last executing test programs: 5.087279136s ago: executing program 3 (id=487): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000005c0)='tlb_flush\x00', r1}, 0x10) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000042020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r3, &(0x7f0000000300)='./file0\x00', 0x8800, &(0x7f0000001dc0)={0x0, 0x1, 0x80000, {r3}}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r5, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r8}, 0x10) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000001c0)={0x0, 0x220000, 0x1800, 0x101, 0x2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5.062159668s ago: executing program 4 (id=488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendto$inet(r2, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x1, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7020000f3ffff"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r7, 0xc0481273, &(0x7f0000000000)) recvmsg(r2, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r8, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1, &(0x7f0000000880)=[{&(0x7f0000000700)=""/186, 0xba}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f0000989000/0x1000)=nil, 0x1000, 0x300001d, 0x50, r0, 0x26b10000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0) 4.921413832s ago: executing program 3 (id=490): mlockall(0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_GSO_MAX_SIZE={0x8}]}, 0x28}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r3, 0x89e1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000008c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x108}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES64=r5, @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r9 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) creat(0x0, 0x0) mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r10 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r10, 0x4c04, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x1718, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a4b78c660e677df701908b9aaa3f6a00400", "036c47c6780820d1cbf7896de1fdcf335263bdbcef0100a197fce47ddfdd753abd9501ce721b6ae9b49600002a000000000000000000000000000018c900", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) pwritev2(r9, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) epoll_wait(0xffffffffffffffff, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x6, 0x1) 4.331560969s ago: executing program 4 (id=493): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = timerfd_create(0x8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x368, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "c6d84a", 0x332, 0x21, 0x0, @loopback, @remote, {[@dstopts={0x73, 0x28, '\x00', [@generic={0x6, 0xfd, "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"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x7, [0xbbbd, 0x0, 0x8, 0x8, 0x1, 0xfffffffffffffffe]}}]}, @fragment={0x3b, 0x0, 0xe5, 0x1, 0x0, 0x7, 0x67}, @dstopts={0x2f, 0x10, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0xd, 0xb, [0x2, 0xc, 0x6, 0x6, 0x0, 0x400000000000038d, 0x89, 0x5, 0xd492]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x7, [0x0]}}, @generic={0x3, 0x16, "5fe8b66421e43f8eca755b77afe6e25e1b96e7055689"}]}, @fragment={0x32, 0x0, 0x4, 0x1, 0x0, 0x18, 0x64}, @routing={0x4, 0x4, 0x1, 0xff, 0x0, [@mcast2, @loopback]}, @fragment={0x3c, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68}, @routing={0xb5, 0x0, 0xf769a651eadcf8af, 0x4}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x18}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}], {{0x4e23, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0xa, 0x5, "4c42ad", 0x9, "20d3b3"}, "5e2678d613f021ded3f4b603743a26d2800a405d9579356ce8f7aa71afb99adc70d753d17f36005925034d3856f8c1c8a1e494ca046e88108251d5b03091bd64d4f87a33bb96a373681d2b86978f498755ea13653d4a9e5f353ed5bf2799b35e29abbbc1e5e00f80466e3da6bb6df1c9ef3ad2b6b4612ce98b0dd250ad664fb6fa00802635d75aaab48c784410334a75008fe4e88751f261e36db0cccc771ab08fab7a704016dac098bcc7ae9c90a9c526718bc214f1c6358d4289d9139cb3f78eeeca6577c0319c6e078348d27f952502b99a621c3393494dba62f4790366197c86"}}}}}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r8], 0xe4}}, 0x0) flock(r9, 0x2) 3.830519078s ago: executing program 3 (id=494): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x128, 0x17, 0x0, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x10001}}, 0x128}}, 0x4001) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pipe2$9p(&(0x7f00000000c0), 0x80000) getresuid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) unshare(0x60000200) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x99) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getdents64(0xffffffffffffffff, 0xffffffffffffffff, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000004c00)={0xec, r5, 0xe701ac47a3d23ecd, 0x0, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}]}, 0xec}}, 0x0) 3.830033018s ago: executing program 0 (id=495): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x1a) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2, 0xfffffffffffffff2, 0x9, 0x6}, 0x3}, 0x20, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 'veth0_macvtap\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x80, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, r5, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) shutdown(r7, 0x0) connect$unix(r7, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r9 = accept(r8, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) 3.829558788s ago: executing program 2 (id=496): socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x0, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) write$binfmt_script(r0, &(0x7f00000000c0), 0xfffffff9) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x11c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}, @TCA_STAB={0xe0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8, 0xd7, 0x6, 0x8b1e, 0x2, 0x0, 0x5, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x9, 0x9, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3, 0x2}}, {0x8, 0x2, [0x9, 0x101]}}, {{0x1c, 0x1, {0x7, 0xe, 0x2, 0x80000001, 0x0, 0xc26, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x9b, 0x2, 0x8, 0x0, 0x3, 0xc4, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xa3, 0x2, 0x401, 0x7ff, 0x2, 0x4f, 0xcad, 0x6}}, {0x10, 0x2, [0x6, 0xd3d7, 0x0, 0x401, 0x7, 0x800]}}, {{0x1c, 0x1, {0x2, 0x3, 0xfffa, 0x40, 0x2, 0xffffffff, 0x0, 0x2}}, {0x8, 0x2, [0x40, 0x5]}}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x81, @loopback, 0x78}, 0x1c) write$binfmt_misc(r0, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0xffffffffffffff40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x76a, &(0x7f0000001b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x8048}], 0x1, 0x5412, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7a680000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty, 0x80000}, @nfc={0x27, 0x0, 0x1, 0x6}, @nl=@unspec, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)='veth0_macvtap\x00', 0x0, 0xfdffffff}) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x24004080}, 0x24004801) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000380)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 3.793431622s ago: executing program 0 (id=497): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000100), 0xc) bind$qrtr(r2, &(0x7f0000000080)={0x2a, 0x1, 0x97ff}, 0xc) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='powernv_throttle\x00', r4}, 0x10) close(r3) close(r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x0, {0x1, 0xff}, {0x1, 0xff, 0x3}, 0x2, 0x1}, {0x0, 0x0, {0x1, 0xf0, 0x4}, {0x1, 0x1, 0x4}, 0x1, 0xfe}], 0x40) ptrace(0x10, r7) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000040)={0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) 3.759933555s ago: executing program 0 (id=498): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) 3.758967675s ago: executing program 0 (id=499): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000030000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000500000002000000001000"], 0x48) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) mq_open(0x0, 0x41, 0x0, 0x0) r2 = gettid() ptrace$setregset(0x4205, 0x0, 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x101080e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRESOCT=r2], 0x1, 0x67e, &(0x7f0000001600)="$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") r3 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000268000/0x4000)=nil, 0x4000, 0x1000002, 0x4016012, r3, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x4000, &(0x7f0000000340)="befe70ddee14b7864c8d7dce4dda91d2000d3f786a93564f86c7f6c59eeb4775aa926e35e7d2980de43523dc8d95644c7d8044764c38f72d6405b1d2d4df83005b6c45eba4183a9692e0762c5fe266382bb9c4ced6732afffa5142d63bad", 0x5e, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f00000004c0)="758dc02ba163c5b3c2fbe70febf42a6365306d49f1113dbd510fcc0b1ba080200ac24dd60b77ebf70a5ae5a223adffa7ff057cc084460a7842dfee17e7dd10405eb3fc57f585c383c390bc8f6aa3bf0cfb4671f7956be73ad6b6bf6e2a7767587d10bfaea77b001477d3fe991741c6be204e92cd2c6cad0e9cfe7021dc5fc6fdc9dd2348583a6f7f2e685eee91b3979cd0b10d66c5b4ae7f1a4af76bc4f6ea4df85fb47007c3548b9295e1d910e7") r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x25dfdbff, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{0x3}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {0x2}, {}, {0xfffffffc}, {0x0, 0xe}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x10, 0xa14b}, {}, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xe10}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0x20}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 3.591845602s ago: executing program 3 (id=500): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_vlan\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', 0x1}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) readv(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x40, 0x34}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r3, 0x5}, &(0x7f0000000300)=0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a000000020000", 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r4, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 3.591410642s ago: executing program 1 (id=501): socket$netlink(0x10, 0x3, 0x8000000004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) socket(0x25, 0x5, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}, {0x0}, {&(0x7f0000000200)="0819eb5b33d003df163d4d42e388f3cf7e2e958bd8bc7938e3db0738148d6d5813cb3cc4293b2aa9853c2f144197d7d8fa9c08251336bb75c97e2d650f10e281c1115c9daa2e070732994c558c6445aa0d3e47d39a2ceb0764cef92c1b0c979e7e4825e148bd685ae533cb44581bfe852e770ce2870fdf5bbffbb0c6d0a8d766e069ef770f139f6b492fab04e5e9cda619390137bb24962ffa682e07", 0x9c}, {&(0x7f00000002c0)="deb701feccc5daf1a808768e602dd9259abdc318cec6cb69e40195fd9b06752578606bb754f87f0b97e62b8d02ffc1fe5b00801284880cb9c77cd278adfa8a75141c5c84681db8cace52003248e7d143b60575ce6605d0710a515c5b0832f8bfa62974d7589642ac8428fe80bcb26f78ec12857d8053deb1814c5d363c139d68937f07a3f5de48543cf24884c8957f1d60624e65c5b873b488b6481d6898ef6367cc3292310ba747d4f528b62e9a4389d760e6c0cc93da0ed2694531e2db0969e67c846326a1b0fbbe2375fd565ba6ddec366a95429da9ed84", 0xd9}, {0x0}], 0x5}}], 0x1, 0x2004000) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x20, 0x80, 0x0, 0xead, {{0x5, 0x4, 0x0, 0x38, 0x14, 0x66, 0x0, 0x2c, 0x4, 0x0, @empty, @empty}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002980)={0xffffffffffffffff, 0x20, &(0x7f0000002940)={&(0x7f00000027c0)=""/130, 0x82, 0x0, &(0x7f0000002880)=""/178, 0xb2}}, 0x10) pipe(&(0x7f00000029c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002a00), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000002a40)='/sys/kernel/address_bits', 0x210000, 0xc) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1f, 0x10, &(0x7f0000001200)=ANY=[@ANYBLOB="010aff6e0b8877271806000000000000000000008007000000120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$zero(0xffffffffffffff9c, 0x0, 0x10000, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002d80)={{r5}, 0x0, &(0x7f0000002d40)=r4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0x1, 0x0) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}, {&(0x7f0000000100)="a7", 0x1}], 0x2, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) close_range(r6, 0xffffffffffffffff, 0x0) 3.356292654s ago: executing program 4 (id=503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) set_mempolicy(0x3, 0x0, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet(r2, &(0x7f0000008dc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="88830326", 0x4}], 0x1}}], 0x1, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x210c0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000bc0)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r3, r1}) write(r2, 0x0, 0x0) 3.307002909s ago: executing program 4 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c000000"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) socketpair(0xa, 0x3, 0x40, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000280)='FREEZING\x00', 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x220104, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2000000, 0x180, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r5}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 3.244591085s ago: executing program 1 (id=505): pipe(&(0x7f0000000000)) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002800000005002e3d8df0dcbe00000028e9596d01007770616e3000000005009d"], 0x30}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="61050905e504060605010a3d56332f077cecf90ab915e101260d"], 0x1a) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r8, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) r9 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) shutdown(r9, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r10}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$USBDEVFS_GETDRIVER(r8, 0x41045508, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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") syslog(0x9, &(0x7f0000000940)=""/163, 0xa3) ftruncate(0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 2.9875823s ago: executing program 1 (id=506): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000c5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = gettid() r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000540)=""/22, 0x16, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x120) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./file1\x00', 0x200010, &(0x7f0000000980)={[{@block_validity}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@abort}, {@data_ordered}, {@journal_async_commit}, {@usrquota}, {@noauto_da_alloc}]}, 0xfb, 0x54c, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec+9Nzz0593t6Tk5CAhhaE9mPQsSrEfFtEnG47dho5Acn1s5bfXh9NtuSaDQ++yuJJN/XOj/Jfx/MM69ExG9fR5wsbCy3tryyUCqX08U8P1mvXJmsLa+culQpzafz6eXpmZkz78xMv//eu32r65vn//nh07sfnfnm+Or3v9w/cjuJs3EoP9Zejx240Z6ZiIn8ORmLs0+cONWHwgZJstsXwLaM5HE+FlkfcDhG8qgH/v++iogGMKQS8Q9DqjUOaM3t+zQPfmE8+HBtArSx/qNrr43Evubc6MBq8tjMKJvvjveh/KyMX/+8czvbon+vQwBs6cbNiDg9Orqx/0vy/m/7TvdwzpNl6P/g+bmbjX/e6jT+KayPf6LD+Odgh9jdjq3jv3C/D8V0lY3/Pug4/l1ftBofyXMvNcd8Y8nFS+U069tejogTMbY3y2+2nnNm9V6j27H28V+2ZeW3xoL5ddwf3fv4Y+ZK9dJO6tzuwc2I1zqOf5P19k86tH/2fJzvsYxj6Z3Xux3buv7PVuPniDc6tv+jFa1k8/XJyeb9MNm6Kzb6+9ax37uVv9v1z9r/wOb1H0/a12trT1/GT/v+Tbsd2+79vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr/Kz+J45v3v91uv/3R8QXPdb/1tFbXU8dhPafe6r2f/rEvY+//LFb+b21/9vN1Il8Ty/9X68XuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G5XHgAAAAAAAAAAAAAAAAAAAAbEwS6f/8/8MbLbVwc8c77yG4bXlvHfj296AgaS//8wvMQ/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/AMAAAAAAAAAAAAAAAAAAAAAAAAAAEBfnT93Ltsaqw+vz2b5uavLSwvVq6fm0tpCsbI0W5ytLl4pzler8+W0OFutbPX3ytXqlanpWLo2WU9r9cna8sqFSnXpcv3CpUppPr2Qjj2XWgEAAAAAAAAAAAAAAAAAAMCLpba8slAql9NFCYltJUYH4zIk+pzY7Z4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB75LwAA///MUDi3") r4 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) preadv(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/44, 0x2c}], 0x1, 0xdecf, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r5 = syz_io_uring_setup(0xae4, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2}}, 0x20) r8 = fcntl$dupfd(r6, 0x0, r6) write$P9_RLOPEN(r8, &(0x7f0000000140)={0x18, 0xd, 0x2, {{0x2, 0x1, 0x5}, 0x3}}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS2(r5, 0xf, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r10, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r11, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000f00)=""/219, 0xdb}], 0x1}, 0xfffffffe}], 