf4/2Hz9V58onfr+2071r+z+d6SeGs7fqd//bqJzc7blJdbamwEAAOD/J42InZGkIzfSaToy0vh7+T2xPa3OzM49eXzm/TNTjWcEBmMgLVa6KovWQ8eS+fyMjfx4vlZcHD+crxt/Ubqjnh+ZnKlO9Th26Hc7Ooz/zO+lXrcO2HCe14L+1Tr+0x61A7j1fP9D/zL+oX8Z/9C/2o3/j1ry9gLg9uT7H/qX8Q/9y/iH/mX8Q19az3P9G5UoL/P0vsRmSUS6KZoh0SZR7sLo7vGNCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+CwAA//9uCfIx") 2.365670262s ago: executing program 3 (id=1156): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='abcdefghijklmnop', 0x0) 2.335957903s ago: executing program 3 (id=1158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r4}, 0x20) unshare(0x64000600) 2.316286483s ago: executing program 5 (id=1159): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r4, 0x1, &(0x7f0000000d40)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x7ff, r3, 0x0, 0x0, 0x6}]) 1.710852763s ago: executing program 5 (id=1161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000380), 0x1, r0}, 0x38) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x2, 0xffffbffd}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r3, 0x1e76, 0xf728, 0xd, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01030000000000000000320000000c009900000000000000000005001801"], 0x40}}, 0x0) 1.25856453s ago: executing program 3 (id=1163): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) capget(0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r3 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000002, 0x28011, r3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xc97c, 0x0, @perf_config_ext={0x0, 0x5}, 0x8, 0x0, 0x409, 0x4, 0x0, 0x40, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x3) sync_file_range(r3, 0x6, 0x10000000000000, 0x2) 1.189910651s ago: executing program 0 (id=1164): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @cgroup_sock_addr=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x945}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r4 = dup2(r3, r3) write$tun(r4, 0x0, 0x46) 1.181279431s ago: executing program 5 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4}, &(0x7f0000000040), &(0x7f0000000580)=r5}, 0x20) 1.138378822s ago: executing program 3 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.137906822s ago: executing program 0 (id=1168): socket$inet6(0xa, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000003080102000000074441980000000000050003"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.070634123s ago: executing program 0 (id=1169): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x2000000000000218, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 963.765195ms ago: executing program 0 (id=1171): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 877.910037ms ago: executing program 4 (id=1172): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000010018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) setgroups(0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441700322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6de6269613800", 0x1}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_MOVE(0x4, r3, 0x0, 0x0, 0x0) 717.921579ms ago: executing program 3 (id=1173): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048041}, 0x40000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x2800000000000000) 688.633489ms ago: executing program 4 (id=1174): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r2, &(0x7f0000000100)=ANY=[], 0x72) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}}, 0x20}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 618.30115ms ago: executing program 4 (id=1176): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000780)}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file2\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb77, &(0x7f0000002080)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup\x00', 0x42, 0x81) inotify_init() 505.120382ms ago: executing program 4 (id=1177): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) creat(0x0, 0x108) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) 491.503643ms ago: executing program 1 (id=1178): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 418.571034ms ago: executing program 4 (id=1179): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x40000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) 402.106964ms ago: executing program 1 (id=1180): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f00000005c0)=ANY=[], 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000005c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r3) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$FIGETBSZ(r0, 0x2, 0x0) 352.834585ms ago: executing program 1 (id=1181): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x100, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x101, 0x2}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000008000000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/27], 0x50) dup2(r0, r1) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x100, 0x70bd27, 0x5f5}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x48080) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2716, 0x0, &(0x7f0000000000)) 322.399625ms ago: executing program 1 (id=1182): socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r1}, 0x18) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r3, 0x0, 0x2000}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) 254.529926ms ago: executing program 1 (id=1183): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) open(&(0x7f0000000080)='.\x00', 0x53f802, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) capget(&(0x7f0000000580)={0x20080522}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4004743b, &(0x7f0000001200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = geteuid() r4 = getpgrp(0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={0x2b0, 0x21, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x288, 0x132, 0x0, 0x1, [@generic="2750aaf710316f5596e0cb73cc3cfa631a798573ebf9143a00343986b13311087358b0504a139673084bb832fd61d8d763ef7aa7e4e420956163a8ff89fe7f2969874ba7aa2054875bc57a2de232a6f73cf77f1241d22d70db90da7e728c63dd12d00bbff17c801a183e37005175f1eb1b37af215295ab263bbbe8b548dd4aab79facab70cb836", @typed={0x5a, 0xc72, 0x0, 0x0, @binary="ec3baf89d70902ca1110e72c42178536a3aeedf4de217824c650a698bdeb538fce3cfd4b7222e00815dde17ba92d43819afca28baa92cb8ca7aa76f43201dc004ae9634e489ace36cc0690f4b9d658cf2222e69fe113"}, @nested={0xd5, 0x10c, 0x0, 0x1, [@generic="e25b070311604684fc44e04229adadbcc1edfd4e258bdd90e7b3a91cac753b668793fcf2f3258b3799ab90c5fcdd3b6752c4a843facda6cfa3dbd6e225c7df24bf4457a4f584ce65e7f895b96f8994cc959588ba62d665e43ed9464379952b99e0c3890d622ade5ac9914c966e78b7e0eec70f76a52298607e434d1c84f5a4bbada37a66bf6562a45a8c4f40a5d2592fcb8f2bb982d15ec761b436190b72db18e3751e24c75ab5d652572bbf0b66922220ca644c9c22415bebb4cf4988455f2c4db68cb946c8404f67588893e0aafa75c2"]}, @nested={0x72, 0x2c, 0x0, 0x1, [@generic="d81e85fddc35585b13bedb05cc0e808896d41d38d1c369671bd5fa8d93447b96f2d7c06e287349925b070c852295b67a888d797bbdfdd0a6998b68cf824f3815d8632035bb6d8d78942c45132a4fd1b1315383c6f3f5", @typed={0xd, 0x130, 0x0, 0x0, @str='{\'^{M@+,\x00'}, @typed={0x8, 0xf3, 0x0, 0x0, @uid=r3}]}, @typed={0x8, 0x29, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x3b}}, @generic="f7660d2ef2606fb8d6d616260cab05f135ddd32369b9d9e172b4fbeeb5eaa9d24fe4048da91dbcd86459e696539370270eed62679343dd0392d516d76e039181d0f529ebf2f63a6726f66cacf7"]}, @typed={0xc, 0xf9, 0x0, 0x0, @u64=0xd1}, @typed={0x8, 0xf3, 0x0, 0x0, @pid=r4}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) 235.122936ms ago: executing program 5 (id=1184): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 109.627969ms ago: executing program 0 (id=1185): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) unshare(0x2c020400) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) 1.07203ms ago: executing program 5 (id=1186): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000fee3ffff0000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$pfkey(0xffffffffffffff9c, 0x0, 0x88000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1, 0x0, 0x400}, 0x18) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010140)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) 481.33µs ago: executing program 0 (id=1196): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r0}, 0x18) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) socket(0x10, 0x3, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x80c0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket(0x40000000015, 0x5, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) 0s ago: executing program 1 (id=1187): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x9, 0x4, 0x2, 0x4}, 0x50) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_pgetevents(0x0, 0x2, 0x0, 0x0, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) io_destroy(0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) kernel console output (not intermixed with test programs): v_slave_1 [ 41.525577][ T4091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.551705][ T4091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.579259][ T4170] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 41.612820][ T4170] EXT4-fs (loop1): 1 truncate cleaned up [ 41.647349][ T4091] hsr_slave_0: entered promiscuous mode [ 41.669196][ T4170] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.698744][ T4091] hsr_slave_1: entered promiscuous mode [ 41.704624][ T4091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 41.738133][ T4091] Cannot create hsr debugfs directory [ 41.911232][ T4203] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 41.919027][ T4203] __nla_validate_parse: 1 callbacks suppressed [ 41.919037][ T4203] netlink: 40 bytes leftover after parsing attributes in process `syz.3.141'. [ 42.007430][ T4091] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.110577][ T4091] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.166109][ T4091] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.178307][ T4091] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.226812][ T4224] loop4: detected capacity change from 0 to 128 [ 42.388842][ T29] audit: type=1400 audit(1753020173.424:431): avc: denied { mount } for pid=4223 comm="syz.4.145" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 42.788756][ T4224] syz.4.145: attempt to access beyond end of device [ 42.788756][ T4224] loop4: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 42.856809][ T4224] syz.4.145: attempt to access beyond end of device [ 42.856809][ T4224] loop4: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 42.988962][ T4224] syz.4.145: attempt to access beyond end of device [ 42.988962][ T4224] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 43.002565][ T4224] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 43.029984][ T4224] syz.4.145: attempt to access beyond end of device [ 43.029984][ T4224] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 43.044307][ T4224] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 43.057835][ T4224] syz.4.145: attempt to access beyond end of device [ 43.057835][ T4224] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 43.059417][ T29] audit: type=1400 audit(1753020174.114:432): avc: denied { setopt } for pid=4240 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.071815][ T4224] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 43.135835][ T4091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.169643][ T29] audit: type=1400 audit(1753020174.164:433): avc: denied { setopt } for pid=4244 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.189709][ T29] audit: type=1400 audit(1753020174.164:434): avc: denied { create } for pid=4244 comm="syz.3.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.213320][ T4224] syz.4.145: attempt to access beyond end of device [ 43.213320][ T4224] loop4: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 43.229844][ T4224] Buffer I/O error on dev loop4, logical block 145, lost async page write [ 43.246332][ T4249] Zero length message leads to an empty skb [ 43.247546][ T4091] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.262621][ T3934] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.269780][ T3934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.282534][ T4224] syz.4.145: attempt to access beyond end of device [ 43.282534][ T4224] loop4: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 43.295985][ T4224] Buffer I/O error on dev loop4, logical block 146, lost async page write [ 43.308061][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.315246][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.322286][ T4224] syz.4.145: attempt to access beyond end of device [ 43.322286][ T4224] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 43.335770][ T4224] Buffer I/O error on dev loop4, logical block 147, lost async page write [ 43.346208][ T4224] syz.4.145: attempt to access beyond end of device [ 43.346208][ T4224] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 43.359581][ T4224] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 43.370357][ T4256] tipc: Started in network mode [ 43.375301][ T4256] tipc: Node identity ac1414aa, cluster identity 4711 [ 43.389106][ T4224] syz.4.145: attempt to access beyond end of device [ 43.389106][ T4224] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 43.402485][ T4224] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 43.404800][ T4256] tipc: Enabled bearer , priority 10 [ 43.454023][ T4224] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 43.579871][ T4280] nfs4: Bad value for 'source' [ 43.593171][ T29] audit: type=1400 audit(1753020174.594:435): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 43.598053][ T4091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 43.629607][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.697303][ T29] audit: type=1400 audit(1753020174.764:436): avc: denied { bind } for pid=4287 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.724606][ T29] audit: type=1400 audit(1753020174.764:437): avc: denied { setopt } for pid=4287 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.744955][ T29] audit: type=1400 audit(1753020174.764:438): avc: denied { connect } for pid=4287 comm="syz.1.