0x2, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000034004000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a1a83d5f59ecb", 0xd8}], 0x1}, 0x0) 2.844120064s ago: executing program 0 (id=507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0600000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000d3ff0000009ff4f710a385dc91fbb00e4cbb22502eef05fb635a4105cf4dabaa6889124b3ebc8c7ab8c83d3952b51eb9368c2a287902a5709197f5f5c5294bcf7f09097d38ba3555dcb61f6c6ff241a68e37c3225b5ac4867558532a715261ab327107a46979434a8b5546aad5405d6c114a6ad96c8589bd67b6aaf2ef594ae34d69a11243232232ace9e39ad495a88f4d305b8b2f221a7ba8d719503000d77988c93589e350b389411b59196db0e33b8631069b6b2b8f58c0422c6bea0bfd0019a442f9e14f3014daae2aca88427a0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="ad2fa2b70ffc06501385724e8b07c982632782c2fd3ef163f00299573ebc49aae480dec3e7cea1fecea522a743be4d901e6b671b134d8767cf7a768e442c69593a476839aa0460488dd3e2359f4f0c8c9ac4c8073d69adcd80c24eb24177acbd2872cec228617487d012f8183d7de308dc7d5f4238713383ff90b0ffc2536f", @ANYRESOCT=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) faccessat(r2, &(0x7f0000000000)='./file0\x00', 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="000000000000000000000000df3bfd0d00000000956393f575c4281c8dc13a1b84762b973cba596f932fc0852aa4da07779b118142caebc6ad5436d265a7667bc3b40da0955c9d876c02259b892bb951ec93570e11fcc52c33f4156fcc5b07480c3d1fa5dddd9c2c25f751f8299e6bbe74e302fd81637436f050e00286a1d12f1bdcefe7f45c3fade19d2624f7d3501ac1aeabdbd665f51d4664311646bd04b672e6c4d471ab8b6cceaa7ac95f360a4f4ce08dbc94fe7302db0fc570dc7b0b079e906c26d3db9e608b79f26da6f38c9538dd009e1fcff9e956f72ef68ebfa5d0d9fc0f776c", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb700000008000000b7040013000000d0850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) syz_clone3(&(0x7f0000000440)={0x800000, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={0x0, r6}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) renameat2(r7, &(0x7f0000000940)='./file0/file0\x00', 0xffffffffffffffff, &(0x7f0000000500)='./file0\x00', 0x8f) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000083850000002d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0xbe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) r9 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, &(0x7f0000000000)='cpu&\t0_&\t') 2.518241366s ago: executing program 1 (id=508): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000500), 0x400000, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000100), 0xc) bind$qrtr(r2, &(0x7f0000000080)={0x2a, 0x1, 0x97ff}, 0xc) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000400)='powernv_throttle\x00', r4}, 0x10) close(r3) close(r5) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0x0, {0x1, 0xff}, {0x1, 0xff, 0x3}, 0x2, 0x1}, {0x0, 0x0, {0x1, 0xf0, 0x4}, {0x1, 0x1, 0x4}, 0x1, 0xfe}], 0x40) ptrace(0x10, r7) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r8, 0x84, 0x4, &(0x7f0000000540), &(0x7f0000000580)=0x4) ptrace$getregset(0x4205, r7, 0x202, &(0x7f0000000040)={0x0}) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, 0x0) 2.256767771s ago: executing program 2 (id=509): r0 = socket$inet(0x2, 0xa, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000005c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f200011800e000100636f6e6e6c696d69740000000c0002800800014000000000400000000c0a01020000000000000000010000000900020073797a320000000014000380100000800800034000000002040400800900010073797a30"], 0xe4}}, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r5, 0x8b06, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f0000000080)=0x13) ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x1a) rseq(&(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2, 0xfffffffffffffff2, 0x9, 0x6}, 0x3}, 0x20, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000380)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 'veth0_macvtap\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x6, &(0x7f0000000940)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x80, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, r5, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bind$unix(r8, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) shutdown(r7, 0x0) connect$unix(r7, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r9 = accept(r8, 0x0, 0x0) sendto$inet6(r9, &(0x7f0000000000)='\x00', 0x1, 0x0, 0x0, 0x0) 2.255746791s ago: executing program 0 (id=518): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x66, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x20000400) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, 0x0, &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) ptrace$getsig(0x4202, r6, 0x3bbb, &(0x7f0000000280)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'lc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) 2.255263731s ago: executing program 1 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11e, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7ba36189ae1c51870c3cb38495c18b9d8c6331483e595a803ea3370cb0cb5ee3ad8209602d3e8a1b87c189c01ac140b2ee6a6621223695829b5ff65610883dd3f1c4de23f2778e3a6182a902a74067cbb35c44d2e082959ca5b228c033e6e34418d07847c0cf8ae21d83d2e5b48caecb9790c163477fbac4ff629b3a034f765220ea58d705b1eee7d73ffb228563e9485c33fdcff5a83dac1534", @ANYRES16=0x0, @ANYBLOB="080026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40004) close_range(r0, 0xffffffffffffffff, 0x0) 2.007677156s ago: executing program 2 (id=511): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) 1.992240287s ago: executing program 2 (id=512): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fdffffff000000001d63000008000300", @ANYRES32=r3, @ANYBLOB="0c002f800800010003000000"], 0x28}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) r7 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x2000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/235, 0xeb) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004c8d9}, 0xd4) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) open(0x0, 0x64842, 0x0) 1.839626112s ago: executing program 2 (id=513): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = timerfd_create(0x8, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000080)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x3, 0x0, "9ecf3315567f14d56a87d134cc409e2a652dbbf6c50480937c6fa85af81bc6fc54b71f03985ac33e31d612d976a6efcda8853b8a4430503621f06679995d916cb4361795dd7dbae51d07384b7c2e6949"}, 0xd8) syz_emit_ethernet(0x368, &(0x7f0000000400)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @dccp_packet={0xe, 0x6, "c6d84a", 0x332, 0x21, 0x0, @loopback, @remote, {[@dstopts={0x73, 0x28, '\x00', [@generic={0x6, 0xfd, "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"}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x1, 0xc, 0x4, 0x7, [0xbbbd, 0x0, 0x8, 0x8, 0x1, 0xfffffffffffffffe]}}]}, @fragment={0x3b, 0x0, 0xe5, 0x1, 0x0, 0x7, 0x67}, @dstopts={0x2f, 0x10, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x50, {0x3, 0x12, 0xd, 0xb, [0x2, 0xc, 0x6, 0x6, 0x0, 0x400000000000038d, 0x89, 0x5, 0xd492]}}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x7, [0x0]}}, @generic={0x3, 0x16, "5fe8b66421e43f8eca755b77afe6e25e1b96e7055689"}]}, @fragment={0x32, 0x0, 0x4, 0x1, 0x0, 0x18, 0x64}, @routing={0x4, 0x4, 0x1, 0xff, 0x0, [@mcast2, @loopback]}, @fragment={0x3c, 0x0, 0x3, 0x0, 0x0, 0x3, 0x68}, @routing={0xb5, 0x0, 0xf769a651eadcf8af, 0x4}, @hopopts={0x32, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @enc_lim={0x4, 0x1, 0x18}, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}], {{0x4e23, 0x4e23, 0x4, 0x1, 0x4, 0x0, 0x0, 0xa, 0x5, "4c42ad", 0x9, "20d3b3"}, "5e2678d613f021ded3f4b603743a26d2800a405d9579356ce8f7aa71afb99adc70d753d17f36005925034d3856f8c1c8a1e494ca046e88108251d5b03091bd64d4f87a33bb96a373681d2b86978f498755ea13653d4a9e5f353ed5bf2799b35e29abbbc1e5e00f80466e3da6bb6df1c9ef3ad2b6b4612ce98b0dd250ad664fb6fa00802635d75aaab48c784410334a75008fe4e88751f261e36db0cccc771ab08fab7a704016dac098bcc7ae9c90a9c526718bc214f1c6358d4289d9139cb3f78eeeca6577c0319c6e078348d27f952502b99a621c3393494dba62f4790366197c86"}}}}}}, 0x0) timerfd_settime(r2, 0x3, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = gettid() r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x40, 0x16, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_ADDRESS={0x14, 0x1, @private0}, @IFA_LOCAL={0x14, 0x2, @loopback}]}, 0x40}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r8, 0x5) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRESOCT=r8], 0xe4}}, 0x0) flock(r9, 0x2) 1.784069637s ago: executing program 4 (id=514): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0x0, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = socket(0x2, 0x80805, 0x0) syz_mount_image$iso9660(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="00526dce397821ebb0dbf64c79f98225da1152f3594ffbed4541378a984bbaac8e68cd5987de566fdf87ea4a598b0356706d931fc3ecbeb17944394808fa3cc6063216d6161c75bea32008ec1f3a21c2e2dd2430b5c37fdaf2f4ae778c91b9a0e3f71b80ea31aaf99ee037b7b8f779e64902b8e05d7cf67b29601df800c437da07d455086e39af87ed63b3e0b670a8a4c24d48a19136155f261e982621baf1d12f804fc9998d2b6012f9b749"], 0x1, 0xd7c, &(0x7f0000000e40)="$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") sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) dup(r5) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESDEC=r6]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000480)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000900)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r3}, 0x10) ioctl$F2FS_IOC_START_VOLATILE_WRITE(0xffffffffffffffff, 0xf503, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000006, 0x42031, 0xffffffffffffffff, 0x180000000) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 894.808283ms ago: executing program 3 (id=502): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="f53d9b43fcfa6ca290a353d9184958c2c78fb91e", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) ioctl$EVIOCGLED(0xffffffffffffffff, 0x80404519, &(0x7f0000001140)=""/97) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0001400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b031000f4ff020002004788aa96a13bb1000000000086ddffff", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) 998.17µs ago: executing program 3 (id=515): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000005c0)='./bus\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@jqfmt_vfsv1}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@debug}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="3f64a84f51168e7e4f545697eb2df727ded138a4e0aeb8a9ca0d17c01bed37497b3ad0423200862e9a5a1142010340130d8972f9441ea396406c3799", 0x3c, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/247, 0xf7}}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r0, 0xc, 0x0, @val=@target_btf_id=r1}, 0x14) r2 = creat(&(0x7f0000000240)='./bus\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x200, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa102000008000000b703000000000000a51400000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) r8 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r8, &(0x7f00000008c0)=ANY=[@ANYBLOB="73fc0b050a791c91aebe71081c6cee9ad244406f9f5e7374656d70753a6f626a6563745f723a696e697463746c53743a73300d2fbf884d7f379f204691908929d3da20756e636f6e66"], 0x2c) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYRESHEX=r7, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x4, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xb, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open_tree(r4, &(0x7f0000000000)='./bus\x00', 0x1000) r10 = open(&(0x7f0000000280)='./bus\x00', 0x10d042, 0x12) sendfile(r4, r10, 0x0, 0x10001) 768.7µs ago: executing program 4 (id=516): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) 330.81µs ago: executing program 1 (id=526): socket$nl_netfilter(0x10, 0x3, 0xc) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11e, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/timer\x00', 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, 0x0, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = syz_io_uring_setup(0x6ae5, &(0x7f0000000440)={0x0, 0x0, 0x2}, &(0x7f0000004000), &(0x7f0000000340)) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r3, 0x12, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r6, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="7ba36189ae1c51870c3cb38495c18b9d8c6331483e595a803ea3370cb0cb5ee3ad8209602d3e8a1b87c189c01ac140b2ee6a6621223695829b5ff65610883dd3f1c4de23f2778e3a6182a902a74067cbb35c44d2e082959ca5b228c033e6e34418d07847c0cf8ae21d83d2e5b48caecb9790c163477fbac4ff629b3a034f765220ea58d705b1eee7d73ffb228563e9485c33fdcff5a83dac1534aed039f7282331f144fadfb9c01db32093bf672578", @ANYBLOB="080026bd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40004) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=517): mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) kernel console output (not intermixed with test programs): _1) entered blocking state [ 46.054551][ T1027] tipc: Node number set to 2886997162 [ 46.055261][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.095904][ T4190] bridge_slave_1: entered allmulticast mode [ 46.113671][ T4190] bridge_slave_1: entered promiscuous mode [ 46.161289][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.198361][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.245652][ T4190] team0: Port device team_slave_0 added [ 46.270744][ T4190] team0: Port device team_slave_1 added [ 46.319296][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.326323][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.352355][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.410599][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.417698][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.443652][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.455965][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.478657][ T4190] hsr_slave_0: entered promiscuous mode [ 46.490472][ T4190] hsr_slave_1: entered promiscuous mode [ 46.497684][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.505458][ T4190] Cannot create hsr debugfs directory [ 46.610165][ T4262] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 46.752397][ T4273] lo speed is unknown, defaulting to 1000 [ 46.762897][ T29] kauditd_printk_skb: 451 callbacks suppressed [ 46.762910][ T29] audit: type=1400 audit(1727755131.213:19450): avc: denied { create } for pid=4281 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.822017][ T3265] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.831857][ T29] audit: type=1400 audit(1727755131.213:19451): avc: denied { connect } for pid=4281 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.851759][ T29] audit: type=1400 audit(1727755131.213:19452): avc: denied { bind } for pid=4281 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 46.871463][ T29] audit: type=1400 audit(1727755131.213:19453): avc: denied { create } for pid=4281 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 46.874124][ T4190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 46.891025][ T29] audit: type=1400 audit(1727755131.223:19454): avc: denied { create } for pid=4281 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.917201][ T29] audit: type=1400 audit(1727755131.223:19455): avc: denied { getopt } for pid=4281 comm="syz.0.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 46.936961][ T29] audit: type=1400 audit(1727755131.273:19456): avc: denied { read } for pid=4290 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 46.957266][ T29] audit: type=1400 audit(1727755131.273:19457): avc: denied { create } for pid=4290 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 47.077262][ T29] audit: type=1400 audit(1727755131.403:19458): avc: denied { shutdown } for pid=4296 comm="syz.1.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.083827][ T4190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.096957][ T29] audit: type=1400 audit(1727755131.423:19459): avc: denied { execmem } for pid=4290 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 47.189410][ T4303] loop0: detected capacity change from 0 to 256 [ 47.268702][ T4304] hub 6-0:1.0: USB hub found [ 47.273401][ T4304] hub 6-0:1.0: 8 ports detected [ 47.518578][ T4303] FAT-fs (loop0): codepage cp936 not found [ 47.663814][ T4190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.971139][ T4190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.049974][ T4315] syzkaller0: entered allmulticast mode [ 48.101431][ T4315] syzkaller0 (unregistering): left allmulticast mode [ 48.167396][ T4318] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.307277][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.320233][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.331773][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.338866][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.390499][ T4340] netlink: 'syz.3.220': attribute type 4 has an invalid length. [ 48.473706][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 48.484292][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 48.565423][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.572491][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.612479][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.699546][ T4362] syzkaller0: entered promiscuous mode [ 48.705065][ T4362] syzkaller0: entered allmulticast mode [ 48.708256][ T4366] netlink: 24 bytes leftover after parsing attributes in process `syz.1.223'. [ 48.911608][ T4388] loop0: detected capacity change from 0 to 512 [ 48.931324][ T4388] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 48.983936][ T4388] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 48.999054][ T4388] EXT4-fs (loop0): 1 truncate cleaned up [ 49.009113][ T4388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.025870][ T4190] veth0_vlan: entered promiscuous mode [ 49.046669][ T4190] veth1_vlan: entered promiscuous mode [ 49.089116][ T4190] veth0_macvtap: entered promiscuous mode [ 49.098426][ T4190] veth1_macvtap: entered promiscuous mode [ 49.133236][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.143832][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.153870][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.164367][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.174198][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 49.184763][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.217162][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.245566][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.256127][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.265992][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.276505][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.286352][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.296833][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.306708][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.317197][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.329159][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.365441][ T4190] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.374309][ T4190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.383118][ T4190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.391879][ T4190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.402349][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.404738][ T4386] lo speed is unknown, defaulting to 1000 [ 49.538292][ T4386] chnl_net:caif_netlink_parms(): no params data found [ 49.547390][ T4445] sctp: [Deprecated]: syz.1.230 (pid 4445) Use of struct sctp_assoc_value in delayed_ack socket option. [ 49.547390][ T4445] Use struct sctp_sack_info instead [ 49.635888][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.643073][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.661662][ T4386] bridge_slave_0: entered allmulticast mode [ 49.668440][ T4386] bridge_slave_0: entered promiscuous mode [ 49.675684][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.682770][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.690318][ T4386] bridge_slave_1: entered allmulticast mode [ 49.696745][ T4386] bridge_slave_1: entered promiscuous mode [ 49.727425][ T4386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.749145][ T4386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.769741][ T50] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.788135][ T4386] team0: Port device team_slave_0 added [ 49.793907][ T4465] lo speed is unknown, defaulting to 1000 [ 49.795041][ T4386] team0: Port device team_slave_1 added [ 49.820874][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.827871][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.853827][ T4386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.869504][ T50] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.880735][ T4386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.887789][ T4386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.913769][ T4386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.940244][ T50] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.960788][ T4469] capability: warning: `syz.4.232' uses deprecated v2 capabilities in a way that may be insecure [ 49.978208][ T4469] loop4: detected capacity change from 0 to 512 [ 49.989774][ T4469] loop4: detected capacity change from 0 to 512 [ 49.990982][ T4386] hsr_slave_0: entered promiscuous mode [ 50.007688][ T4386] hsr_slave_1: entered promiscuous mode [ 50.022504][ T4386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.030857][ T4386] Cannot create hsr debugfs directory [ 50.037816][ T50] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.101994][ T4471] lo speed is unknown, defaulting to 1000 [ 50.116624][ T4086] kernel write not supported for file /snd/seq (pid: 4086 comm: kworker/0:4) [ 50.167807][ T50] bridge_slave_1: left allmulticast mode [ 50.173486][ T50] bridge_slave_1: left promiscuous mode [ 50.179435][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.187392][ T50] bridge_slave_0: left allmulticast mode [ 50.193162][ T50] bridge_slave_0: left promiscuous mode [ 50.198876][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.297391][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.315808][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.332537][ T50] bond0 (unregistering): Released all slaves [ 50.356645][ T4480] team0 (unregistering): Port device team_slave_1 removed [ 50.369510][ T4478] netlink: 'syz.0.235': attribute type 21 has an invalid length. [ 50.377365][ T4478] netlink: 132 bytes leftover after parsing attributes in process `syz.0.235'. [ 50.391009][ T50] tipc: Disabling bearer [ 50.396062][ T50] tipc: Left network mode [ 50.488750][ T50] hsr_slave_0: left promiscuous mode [ 50.500493][ T4493] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 50.508944][ T50] hsr_slave_1: left promiscuous mode [ 50.517497][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.525012][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.588550][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.596072][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.611267][ T50] veth1_macvtap: left promiscuous mode [ 50.616891][ T50] veth0_macvtap: left promiscuous mode [ 50.622714][ T50] veth1_vlan: left promiscuous mode [ 50.628029][ T50] veth0_vlan: left promiscuous mode [ 50.742964][ T50] infiniband syz1: set down [ 50.892083][ T4508] netlink: 'syz.2.240': attribute type 30 has an invalid length. [ 50.952805][ T4511] loop2: detected capacity change from 0 to 2048 [ 50.955338][ T50] team0 (unregistering): Port device team_slave_1 removed [ 50.977483][ T50] team0 (unregistering): Port device team_slave_0 removed [ 50.985439][ T4511] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.998589][ T131] smc: removing ib device syz1 [ 51.029686][ T4502] lo speed is unknown, defaulting to 1000 [ 51.146921][ T4386] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.164278][ T4386] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.179913][ T4386] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.208797][ T4386] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.355459][ T4532] netlink: 32 bytes leftover after parsing attributes in process `syz.4.243'. [ 51.393821][ T4386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.435333][ T4386] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.505072][ T4543] loop4: detected capacity change from 0 to 2048 [ 51.524764][ T4386] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 51.535293][ T4386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.564991][ T3396] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.572163][ T3396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.581461][ T3396] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.588548][ T3396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.599572][ T4543] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.684192][ T4551] ipt_ECN: cannot use operation on non-tcp rule [ 51.715868][ T4543] futex_wake_op: syz.4.244 tries to shift op by -1; fix this program [ 51.751130][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.777548][ T4386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.793548][ T4190] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.807738][ T4557] loop4: detected capacity change from 0 to 512 [ 51.827438][ T4557] EXT4-fs: Ignoring removed oldalloc option [ 51.854448][ T4557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 51.873506][ T4561] ªªªªªª: renamed from syzkaller0 [ 51.885895][ T4557] EXT4-fs (loop4): 1 truncate cleaned up [ 51.898275][ T4557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.941268][ T29] kauditd_printk_skb: 410 callbacks suppressed [ 51.941356][ T29] audit: type=1326 audit(1727755136.383:19870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 51.945220][ T4386] veth0_vlan: entered promiscuous mode [ 51.947666][ T29] audit: type=1326 audit(1727755136.383:19871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 51.999857][ T29] audit: type=1326 audit(1727755136.383:19872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4556 comm="syz.4.246" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd396e4dff9 code=0x0 [ 52.006886][ T4386] veth1_vlan: entered promiscuous mode [ 52.037927][ T4386] veth0_macvtap: entered promiscuous mode [ 52.045561][ T4386] veth1_macvtap: entered promiscuous mode [ 52.061965][ T4386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.072582][ T4386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.082573][ T4386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.093050][ T4386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.102937][ T4386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.113416][ T4386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.131852][ T4386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.141821][ T4386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.152433][ T4386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.162377][ T4386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.172959][ T4386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.182803][ T4386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.193370][ T4386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.203281][ T4386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.213789][ T4386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.225999][ T4569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.234357][ T29] audit: type=1400 audit(1727755136.673:19873): avc: denied { ioctl } for pid=4556 comm="syz.4.246" path="/dev/raw-gadget" dev="devtmpfs" ino=118 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 52.238226][ T4386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.264799][ T4569] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.275040][ T29] audit: type=1400 audit(1727755136.713:19874): avc: denied { getopt } for pid=4567 comm="syz.0.248" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.297584][ T4386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.306370][ T4386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.315199][ T4386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.323915][ T4386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.446037][ T4579] lo speed is unknown, defaulting to 1000 [ 52.526878][ T29] audit: type=1400 audit(1727755136.883:19875): avc: denied { create } for pid=4571 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 52.803608][ T29] audit: type=1400 audit(1727755137.243:19876): avc: denied { read } for pid=4585 comm="syz.0.251" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.828999][ T29] audit: type=1400 audit(1727755137.273:19877): avc: denied { open } for pid=4585 comm="syz.0.251" path="/dev/sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 52.829625][ T4586] program syz.0.251 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 53.278191][ T4590] tun0: tun_chr_ioctl cmd 1074025677 [ 53.299531][ T4590] tun0: linktype set to 512 [ 53.304165][ T29] audit: type=1400 audit(1727755137.743:19878): avc: denied { create } for pid=4591 comm="syz.3.226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.304366][ T4592] loop3: detected capacity change from 0 to 164 [ 53.323601][ T29] audit: type=1400 audit(1727755137.743:19879): avc: denied { ioctl } for pid=4591 comm="syz.3.226" path="socket:[7123]" dev="sockfs" ino=7123 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 53.361487][ T4590] hub 8-0:1.0: USB hub found [ 53.365381][ T4592] Unable to read rock-ridge attributes [ 53.366417][ T4590] hub 8-0:1.0: 8 ports detected [ 53.417930][ T4592] Unable to read rock-ridge attributes [ 53.428149][ T4590] lo speed is unknown, defaulting to 1000 [ 53.538316][ T4603] lo speed is unknown, defaulting to 1000 [ 53.548612][ T4605] loop3: detected capacity change from 0 to 512 [ 53.577798][ T4605] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.590684][ T4606] sg_write: data in/out 66/246 bytes for SCSI command 0x0-- guessing data in; [ 53.590684][ T4606] program syz.1.255 not setting count and/or reply_len properly [ 53.612973][ T4605] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.708682][ T4386] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.112261][ T4620] netlink: 20 bytes leftover after parsing attributes in process `syz.3.260'. [ 54.123091][ T4620] loop3: detected capacity change from 0 to 128 [ 54.129803][ T4620] vfat: Unknown parameter '' [ 54.245348][ T4623] loop0: detected capacity change from 0 to 164 [ 54.253175][ T4623] Unable to read rock-ridge attributes [ 54.259809][ T4623] Unable to read rock-ridge attributes [ 54.859712][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.025866][ T4650] loop4: detected capacity change from 0 to 256 [ 55.428782][ T4666] vlan2: entered promiscuous mode [ 55.433861][ T4666] vlan2: entered allmulticast mode [ 55.573962][ T4672] lo speed is unknown, defaulting to 1000 [ 55.996150][ T4679] process 'syz.4.272' launched './file0' with NULL argv: empty string added [ 56.017138][ T4679] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 56.118845][ T4677] loop0: detected capacity change from 0 to 1024 [ 56.160708][ T4677] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.253869][ T4696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 56.293002][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.378746][ T4700] loop0: detected capacity change from 0 to 1024 [ 56.404980][ T4700] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 56.422312][ T4705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.276'. [ 56.439712][ T4700] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 56.461484][ T4700] EXT4-fs (loop0): invalid journal inode [ 56.467650][ T4700] EXT4-fs (loop0): can't get journal size [ 56.473939][ T4700] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.277: blocks 48-48 from inode overlap system zone [ 56.498618][ T4700] EXT4-fs (loop0): failed to initialize system zone (-117) [ 56.512670][ T4700] EXT4-fs (loop0): mount failed [ 56.557529][ T4700] loop0: detected capacity change from 0 to 2048 [ 56.594198][ T4700] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.646884][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.947008][ T4735] lo speed is unknown, defaulting to 1000 [ 57.185338][ T4741] 9pnet_fd: Insufficient options for proto=fd [ 57.519740][ T29] kauditd_printk_skb: 346 callbacks suppressed [ 57.519753][ T29] audit: type=1326 audit(1727755141.963:20226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.592594][ T29] audit: type=1326 audit(1727755141.993:20227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.610127][ T4745] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 57.616153][ T29] audit: type=1326 audit(1727755141.993:20228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.646969][ T29] audit: type=1326 audit(1727755141.993:20229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.646991][ T29] audit: type=1326 audit(1727755141.993:20230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.647129][ T29] audit: type=1326 audit(1727755142.003:20231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.647153][ T29] audit: type=1326 audit(1727755142.003:20232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.647180][ T29] audit: type=1326 audit(1727755142.003:20233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.647203][ T29] audit: type=1326 