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.860450][ T4091] veth0_vlan: entered promiscuous mode [ 43.868190][ T4304] 9pnet_fd: Insufficient options for proto=fd [ 43.870384][ T4091] veth1_vlan: entered promiscuous mode [ 43.925857][ T4091] veth0_macvtap: entered promiscuous mode [ 43.959145][ T4314] loop0: detected capacity change from 0 to 1024 [ 43.981512][ T4091] veth1_macvtap: entered promiscuous mode [ 43.990849][ T4320] loop4: detected capacity change from 0 to 128 [ 43.997605][ T4320] EXT4-fs: Ignoring removed nobh option [ 44.011785][ T29] audit: type=1400 audit(1753020175.064:439): avc: denied { read write } for pid=4322 comm="syz.3.159" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.044537][ T4091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.079423][ T4320] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.099114][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.107596][ T4091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.116655][ T4320] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.137142][ T4091] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.145979][ T4091] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.154763][ T4091] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.163482][ T4091] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.296183][ T4332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.902485][ T4332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.913585][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.973363][ T4332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.194089][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.162'. [ 45.244755][ T4332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.287889][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.289417][ T3391] tipc: Node number set to 2886997162 [ 45.357151][ T4332] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.417857][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.166'. [ 45.430769][ T4332] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.443736][ T4332] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.456058][ T4332] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.587088][ T4376] netlink: 'syz.0.170': attribute type 39 has an invalid length. [ 45.661160][ T4382] loop1: detected capacity change from 0 to 1024 [ 45.689899][ T4382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.799737][ T4388] netlink: 156 bytes leftover after parsing attributes in process `syz.0.173'. [ 45.843105][ T4388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.173'. [ 45.904610][ T4388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.945496][ T4388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.261253][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 46.261268][ T29] audit: type=1400 audit(1753020177.324:460): avc: denied { bind } for pid=4397 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 46.616934][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.640557][ T29] audit: type=1400 audit(1753020177.704:461): avc: denied { setattr } for pid=4409 comm="syz.4.176" path="socket:[6057]" dev="sockfs" ino=6057 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.706103][ T4415] loop3: detected capacity change from 0 to 512 [ 46.734450][ T29] audit: type=1400 audit(1753020177.724:462): avc: denied { read } for pid=4409 comm="syz.4.176" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.757343][ T29] audit: type=1400 audit(1753020177.724:463): avc: denied { open } for pid=4409 comm="syz.4.176" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.780648][ T29] audit: type=1400 audit(1753020177.724:464): avc: denied { ioctl } for pid=4409 comm="syz.4.176" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x700f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 46.805586][ T29] audit: type=1400 audit(1753020177.744:465): avc: denied { mount } for pid=4418 comm="syz.1.178" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 46.864761][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.880162][ T29] audit: type=1400 audit(1753020177.904:466): avc: denied { sqpoll } for pid=4425 comm="syz.1.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 46.899786][ T4415] ext4 filesystem being mounted at /30/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.929889][ T4434] loop1: detected capacity change from 0 to 164 [ 46.935021][ T29] audit: type=1400 audit(1753020177.994:467): avc: denied { read } for pid=4414 comm="syz.3.175" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.959397][ T29] audit: type=1400 audit(1753020177.994:468): avc: denied { open } for pid=4414 comm="syz.3.175" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 46.996766][ T4415] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 47.003395][ T4415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.010992][ T4415] vhci_hcd vhci_hcd.0: Device attached [ 47.029446][ T4434] ISOFS: unable to read i-node block [ 47.034776][ T4434] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 47.078194][ T4434] isofs_fill_super: get root inode failed [ 47.124035][ T4434] loop1: detected capacity change from 0 to 512 [ 47.202593][ T4434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.221063][ T4434] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.246987][ T4436] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 47.263773][ T3946] vhci_hcd: stop threads [ 47.268073][ T3946] vhci_hcd: release socket [ 47.272541][ T3946] vhci_hcd: disconnect device [ 47.288143][ T3391] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 47.295624][ T3391] usb 7-1: enqueue for inactive port 0 [ 47.339356][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.352676][ T3391] usb 7-1: enqueue for inactive port 0 [ 47.372283][ T3391] usb 7-1: enqueue for inactive port 0 [ 47.439531][ T4444] loop1: detected capacity change from 0 to 2048 [ 47.448037][ T4415] mmap: syz.3.175 (4415) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 47.473797][ T4444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.488227][ T3391] vhci_hcd: vhci_device speed not set [ 47.556418][ T29] audit: type=1400 audit(1753020178.614:469): avc: denied { read } for pid=4443 comm="syz.1.184" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.660612][ T4422] Set syz1 is full, maxelem 65536 reached [ 47.676992][ T4444] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.732909][ T4458] Driver unsupported XDP return value 0 on prog (id 146) dev N/A, expect packet loss! [ 47.778748][ T4444] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 17 with error 28 [ 47.791187][ T4444] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.791187][ T4444] [ 47.800877][ T4444] EXT4-fs (loop1): Total free blocks count 0 [ 47.806862][ T4444] EXT4-fs (loop1): Free/Dirty block details [ 47.812804][ T4444] EXT4-fs (loop1): free_blocks=2415919104 [ 47.818553][ T4444] EXT4-fs (loop1): dirty_blocks=32 [ 47.823724][ T4444] EXT4-fs (loop1): Block reservation details [ 47.829730][ T4444] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 47.854351][ T4457] program syz.4.188 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.863809][ T4457] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 47.882822][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.924610][ T4463] netlink: 156 bytes leftover after parsing attributes in process `syz.1.189'. [ 47.949845][ T4463] netlink: 4 bytes leftover after parsing attributes in process `syz.1.189'. [ 47.998809][ T4463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.018870][ T4463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.167864][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.213335][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.220659][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.361394][ T4475] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.370536][ T4475] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.379596][ T4475] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.388693][ T4475] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.907621][ T4501] loop5: detected capacity change from 0 to 164 [ 48.920411][ T4501] ISOFS: unable to read i-node block [ 48.925813][ T4501] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 48.941122][ T4501] isofs_fill_super: get root inode failed [ 48.942940][ T4502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 48.985763][ T4501] loop5: detected capacity change from 0 to 512 [ 49.003412][ T4501] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.037431][ T4501] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.135129][ T4091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.159305][ T4512] netlink: 'GPL': attribute type 10 has an invalid length. [ 49.181471][ T4512] team0: Device macvtap0 failed to register rx_handler [ 49.621884][ T4541] loop5: detected capacity change from 0 to 2048 [ 49.639652][ T4541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.674554][ T4091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.775642][ T4551] netlink: 16 bytes leftover after parsing attributes in process `syz.1.220'. [ 49.881051][ T4558] netlink: 'GPL': attribute type 10 has an invalid length. [ 49.910044][ T4558] veth0_macvtap: left promiscuous mode [ 49.920769][ T4558] veth0_macvtap: entered promiscuous mode [ 49.937777][ T4558] team0: Device macvtap0 failed to register rx_handler [ 49.949559][ T4558] veth0_macvtap: left promiscuous mode [ 50.048877][ T4563] tipc: Enabling of bearer rejected, already enabled [ 50.089032][ T4565] netlink: 'syz.1.224': attribute type 27 has an invalid length. [ 50.114609][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.121898][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.186788][ T4565] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.195502][ T4565] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.203891][ T4565] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.212267][ T4565] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.232897][ T4566] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.243217][ T4566] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.427121][ T4576] loop3: detected capacity change from 0 to 1024 [ 50.460691][ T4576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.465375][ T4579] loop4: detected capacity change from 0 to 512 [ 50.488877][ T4576] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.509621][ T4579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.529008][ T4568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 50.535641][ T4579] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.542208][ T4576] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 3: comm syz.3.226: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.575641][ T4579] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.227: corrupted inode contents [ 50.587662][ T4576] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 50.600790][ T4576] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.600790][ T4576] [ 50.618718][ T4579] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.227: mark_inode_dirty error [ 50.633195][ T4579] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.227: corrupted inode contents [ 50.666035][ T51] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 8: comm kworker/u8:3: lblock 8 mapped to illegal pblock 8 (length 8) [ 50.709833][ T51] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 50.722921][ T51] EXT4-fs (loop3): This should not happen!! Data will be lost [ 50.722921][ T51] [ 50.760017][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.775401][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 50.802866][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 50.809688][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 50.816513][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 