audit(1727755142.013:20234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.647224][ T29] audit: type=1326 audit(1727755142.013:20235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4744 comm="syz.0.285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa83e58dff9 code=0x7ffc0000 [ 57.747004][ T4753] loop2: detected capacity change from 0 to 1024 [ 57.747591][ T4753] EXT4-fs: Ignoring removed orlov option [ 57.747699][ T4753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.798468][ T4745] loop3: detected capacity change from 0 to 128 [ 57.798777][ T4745] vfat: Unknown parameter '' [ 57.824781][ T4753] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.980701][ T4689] netlink: 20 bytes leftover after parsing attributes in process `syz.4.274'. [ 58.074138][ T4190] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.103580][ T4762] lo speed is unknown, defaulting to 1000 [ 58.112237][ T4768] syz.2.290[4768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.112291][ T4768] syz.2.290[4768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.135105][ T4768] syz.2.290[4768] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.659197][ T4786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 58.728884][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.295'. [ 58.831702][ T4787] syz.3.295[4787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.831874][ T4787] syz.3.295[4787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 58.845586][ T4787] syz.3.295[4787] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 59.064280][ T4800] netlink: 24 bytes leftover after parsing attributes in process `syz.4.301'. [ 59.146577][ T4802] loop4: detected capacity change from 0 to 512 [ 59.207408][ T4806] loop2: detected capacity change from 0 to 128 [ 59.267784][ T4806] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 59.280540][ T4806] ext4 filesystem being mounted at /14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.357818][ T4802] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.302: Failed to acquire dquot type 1 [ 59.371236][ T4802] EXT4-fs (loop4): 1 truncate cleaned up [ 59.379240][ T4802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.393281][ T4802] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.407949][ T4802] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.953916][ T4814] lo speed is unknown, defaulting to 1000 [ 59.970077][ T4190] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.012306][ T4816] loop2: detected capacity change from 0 to 512 [ 60.048403][ T4814] veth0_vlan: left promiscuous mode [ 60.052886][ T4816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.053999][ T4814] veth0_vlan: left allmulticast mode [ 60.066419][ T4816] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.073278][ T4814] veth0_vlan: entered promiscuous mode [ 60.097321][ T4820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.307'. [ 60.126740][ T4816] Process accounting resumed [ 60.156152][ T4829] syz.1.308[4829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.156262][ T4829] syz.1.308[4829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.181770][ T4829] syz.1.308[4829] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.212311][ T4830] lo speed is unknown, defaulting to 1000 [ 60.238224][ T4816] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 60.238872][ T4828] netlink: 176 bytes leftover after parsing attributes in process `syz.4.309'. [ 60.332972][ T4833] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 60.357656][ T4828] tipc: Started in network mode [ 60.362632][ T4828] tipc: Node identity ac14140f, cluster identity 4711 [ 60.377242][ T4834] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 60.398021][ T4828] tipc: New replicast peer: 255.255.255.255 [ 60.404160][ T4828] tipc: Enabled bearer , priority 10 [ 60.796022][ T4853] veth1_macvtap: left promiscuous mode [ 60.804273][ T4852] xt_CT: You must specify a L4 protocol and not use inversions on it [ 60.814085][ T4190] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.835825][ T4853] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.909358][ T4860] netlink: 200 bytes leftover after parsing attributes in process `syz.2.314'. [ 60.997101][ T4862] netlink: 'syz.2.314': attribute type 28 has an invalid length. [ 61.004932][ T4862] netlink: 'syz.2.314': attribute type 3 has an invalid length. [ 61.012549][ T4862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.314'. [ 61.079807][ T4863] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 61.141675][ T4867] loop3: detected capacity change from 0 to 128 [ 61.166562][ T4867] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 61.193281][ T4867] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.318456][ T4386] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.562033][ T1027] tipc: Node number set to 2886997007 [ 61.599693][ T4873] loop3: detected capacity change from 0 to 512 [ 61.638940][ T4875] loop4: detected capacity change from 0 to 1024 [ 61.642878][ T4877] loop2: detected capacity change from 0 to 128 [ 61.655662][ T4877] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 61.664960][ T4873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.665686][ T4875] EXT4-fs: inline encryption not supported [ 61.686214][ T4877] FAT-fs (loop2): Directory bread(block 161) failed [ 61.703363][ T4883] xt_hashlimit: size too large, truncated to 1048576 [ 61.774753][ T4875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.781642][ T4877] FAT-fs (loop2): Directory bread(block 162) failed [ 61.787053][ T4873] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.789075][ T4877] FAT-fs (loop2): Directory bread(block 163) failed [ 61.805293][ T4877] FAT-fs (loop2): Directory bread(block 164) failed [ 61.805665][ T4875] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 61.811872][ T4877] FAT-fs (loop2): Directory bread(block 165) failed [ 61.828700][ T4877] FAT-fs (loop2): Directory bread(block 166) failed [ 61.835371][ T4877] FAT-fs (loop2): Directory bread(block 167) failed [ 61.842034][ T4877] FAT-fs (loop2): Directory bread(block 168) failed [ 61.850266][ T4884] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 61.879428][ T4873] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4873 comm=syz.3.318 [ 61.895379][ T4875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.942827][ T4875] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: none. [ 62.022860][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.081768][ T4894] loop4: detected capacity change from 0 to 128 [ 62.139458][ T4891] lo speed is unknown, defaulting to 1000 [ 62.215059][ T4897] loop2: detected capacity change from 0 to 1024 [ 62.225832][ T4890] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.238582][ T4897] EXT4-fs (loop2): blocks per group (131072) and clusters per group (8192) inconsistent [ 62.280248][ T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.313063][ T4897] loop2: detected capacity change from 0 to 512 [ 62.334290][ T4901] netlink: 'syz.4.327': attribute type 10 has an invalid length. [ 62.342095][ T4901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.327'. [ 62.385771][ T4901] vlan0: entered promiscuous mode [ 62.391003][ T4901] vlan0: entered allmulticast mode [ 62.396216][ T4901] veth0_vlan: entered allmulticast mode [ 62.433674][ T4901] bridge0: port 3(vlan0) entered blocking state [ 62.440054][ T4901] bridge0: port 3(vlan0) entered disabled state [ 62.458224][ T4908] loop2: detected capacity change from 0 to 164 [ 62.473911][ T4901] bridge0: port 3(vlan0) entered blocking state [ 62.480305][ T4901] bridge0: port 3(vlan0) entered forwarding state [ 62.505296][ T4908] syz.2.329: attempt to access beyond end of device [ 62.505296][ T4908] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 62.535471][ T4908] syz.2.329: attempt to access beyond end of device [ 62.535471][ T4908] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.549469][ T4908] syz.2.329: attempt to access beyond end of device [ 62.549469][ T4908] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.565372][ T4910] syz.2.329: attempt to access beyond end of device [ 62.565372][ T4910] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.569020][ T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.592135][ T4908] syz.2.329: attempt to access beyond end of device [ 62.592135][ T4908] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.606496][ T4910] syz.2.329: attempt to access beyond end of device [ 62.606496][ T4910] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.620546][ T4908] syz.2.329: attempt to access beyond end of device [ 62.620546][ T4908] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.635597][ T4903] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 62.635908][ T4910] syz.2.329: attempt to access beyond end of device [ 62.635908][ T4910] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.661849][ T4908] syz.2.329: attempt to access beyond end of device [ 62.661849][ T4908] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.676127][ T4914] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 62.697424][ T4910] syz.2.329: attempt to access beyond end of device [ 62.697424][ T4910] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 62.704593][ T29] kauditd_printk_skb: 416 callbacks suppressed [ 62.704605][ T29] audit: type=1326 audit(1727755147.133:20650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 62.740295][ T29] audit: type=1326 audit(1727755147.133:20651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4900 comm="syz.4.327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 62.797527][ T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.849639][ T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.876920][ T4918] lo speed is unknown, defaulting to 1000 [ 62.911214][ T4922] loop4: detected capacity change from 0 to 512 [ 62.925316][ T4904] lo speed is unknown, defaulting to 1000 [ 62.979330][ T4922] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.330: bg 0: block 248: padding at end of block bitmap is not set [ 63.013203][ T56] bridge_slave_1: left allmulticast mode [ 63.018920][ T56] bridge_slave_1: left promiscuous mode [ 63.024570][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.042147][ T4922] Quota error (device loop4): write_blk: dquota write failed [ 63.049787][ T4922] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 63.059807][ T4922] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.330: Failed to acquire dquot type 1 [ 63.097339][ T56] bridge_slave_0: left allmulticast mode [ 63.103018][ T56] bridge_slave_0: left promiscuous mode [ 63.108737][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.136985][ T4922] EXT4-fs (loop4): 1 truncate cleaned up [ 63.142979][ T4922] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.196146][ T4922] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.356282][ T29] audit: type=1326 audit(1727755147.803:20652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 63.379957][ T29] audit: type=1326 audit(1727755147.803:20653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 63.404314][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.413015][ T29] audit: type=1326 audit(1727755147.833:20654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 63.436612][ T29] audit: type=1326 audit(1727755147.833:20655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 63.460107][ T29] audit: type=1326 audit(1727755147.833:20656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4953 comm="syz.2.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 63.485987][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.496744][ T29] audit: type=1400 audit(1727755147.893:20657): avc: denied { append } for pid=4953 comm="syz.2.332" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 63.530524][ T56] bond0 (unregistering): Released all slaves [ 63.549948][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 63.622231][ T4918] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.647055][ T4918] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.730328][ T4922] syz.4.330 (4922) used greatest stack depth: 9272 bytes left [ 63.739009][ T4976] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 63.749230][ T4918] bridge0: port 3(vlan0) entered disabled state [ 63.778327][ T4958] lo speed is unknown, defaulting to 1000 [ 63.796884][ T4983] sctp: [Deprecated]: syz.1.336 (pid 4983) Use of int in maxseg socket option. [ 63.796884][ T4983] Use struct sctp_assoc_value instead [ 63.828568][ T56] hsr_slave_0: left promiscuous mode [ 63.838943][ T56] hsr_slave_1: left promiscuous mode [ 63.855057][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.862510][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.865074][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.878968][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.879070][ T3396] EXT4-fs error (device loop4): ext4_release_dquot:6902: comm kworker/u8:7: Failed to release dquot type 1 [ 63.886400][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.907146][ T56] veth1_macvtap: left promiscuous mode [ 63.912684][ T56] veth0_macvtap: left promiscuous mode [ 63.918232][ T56] veth1_vlan: left promiscuous mode [ 63.923499][ T56] veth0_vlan: left promiscuous mode [ 64.008753][ T4991] hub 6-0:1.0: USB hub found [ 64.019530][ T4991] hub 6-0:1.0: 8 ports detected [ 64.028840][ T56] team0 (unregistering): Port device team_slave_1 removed [ 64.032091][ T4991] loop2: detected capacity change from 0 to 764 [ 64.053586][ T56] team0 (unregistering): Port device team_slave_0 removed [ 64.139828][ T4904] chnl_net:caif_netlink_parms(): no params data found [ 64.225228][ T4904] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.232322][ T4904] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.261753][ T4904] bridge_slave_0: entered allmulticast mode [ 64.270210][ T4904] bridge_slave_0: entered promiscuous mode [ 64.278483][ T4904] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.285806][ T4904] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.294039][ T4904] bridge_slave_1: entered allmulticast mode [ 64.308642][ T4904] bridge_slave_1: entered promiscuous mode [ 64.345348][ T4904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.366431][ T4904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.466694][ T4904] team0: Port device team_slave_0 added [ 64.490133][ T4904] team0: Port device team_slave_1 added [ 64.556270][ T4904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.563240][ T4904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.589177][ T4904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.644996][ T4904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.651949][ T4904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.677871][ T4904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.743985][ T4904] hsr_slave_0: entered promiscuous mode [ 64.750210][ T4904] hsr_slave_1: entered promiscuous mode [ 64.757442][ T4904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.786791][ T4904] Cannot create hsr debugfs directory [ 64.800984][ T5049] loop2: detected capacity change from 0 to 164 [ 64.813694][ T5049] Unable to read rock-ridge attributes [ 64.866590][ T5049] Unable to read rock-ridge attributes [ 64.911030][ T5061] loop4: detected capacity change from 0 to 2048 [ 64.927365][ T5061] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.948811][ T5061] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.976315][ T5061] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 64.988808][ T5061] EXT4-fs (loop4): This should not happen!! Data will be lost [ 64.988808][ T5061] [ 64.998521][ T5061] EXT4-fs (loop4): Total free blocks count 0 [ 65.004509][ T5061] EXT4-fs (loop4): Free/Dirty block details [ 65.010446][ T5061] EXT4-fs (loop4): free_blocks=2415919104 [ 65.016184][ T5061] EXT4-fs (loop4): dirty_blocks=32 [ 65.021291][ T5061] EXT4-fs (loop4): Block reservation details [ 65.027296][ T5061] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 65.037465][ T5061] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 27 with error 28 [ 65.226199][ T4904] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.267354][ T4904] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.301629][ T4904] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.333566][ T4904] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.471653][ T4904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.516109][ T4904] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.535929][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.543011][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.605753][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.612851][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.696587][ T4904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.783771][ T5122] loop2: detected capacity change from 0 to 4096 [ 65.806780][ T5122] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 65.841906][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.861516][ T4904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.006450][ T4904] veth0_vlan: entered promiscuous mode [ 66.026861][ T4904] veth1_vlan: entered promiscuous mode [ 66.065659][ T4904] veth0_macvtap: entered promiscuous mode [ 66.081427][ T4904] veth1_macvtap: entered promiscuous mode [ 66.114248][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.124783][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.134660][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.145182][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.155035][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.165590][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.184871][ T4904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.197217][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.207768][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.217611][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.228124][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.238214][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.248741][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.258696][ T4904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.269147][ T4904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.291505][ T4904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.312532][ T4904] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.321358][ T4904] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.330157][ T4904] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.338982][ T4904] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.476101][ T5185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 66.532546][ T5188] loop3: detected capacity change from 0 to 1024 [ 66.563972][ T5188] EXT4-fs: Ignoring removed oldalloc option [ 66.582009][ T5197] Process accounting resumed [ 66.608163][ T5188] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 66.678463][ T5200] loop2: detected capacity change from 0 to 512 [ 66.686664][ T5188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.720897][ T5200] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=f040e01c, mo2=0002] [ 66.749651][ T5200] System zones: 1-12 [ 66.755237][ T5200] EXT4-fs error (device loop2): __ext4_iget:4952: inode #11: block 1: comm syz.2.350: invalid block [ 66.796547][ T5200] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.350: couldn't read orphan inode 11 (err -117) [ 66.808739][ T5188] loop3: detected capacity change from 1024 to 64 [ 66.821765][ T5188] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 112) [ 66.833768][ T5188] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 115) [ 66.849930][ T5188] Buffer I/O error on device loop3, logical block 115 [ 66.856802][ T5188] Buffer I/O error on device loop3, logical block 112 [ 66.878960][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.893000][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.907367][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.923005][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.939474][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.961574][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.975531][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 66.990032][ T4904] EXT4-fs warning (device loop3): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 67.041029][ T5231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.353'. [ 67.066635][ T5232] usb usb7: usbfs: process 5232 (syz.0.354) did not claim interface 0 before use [ 67.076475][ T5232] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 67.707760][ T29] kauditd_printk_skb: 546 callbacks suppressed [ 67.707849][ T29] audit: type=1326 audit(1727755152.153:21203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd396e44fa7 code=0x7ffc0000 [ 67.775898][ T29] audit: type=1326 audit(1727755152.193:21204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd396de9959 code=0x7ffc0000 [ 67.780330][ T5246] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 67.799299][ T29] audit: type=1326 audit(1727755152.193:21205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd396e44fa7 code=0x7ffc0000 [ 67.799365][ T29] audit: type=1326 audit(1727755152.193:21206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd396de9959 code=0x7ffc0000 [ 67.799420][ T29] audit: type=1326 audit(1727755152.193:21207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 67.807718][ T5246] tipc: Enabled bearer , priority 10 [ 67.830799][ T29] audit: type=1326 audit(1727755152.193:21208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd396e44fa7 code=0x7ffc0000 [ 67.907306][ T29] audit: type=1326 audit(1727755152.193:21209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd396de9959 code=0x7ffc0000 [ 67.930765][ T29] audit: type=1326 audit(1727755152.193:21210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5225 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 67.954214][ T29] audit: type=1326 audit(1727755152.213:21211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 67.977793][ T29] audit: type=1326 audit(1727755152.213:21212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5245 comm="syz.4.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd396e4dff9 code=0x7ffc0000 [ 68.096556][ T5254] bridge_slave_0: left allmulticast mode [ 68.102265][ T5254] bridge_slave_0: left promiscuous mode [ 68.107979][ T5254] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.127549][ T5254] bridge_slave_1: left allmulticast mode [ 68.133305][ T5254] bridge_slave_1: left promiscuous mode [ 68.138986][ T5254] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.171649][ T5242] syz.1.357 (5242) used greatest stack depth: 9048 bytes left [ 68.218196][ T5254] bond0: (slave bond_slave_0): Releasing backup interface [ 68.227084][ T5203] bio_check_eod: 11127 callbacks suppressed [ 68.227098][ T5203] kmmpd-loop3: attempt to access beyond end of device [ 68.227098][ T5203] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 68.246618][ T5203] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 68.269279][ T5254] bond0: (slave bond_slave_1): Releasing backup interface [ 68.291544][ T5254] team0: Port device team_slave_0 removed [ 68.316326][ T5254] team0: Port device team_slave_1 removed [ 68.323120][ T5254] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.330663][ T5254] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.356143][ T5254] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.363554][ T5254] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.440293][ T5258] team0: Port device wg2 added [ 68.457771][ T5195] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.530055][ T5241] syz.1.357 (5241) used greatest stack depth: 5320 bytes left [ 68.540198][ T5264] lo speed is unknown, defaulting to 1000 [ 68.611200][ T5277] netlink: 9 bytes leftover after parsing attributes in process `syz.1.364'. [ 68.622210][ T5277] gretap0: entered promiscuous mode [ 68.645924][ T5264] chnl_net:caif_netlink_parms(): no params data found [ 68.660243][ T5277] netlink: 5 bytes leftover after parsing attributes in process `syz.1.364'. [ 68.669351][ T5277] 0ªX¹¦D: renamed from gretap0 [ 68.677038][ T5277] 0ªX¹¦D: left promiscuous mode [ 68.681949][ T5277] 0ªX¹¦D: entered allmulticast mode [ 68.689223][ T5277] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 68.768521][ T5286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 68.780162][ T5264] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.787379][ T5264] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.795245][ T5264] bridge_slave_0: entered allmulticast mode [ 68.801674][ T5264] bridge_slave_0: entered promiscuous mode [ 68.809766][ T5264] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.816963][ T5264] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.824169][ T5264] bridge_slave_1: entered allmulticast mode [ 68.830686][ T5264] bridge_slave_1: entered promiscuous mode [ 68.848468][ T5264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.859098][ T5264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.873110][ T5291] tmpfs: Bad value for 'mpol' [ 68.893116][ T5264] team0: Port device team_slave_0 added [ 68.900127][ T5264] team0: Port device team_slave_1 added [ 68.909194][ T5294] No such timeout policy "syz0" [ 68.934417][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.941453][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.967385][ T5264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.978821][ T5264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.979526][ T5288] loop0: detected capacity change from 0 to 2048 [ 68.985829][ T5264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.018188][ T5264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.036590][ T5288] EXT4-fs mount: 4 callbacks suppressed [ 69.036605][ T5288] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.073251][ T5288] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.089491][ T5288] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 69.101842][ T5288] EXT4-fs (loop0): This should not happen!! Data will be lost [ 69.101842][ T5288] [ 69.111609][ T5288] EXT4-fs (loop0): Total free blocks count 0 [ 69.117637][ T5288] EXT4-fs (loop0): Free/Dirty block details [ 69.123573][ T5288] EXT4-fs (loop0): free_blocks=2415919104 [ 69.129314][ T5288] EXT4-fs (loop0): dirty_blocks=32 [ 69.134551][ T5288] EXT4-fs (loop0): Block reservation details [ 69.140704][ T5288] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 69.170879][ T5264] hsr_slave_0: entered promiscuous mode [ 69.179019][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.188848][ T5264] hsr_slave_1: entered promiscuous mode [ 69.196863][ T5264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.204624][ T5264] Cannot create hsr debugfs directory [ 69.231336][ T5304] tls_set_device_offload: netdev not found [ 69.357602][ T5302] wg2: entered promiscuous mode [ 69.362789][ T5302] wg2: entered allmulticast mode [ 69.539974][ T5312] loop4: detected capacity change from 0 to 512 [ 69.546904][ T5312] EXT4-fs: quotafile must be on filesystem root [ 69.644791][ T5315] netlink: 'syz.2.374': attribute type 27 has an invalid length. [ 69.694894][ T5318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.374'. [ 69.725410][ T5320] syz.1.375[5320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.725524][ T5320] syz.1.375[5320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.736975][ T5320] syz.1.375[5320] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.773244][ T5320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 70.158505][ T5315] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.167600][ T5315] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.176571][ T5315] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.185583][ T5315] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.362552][ T5195] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.483880][ T5318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.492496][ T5326] loop0: detected capacity change from 0 to 2048 [ 70.505936][ T5318] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.518792][ T5318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 70.555405][ T5320] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 70.577819][ T5195] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.656555][ T5329] loop2: detected capacity change from 0 to 8192 [ 70.673817][ T5195] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.700113][ T5338] xt_hashlimit: max too large, truncated to 1048576 [ 70.746840][ T5195] bridge_slave_1: left allmulticast mode [ 70.752531][ T5195] bridge_slave_1: left promiscuous mode [ 70.758209][ T5195] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.775289][ T5195] bridge_slave_0: left allmulticast mode [ 70.781011][ T5195] bridge_slave_0: left promiscuous mode [ 70.786769][ T5195] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.857612][ T5344] loop4: detected capacity change from 0 to 128 [ 70.928066][ T5195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.938871][ T5195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.949984][ T5195] bond0 (unregistering): Released all slaves [ 70.998888][ T5195] hsr_slave_0: left promiscuous mode [ 71.017757][ T5195] hsr_slave_1: left promiscuous mode [ 71.031127][ T5195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.033212][ T5357] loop2: detected capacity change from 0 to 4096 [ 71.038647][ T5195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.048457][ T5357] EXT4-fs: Ignoring removed nobh option [ 71.057676][ T5357] EXT4-fs: Ignoring removed i_version option [ 71.074837][ T5195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.082275][ T5195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.097157][ T5195] veth1_macvtap: left promiscuous mode [ 71.098897][ T5353] loop4: detected capacity change from 0 to 8192 [ 71.102652][ T5195] veth0_macvtap: left promiscuous mode [ 71.109767][ T5353] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 71.114490][ T5195] veth1_vlan: left promiscuous mode [ 71.130127][ T5195] veth0_vlan: left promiscuous mode [ 71.132748][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.144250][ T5353] FAT-fs (loop4): Filesystem has been set read-only [ 71.151128][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.152387][ T5357] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.159995][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.198609][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.209368][ T5357] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.218481][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.229133][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.261073][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.271743][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.280734][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.289713][ T5353] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 71.337829][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.337857][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.337927][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360140][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360163][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360183][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360208][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360254][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360278][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360297][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360320][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360343][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360382][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360401][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360420][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360440][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360517][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360536][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360559][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360584][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360609][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360633][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360652][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360746][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360765][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360784][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360808][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360832][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360851][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360872][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360895][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.360985][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361006][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361025][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361044][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361096][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361118][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361139][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361161][ T3343] hid-generic 0000:0003:0000.0004: unknown main item tag 0x0 [ 71.361968][ T3343] hid-generic 0000:0003:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 71.413349][ T5386] loop2: detected capacity change from 0 to 1024 [ 71.422851][ T5195] team0 (unregistering): Port device team_slave_1 removed [ 71.429627][ T5386] EXT4-fs (loop2): unable to read superblock [ 71.657538][ T5195] team0 (unregistering): Port device team_slave_0 removed [ 72.271513][ T5264] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.345004][ T5264] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.366493][ T5264] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.375479][ T5264] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.390245][ T5426] loop4: detected capacity change from 0 to 512 [ 72.418590][ T5426] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.418703][ T5426] ext4 filesystem being mounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.442199][ T5264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.458409][ T5264] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.466501][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.466534][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.468103][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.468136][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.490093][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.561414][ T5264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.628755][ T5264] veth0_vlan: entered promiscuous mode [ 72.638177][ T5264] veth1_vlan: entered promiscuous mode [ 72.644395][ T5454] ebt_among: src integrity fail: 100 [ 72.663262][ T5264] veth0_macvtap: entered promiscuous mode [ 72.670591][ T5454] 9pnet_fd: Insufficient options for proto=fd [ 72.673221][ T5264] veth1_macvtap: entered promiscuous mode [ 72.688400][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.698851][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.708814][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.719391][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.731142][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.748639][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.394'. [ 72.751518][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.767957][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.777796][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.788248][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.798102][ T5264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.808556][ T5264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.819893][ T5264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.820555][ T5459] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 72.829312][ T5264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.846463][ T5264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855332][ T5264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.864012][ T5264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.118598][ T5472] loop3: detected capacity change from 0 to 1024 [ 73.128912][ T5469] syz.4.395[5469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.129085][ T5469] syz.4.395[5469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.140981][ T5469] syz.4.395[5469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 73.157551][ T5469] capability: warning: `syz.4.395' uses 32-bit capabilities (legacy support in use) [ 73.244917][ T5472] EXT4-fs (loop3): orphan cleanup on readonly fs [ 73.253558][ T5472] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.363: bad orphan inode 8 [ 73.265842][ T5472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.262694][ T5488] lo speed is unknown, defaulting to 1000 [ 74.542919][ T5264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.643485][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 74.652380][ T5494] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 74.691057][ T29] kauditd_printk_skb: 265 callbacks suppressed [ 74.691072][ T29] audit: type=1400 audit(1727755159.133:21478): avc: denied { getopt } for pid=5491 comm="syz.4.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 74.742876][ T5498] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 74.777653][ T5500] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.801578][ T29] audit: type=1326 audit(1727755159.243:21479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 74.825501][ T29] audit: type=1326 audit(1727755159.243:21480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 74.849117][ T29] audit: type=1326 audit(1727755159.243:21481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 74.860924][ T5504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.403'. [ 74.872673][ T29] audit: type=1326 audit(1727755159.243:21482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 74.872700][ T29] audit: type=1326 audit(1727755159.243:21483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 74.928382][ T29] audit: type=1326 audit(1727755159.243:21484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 74.932269][ T5504] netlink: 76 bytes leftover after parsing attributes in process `syz.3.403'. [ 74.951920][ T29] audit: type=1326 audit(1727755159.243:21485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 74.984251][ T29] audit: type=1326 audit(1727755159.243:21486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 75.007934][ T29] audit: type=1326 audit(1727755159.243:21487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5501 comm="syz.2.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 75.008186][ T5502] loop2: detected capacity change from 0 to 2048 [ 75.043622][ T5505] lo speed is unknown, defaulting to 1000 [ 75.084950][ T5502] loop2: p1 < > p4 [ 75.089328][ T5502] loop2: p4 size 8388608 extends beyond EOD, truncated [ 75.112193][ T2967] loop2: p1 < > p4 [ 75.114388][ T5510] lo speed is unknown, defaulting to 1000 [ 75.116589][ T2967] loop2: p4 size 8388608 extends beyond EOD, truncated [ 75.300030][ T5513] syz.2.404[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.300104][ T5513] syz.2.404[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.311752][ T5513] syz.2.404[5513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 75.417356][ T2967] loop2: p1 < > p4 [ 75.434580][ T2967] loop2: p4 size 8388608 extends beyond EOD, truncated [ 75.455140][ T5515] ebt_among: src integrity fail: 100 [ 75.459115][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 75.461426][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 75.487936][ T5515] 9pnet_fd: Insufficient options for proto=fd [ 75.598676][ T5517] loop4: detected capacity change from 0 to 512 [ 75.613864][ T5517] EXT4-fs: test_dummy_encryption option not supported [ 75.631464][ T5525] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 75.697833][ T5527] wg2: entered promiscuous mode [ 75.703092][ T5527] wg2: entered allmulticast mode [ 75.774211][ T5529] loop4: detected capacity change from 0 to 2048 [ 75.790029][ T5529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.820763][ T5538] xt_hashlimit: max too large, truncated to 1048576 [ 75.899316][ T5553] netlink: 'syz.1.414': attribute type 27 has an invalid length. [ 75.928083][ T5553] 0ªX¹¦D: left allmulticast mode [ 75.951451][ T5556] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 76.063197][ T5553] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.070487][ T5553] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.096863][ T5191] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 76.113633][ T5553] wg2: left promiscuous mode [ 76.118405][ T5553] wg2: left allmulticast mode [ 76.124728][ T5191] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 76.137283][ T5191] EXT4-fs (loop4): This should not happen!! Data will be lost [ 76.137283][ T5191] [ 76.147088][ T5191] EXT4-fs (loop4): Total free blocks count 0 [ 76.153081][ T5191] EXT4-fs (loop4): Free/Dirty block details [ 76.159165][ T5191] EXT4-fs (loop4): free_blocks=2415919104 [ 76.164970][ T5191] EXT4-fs (loop4): dirty_blocks=8192 [ 76.170338][ T5191] EXT4-fs (loop4): Block reservation details [ 76.176417][ T5191] EXT4-fs (loop4): i_reserved_data_blocks=512 [ 76.219521][ T5171] EXT4-fs (loop4): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 76.303087][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.335205][ T5553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.367427][ T5553] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.376006][ T5553] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.384610][ T5553] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.392932][ T5553] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.460486][ T5556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.470905][ T5556] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.490211][ T5560] lo speed is unknown, defaulting to 1000 [ 76.569078][ T5564] netlink: 'syz.1.415': attribute type 10 has an invalid length. [ 76.578635][ T5564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.589015][ T5564] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 76.635586][ T5566] loop4: detected capacity change from 0 to 2048 [ 76.680734][ T5569] lo speed is unknown, defaulting to 1000 [ 76.727159][ T5573] loop4: detected capacity change from 0 to 2048 [ 76.771206][ T3343] kernel write not supported for file /snd/seq (pid: 3343 comm: kworker/0:3) [ 76.780694][ T5573] loop4: p1 < > p4 [ 76.843796][ T5573] loop4: p4 size 8388608 extends beyond EOD, truncated [ 77.081165][ T5586] lo speed is unknown, defaulting to 1000 [ 77.187548][ T5581] loop2: detected capacity change from 0 to 128 [ 77.217757][ T5584] loop0: detected capacity change from 0 to 2048 [ 77.254406][ T5581] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 77.306258][ T5581] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 77.346725][ T5584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.364338][ T5595] syz.4.419[5595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.364398][ T5595] syz.4.419[5595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.382998][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.405909][ T5595] syz.4.419[5595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 77.421092][ T4190] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 77.512151][ T2967] loop4: p1 < > p4 [ 77.517803][ T2967] loop4: p4 size 8388608 extends beyond EOD, truncated [ 77.607436][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 77.617934][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 77.647388][ T5612] loop4: detected capacity change from 0 to 1024 [ 77.659665][ T5612] EXT4-fs (loop4): blocks per group (131072) and clusters per group (8192) inconsistent [ 77.682008][ T5612] loop4: detected capacity change from 0 to 512 [ 77.728461][ T5622] siw: device registration error -23 [ 77.750410][ T5624] netlink: 'syz.4.428': attribute type 27 has an invalid length. [ 77.772590][ T5220] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.794745][ T5220] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2048 with error 28 [ 77.807233][ T5220] EXT4-fs (loop0): This should not happen!! Data will be lost [ 77.807233][ T5220] [ 77.816896][ T5220] EXT4-fs (loop0): Total free blocks count 0 [ 77.821743][ T5625] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'. [ 77.822868][ T5220] EXT4-fs (loop0): Free/Dirty block details [ 77.822882][ T5220] EXT4-fs (loop0): free_blocks=2415919104 [ 77.843384][ T5220] EXT4-fs (loop0): dirty_blocks=6128 [ 77.849134][ T5220] EXT4-fs (loop0): Block reservation details [ 77.855180][ T5220] EXT4-fs (loop0): i_reserved_data_blocks=383 [ 77.872556][ T5220] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 2050 with max blocks 2048 with error 28 [ 77.920940][ T5624] 0ªX¹¦À: left allmulticast mode [ 77.943119][ T5624] wg2: left promiscuous mode [ 77.947945][ T5624] wg2: left allmulticast mode [ 77.979802][ T5624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.990723][ T5624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.010595][ T5624] veth0_vlan: left allmulticast mode [ 78.026285][ T5624] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.035251][ T5624] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.044088][ T5624] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.053208][ T5624] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.073933][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.083473][ T5625] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 78.190988][ T5646] lo speed is unknown, defaulting to 1000 [ 78.250093][ T3340] kernel write not supported for file /snd/seq (pid: 3340 comm: kworker/1:3) [ 78.442587][ T5661] lo speed is unknown, defaulting to 1000 [ 78.772324][ T5664] loop2: detected capacity change from 0 to 2048 [ 78.797832][ T5664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.830324][ T5667] loop0: detected capacity change from 0 to 2048 [ 78.875514][ T5667] loop0: p1 < > p4 [ 78.886956][ T5667] loop0: p4 size 8388608 extends beyond EOD, truncated [ 78.888701][ T5670] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 78.912798][ T5670] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 78.925447][ T5670] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.925447][ T5670] [ 78.935193][ T5670] EXT4-fs (loop2): Total free blocks count 0 [ 78.936081][ T2967] loop0: p1 < > p4 [ 78.941254][ T5670] EXT4-fs (loop2): Free/Dirty block details [ 78.947054][ T2967] loop0: p4 size 8388608 extends beyond EOD, [ 78.950926][ T5670] EXT4-fs (loop2): free_blocks=66060288 [ 78.950944][ T5670] EXT4-fs (loop2): dirty_blocks=3904 [ 78.956998][ T2967] truncated [ 78.971310][ T5670] EXT4-fs (loop2): Block reservation details [ 78.977353][ T5670] EXT4-fs (loop2): i_reserved_data_blocks=244 [ 79.203955][ T5674] syz.0.436[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.204072][ T5674] syz.0.436[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.216742][ T5674] syz.0.436[5674] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 79.316325][ T2967] loop0: p1 < > p4 [ 79.333467][ T2967] loop0: p4 size 8388608 extends beyond EOD, truncated [ 79.345332][ T5500] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.371167][ T3611] udevd[3611]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 79.371252][ T3257] udevd[3257]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 79.415987][ T5500] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.439362][ T5677] loop4: detected capacity change from 0 to 128 [ 79.448810][ T5677] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.469056][ T5500] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.480430][ T5677] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.562547][ T5680] loop0: detected capacity change from 0 to 512 [ 79.565295][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.569581][ T5680] EXT4-fs: test_dummy_encryption option not supported [ 79.612099][ T5216] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 79.616716][ T5500] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.646449][ T3268] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 79.654950][ T5500] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.669643][ T5500] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.693126][ T5500] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.829747][ T5707] tls_set_device_offload: netdev not found [ 79.875559][ T5704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 80.000709][ T5714] loop4: detected capacity change from 0 to 8192 [ 80.245362][ T5714] lo speed is unknown, defaulting to 1000 [ 80.313195][ T5699] loop3: detected capacity change from 0 to 2048 [ 80.359097][ T5699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.546398][ T5699] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 80.611122][ T5699] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 24 with error 28 [ 80.623447][ T5699] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.623447][ T5699] [ 80.633116][ T5699] EXT4-fs (loop3): Total free blocks count 0 [ 80.639286][ T5699] EXT4-fs (loop3): Free/Dirty block details [ 80.645209][ T5699] EXT4-fs (loop3): free_blocks=2415919104 [ 80.650980][ T5699] EXT4-fs (loop3): dirty_blocks=32 [ 80.656136][ T5699] EXT4-fs (loop3): Block reservation details [ 80.662124][ T5699] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 80.749184][ T5264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.869698][ T5729] netlink: 24 bytes leftover after parsing attributes in process `syz.1.458'. [ 81.089064][ T5736] lo speed is unknown, defaulting to 1000 [ 81.466417][ T5743] loop0: detected capacity change from 0 to 128 [ 81.490161][ T5748] loop4: detected capacity change from 0 to 1024 [ 81.503950][ T5748] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.514025][ T5748] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002] [ 81.523316][ T5748] System zones: 0-1, 3-36 [ 81.528476][ T5748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.548303][ T5751] netlink: 24 bytes leftover after parsing attributes in process `syz.0.462'. [ 81.725509][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 81.725524][ T29] audit: type=1326 audit(1727755166.173:22091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65d9174fa7 code=0x7ffc0000 [ 81.730524][ T5766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 81.731715][ T29] audit: type=1326 audit(1727755166.173:22092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65d9119959 code=0x7ffc0000 [ 81.788958][ T29] audit: type=1326 audit(1727755166.173:22093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f65d9174fa7 code=0x7ffc0000 [ 81.812285][ T29] audit: type=1326 audit(1727755166.173:22094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f65d9119959 code=0x7ffc0000 [ 81.838693][ T29] audit: type=1326 audit(1727755166.173:22095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 81.862282][ T29] audit: type=1326 audit(1727755166.173:22096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 81.885808][ T29] audit: type=1326 audit(1727755166.283:22097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 81.909335][ T29] audit: type=1326 audit(1727755166.283:22098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 81.932826][ T29] audit: type=1326 audit(1727755166.283:22099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 81.957158][ T29] audit: type=1326 audit(1727755166.283:22100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5761 comm="syz.2.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 82.523287][ T5783] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.597669][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.635378][ T5786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.455'. [ 82.646527][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 82.655409][ T5788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 82.676303][ T5786] netlink: 76 bytes leftover after parsing attributes in process `syz.0.455'. [ 82.708596][ T5783] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.780216][ T5783] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.962398][ T5783] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.045608][ T5804] veth0_vlan: left promiscuous mode [ 83.090268][ T5804] veth0_vlan: entered promiscuous mode [ 83.140426][ T5807] netlink: 28 bytes leftover after parsing attributes in process `syz.4.461'. [ 83.164307][ T5808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.463'. [ 83.191513][ T5783] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.232957][ T5814] 9pnet_fd: Insufficient options for proto=fd [ 83.253617][ T5804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'. [ 83.294381][ T5814] qrtr: Invalid version 14 [ 83.346239][ T5783] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.357788][ T5783] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.396623][ T5783] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.458636][ T5817] lo speed is unknown, defaulting to 1000 [ 83.461975][ T5823] loop0: detected capacity change from 0 to 512 [ 83.475076][ T5823] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 83.512123][ T5825] lo speed is unknown, defaulting to 1000 [ 83.519785][ T5823] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #17: comm syz.0.468: iget: bad i_size value: -6917529027641081756 [ 83.524410][ T5828] sctp: [Deprecated]: syz.4.466 (pid 5828) Use of int in maxseg socket option. [ 83.524410][ T5828] Use struct sctp_assoc_value instead [ 83.534684][ T5823] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.468: couldn't read orphan inode 17 (err -117) [ 83.561604][ T5823] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.586948][ T5823] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.468: bg 0: block 65: padding at end of block bitmap is not set [ 83.601418][ T5823] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.468: Failed to acquire dquot type 0 [ 83.630029][ T5823] syzkaller0: entered promiscuous mode [ 83.635521][ T5823] syzkaller0: entered allmulticast mode [ 83.692262][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.794879][ T5864] loop0: detected capacity change from 0 to 1024 [ 84.825760][ T5864] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 84.918093][ T5864] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.024629][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.050314][ T5875] netlink: 9 bytes leftover after parsing attributes in process `syz.3.481'. [ 85.072841][ T5875] gretap0: entered promiscuous mode [ 85.095719][ T5882] loop0: detected capacity change from 0 to 1024 [ 85.111370][ T5882] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 85.139451][ T5882] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 85.191587][ T5882] EXT4-fs (loop0): invalid journal inode [ 85.198338][ T5882] EXT4-fs (loop0): can't get journal size [ 85.207169][ T5882] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #2: comm syz.0.482: blocks 48-48 from inode overlap system zone [ 85.222428][ T5882] EXT4-fs (loop0): failed to initialize system zone (-117) [ 85.230086][ T5882] EXT4-fs (loop0): mount failed [ 85.373793][ T5884] lo speed is unknown, defaulting to 1000 [ 85.431923][ T5894] loop2: detected capacity change from 0 to 164 [ 85.459531][ T5882] random: crng reseeded on system resumption [ 85.584882][ T5891] netlink: 20 bytes leftover after parsing attributes in process `syz.1.479'. [ 85.594010][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz.1.479'. [ 85.698982][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699009][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699101][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699142][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699163][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699192][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699284][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699390][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699444][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699466][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699486][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699507][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699532][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699551][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699651][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699675][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699695][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699715][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699750][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699833][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699909][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.699929][ T3340] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 85.701779][ T3340] hid-generic 0000:0000:0000.0005: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 85.713440][ T5898] loop0: detected capacity change from 0 to 1024 [ 85.937319][ T5898] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal [ 86.066656][ T5910] netlink: 'syz.0.486': attribute type 21 has an invalid length. [ 86.074422][ T5910] netlink: 132 bytes leftover after parsing attributes in process `syz.0.486'. [ 86.185470][ T5912] loop3: detected capacity change from 0 to 2048 [ 86.245321][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.245638][ T5909] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 86.264899][ T5909] EXT4-fs warning (device sda1): ext4_resize_fs:2040: can't shrink FS - resize aborted [ 86.459310][ T5917] loop0: detected capacity change from 0 to 512 [ 86.462741][ T5925] tipc: Started in network mode [ 86.470597][ T5925] tipc: Node identity ac1414aa, cluster identity 4711 [ 86.477576][ T5925] tipc: New replicast peer: 100.1.1.1 [ 86.482989][ T5925] tipc: Enabled bearer , priority 10 [ 86.504513][ T5912] loop3: detected capacity change from 2048 to 11 [ 86.511239][ T5928] syz.3.490: attempt to access beyond end of device [ 86.511239][ T5928] loop3: rw=524288, sector=20, nr_sectors = 4 limit=11 [ 86.544727][ T5928] syz.3.490: attempt to access beyond end of device [ 86.544727][ T5928] loop3: rw=524288, sector=28, nr_sectors = 4 limit=11 [ 86.574640][ T5928] syz.3.490: attempt to access beyond end of device [ 86.574640][ T5928] loop3: rw=12288, sector=24, nr_sectors = 4 limit=11 [ 86.588407][ T5928] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.490: unable to read itable block [ 86.594715][ T5917] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c11c, mo2=0002] [ 86.609158][ T5917] System zones: 0-2, 18-18, 34-34 [ 86.615701][ T5917] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.491: bg 0: block 248: padding at end of block bitmap is not set [ 86.617934][ T5928] syz.3.490: attempt to access beyond end of device [ 86.617934][ T5928] loop3: rw=524288, sector=20, nr_sectors = 4 limit=11 [ 86.630463][ T5917] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.491: Failed to acquire dquot type 1 [ 86.643589][ T5928] syz.3.490: attempt to access beyond end of device [ 86.643589][ T5928] loop3: rw=524288, sector=28, nr_sectors = 4 limit=11 [ 86.668723][ T5928] syz.3.490: attempt to access beyond end of device [ 86.668723][ T5928] loop3: rw=12288, sector=24, nr_sectors = 4 limit=11 [ 86.690356][ T5928] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.490: unable to read itable block [ 86.694302][ T5917] EXT4-fs (loop0): 1 truncate cleaned up [ 86.703291][ T5928] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 86.719509][ T5917] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.732749][ T5917] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.782117][ T5935] netlink: 40 bytes leftover after parsing attributes in process `syz.4.493'. [ 86.801916][ T5935] netlink: 76 bytes leftover after parsing attributes in process `syz.4.493'. [ 86.829215][ T5928] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #18: comm syz.3.490: mark_inode_dirty error [ 86.842649][ T5928] syz.3.490: attempt to access beyond end of device [ 86.842649][ T5928] loop3: rw=524288, sector=20, nr_sectors = 4 limit=11 [ 86.857757][ T5928] syz.3.490: attempt to access beyond end of device [ 86.857757][ T5928] loop3: rw=524288, sector=28, nr_sectors = 4 limit=11 [ 86.871643][ T5928] syz.3.490: attempt to access beyond end of device [ 86.871643][ T5928] loop3: rw=12288, sector=24, nr_sectors = 4 limit=11 [ 86.886572][ T5928] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.490: unable to read itable block [ 86.902943][ T5928] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 86.913599][ T5928] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #18: comm syz.3.490: mark_inode_dirty error [ 86.927131][ T5928] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 86.967435][ T5928] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 87.019430][ T3270] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.028829][ T5928] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 87.066702][ T5928] EXT4-fs warning (device loop3): ext4_read_block_bitmap_nowait:492: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 2 [ 87.119456][ T5928] syz.3.490: attempt to access beyond end of device [ 87.119456][ T5928] loop3: rw=524288, sector=20, nr_sectors = 4 limit=11 [ 87.134893][ T5928] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #18: block 6: comm syz.3.490: unable to read itable block [ 87.151587][ T5928] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 87.160770][ T5928] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #18: comm syz.3.490: mark_inode_dirty error [ 87.189096][ T5939] netlink: 4 bytes leftover after parsing attributes in process `syz.0.495'. [ 87.200072][ T5264] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.211144][ T5918] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 87.259327][ T5947] loop0: detected capacity change from 0 to 164 [ 87.335060][ T5948] loop2: detected capacity change from 0 to 2048 [ 87.353692][ T5950] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 87.366255][ T5948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.386141][ T5175] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.403497][ T5948] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 87.434548][ T5948] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 17 with error 28 [ 87.446999][ T5948] EXT4-fs (loop2): This should not happen!! Data will be lost [ 87.446999][ T5948] [ 87.456775][ T5948] EXT4-fs (loop2): Total free blocks count 0 [ 87.462819][ T5948] EXT4-fs (loop2): Free/Dirty block details [ 87.468825][ T5948] EXT4-fs (loop2): free_blocks=2415919104 [ 87.474558][ T5948] EXT4-fs (loop2): dirty_blocks=32 [ 87.479753][ T5948] EXT4-fs (loop2): Block reservation details [ 87.480410][ T29] kauditd_printk_skb: 413 callbacks suppressed [ 87.480422][ T29] audit: type=1400 audit(1727755171.923:22510): avc: denied { create } for pid=5953 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=caif_socket permissive=1 [ 87.485822][ T5948] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 87.491992][ T29] audit: type=1400 audit(1727755171.923:22511): avc: denied { create } for pid=5953 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 87.538099][ T29] audit: type=1400 audit(1727755171.923:22512): avc: denied { connect } for pid=5953 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 87.558316][ T29] audit: type=1400 audit(1727755171.923:22513): avc: denied { write } for pid=5953 comm="syz.1.501" laddr=172.20.20.10 lport=1 faddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 87.582507][ T29] audit: type=1400 audit(1727755171.923:22514): avc: denied { ioctl } for pid=5953 comm="syz.1.501" path="socket:[12011]" dev="sockfs" ino=12011 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=icmp_socket permissive=1 [ 87.608195][ T29] audit: type=1400 audit(1727755171.923:22515): avc: denied { create } for pid=5953 comm="syz.1.501" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 87.629029][ T3341] tipc: Node number set to 2886997162 [ 87.663275][ T5175] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.675314][ T29] audit: type=1400 audit(1727755172.043:22516): avc: denied { read } for pid=5953 comm="syz.1.501" path="socket:[12014]" dev="sockfs" ino=12014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=unix_stream_socket permissive=1 [ 87.699954][ T29] audit: type=1400 audit(1727755172.113:22517): avc: denied { ioctl } for pid=5963 comm="syz.4.503" path="socket:[13020]" dev="sockfs" ino=13020 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 87.738040][ T5175] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.835361][ T5971] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 87.907927][ T5175] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.048318][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.055850][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.063229][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.070670][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.078136][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.085565][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.092938][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.100403][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.107856][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.115345][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.122749][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.130228][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.137659][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.145128][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.152516][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.160082][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.167499][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.175013][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.182388][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.189822][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.197253][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.204726][ T1027] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 88.230830][ T5983] netlink: 'syz.1.506': attribute type 21 has an invalid length. [ 88.244241][ T5983] __nla_validate_parse: 1 callbacks suppressed [ 88.244256][ T5983] netlink: 132 bytes leftover after parsing attributes in process `syz.1.506'. [ 88.266035][ T5967] lo speed is unknown, defaulting to 1000 [ 88.272625][ T5985] loop0: detected capacity change from 0 to 1024 [ 88.286812][ T5985] EXT4-fs: Ignoring removed orlov option [ 88.292533][ T5985] EXT4-fs: Ignoring removed nomblk_io_submit option [ 88.301709][ T5959] lo speed is unknown, defaulting to 1000 [ 88.379019][ T5175] bridge_slave_1: left allmulticast mode [ 88.384713][ T5175] bridge_slave_1: left promiscuous mode [ 88.390428][ T5175] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.414719][ T5175] bridge_slave_0: left allmulticast mode [ 88.420410][ T5175] bridge_slave_0: left promiscuous mode [ 88.426305][ T5175] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.444671][ T1027] hid-generic 0000:0000:0000.0006: hidraw0: HID vffffff.fe Device [syz0] on syz1 [ 88.456659][ T5985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.504575][ T29] audit: type=1400 audit(1727755172.923:22518): avc: denied { setattr } for pid=5984 comm="syz.0.507" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 88.614087][ T5691] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.637560][ T5175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.648458][ T5175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.658754][ T5175] bond0 (unregistering): Released all slaves [ 88.730933][ T5175] hsr_slave_0: left promiscuous mode [ 88.744871][ T5175] hsr_slave_1: left promiscuous mode [ 88.754696][ T5175] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.762414][ T5175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.773182][ T56] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 88.790055][ T5175] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.797521][ T5175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.814113][ T5175] veth1_macvtap: left promiscuous mode [ 88.819656][ T5175] veth0_macvtap: left promiscuous mode [ 88.825234][ T5175] veth1_vlan: left promiscuous mode [ 88.830502][ T5175] veth0_vlan: left promiscuous mode [ 88.859300][ T6003] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 88.873520][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 88.882461][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.509'. [ 88.941150][ T5175] team0 (unregistering): Port device team_slave_1 removed [ 88.950824][ T5175] team0 (unregistering): Port device team_slave_0 removed [ 88.985295][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 89.041489][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.048833][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.056435][ T5959] bridge_slave_0: entered allmulticast mode [ 89.062778][ T5959] bridge_slave_0: entered promiscuous mode [ 89.069971][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.077120][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.084859][ T5959] bridge_slave_1: entered allmulticast mode [ 89.092347][ T5959] bridge_slave_1: entered promiscuous mode [ 89.104272][ T29] audit: type=1326 audit(1727755173.543:22519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6022 comm="syz.2.512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f65d917dff9 code=0x7ffc0000 [ 89.137986][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.156863][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.195214][ T5959] team0: Port device team_slave_0 added [ 89.201954][ T5959] team0: Port device team_slave_1 added [ 89.217814][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.224830][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.250809][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.266203][ T6044] loop4: detected capacity change from 0 to 1768 [ 89.266139][ T6045] netlink: 40 bytes leftover after parsing attributes in process `syz.2.513'. [ 89.266232][ T6045] netlink: 76 bytes leftover after parsing attributes in process `syz.2.513'. [ 89.266981][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.297450][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.323388][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.354425][ T5959] hsr_slave_0: entered promiscuous mode [ 89.360730][ T5959] hsr_slave_1: entered promiscuous mode [ 89.366802][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.374370][ T5959] Cannot create hsr debugfs directory [ 89.652738][ T5959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.661725][ T5959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.670271][ T5959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.680725][ T5959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.719960][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.734193][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.745376][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.752472][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.771026][ T5959] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.781486][ T5959] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.796378][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.803579][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.862872][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.940446][ T5959] veth0_vlan: entered promiscuous mode [ 89.949054][ T5959] veth1_vlan: entered promiscuous mode [ 89.966978][ T5959] veth0_macvtap: entered promiscuous mode [ 89.974417][ T5959] veth1_macvtap: entered promiscuous mode [ 89.987417][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.997879][ T5959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.008387][ T5959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.028453][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.039003][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.047904][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.056734][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.065473][ T5959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.229352][ T6158] lo speed is unknown, defaulting to 1000 [ 90.283332][ T6158] chnl_net:caif_netlink_parms(): no params data found [ 90.341305][ T6171] netlink: 'syz.3.502': attribute type 4 has an invalid length. [ 90.349044][ T6171] netlink: 152 bytes leftover after parsing attributes in process `syz.3.502'. [ 90.493526][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.500811][ T6158] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.509635][ T6158] bridge_slave_0: entered allmulticast mode [ 90.516314][ T6158] bridge_slave_0: entered promiscuous mode [ 90.523835][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.531149][ T6158] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.540508][ T6158] bridge_slave_1: entered allmulticast mode [ 90.547508][ T6158] bridge_slave_1: entered promiscuous mode [ 90.572751][ T6158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.585272][ T6158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.612607][ T6158] team0: Port device team_slave_0 added [ 90.620769][ T6158] team0: Port device team_slave_1 added [ 90.642691][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.649689][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.676247][ T6158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.687670][ T6158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.694645][ T6158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.720608][ T6158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.745007][ T6158] hsr_slave_0: entered promiscuous mode [ 90.751082][ T6158] hsr_slave_1: entered promiscuous mode [ 90.756958][ T6158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.764863][ T6158] Cannot create hsr debugfs directory [ 90.810071][ T6158] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.856226][ T6158] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.916164][ T6158] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.967308][ T6158] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.046048][ T6182] loop3: detected capacity change from 0 to 1024 [ 91.053659][ T6158] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.061140][ T6182] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.069412][ T6181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 91.081990][ T6158] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.086278][ T6182] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=f054c01c, mo2=0002] [ 91.097651][ T6182] System zones: 0-1, 3-36 [ 91.100189][ T6158] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.103105][ T6182] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.123066][ T6158] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.138113][ T6158] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.145201][ T6158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.152495][ T6158] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.159567][ T6158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.192400][ T6158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.203037][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.212611][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.223811][ T6189] ================================================================== [ 91.231918][ T6189] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 91.241125][ T6189] [ 91.243441][ T6189] write to 0xffff8881006077b8 of 4 bytes by task 6182 on cpu 1: [ 91.251068][ T6189] writeback_single_inode+0x14f/0x3f0 [ 91.256483][ T6189] sync_inode_metadata+0x5c/0x90 [ 91.261442][ T6189] generic_buffers_fsync_noflush+0xd8/0x120 [ 91.267343][ T6189] ext4_sync_file+0x1ff/0x6c0 [ 91.272039][ T6189] vfs_fsync_range+0x116/0x130 [ 91.276896][ T6189] ext4_buffered_write_iter+0x326/0x370 [ 91.282461][ T6189] ext4_file_write_iter+0x293/0xe10 [ 91.287669][ T6189] iter_file_splice_write+0x5f1/0x980 [ 91.293047][ T6189] direct_splice_actor+0x160/0x2c0 [ 91.298167][ T6189] splice_direct_to_actor+0x302/0x670 [ 91.303536][ T6189] do_splice_direct+0xd7/0x150 [ 91.308301][ T6189] do_sendfile+0x39b/0x970 [ 91.312712][ T6189] __x64_sys_sendfile64+0x110/0x150 [ 91.317916][ T6189] x64_sys_call+0xed5/0x2d60 [ 91.322545][ T6189] do_syscall_64+0xc9/0x1c0 [ 91.327057][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.332962][ T6189] [ 91.335280][ T6189] read to 0xffff8881006077b8 of 4 bytes by task 6189 on cpu 0: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.342824][ T6189] generic_buffers_fsync_noflush+0x83/0x120 [ 91.348734][ T6189] ext4_sync_file+0x1ff/0x6c0 [ 91.353428][ T6189] vfs_fsync_range+0x116/0x130 [ 91.358202][ T6189] ext4_buffered_write_iter+0x326/0x370 [ 91.363775][ T6189] ext4_file_write_iter+0x293/0xe10 [ 91.368989][ T6189] iter_file_splice_write+0x5f1/0x980 [ 91.374361][ T6189] direct_splice_actor+0x160/0x2c0 [ 91.379520][ T6189] splice_direct_to_actor+0x302/0x670 [ 91.384904][ T6189] do_splice_direct+0xd7/0x150 [ 91.389671][ T6189] do_sendfile+0x39b/0x970 [ 91.394097][ T6189] __x64_sys_sendfile64+0x110/0x150 [ 91.399306][ T6189] x64_sys_call+0xed5/0x2d60 [ 91.403897][ T6189] do_syscall_64+0xc9/0x1c0 [ 91.408392][ T6189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.414298][ T6189] [ 91.416617][ T6189] value changed: 0x00000038 -> 0x00000002 [ 91.422324][ T6189] [ 91.424638][ T6189] Reported by Kernel Concurrency Sanitizer on: [ 91.430782][ T6189] CPU: 0 UID: 0 PID: 6189 Comm: syz.3.515 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 91.441370][ T6189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.451515][ T6189] ================================================================== [ 91.859905][ T5171] vlan0: left allmulticast mode [ 91.864824][ T5171] vlan0: left promiscuous mode [ 91.869713][ T5171] bridge0: port 3(vlan0) entered disabled state [ 91.876629][ T5171] bridge_slave_1: left allmulticast mode [ 91.882252][ T5171] bridge_slave_1: left promiscuous mode [ 91.887908][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.896599][ T5171] bridge_slave_0: left allmulticast mode [ 91.902393][ T5171] bridge_slave_0: left promiscuous mode [ 91.908112][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.065307][ T5171] tipc: Disabling bearer [ 92.070542][ T5171] tipc: Disabling bearer [ 92.075893][ T5171] tipc: Left network mode [ 92.085148][ T5171] IPVS: stopping master sync thread 4834 ... [ 92.095798][ T5171] hsr_slave_0: left promiscuous mode [ 92.101419][ T5171] hsr_slave_1: left promiscuous mode [ 92.107043][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.114520][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.155637][ T5171] team0 (unregistering): Port device team_slave_1 removed [ 92.165858][ T5171] team0 (unregistering): Port device team_slave_0 removed [ 92.876100][ T5171] bridge_slave_1: left allmulticast mode [ 92.881775][ T5171] bridge_slave_1: left promiscuous mode [ 92.887482][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.896322][ T5171] bridge_slave_0: left allmulticast mode [ 92.902004][ T5171] bridge_slave_0: left promiscuous mode [ 92.907696][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.106117][ T5171] bond0 (unregistering): Released all slaves [ 93.114749][ T5171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.124098][ T5171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.133927][ T5171] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 93.144452][ T5171] bond0 (unregistering): Released all slaves [ 93.186700][ T5171] tipc: Disabling bearer [ 93.191680][ T5171] tipc: Left network mode [ 93.238670][ T5171] hsr_slave_0: left promiscuous mode [ 93.244379][ T5171] hsr_slave_1: left promiscuous mode [ 93.250895][ T5171] hsr_slave_0: left promiscuous mode [ 93.256724][ T5171] hsr_slave_1: left promiscuous mode [ 93.262296][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.270089][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.310153][ T5171] team0 (unregistering): Port device wg2 removed [ 93.879138][ T5171] IPVS: stop unused estimator thread 0... [ 94.029382][ T6189] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.097898][ T5171] bridge_slave_1: left allmulticast mode [ 94.103689][ T5171] bridge_slave_1: left promiscuous mode [ 94.109455][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.117077][ T5171] bridge_slave_0: left allmulticast mode [ 94.122721][ T5171] bridge_slave_0: left promiscuous mode [ 94.128471][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.187068][ T5171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.196833][ T5171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.206541][ T5171] bond0 (unregistering): Released all slaves [ 94.237972][ T5171] hsr_slave_0: left promiscuous mode [ 94.243897][ T5171] hsr_slave_1: left promiscuous mode [ 94.250094][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.257783][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.300600][ T5171] team0 (unregistering): Port device team_slave_1 removed [ 94.310510][ T5171] team0 (unregistering): Port device team_slave_0 removed [ 94.348152][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 94.348164][ T29] audit: type=1400 audit(1727755178.793:22548): avc: denied { sys_chroot } for pid=6461 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.381443][ T29] audit: type=1400 audit(1727755178.823:22549): avc: denied { setgid } for pid=6461 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.402371][ T29] audit: type=1400 audit(1727755178.823:22550): avc: denied { setuid } for pid=6461 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 94.423313][ T29] audit: type=1400 audit(1727755178.823:22551): avc: denied { setrlimit } for pid=6461 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 94.637997][ T5171] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.677903][ T5171] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.717690][ T5171] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.757727][ T5171] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.832944][ T5171] bridge_slave_1: left allmulticast mode [ 94.838663][ T5171] bridge_slave_1: left promiscuous mode [ 94.844337][ T5171] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.852119][ T5171] bridge_slave_0: left allmulticast mode [ 94.857818][ T5171] bridge_slave_0: left promiscuous mode [ 94.863402][ T5171] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.956608][ T5171] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.966697][ T5171] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.976363][ T5171] bond0 (unregistering): Released all slaves [ 95.028019][ T5171] hsr_slave_0: left promiscuous mode [ 95.033707][ T5171] hsr_slave_1: left promiscuous mode [ 95.039799][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.047273][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.055635][ T5171] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.063039][ T5171] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.072314][ T5171] veth1_macvtap: left promiscuous mode [ 95.077841][ T5171] veth0_macvtap: left promiscuous mode [ 95.083623][ T5171] veth1_vlan: left promiscuous mode [ 95.088970][ T5171] veth0_vlan: left promiscuous mode [ 95.155283][ T5171] team0 (unregistering): Port device team_slave_1 removed [ 95.165074][ T5171] team0 (unregistering): Port device team_slave_0 removed