50.823276][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 50.830007][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 50.836722][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 50.843452][ T4589] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 51.008945][ T4602] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 51.027168][ T4602] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 51.040819][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.214471][ T4605] netlink: 'syz.3.234': attribute type 3 has an invalid length. [ 51.260025][ T4605] netlink: 'syz.3.234': attribute type 3 has an invalid length. [ 51.311835][ T4605] netlink: 12 bytes leftover after parsing attributes in process `syz.3.234'. [ 51.684236][ T4614] netlink: 'syz.5.237': attribute type 1 has an invalid length. [ 51.691988][ T4614] netlink: 'syz.5.237': attribute type 2 has an invalid length. [ 51.791023][ T4614] Cannot find add_set index 0 as target [ 51.830081][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 51.830096][ T29] audit: type=1326 audit(1753020182.894:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 51.860690][ T4618] loop1: detected capacity change from 0 to 4096 [ 51.879754][ T4618] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.912827][ T29] audit: type=1326 audit(1753020182.894:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 51.936139][ T29] audit: type=1326 audit(1753020182.894:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 51.959441][ T29] audit: type=1326 audit(1753020182.894:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 51.982707][ T29] audit: type=1326 audit(1753020182.894:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 52.006056][ T29] audit: type=1326 audit(1753020182.894:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 52.029246][ T29] audit: type=1326 audit(1753020182.894:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 52.052472][ T29] audit: type=1326 audit(1753020182.894:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 52.075709][ T29] audit: type=1326 audit(1753020182.894:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 52.098869][ T29] audit: type=1326 audit(1753020182.894:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4621 comm="syz.0.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 52.157991][ T3310] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.477933][ T3560] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x84 [ 52.585269][ T4633] loop5: detected capacity change from 0 to 512 [ 52.603190][ T4633] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.620981][ T4667] netlink: 36 bytes leftover after parsing attributes in process `wg1'. [ 52.644928][ T4633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.673086][ T4633] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.795519][ T4091] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.819684][ T4683] loop1: detected capacity change from 0 to 128 [ 52.842337][ T4683] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.854920][ T4683] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.871555][ T4683] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.468707][ T4736] netlink: 'syz.5.265': attribute type 27 has an invalid length. [ 53.555706][ T4736] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.563028][ T4736] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.707820][ T4736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.744592][ T4736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.945060][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.3.263'. [ 54.001030][ T4736] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.009964][ T4736] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.019008][ T4736] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.027922][ T4736] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.313899][ T4738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.378411][ T4738] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.470715][ T4738] net_ratelimit: 2745 callbacks suppressed [ 54.470724][ T4738] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 55.293367][ T4778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.277'. [ 55.372979][ T4784] lo speed is unknown, defaulting to 1000 [ 55.378831][ T4784] lo speed is unknown, defaulting to 1000 [ 55.384903][ T4784] lo speed is unknown, defaulting to 1000 [ 55.391273][ T4784] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 55.398969][ T4784] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 55.542264][ T4784] lo speed is unknown, defaulting to 1000 [ 55.548350][ T4784] lo speed is unknown, defaulting to 1000 [ 55.554550][ T4784] lo speed is unknown, defaulting to 1000 [ 55.561135][ T4784] lo speed is unknown, defaulting to 1000 [ 55.567457][ T4784] lo speed is unknown, defaulting to 1000 [ 55.629105][ T4786] tipc: Enabling of bearer rejected, already enabled [ 55.644527][ T4786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.281'. [ 55.653447][ T4786] tipc: Disabling bearer [ 55.711593][ T4789] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 55.767366][ T4789] IPVS: Error joining to the multicast group [ 55.796008][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.809595][ T4798] netlink: 'syz.4.287': attribute type 4 has an invalid length. [ 55.818407][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.825230][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.832031][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.838756][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.845539][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.852270][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.859442][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.866258][ T4796] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 55.921540][ T4803] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 56.874544][ T29] kauditd_printk_skb: 115 callbacks suppressed [ 56.874580][ T29] audit: type=1400 audit(1753020187.934:778): avc: denied { write } for pid=4818 comm="syz.0.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.900820][ T29] audit: type=1400 audit(1753020187.934:779): avc: denied { name_connect } for pid=4818 comm="syz.0.292" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 56.960201][ T29] audit: type=1326 audit(1753020188.014:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 56.984224][ T29] audit: type=1326 audit(1753020188.014:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 56.984286][ T29] audit: type=1326 audit(1753020188.014:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 56.984307][ T29] audit: type=1326 audit(1753020188.014:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 56.984368][ T29] audit: type=1326 audit(1753020188.014:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 56.984392][ T29] audit: type=1326 audit(1753020188.014:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 56.984454][ T29] audit: type=1326 audit(1753020188.014:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 56.984544][ T29] audit: type=1326 audit(1753020188.014:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4818 comm="syz.0.292" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 57.159754][ T4817] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 57.159773][ T4817] ref_ctr decrement failed for inode: 0x150 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103e4d280 [ 57.159815][ T4817] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 57.159829][ T4817] ref_ctr decrement failed for inode: 0x150 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888103e4d280 [ 57.159847][ T4817] uprobe: syz.4.293:4817 failed to unregister, leaking uprobe [ 57.194298][ T4838] loop3: detected capacity change from 0 to 512 [ 57.243723][ T4838] EXT4-fs (loop3): 1 orphan inode deleted [ 57.244233][ T4838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.244401][ T4838] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.244544][ T3934] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:14: Failed to release dquot type 1 [ 57.245389][ T4838] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.347613][ T4860] tipc: Started in network mode [ 57.353295][ T4860] tipc: Node identity ac14140f, cluster identity 4711 [ 57.361049][ T4860] tipc: New replicast peer: 255.255.255.255 [ 57.367152][ T4860] tipc: Enabled bearer , priority 10 [ 57.389622][ T4860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 57.398608][ T4860] tipc: Disabling bearer [ 57.453799][ T4876] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 57.469814][ T4876] team0: Port device dummy0 added [ 57.471378][ T4878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.299'. [ 57.485384][ T4878] IPVS: Error joining to the multicast group [ 57.487713][ T4876] netlink: 'syz.0.298': attribute type 10 has an invalid length. [ 57.502314][ T4876] team0: Port device dummy0 removed [ 57.508954][ T4876] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 57.584227][ T4893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'. [ 57.593191][ T4893] netlink: 108 bytes leftover after parsing attributes in process `syz.1.303'. [ 57.603680][ T4893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.303'. [ 57.615115][ T4893] netlink: 108 bytes leftover after parsing attributes in process `syz.1.303'. [ 57.885234][ T4924] loop4: detected capacity change from 0 to 128 [ 57.893002][ T4924] EXT4-fs: Ignoring removed nobh option [ 57.913571][ T4924] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.960728][ T4924] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.032518][ T4939] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33040 sclass=netlink_route_socket pid=4939 comm=syz.5.311 [ 58.039981][ T4937] IPVS: Error joining to the multicast group [ 58.046727][ T4939] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 58.140992][ T4943] infiniband syz!: set down [ 58.145564][ T4943] infiniband syz!: added team_slave_0 [ 58.167496][ T4948] IPv6: Can't replace route, no match found [ 58.183334][ T4943] RDS/IB: syz!: added [ 58.189497][ T4943] smc: adding ib device syz! with port count 1 [ 58.195894][ T4943] smc: ib device syz! port 1 has pnetid [ 58.211159][ T4951] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 58.263535][ T4953] netlink: 'syz.3.316': attribute type 6 has an invalid length. [ 58.363481][ T4957] loop3: detected capacity change from 0 to 128 [ 58.378548][ T4957] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.411779][ T4957] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 58.485369][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.500910][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.524582][ T4964] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.600867][ T4964] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.649933][ T4964] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.672843][ T4978] random: crng reseeded on system resumption [ 58.702940][ T4964] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.729047][ T4984] netlink: 'syz.0.329': attribute type 25 has an invalid length. [ 58.740491][ T4984] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 58.751183][ T4984] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 58.783680][ T4964] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.836978][ T4964] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.889864][ T4964] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.902818][ T4998] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 58.945004][ T4964] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.966350][ T4987] macsec0: entered promiscuous mode [ 59.425962][ T5042] __nla_validate_parse: 6 callbacks suppressed [ 59.425979][ T5042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.339'. [ 59.504956][ T5045] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.508165][ T5047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.342'. [ 59.682193][ T5052] wireguard0: entered promiscuous mode [ 59.702308][ T5052] wireguard0: entered allmulticast mode [ 59.822442][ T5062] netlink: 76 bytes leftover after parsing attributes in process `syz.5.347'. [ 60.483631][ T5069] net_ratelimit: 2936 callbacks suppressed [ 60.483648][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.485773][ T5065] lo speed is unknown, defaulting to 1000 [ 60.489639][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.508780][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.515561][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.522385][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.529139][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.535909][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.542704][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.549466][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.556275][ T5069] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 60.572040][ T5073] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 60.887975][ T5088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.897300][ T5088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.919522][ T5088] lo speed is unknown, defaulting to 1000 [ 61.521285][ T5106] xt_hashlimit: size too large, truncated to 1048576 [ 61.622196][ T5108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.362'. [ 62.018199][ T29] kauditd_printk_skb: 349 callbacks suppressed [ 62.018217][ T29] audit: type=1326 audit(1753020192.984:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 62.048298][ T29] audit: type=1326 audit(1753020192.984:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 62.071668][ T29] audit: type=1326 audit(1753020192.984:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 62.095542][ T29] audit: type=1326 audit(1753020192.984:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 62.119400][ T29] audit: type=1326 audit(1753020192.984:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 62.142617][ T29] audit: type=1326 audit(1753020192.984:1141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 62.166520][ T29] audit: type=1326 audit(1753020192.984:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 62.190388][ T29] audit: type=1326 audit(1753020192.984:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 62.213633][ T29] audit: type=1326 audit(1753020192.984:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 62.237481][ T29] audit: type=1326 audit(1753020192.984:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5114 comm="syz.1.365" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 62.521237][ T5120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.367'. [ 62.538360][ T5120] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 62.677266][ T5129] tipc: Enabling of bearer rejected, failed to enable media [ 62.703740][ T5131] netlink: 'syz.4.372': attribute type 4 has an invalid length. [ 62.712109][ T5131] netlink: 17 bytes leftover after parsing attributes in process `syz.4.372'. [ 62.861188][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 62.876620][ T5140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.376'. [ 63.137968][ T5147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.379'. [ 63.296196][ T5152] lo speed is unknown, defaulting to 1000 [ 63.611735][ T5168] loop4: detected capacity change from 0 to 512 [ 63.650426][ T5168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.710241][ T5168] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.900766][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.930750][ T5207] lo speed is unknown, defaulting to 1000 [ 65.536811][ T5253] lo speed is unknown, defaulting to 1000 [ 65.606070][ T5256] vlan0: entered allmulticast mode [ 65.699629][ T5259] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 65.990530][ T5264] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 66.014109][ T5264] team0: Port device dummy0 added [ 66.020868][ T5267] __nla_validate_parse: 1 callbacks suppressed [ 66.020881][ T5267] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.401'. [ 66.092771][ T5264] netlink: 'syz.4.400': attribute type 10 has an invalid length. [ 66.146799][ T5264] team0: Port device dummy0 removed [ 66.167429][ T5264] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.080650][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 67.080663][ T29] audit: type=1400 audit(1753020198.144:1382): avc: denied { write } for pid=5275 comm="syz.3.404" name="file0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.109797][ T29] audit: type=1400 audit(1753020198.144:1383): avc: denied { open } for pid=5275 comm="syz.3.404" path="/70/file0" dev="tmpfs" ino=385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.159064][ T5273] lo speed is unknown, defaulting to 1000 [ 67.253733][ T29] audit: type=1400 audit(1753020198.314:1384): avc: denied { setopt } for pid=5283 comm="syz.3.407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.401701][ T5291] tipc: Failed to obtain node identity [ 67.407220][ T5291] tipc: Enabling of bearer rejected, failed to enable media [ 67.772721][ T29] audit: type=1400 audit(1753020198.554:1385): avc: denied { setopt } for pid=5298 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.793160][ T29] audit: type=1400 audit(1753020198.554:1386): avc: denied { read } for pid=5298 comm="syz.4.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 67.814931][ T29] audit: type=1400 audit(1753020198.734:1387): avc: denied { ioctl } for pid=5304 comm="syz.4.413" path="socket:[10550]" dev="sockfs" ino=10550 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 67.897972][ T29] audit: type=1326 audit(1753020198.854:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 67.922042][ T29] audit: type=1326 audit(1753020198.854:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 67.940046][ T5321] sch_fq: defrate 0 ignored. [ 67.945700][ T29] audit: type=1326 audit(1753020198.854:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 67.974020][ T29] audit: type=1326 audit(1753020198.854:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5311 comm="syz.3.416" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 68.004636][ T5325] lo speed is unknown, defaulting to 1000 [ 68.058431][ T5326] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.422'. [ 68.405781][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 68.520612][ T5338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'. [ 68.774737][ T5342] veth0_vlan: left promiscuous mode [ 68.780120][ T5342] veth0_vlan: entered allmulticast mode [ 68.816197][ T5342] veth0_vlan: entered promiscuous mode [ 68.968427][ T5350] netlink: 24 bytes leftover after parsing attributes in process `syz.3.429'. [ 69.000608][ T5343] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 69.009084][ T5343] ref_ctr decrement failed for inode: 0x10e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104364780 [ 69.053773][ T5343] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 69.063367][ T5343] ref_ctr decrement failed for inode: 0x10e offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104364780 [ 69.092634][ T5353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.098395][ T5343] uprobe: syz.5.425:5343 failed to unregister, leaking uprobe [ 69.099878][ T5353] IPv6: NLM_F_CREATE should be set when creating new route [ 69.194244][ T5358] loop4: detected capacity change from 0 to 512 [ 69.241177][ T5358] journal_path: Lookup failure for './file0/../file0' [ 69.248058][ T5358] EXT4-fs: error: could not find journal device path [ 69.344870][ T5369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.352120][ T5365] capability: warning: `syz.3.435' uses deprecated v2 capabilities in a way that may be insecure [ 69.400480][ T5365] futex_wake_op: syz.3.435 tries to shift op by -1; fix this program [ 69.418703][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 69.427765][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 69.453883][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 69.465862][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 69.508196][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.438'. [ 69.536147][ T5384] SELinux: Context system_u:object_r:selinux_config_t:s0 is not valid (left unmapped). [ 69.562806][ T5389] net_ratelimit: 2998 callbacks suppressed [ 69.562823][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.578250][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.585037][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.591778][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.598551][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.605303][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.609620][ T5393] loop4: detected capacity change from 0 to 512 [ 69.612079][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.624941][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.624996][ T5393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.631668][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.646856][ T5389] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 69.663017][ T5395] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 69.703591][ T5393] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.737851][ T5402] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 69.745162][ T5402] IPv6: NLM_F_CREATE should be set when creating new route [ 69.758817][ T5393] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.770414][ T9] IPVS: starting estimator thread 0... [ 69.846738][ T5412] ªªªªªª: renamed from vlan0 [ 69.870353][ T5405] IPVS: using max 2640 ests per chain, 132000 per kthread [ 69.975246][ T5416] futex_wake_op: syz.1.451 tries to shift op by -1; fix this program [ 70.477392][ T5453] netlink: 'syz.1.462': attribute type 1 has an invalid length. [ 70.510368][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.516150][ T5453] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.538177][ T5453] bond0: (slave batadv0): Enslaving as a backup interface with an up link [ 70.566048][ T5453] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 70.587086][ T5453] bond0 (unregistering): Released all slaves [ 70.653351][ T5460] loop4: detected capacity change from 0 to 1024 [ 70.664374][ T5460] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 70.706787][ T5460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.785923][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.826034][ T5472] netlink: 'syz.4.470': attribute type 1 has an invalid length. [ 70.839345][ T5472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.855585][ T5472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 70.863289][ T5472] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 70.875477][ T5472] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 70.904957][ T5474] gretap1: entered promiscuous mode [ 70.911712][ T5474] bond1: (slave gretap1): making interface the new active one [ 70.920357][ T5474] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 70.940240][ T5472] bond1: (slave vlan0): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 71.122387][ T5442] process 'syz.0.458' launched './file0' with NULL argv: empty string added [ 71.150715][ T5488] wg2: left promiscuous mode [ 71.155702][ T5488] wg2: left allmulticast mode [ 71.624284][ T5501] lo speed is unknown, defaulting to 1000 [ 71.720128][ T5501] loop4: detected capacity change from 0 to 1024 [ 71.726697][ T5501] EXT4-fs: Ignoring removed nobh option [ 71.734235][ T5501] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 71.745806][ T5501] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 71.757905][ T5501] JBD2: no valid journal superblock found [ 71.763673][ T5501] EXT4-fs (loop4): Could not load journal inode [ 72.418219][ T5507] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 72.426607][ T5507] ref_ctr decrement failed for inode: 0x243 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811998bc80 [ 72.438783][ T5507] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 72.447121][ T5507] ref_ctr decrement failed for inode: 0x243 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811998bc80 [ 72.460160][ T5507] uprobe: syz.1.479:5507 failed to unregister, leaking uprobe [ 72.529398][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 72.529412][ T29] audit: type=1326 audit(1753020203.574:1432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 72.560150][ T29] audit: type=1326 audit(1753020203.574:1433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 72.583607][ T29] audit: type=1326 audit(1753020203.574:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f12f964e9e3 code=0x7ffc0000 [ 72.607848][ T29] audit: type=1326 audit(1753020203.584:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f12f964d45f code=0x7ffc0000 [ 72.853025][ T29] audit: type=1326 audit(1753020203.724:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f12f964ea37 code=0x7ffc0000 [ 72.877499][ T29] audit: type=1326 audit(1753020203.724:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12f964d310 code=0x7ffc0000 [ 72.903173][ T29] audit: type=1326 audit(1753020203.724:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f12f964d60a code=0x7ffc0000 [ 72.926305][ T29] audit: type=1326 audit(1753020203.724:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 72.950825][ T29] audit: type=1326 audit(1753020203.724:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 72.974129][ T29] audit: type=1326 audit(1753020203.784:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5511 comm="syz.3.482" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 73.147648][ T5517] netlink: 'syz.4.484': attribute type 4 has an invalid length. [ 73.159171][ T5517] netlink: 'syz.4.484': attribute type 4 has an invalid length. [ 73.184581][ T5519] serio: Serial port ptm0 [ 73.460631][ T5525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 73.467922][ T5525] IPv6: NLM_F_CREATE should be set when creating new route [ 73.513056][ T5532] __nla_validate_parse: 8 callbacks suppressed [ 73.513094][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.492'. [ 73.536914][ T5532] netlink: 4 bytes leftover after parsing attributes in process `syz.5.492'. [ 73.711633][ T5536] lo speed is unknown, defaulting to 1000 [ 74.227581][ T5554] lo speed is unknown, defaulting to 1000 [ 75.164158][ T5559] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 75.173254][ T5559] ref_ctr decrement failed for inode: 0x23b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104367900 [ 75.201338][ T5564] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 75.212799][ T5559] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 75.221819][ T5559] ref_ctr decrement failed for inode: 0x23b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104367900 [ 75.236940][ T5562] lo speed is unknown, defaulting to 1000 [ 75.245431][ T5564] team0: Port device dummy0 added [ 75.259110][ T5564] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 75.285071][ T5564] team0: Port device dummy0 removed [ 75.294090][ T5559] uprobe: syz.0.500:5559 failed to unregister, leaking uprobe [ 75.840651][ T5600] vlan0: entered allmulticast mode [ 75.880991][ T5602] netlink: 24 bytes leftover after parsing attributes in process `syz.0.517'. [ 75.897893][ T5602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'. [ 76.161570][ T5614] lo speed is unknown, defaulting to 1000 [ 77.018962][ T5623] netlink: 'syz.5.525': attribute type 27 has an invalid length. [ 77.334062][ T5643] lo speed is unknown, defaulting to 1000 [ 77.527427][ T5652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.537'. [ 77.539111][ T29] kauditd_printk_skb: 658 callbacks suppressed [ 77.539123][ T29] audit: type=1326 audit(1753020208.594:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56b6395967 code=0x7ffc0000 [ 77.569210][ T29] audit: type=1326 audit(1753020208.604:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56b633ab89 code=0x7ffc0000 [ 77.592728][ T29] audit: type=1326 audit(1753020208.604:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 77.617725][ T29] audit: type=1326 audit(1753020208.634:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56b6395967 code=0x7ffc0000 [ 77.641765][ T29] audit: type=1326 audit(1753020208.634:2104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56b633ab89 code=0x7ffc0000 [ 77.664976][ T29] audit: type=1326 audit(1753020208.634:2105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 77.689070][ T29] audit: type=1326 audit(1753020208.644:2106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56b6395967 code=0x7ffc0000 [ 77.712392][ T29] audit: type=1326 audit(1753020208.644:2107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f56b633ab89 code=0x7ffc0000 [ 77.721595][ T5655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.547'. [ 77.736188][ T29] audit: type=1326 audit(1753020208.644:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 77.768124][ T29] audit: type=1326 audit(1753020208.674:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5631 comm="syz.4.528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f56b6395967 code=0x7ffc0000 [ 77.959826][ T5664] lo speed is unknown, defaulting to 1000 [ 78.019308][ T5658] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 78.027707][ T5658] ref_ctr decrement failed for inode: 0x228 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104364780 [ 78.063199][ T5658] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 78.072278][ T5658] ref_ctr decrement failed for inode: 0x228 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff888104364780 [ 78.087760][ T5658] uprobe: syz.3.538:5658 failed to unregister, leaking uprobe [ 78.113692][ T5667] veth1_to_bond: entered allmulticast mode [ 78.120936][ T5667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.541'. [ 78.131236][ T5667] bond0: (slave bond_slave_1): Releasing backup interface [ 78.142001][ T5667] veth1_to_bond (unregistering): left allmulticast mode [ 78.192828][ T5669] netlink: 'syz.4.542': attribute type 1 has an invalid length. [ 78.206006][ T5669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 78.222666][ T5669] bond2 (unregistering): Released all slaves [ 78.362361][ T5679] lo speed is unknown, defaulting to 1000 [ 78.691720][ T5685] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 78.932691][ T5712] Cannot find del_set index 0 as target [ 79.304861][ T5718] tipc: Enabling of bearer rejected, already enabled [ 79.598837][ T5734] loop4: detected capacity change from 0 to 2048 [ 79.630709][ T5734] Alternate GPT is invalid, using primary GPT. [ 79.637012][ T5734] loop4: p1 p2 p3 [ 79.875918][ T5742] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 79.885177][ T5742] ref_ctr decrement failed for inode: 0x238 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811998ee00 [ 79.896305][ T5742] ref_ctr going negative. vaddr: 0x200000002082, curr val: 0, delta: -1 [ 79.904658][ T5742] ref_ctr decrement failed for inode: 0x238 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88811998ee00 [ 79.916487][ T5742] uprobe: syz.3.562:5742 failed to unregister, leaking uprobe [ 80.084659][ T5746] netlink: 64 bytes leftover after parsing attributes in process `syz.5.564'. [ 80.433307][ T5758] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 80.461719][ T5759] lo speed is unknown, defaulting to 1000 [ 82.054831][ T5791] lo speed is unknown, defaulting to 1000 [ 82.506444][ T5806] netlink: 'syz.0.588': attribute type 10 has an invalid length. [ 82.527149][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 82.536562][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 82.557244][ T29] kauditd_printk_skb: 686 callbacks suppressed [ 82.557256][ T29] audit: type=1326 audit(1753020213.614:2796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 82.604321][ T29] audit: type=1326 audit(1753020213.654:2797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 82.614466][ T5797] lo speed is unknown, defaulting to 1000 [ 82.628885][ T29] audit: type=1326 audit(1753020213.654:2798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 82.628941][ T29] audit: type=1326 audit(1753020213.654:2799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 82.629035][ T29] audit: type=1326 audit(1753020213.654:2800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8ec4eee9a9 code=0x7ffc0000 [ 82.629059][ T29] audit: type=1326 audit(1753020213.654:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 82.629084][ T29] audit: type=1326 audit(1753020213.654:2802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 82.629145][ T29] audit: type=1326 audit(1753020213.654:2803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8ec4eee9a9 code=0x7ffc0000 [ 82.633824][ T29] audit: type=1326 audit(1753020213.694:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 82.633853][ T29] audit: type=1326 audit(1753020213.694:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5794 comm="syz.1.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 82.955253][ T5812] veth1_macvtap: left promiscuous mode [ 82.962518][ T5812] macsec0: entered allmulticast mode [ 82.969000][ T5813] netlink: 24 bytes leftover after parsing attributes in process `syz.0.591'. [ 83.000800][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.591'. [ 83.913338][ T5843] veth1_to_bond: entered allmulticast mode [ 83.960474][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 83.989830][ T5843] bond0: (slave bond_slave_1): Releasing backup interface [ 84.004253][ T5843] veth1_to_bond (unregistering): left allmulticast mode [ 84.021380][ T5845] random: crng reseeded on system resumption [ 84.090178][ T5856] loop4: detected capacity change from 0 to 512 [ 84.096911][ T5856] ext4: Unknown parameter 'nouser_xattr' [ 84.494880][ T5864] lo speed is unknown, defaulting to 1000 [ 85.076583][ T5876] netlink: 92 bytes leftover after parsing attributes in process `syz.0.614'. [ 85.376919][ T5890] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 85.387935][ T5890] netlink: 'syz.0.621': attribute type 4 has an invalid length. [ 86.195251][ T5923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.634'. [ 86.459713][ T5933] lo speed is unknown, defaulting to 1000 [ 87.621327][ T5944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.642'. [ 87.960609][ T5950] netlink: 12 bytes leftover after parsing attributes in process `syz.1.643'. [ 88.653259][ T29] kauditd_printk_skb: 513 callbacks suppressed [ 88.653275][ T29] audit: type=1326 audit(1753020219.714:3319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.689717][ T29] audit: type=1326 audit(1753020219.714:3320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.714303][ T29] audit: type=1326 audit(1753020219.744:3321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.737590][ T29] audit: type=1326 audit(1753020219.744:3322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.762284][ T29] audit: type=1326 audit(1753020219.744:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.785671][ T29] audit: type=1326 audit(1753020219.744:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.810314][ T29] audit: type=1326 audit(1753020219.744:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.833718][ T29] audit: type=1326 audit(1753020219.744:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.858189][ T29] audit: type=1326 audit(1753020219.744:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 88.882099][ T29] audit: type=1326 audit(1753020219.744:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5967 comm="syz.0.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8a66e9a9 code=0x7ffc0000 [ 89.061168][ T5977] netlink: 'syz.3.651': attribute type 4 has an invalid length. [ 89.119468][ T5979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.652'. [ 89.149322][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 90.323412][ T6008] netlink: 'syz.4.665': attribute type 4 has an invalid length. [ 90.348793][ T6005] veth0_vlan: entered allmulticast mode [ 90.380236][ T6004] veth0_vlan: left allmulticast mode [ 90.727838][ T6028] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 90.741390][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 90.764131][ T6031] loop4: detected capacity change from 0 to 512 [ 90.797776][ T6031] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.674: bg 0: block 16: invalid block bitmap [ 90.837180][ T6031] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 90.856455][ T6031] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.674: invalid indirect mapped block 5 (level 0) [ 90.876068][ T6031] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.674: invalid indirect mapped block 4294967295 (level 1) [ 90.898794][ T6031] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.674: invalid indirect mapped block 4294967295 (level 2) [ 90.929027][ T6031] EXT4-fs (loop4): 1 truncate cleaned up [ 90.937355][ T6043] netlink: 'syz.1.678': attribute type 27 has an invalid length. [ 90.938036][ T6031] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.967846][ T3391] lo speed is unknown, defaulting to 1000 [ 90.974301][ T3391] syz0: Port: 1 Link DOWN [ 91.027018][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.033112][ T6048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.679'. [ 91.069921][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 91.081027][ T6052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.681'. [ 91.099342][ T6054] lo speed is unknown, defaulting to 1000 [ 91.113195][ T6056] loop4: detected capacity change from 0 to 512 [ 91.122389][ T6056] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 91.131165][ T6056] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.683: invalid indirect mapped block 2683928664 (level 1) [ 91.150438][ T6056] EXT4-fs (loop4): Remounting filesystem read-only [ 91.157293][ T6056] EXT4-fs (loop4): 1 truncate cleaned up [ 91.179183][ T6056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.277493][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.622820][ T6071] bond0: entered promiscuous mode [ 91.627877][ T6071] bond0: entered allmulticast mode [ 91.633568][ T6071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.641955][ T6071] bond0 (unregistering): Released all slaves [ 92.090841][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.098757][ T6078] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.109629][ T6078] net_ratelimit: 3321 callbacks suppressed [ 92.109638][ T6078] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.194392][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.5.692'. [ 92.208890][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.692'. [ 92.248791][ T6088] netlink: 'syz.1.703': attribute type 4 has an invalid length. [ 92.261479][ T6086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 92.365178][ T6104] netlink: 'syz.5.700': attribute type 4 has an invalid length. [ 92.375556][ T6104] netlink: 'syz.5.700': attribute type 4 has an invalid length. [ 92.814735][ T6126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.709'. [ 92.903795][ T6128] lo speed is unknown, defaulting to 1000 [ 93.500855][ T6150] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.573048][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 94.573063][ T29] audit: type=1326 audit(1753020225.634:3666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6168 comm="syz.5.721" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 94.634403][ T29] audit: type=1326 audit(1753020225.654:3667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.657801][ T29] audit: type=1326 audit(1753020225.654:3668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.681756][ T29] audit: type=1326 audit(1753020225.654:3669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.705165][ T29] audit: type=1326 audit(1753020225.654:3670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.729084][ T29] audit: type=1326 audit(1753020225.654:3671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.752436][ T29] audit: type=1326 audit(1753020225.654:3672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.776497][ T29] audit: type=1326 audit(1753020225.654:3673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.800670][ T29] audit: type=1326 audit(1753020225.654:3674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 94.824045][ T29] audit: type=1326 audit(1753020225.654:3675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6170 comm="syz.4.725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 95.019831][ T6180] lo speed is unknown, defaulting to 1000 [ 95.386458][ T6185] netlink: 404 bytes leftover after parsing attributes in process `syz.0.731'. [ 95.472121][ T6192] loop4: detected capacity change from 0 to 512 [ 95.493608][ T6192] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.514284][ T6192] ext4 filesystem being mounted at /148/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.582397][ T6201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.737'. [ 96.433501][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.811682][ T6260] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 98.429615][ T6268] rdma_op ffff888119032d80 conn xmit_rdma 0000000000000000 [ 98.676693][ T6275] netlink: 'syz.3.764': attribute type 1 has an invalid length. [ 98.796284][ T6279] netlink: 'syz.4.767': attribute type 1 has an invalid length. [ 98.855571][ T6279] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 98.879390][ T6279] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 98.920611][ T6285] macvlan2: entered promiscuous mode [ 98.925969][ T6285] macvlan2: entered allmulticast mode [ 98.960143][ T6285] bond2: entered promiscuous mode [ 98.971110][ T6285] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 98.990454][ T6285] bond2: left promiscuous mode [ 99.046640][ T6292] batman_adv: batadv0: Adding interface: ip6gretap1 [ 99.053366][ T6292] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.079670][ T6292] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 99.117626][ T6296] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 99.167546][ T6287] batman_adv: batadv0: Removing interface: ip6gretap1 [ 99.180068][ T6299] netlink: 3 bytes leftover after parsing attributes in process `syz.3.770'. [ 99.195419][ T6298] loop4: detected capacity change from 0 to 512 [ 99.211816][ T6296] bond1: entered promiscuous mode [ 99.244937][ T6296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.256539][ T6299] batadv1: entered promiscuous mode [ 99.262432][ T6299] batadv1: entered allmulticast mode [ 99.270263][ T6298] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 99.287077][ T6299] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 99.305680][ T6298] EXT4-fs (loop4): mount failed [ 99.311636][ T6299] bond1: (slave batadv1): making interface the new active one [ 99.327240][ T6299] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 99.592018][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 99.592036][ T29] audit: type=1326 audit(1753020230.644:4982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 99.622904][ T29] audit: type=1326 audit(1753020230.644:4983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 99.646288][ T29] audit: type=1326 audit(1753020230.644:4984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8ec4eee9a9 code=0x7ffc0000 [ 99.691011][ T6277] lo speed is unknown, defaulting to 1000 [ 99.713733][ T29] audit: type=1326 audit(1753020230.664:4985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 99.738371][ T29] audit: type=1326 audit(1753020230.664:4986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 99.762305][ T29] audit: type=1326 audit(1753020230.664:4987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8ec4eee9a9 code=0x7ffc0000 [ 99.786300][ T29] audit: type=1326 audit(1753020230.664:4988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 99.810667][ T29] audit: type=1326 audit(1753020230.664:4989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 99.833940][ T29] audit: type=1326 audit(1753020230.664:4990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f8ec4eee9a9 code=0x7ffc0000 [ 99.858631][ T29] audit: type=1326 audit(1753020230.684:4991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6318 comm="syz.1.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 100.684872][ T6353] loop4: detected capacity change from 0 to 128 [ 100.702141][ T6353] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.715084][ T6353] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.728445][ T6353] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 100.757441][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.930563][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.793'. [ 101.190902][ T6362] IPVS: Error connecting to the multicast addr [ 102.274497][ T6405] netlink: 100 bytes leftover after parsing attributes in process `syz.3.810'. [ 102.380963][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.392196][ T6407] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.424862][ T6407] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.433341][ T6407] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.442154][ T6407] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.450953][ T6407] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.626684][ T6420] x_tables: ip_tables: osf match: only valid for protocol 6 [ 102.726648][ T6428] loop4: detected capacity change from 0 to 1024 [ 102.740539][ T6428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.762812][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.790581][ T6432] vlan0: entered allmulticast mode [ 102.795765][ T6432] dummy0: entered allmulticast mode [ 102.937253][ T6440] loop4: detected capacity change from 0 to 128 [ 102.983100][ T6448] netlink: 'syz.1.824': attribute type 1 has an invalid length. [ 102.996990][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.183424][ T6463] netlink: 4 bytes leftover after parsing attributes in process `syz.5.829'. [ 103.810678][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 103.826043][ T6490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.838'. [ 103.853029][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 103.895612][ T6493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.839'. [ 104.108824][ T6499] netlink: 'syz.0.841': attribute type 10 has an invalid length. [ 104.121481][ T6499] netlink: 'syz.0.841': attribute type 4 has an invalid length. [ 104.129881][ T6499] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.841'. [ 104.294761][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 104.419190][ T6506] bond1: entered promiscuous mode [ 104.424271][ T6506] bond1: entered allmulticast mode [ 104.436823][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.453076][ T6506] bond1 (unregistering): Released all slaves [ 104.505490][ T6517] loop4: detected capacity change from 0 to 128 [ 104.523044][ T6517] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.538767][ T6517] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 104.957545][ T6539] netlink: 'syz.3.856': attribute type 1 has an invalid length. [ 104.972550][ T6539] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.185074][ T6553] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 105.192950][ T6553] team0: Device macvtap1 is already an upper device of the team interface [ 105.233357][ T6557] netlink: 'syz.3.863': attribute type 1 has an invalid length. [ 105.247021][ T6557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.263128][ T6557] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.270845][ T6557] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 105.282295][ T6557] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 105.316469][ T6561] veth5: entered promiscuous mode [ 105.324316][ T6561] bond3: (slave veth5): Enslaving as an active interface with a down link [ 105.374052][ T6557] erspan0: entered allmulticast mode [ 105.389296][ T6557] bond3: (slave erspan0): making interface the new active one [ 105.407091][ T6557] bond3: (slave erspan0): Enslaving as an active interface with an up link [ 105.430818][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.682215][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.690879][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.714650][ T6578] lo speed is unknown, defaulting to 1000 [ 106.149823][ T6580] tipc: Enabled bearer , priority 0 [ 106.178533][ T6579] tipc: Resetting bearer [ 106.192935][ T6579] tipc: Disabling bearer [ 106.263491][ T6582] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 106.291364][ T6582] bond1: entered promiscuous mode [ 106.303120][ T6582] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.349256][ T6582] netlink: 3 bytes leftover after parsing attributes in process `syz.0.870'. [ 106.379778][ T6582] batadv1: entered promiscuous mode [ 106.385075][ T6582] batadv1: entered allmulticast mode [ 106.419128][ T6582] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 106.441779][ T6582] bond1: (slave batadv1): making interface the new active one [ 106.459908][ T6417] IPVS: starting estimator thread 0... [ 106.461233][ T6582] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 106.548537][ T6591] IPVS: using max 2496 ests per chain, 124800 per kthread [ 106.721732][ T29] kauditd_printk_skb: 1168 callbacks suppressed [ 106.721748][ T29] audit: type=1326 audit(1753020237.784:6160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.758082][ T29] audit: type=1326 audit(1753020237.784:6161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.782473][ T29] audit: type=1326 audit(1753020237.814:6162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.805960][ T29] audit: type=1326 audit(1753020237.814:6163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.833140][ T29] audit: type=1326 audit(1753020237.814:6164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.856541][ T29] audit: type=1326 audit(1753020237.814:6165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.860143][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.881'. [ 106.879935][ T29] audit: type=1326 audit(1753020237.814:6166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.912903][ T29] audit: type=1326 audit(1753020237.814:6167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.936178][ T29] audit: type=1326 audit(1753020237.814:6168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.959871][ T29] audit: type=1326 audit(1753020237.814:6169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6605 comm="syz.3.879" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 106.989584][ T6614] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 106.997887][ T6614] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.006286][ T6614] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.015430][ T6614] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.025149][ T6614] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 107.032329][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.881'. [ 107.048871][ T6610] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.128888][ T6642] vlan2: left promiscuous mode [ 108.133801][ T6642] veth1: left promiscuous mode [ 108.138919][ T6642] bridge0: port 4(vlan2) entered disabled state [ 108.158845][ T6642] veth3: left allmulticast mode [ 108.163759][ T6642] veth3: left promiscuous mode [ 108.169268][ T6642] bridge0: port 3(veth3) entered disabled state [ 108.177184][ T6642] bridge_slave_1: left allmulticast mode [ 108.182907][ T6642] bridge_slave_1: left promiscuous mode [ 108.188555][ T6642] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.196906][ T6642] bridge_slave_0: left allmulticast mode [ 108.203162][ T6642] bridge_slave_0: left promiscuous mode [ 108.208932][ T6642] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.217678][ T6642] bond0: (slave bridge0): Releasing backup interface [ 108.330433][ T6644] bond0: (slave dummy0): Releasing backup interface [ 108.338653][ T6644] bond0: (slave bond_slave_0): Releasing backup interface [ 108.347251][ T6644] bond0: (slave bond_slave_1): Releasing backup interface [ 108.360785][ T6644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.369532][ T6644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.377452][ T6644] bond0: (slave veth0_to_hsr): Releasing backup interface [ 108.390432][ T6644] bond1: (slave batadv1): Releasing active interface [ 108.400625][ T6644] bond2: (slave geneve2): Releasing backup interface [ 108.408750][ T6644] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 108.417205][ T6644] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 108.426379][ T6644] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 108.434956][ T6644] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 108.444587][ T6646] netlink: 'syz.5.893': attribute type 3 has an invalid length. [ 108.707165][ T6672] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.904'. [ 108.717569][ T6670] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.904'. [ 109.301610][ T6681] netlink: 'syz.0.905': attribute type 27 has an invalid length. [ 109.535783][ T4483] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=4483 comm=kworker/0:5 [ 109.548747][ T6688] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 109.600338][ T6691] IPVS: Error connecting to the multicast addr [ 109.660724][ T6696] netlink: 'syz.4.912': attribute type 10 has an invalid length. [ 109.712228][ T6696] team0: Device hsr_slave_0 failed to register rx_handler [ 109.736716][ T6699] Falling back ldisc for ttyS3. [ 110.364128][ T6740] tipc: Enabled bearer , priority 0 [ 110.373826][ T6739] tipc: Resetting bearer [ 110.397227][ T6739] tipc: Disabling bearer [ 111.444465][ T6769] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 111.559123][ T6775] tipc: Enabling of bearer rejected, failed to enable media [ 111.703907][ T6784] SELinux: syz.0.946 (6784) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 111.736313][ T6786] xt_CT: No such helper "pptp" [ 111.755517][ T29] kauditd_printk_skb: 526 callbacks suppressed [ 111.755530][ T29] audit: type=1326 audit(1753020242.814:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.789844][ T29] audit: type=1326 audit(1753020242.854:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.813353][ T29] audit: type=1326 audit(1753020242.854:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.836769][ T29] audit: type=1326 audit(1753020242.854:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.860930][ T29] audit: type=1326 audit(1753020242.854:6700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.884287][ T29] audit: type=1326 audit(1753020242.854:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.908427][ T29] audit: type=1326 audit(1753020242.854:6702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.931796][ T29] audit: type=1326 audit(1753020242.854:6703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.955826][ T29] audit: type=1326 audit(1753020242.854:6704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 111.979907][ T29] audit: type=1326 audit(1753020242.854:6705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6789 comm="syz.5.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fae799de9a9 code=0x7ffc0000 [ 112.075212][ T6797] netlink: 'syz.3.949': attribute type 4 has an invalid length. [ 112.128831][ T6801] batadv_slave_1: entered promiscuous mode [ 112.234241][ T6797] netlink: 'syz.3.949': attribute type 4 has an invalid length. [ 112.250120][ T6805] batadv_slave_1: left promiscuous mode [ 112.913527][ T6808] lo speed is unknown, defaulting to 1000 [ 112.994666][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.5.954'. [ 113.010978][ T6815] netlink: 8 bytes leftover after parsing attributes in process `syz.5.954'. [ 113.023922][ T6815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 113.032826][ T6815] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 113.080535][ T6815] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 113.180319][ T6815] bond1 (unregistering): Released all slaves [ 113.229793][ T6821] vlan2: entered allmulticast mode [ 113.234948][ T6821] vlan1: entered allmulticast mode [ 113.240721][ T6821] veth0_vlan: entered allmulticast mode [ 113.685844][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.966'. [ 114.046441][ T6875] netlink: 72 bytes leftover after parsing attributes in process `syz.3.987'. [ 114.196561][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.980'. [ 114.271679][ T6879] lo speed is unknown, defaulting to 1000 [ 114.861929][ T6911] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 114.873048][ T6911] netlink: 'syz.3.988': attribute type 4 has an invalid length. [ 114.902865][ T6915] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.925961][ T6918] loop4: detected capacity change from 0 to 512 [ 114.934297][ T6918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.947934][ T6918] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.962194][ T6918] bond0: (slave dummy0): Releasing backup interface [ 114.970367][ T6918] bridge_slave_0: left promiscuous mode [ 114.975981][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.983642][ T6918] bridge_slave_1: left allmulticast mode [ 114.989480][ T6918] bridge_slave_1: left promiscuous mode [ 114.995198][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.003866][ T6918] bond0: (slave bond_slave_0): Releasing backup interface [ 115.015897][ T6918] team0: Port device team_slave_0 removed [ 115.021072][ T6924] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 115.032470][ T6918] team0: Port device team_slave_1 removed [ 115.041914][ T6918] bond1: (slave gretap1): Releasing active interface [ 115.060259][ T6922] lo speed is unknown, defaulting to 1000 [ 115.074401][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.232590][ T6929] //: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 115.246509][ T6929] CPU: 0 UID: 0 PID: 6929 Comm: // Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 115.246603][ T6929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 115.246615][ T6929] Call Trace: [ 115.246622][ T6929] [ 115.246630][ T6929] __dump_stack+0x1d/0x30 [ 115.246652][ T6929] dump_stack_lvl+0xe8/0x140 [ 115.246673][ T6929] dump_stack+0x15/0x1b [ 115.246689][ T6929] warn_alloc+0x12b/0x1a0 [ 115.246738][ T6929] __vmalloc_node_range_noprof+0x9c/0xe00 [ 115.246833][ T6929] ? __futex_wait+0x1ff/0x260 [ 115.246861][ T6929] ? __pfx_futex_wake_mark+0x10/0x10 [ 115.246900][ T6929] ? __rcu_read_unlock+0x4f/0x70 [ 115.246923][ T6929] ? avc_has_perm_noaudit+0x1b1/0x200 [ 115.246951][ T6929] ? should_fail_ex+0x30/0x280 [ 115.246977][ T6929] ? xskq_create+0x36/0xe0 [ 115.247010][ T6929] vmalloc_user_noprof+0x7d/0xb0 [ 115.247047][ T6929] ? xskq_create+0x80/0xe0 [ 115.247093][ T6929] xskq_create+0x80/0xe0 [ 115.247113][ T6929] xsk_init_queue+0x95/0xf0 [ 115.247134][ T6929] xsk_setsockopt+0x35c/0x510 [ 115.247152][ T6929] ? __pfx_xsk_setsockopt+0x10/0x10 [ 115.247242][ T6929] __sys_setsockopt+0x184/0x200 [ 115.247361][ T6929] __x64_sys_setsockopt+0x64/0x80 [ 115.247390][ T6929] x64_sys_call+0x2bd5/0x2fb0 [ 115.247445][ T6929] do_syscall_64+0xd2/0x200 [ 115.247507][ T6929] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.247531][ T6929] ? clear_bhb_loop+0x40/0x90 [ 115.247551][ T6929] ? clear_bhb_loop+0x40/0x90 [ 115.247575][ T6929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.247701][ T6929] RIP: 0033:0x7f12f964e9a9 [ 115.247721][ T6929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.247737][ T6929] RSP: 002b:00007f12f7c8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 115.247754][ T6929] RAX: ffffffffffffffda RBX: 00007f12f9876080 RCX: 00007f12f964e9a9 [ 115.247768][ T6929] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 115.247835][ T6929] RBP: 00007f12f96d0d69 R08: 0000000000000004 R09: 0000000000000000 [ 115.247848][ T6929] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.247860][ T6929] R13: 0000000000000000 R14: 00007f12f9876080 R15: 00007ffc9af1c3a8 [ 115.247876][ T6929] [ 115.247885][ T6929] Mem-Info: [ 115.331815][ T6939] netlink: 52 bytes leftover after parsing attributes in process `syz.0.997'. [ 115.335618][ T6929] active_anon:39976 inactive_anon:0 isolated_anon:0 [ 115.335618][ T6929] active_file:20934 inactive_file:2509 isolated_file:0 [ 115.335618][ T6929] unevictable:0 dirty:68 writeback:0 [ 115.335618][ T6929] slab_reclaimable:3259 slab_unreclaimable:34456 [ 115.335618][ T6929] mapped:32007 shmem:36869 pagetables:936 [ 115.335618][ T6929] sec_pagetables:0 bounce:0 [ 115.335618][ T6929] kernel_misc_reclaimable:0 [ 115.335618][ T6929] free:1802077 free_pcp:32944 free_cma:0 [ 115.534817][ T6929] Node 0 active_anon:159772kB inactive_anon:0kB active_file:83736kB inactive_file:10036kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:132196kB dirty:376kB writeback:0kB shmem:147364kB writeback_tmp:0kB kernel_stack:3680kB pagetables:3980kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 115.564520][ T6929] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 115.593669][ T6929] lowmem_reserve[]: 0 2882 7860 7860 [ 115.599069][ T6929] Node 0 DMA32 free:2947720kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951348kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 115.630115][ T6929] lowmem_reserve[]: 0 0 4978 4978 [ 115.635222][ T6929] Node 0 Normal free:4245228kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:159772kB inactive_anon:0kB active_file:83736kB inactive_file:10036kB unevictable:0kB writepending:448kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:127764kB local_pcp:67164kB free_cma:0kB [ 115.667878][ T6929] lowmem_reserve[]: 0 0 0 0 [ 115.672626][ T6929] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 115.685307][ T6929] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 2*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947720kB [ 115.701845][ T6929] Node 0 Normal: 1495*4kB (UME) 792*8kB (UM) 285*16kB (UME) 102*32kB (UME) 103*64kB (UME) 41*128kB (UME) 54*256kB (UME) 42*512kB (UM) 32*1024kB (UM) 16*2048kB (UME) 1004*4096kB (UM) = 4245228kB [ 115.721018][ T6929] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 115.730742][ T6929] 60281 total pagecache pages [ 115.735471][ T6929] 0 pages in swap cache [ 115.739654][ T6929] Free swap = 124996kB [ 115.743832][ T6929] Total swap = 124996kB [ 115.747966][ T6929] 2097051 pages RAM [ 115.751773][ T6929] 0 pages HighMem/MovableOnly [ 115.756430][ T6929] 80814 pages reserved [ 116.054694][ T6952] tipc: Enabling of bearer rejected, failed to enable media [ 116.093184][ T6955] 9pnet_fd: Insufficient options for proto=fd [ 116.110302][ T6943] Set syz1 is full, maxelem 65536 reached [ 116.122748][ T6955] 9pnet_fd: Insufficient options for proto=fd [ 116.171506][ T6958] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 116.178069][ T6958] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 116.186279][ T6958] vhci_hcd vhci_hcd.0: Device attached [ 116.188438][ T6964] lo: entered allmulticast mode [ 116.272221][ T6969] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1008'. [ 116.401265][ T6972] netlink: 'syz.5.1007': attribute type 10 has an invalid length. [ 116.411823][ T6972] team0: Port device dummy0 added [ 116.749421][ T6417] vhci_hcd: vhci_device speed not set [ 116.808783][ T6417] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 116.816786][ T6962] vhci_hcd: connection reset by peer [ 116.828938][ T3593] vhci_hcd: stop threads [ 116.833273][ T3593] vhci_hcd: release socket [ 116.837700][ T3593] vhci_hcd: disconnect device [ 116.860108][ T29] kauditd_printk_skb: 423 callbacks suppressed [ 116.860123][ T29] audit: type=1400 audit(1753020247.924:7129): avc: denied { read } for pid=6973 comm="syz.0.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.955135][ T6956] lo: left allmulticast mode [ 116.981362][ T6976] xt_hashlimit: max too large, truncated to 1048576 [ 117.011061][ T29] audit: type=1400 audit(1753020248.074:7130): avc: denied { read write } for pid=6977 comm="syz.4.1011" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.035730][ T29] audit: type=1400 audit(1753020248.074:7131): avc: denied { open } for pid=6977 comm="syz.4.1011" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 117.118948][ T29] audit: type=1326 audit(1753020248.164:7132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 117.143153][ T29] audit: type=1326 audit(1753020248.174:7133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 117.166828][ T29] audit: type=1326 audit(1753020248.174:7134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 117.190863][ T29] audit: type=1326 audit(1753020248.174:7135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 117.214260][ T29] audit: type=1326 audit(1753020248.174:7136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 117.238268][ T29] audit: type=1326 audit(1753020248.174:7137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 117.261669][ T29] audit: type=1326 audit(1753020248.174:7138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6980 comm="syz.3.1012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12f964e9a9 code=0x7ffc0000 [ 117.263179][ T6978] loop4: detected capacity change from 0 to 4096 [ 117.296892][ T6978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.701925][ T6999] $Hÿ: renamed from bond0 (while UP) [ 117.725930][ T6999] $Hÿ: entered promiscuous mode [ 117.731059][ T6999] bond_slave_0: entered promiscuous mode [ 117.736766][ T6999] bond_slave_1: entered promiscuous mode [ 118.253646][ T7011] bridge0: entered promiscuous mode [ 118.351581][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.525224][ T7020] 9pnet: p9_errstr2errno: server reported unknown error [ 118.860959][ T7037] xt_CT: No such helper "netbios-ns" [ 119.037264][ T7045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1033'. [ 119.656538][ T7057] wg2: entered promiscuous mode [ 119.662802][ T7057] wg2: entered allmulticast mode [ 119.710770][ T7061] loop4: detected capacity change from 0 to 512 [ 119.750393][ T7061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.782464][ T7061] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.866500][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.953116][ T7078] 9pnet_fd: Insufficient options for proto=fd [ 120.114359][ T7090] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 120.123408][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 120.133331][ T7090] netlink: 'syz.3.1050': attribute type 31 has an invalid length. [ 120.180526][ T7092] lo speed is unknown, defaulting to 1000 [ 120.265660][ T7094] lo speed is unknown, defaulting to 1000 [ 120.673549][ T7097] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1052'. [ 120.689078][ T7097] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.790163][ T7103] netlink: 'syz.0.1055': attribute type 4 has an invalid length. [ 120.922400][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1066'. [ 121.055591][ T7115] lo speed is unknown, defaulting to 1000 [ 121.904617][ T6417] usb 1-1: enqueue for inactive port 0 [ 121.913529][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 121.913549][ T29] audit: type=1326 audit(1753020252.974:7368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 121.945152][ T29] audit: type=1326 audit(1753020252.974:7369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8ec4e8ab89 code=0x7ffc0000 [ 121.969754][ T29] audit: type=1326 audit(1753020252.974:7370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f8ec4eee9a9 code=0x7ffc0000 [ 122.369375][ T7117] lo speed is unknown, defaulting to 1000 [ 122.604685][ T6417] usb 1-1: enqueue for inactive port 0 [ 122.615114][ T29] audit: type=1326 audit(1753020253.664:7371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7100 comm="syz.1.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8ec4ee5967 code=0x7ffc0000 [ 122.683980][ T6417] vhci_hcd: vhci_device speed not set [ 122.776272][ T7126] rdma_op ffff8881009ca980 conn xmit_rdma 0000000000000000 [ 122.878615][ T7122] lo speed is unknown, defaulting to 1000 [ 123.154399][ T7132] xt_CT: No such helper "snmp_trap" [ 123.503217][ T7139] netlink: 'syz.5.1065': attribute type 1 has an invalid length. [ 123.766709][ T7146] xt_hashlimit: max too large, truncated to 1048576 [ 123.845161][ T7153] netlink: 'syz.3.1070': attribute type 8 has an invalid length. [ 123.853512][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1070'. [ 123.963433][ T7156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'. [ 124.174638][ T7149] lo speed is unknown, defaulting to 1000 [ 124.348667][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1075'. [ 124.384906][ T7168] loop4: detected capacity change from 0 to 1764 [ 124.394432][ T29] audit: type=1400 audit(1753020255.454:7372): avc: denied { mount } for pid=7167 comm="syz.4.1076" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 124.485971][ T29] audit: type=1400 audit(1753020255.544:7373): avc: denied { unmount } for pid=3312 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 124.514096][ T29] audit: type=1326 audit(1753020255.574:7374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 124.540126][ T29] audit: type=1326 audit(1753020255.574:7375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 124.563712][ T29] audit: type=1326 audit(1753020255.584:7376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 124.588000][ T29] audit: type=1326 audit(1753020255.584:7377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7169 comm="syz.4.1077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 124.847001][ T7185] wg2: entered promiscuous mode [ 124.852694][ T7185] wg2: entered allmulticast mode [ 125.024656][ T7195] x_tables: duplicate underflow at hook 4 [ 125.124751][ T7196] lo speed is unknown, defaulting to 1000 [ 125.637126][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 125.646161][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'. [ 125.655853][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1091'. [ 125.666103][ T7203] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1091'. [ 125.675105][ T7203] netlink: 'syz.1.1091': attribute type 6 has an invalid length. [ 125.867826][ T7195] Set syz1 is full, maxelem 65536 reached [ 126.395551][ T7243] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.1105'. [ 126.509932][ T7245] lo speed is unknown, defaulting to 1000 [ 126.874402][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 126.890600][ T7250] hsr_slave_0 (unregistering): left promiscuous mode [ 126.908074][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1109'. [ 127.086025][ T7261] loop4: detected capacity change from 0 to 8192 [ 127.126244][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 127.126258][ T29] audit: type=1326 audit(1753020258.184:7548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.157023][ T29] audit: type=1326 audit(1753020258.184:7549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.277411][ T29] audit: type=1326 audit(1753020258.244:7550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.302126][ T29] audit: type=1326 audit(1753020258.244:7551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.325563][ T29] audit: type=1326 audit(1753020258.244:7552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.325625][ T29] audit: type=1326 audit(1753020258.244:7553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.325648][ T29] audit: type=1326 audit(1753020258.244:7554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.325682][ T29] audit: type=1326 audit(1753020258.244:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.325703][ T29] audit: type=1326 audit(1753020258.244:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.325745][ T29] audit: type=1326 audit(1753020258.244:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7260 comm="syz.4.1112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56b639e9a9 code=0x7ffc0000 [ 127.680541][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1119'. [ 127.696820][ T7285] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1119'. [ 127.842671][ T7288] netlink: 'syz.4.1118': attribute type 10 has an invalid length. [ 127.851674][ T7288] team0: Port device dummy0 added [ 128.043835][ T7293] netlink: 'syz.5.1121': attribute type 13 has an invalid length. [ 128.236885][ T7275] Set syz1 is full, maxelem 65536 reached [ 128.246854][ T7293] gretap0: refused to change device tx_queue_len [ 128.253294][ T7293] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 128.547811][ T7312] netlink: 'syz.4.1131': attribute type 1 has an invalid length. [ 128.975342][ T7314] lo speed is unknown, defaulting to 1000 [ 129.097982][ T7324] loop4: detected capacity change from 0 to 512 [ 129.108432][ T7324] EXT4-fs: Ignoring removed bh option [ 129.120545][ T7324] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 129.130309][ T7324] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 129.160073][ T7324] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 129.179428][ T7324] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 129.197149][ T7324] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.328426][ T7335] team1: entered promiscuous mode [ 129.351023][ T7335] team1: entered allmulticast mode [ 129.452335][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.347212][ T7360] rdma_op ffff888119801980 conn xmit_rdma 0000000000000000 [ 131.506436][ T7387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.520499][ T7389] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 131.800031][ T7404] lo speed is unknown, defaulting to 1000 [ 132.326826][ T29] kauditd_printk_skb: 616 callbacks suppressed [ 132.326842][ T29] audit: type=1326 audit(1753020263.384:8174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.357680][ T29] audit: type=1326 audit(1753020263.384:8175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.382267][ T29] audit: type=1326 audit(1753020263.384:8176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.405766][ T29] audit: type=1326 audit(1753020263.384:8177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.430484][ T29] audit: type=1326 audit(1753020263.384:8178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.453913][ T29] audit: type=1326 audit(1753020263.384:8179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.478531][ T29] audit: type=1326 audit(1753020263.384:8180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.502447][ T29] audit: type=1326 audit(1753020263.384:8181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.526625][ T29] audit: type=1326 audit(1753020263.384:8182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.551272][ T29] audit: type=1326 audit(1753020263.384:8183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.1.1154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec4eee9a9 code=0x7fc00000 [ 132.701645][ T7364] lo speed is unknown, defaulting to 1000 [ 133.018571][ T7438] lo speed is unknown, defaulting to 1000 [ 133.323386][ T7451] loop4: detected capacity change from 0 to 4096 [ 133.342275][ T7451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.387371][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.406157][ T7456] netlink: 'syz.1.1178': attribute type 4 has an invalid length. [ 133.416306][ T7456] netlink: 'syz.1.1178': attribute type 4 has an invalid length. [ 133.425803][ T6417] lo speed is unknown, defaulting to 1000 [ 133.431876][ T6417] syz0: Port: 1 Link ACTIVE [ 133.447614][ T7460] lo speed is unknown, defaulting to 1000 [ 133.496813][ T7461] loop4: detected capacity change from 0 to 512 [ 133.513114][ T7461] EXT4-fs: Ignoring removed mblk_io_submit option [ 133.519691][ T7461] EXT4-fs: Ignoring removed bh option [ 133.525979][ T7461] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.540755][ T7461] EXT4-fs (loop4): 1 truncate cleaned up [ 133.558083][ T7461] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.794467][ T7477] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 133.804228][ T7477] netlink: 'syz.0.1185': attribute type 4 has an invalid length. [ 133.903911][ T7482] __nla_validate_parse: 4 callbacks suppressed [ 133.903926][ T7482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 133.965296][ T5242] ================================================================== [ 133.973404][ T5242] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 133.982868][ T5242] [ 133.985179][ T5242] write to 0xffff888119e9d428 of 2 bytes by task 7460 on cpu 1: [ 133.992800][ T5242] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 133.998682][ T5242] generic_perform_write+0x2c2/0x490 [ 134.003957][ T5242] ext4_buffered_write_iter+0x1ee/0x3c0 [ 134.009497][ T5242] ext4_file_write_iter+0x383/0xf00 [ 134.014688][ T5242] iter_file_splice_write+0x5ef/0x970 [ 134.020057][ T5242] direct_splice_actor+0x156/0x2a0 [ 134.025165][ T5242] splice_direct_to_actor+0x312/0x680 [ 134.030536][ T5242] do_splice_direct+0xda/0x150 [ 134.035296][ T5242] do_sendfile+0x380/0x650 [ 134.039703][ T5242] __x64_sys_sendfile64+0x105/0x150 [ 134.044891][ T5242] x64_sys_call+0xb39/0x2fb0 [ 134.049471][ T5242] do_syscall_64+0xd2/0x200 [ 134.053964][ T5242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.059847][ T5242] [ 134.062158][ T5242] read to 0xffff888119e9d400 of 1024 bytes by task 5242 on cpu 0: [ 134.069956][ T5242] copy_folio_from_iter_atomic+0x7fc/0x1170 [ 134.075841][ T5242] generic_perform_write+0x2c2/0x490 [ 134.081118][ T5242] shmem_file_write_iter+0xc5/0xf0 [ 134.086221][ T5242] lo_rw_aio+0x6a0/0x760 [ 134.090461][ T5242] loop_process_work+0x52d/0xa60 [ 134.095398][ T5242] loop_workfn+0x31/0x40 [ 134.099641][ T5242] process_scheduled_works+0x4cb/0x9d0 [ 134.105099][ T5242] worker_thread+0x582/0x770 [ 134.109687][ T5242] kthread+0x489/0x510 [ 134.113746][ T5242] ret_from_fork+0xda/0x150 [ 134.118237][ T5242] ret_from_fork_asm+0x1a/0x30 [ 134.122992][ T5242] [ 134.125300][ T5242] Reported by Kernel Concurrency Sanitizer on: [ 134.131441][ T5242] CPU: 0 UID: 0 PID: 5242 Comm: kworker/u8:20 Not tainted 6.16.0-rc6-syzkaller-00281-gf4a40a4282f4 #0 PREEMPT(voluntary) [ 134.144105][ T5242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 134.154153][ T5242] Workqueue: loop4 loop_workfn [ 134.158923][ T5242] ================================================================== [ 134.310232][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.