last executing test programs: 3m52.116892173s ago: executing program 32 (id=351): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c00)=@filter={'filter\x00', 0x42, 0x4, 0xae0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xa48, 0xa48, 0xa48, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xb0, 0x0, {0x100000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x6}}}, {{@uncond, 0x0, 0x878, 0x8a0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[], 0x9}}, @common=@unspec=@addrtype1={{0x28}}]}, @REJECT={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'wlan1\x00', 'ip6gretap0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@ttl={{0x28}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb40) 3m17.6735135s ago: executing program 33 (id=1594): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)="39ac", 0x2}], 0x1}}], 0x2, 0x24040844) 3m13.799668042s ago: executing program 34 (id=1710): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000300), 0x7b9c0b) 2m47.879743151s ago: executing program 35 (id=2626): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mknod$loop(0x0, 0x0, 0x0) 2m27.796693246s ago: executing program 36 (id=3389): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x30400}], 0x1}, 0x0) sendmmsg$sock(r0, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="b4", 0x1}], 0x1}}], 0x1, 0x40080) 2m26.010132066s ago: executing program 37 (id=3422): r0 = socket(0x200000000000011, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x9}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="e90c630faca20180c20000000800450000240000e0000011"], 0x0) 2m20.16365261s ago: executing program 38 (id=3590): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{}, [@TCA_NETEM_LOSS={0x4, 0xd}]}}}]}, 0x50}}, 0x0) 1m46.471034023s ago: executing program 39 (id=4708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getgroups(0x0, 0x0) 1m17.939952825s ago: executing program 40 (id=5667): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000117000/0x2000)=nil, 0x2) 38.81425526s ago: executing program 41 (id=7175): modify_ldt$write(0x1, &(0x7f0000000180)={0x0, 0x1000, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 37.608113707s ago: executing program 42 (id=7208): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 31.377883282s ago: executing program 43 (id=7394): bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unlink(&(0x7f0000000080)='./cgroup\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x14000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 27.674607303s ago: executing program 0 (id=7550): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xf, 0x5, 0x7, 0x2, 0x7, 0x9b, 0x92d, 0x5}, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x10000) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x10001, 0x0, "59c27c65a78308634e78299ef68057107ea354"}) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000)) 26.819290978s ago: executing program 0 (id=7573): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000480)={@dev}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f00000006c0)={@remote}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000003e00250304000000000000000a"], 0x14}}, 0x0) 26.799591068s ago: executing program 0 (id=7575): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x8, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 26.759181988s ago: executing program 0 (id=7577): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000009, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 26.643848849s ago: executing program 0 (id=7581): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000001580)=ANY=[@ANYRES64=r0, @ANYRES16, @ANYRES16=r1, @ANYRES16=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x50, &(0x7f0000000000)={0x0, 0x0}, 0x10) 26.139933742s ago: executing program 0 (id=7590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000d00)='system_u:object_r:restorecond_var_run_t:s0\x00', 0x2b) 26.135073142s ago: executing program 44 (id=7590): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000cc0), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000d00)='system_u:object_r:restorecond_var_run_t:s0\x00', 0x2b) 24.8758996s ago: executing program 1 (id=7640): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000002480)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x761c}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETA(r1, 0x402c542d, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, "dac7a15f305b57a3"}) 24.008651845s ago: executing program 1 (id=7664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33000000000000000005", @ANYRES32=0x0, @ANYBLOB="0c0099000000000000000000100010"], 0x38}}, 0x0) 23.879231006s ago: executing program 1 (id=7666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newlink={0x5c, 0x10, 0x403, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7fffffff, 0x8}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 23.757072436s ago: executing program 1 (id=7671): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') 23.725724446s ago: executing program 1 (id=7673): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) open(&(0x7f0000000180)='./cgroup\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) creat(&(0x7f0000000080)='./cgroup/file0\x00', 0x0) 23.311050099s ago: executing program 1 (id=7698): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x3}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) 23.274887649s ago: executing program 45 (id=7698): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r1, &(0x7f0000000040)={0x23, 0x4, 0x3}, 0x10) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4, 0x2}, 0x10) bind$phonet(r0, &(0x7f0000000040)={0x23, 0x4}, 0x10) 17.73528929s ago: executing program 9 (id=7892): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 17.646213041s ago: executing program 9 (id=7900): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x2, 0x4, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote, 0x3}}]}, 0x38}}, 0x0) 17.575519672s ago: executing program 9 (id=7904): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff13, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000001440)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.978050565s ago: executing program 9 (id=7933): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) chroot(&(0x7f0000000340)='./file0/../file0/../file0\x00') 16.883732426s ago: executing program 9 (id=7935): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd82, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='sched_process_fork\x00', r1}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 16.471167498s ago: executing program 9 (id=7953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xf882b) 16.447884408s ago: executing program 46 (id=7953): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) ioctl$MON_IOCT_RING_SIZE(r2, 0x9204, 0xf882b) 15.523537953s ago: executing program 3 (id=7986): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) poll(&(0x7f0000000040)=[{r0, 0x680}], 0x1, 0x800) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c", 0x4f, 0x1, 0x0, 0x0) 14.648684968s ago: executing program 3 (id=8018): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) 14.591752099s ago: executing program 3 (id=8022): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x10001, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$inet6_opts(r0, 0x11a, 0x1, 0x0, 0x0) 14.498549899s ago: executing program 3 (id=8025): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1000009, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 14.165455301s ago: executing program 3 (id=8035): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) splice(r0, 0x0, r2, 0x0, 0xbfcd, 0x6) 13.903653183s ago: executing program 3 (id=8040): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000580)="0f", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) 13.850901923s ago: executing program 47 (id=8040): open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000580)="0f", 0x1) setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000200)=""/49, &(0x7f0000000080)=0x31) 8.818582251s ago: executing program 7 (id=8198): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000010140)=@gcm_128={{0x303, 0x38}, "faffffff0000003c", "82d7773879241628cb2d7129d5a01853", '\x00', "614db5b3ffffffff"}, 0x28) setsockopt$inet6_int(r0, 0x29, 0x35, 0x0, 0x0) 8.636397862s ago: executing program 7 (id=8205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$selinux_context(r2, &(0x7f0000000380)='system_u:object_r:hugetlbfs_t:s0\x00', 0x21) 8.555894273s ago: executing program 7 (id=8208): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000aeb000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x3eaf, &(0x7f0000000100)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 8.309753804s ago: executing program 7 (id=8218): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 8.207311405s ago: executing program 7 (id=8220): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1509, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x422c, 0x1, 0x4cf, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7.939733346s ago: executing program 7 (id=8228): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x39d6c854, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x30}}, 0x0) 7.930764436s ago: executing program 48 (id=8228): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x39d6c854, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000540)={0x30, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x30}}, 0x0) 1.609637961s ago: executing program 6 (id=8460): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000702", 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @remote}}}}}}, 0x0) 1.473616632s ago: executing program 6 (id=8464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) 1.410387513s ago: executing program 6 (id=8468): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.251866093s ago: executing program 4 (id=8471): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$pid(0x1, 0x0, 0x0) creat(&(0x7f0000000240)='./file1\x00', 0xd) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) 1.225618943s ago: executing program 4 (id=8475): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) chmod(0x0, 0x0) 1.220342563s ago: executing program 6 (id=8476): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) lsm_get_self_attr(0x65, &(0x7f0000000040)={0x0, 0x0, 0x37, 0x17, ""/23}, &(0x7f0000000080)=0x37, 0x0) 1.143815173s ago: executing program 4 (id=8477): r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) 1.116739324s ago: executing program 6 (id=8479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xea) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) 1.057403394s ago: executing program 4 (id=8481): unshare(0x2000680) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x2, 0x4, 0x2, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r1, &(0x7f0000000300), 0x20000000}, 0x20) 1.043351155s ago: executing program 5 (id=8483): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 976.111925ms ago: executing program 8 (id=8485): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 839.854595ms ago: executing program 8 (id=8487): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) sync() 786.713746ms ago: executing program 5 (id=8489): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0x10000000000ac6}, 0x18) r3 = syz_create_resource$binfmt(&(0x7f0000000240)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c756e616d653dd0"]) 674.739556ms ago: executing program 5 (id=8491): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) utimes(&(0x7f0000000140)='./file1\x00', 0x0) 627.959827ms ago: executing program 4 (id=8492): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 626.258377ms ago: executing program 8 (id=8493): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_QUANTUM={0x8}]}}]}, 0x38}}, 0x0) 520.173547ms ago: executing program 8 (id=8496): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 506.917757ms ago: executing program 5 (id=8497): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000240)={0x60000006}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)) shutdown(r2, 0x0) epoll_wait(r0, &(0x7f0000000180)=[{}, {}], 0x2, 0x0) 416.841628ms ago: executing program 8 (id=8498): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000fd0f000003"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f0000000180)}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0x1, 0x0, 0x0, 0x0, 0x0) 369.311648ms ago: executing program 8 (id=8499): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 356.714418ms ago: executing program 5 (id=8500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x3, 0x81f42) syz_usb_disconnect(r2) 212.980909ms ago: executing program 6 (id=8503): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) syz_pidfd_open(r0, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000003c0)={0xf0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) 148.788929ms ago: executing program 2 (id=8505): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 148.39689ms ago: executing program 2 (id=8506): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6}}}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00002b0a000000001c0012800b000100697036746e6c00000c0002800800010099"], 0x3c}}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000004600)={&(0x7f0000000480)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e23}]}}}]}, 0x3c}}, 0x20004010) 122.153769ms ago: executing program 2 (id=8507): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x2) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xf7, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 55.92302ms ago: executing program 2 (id=8508): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x8804) r0 = fsopen(&(0x7f0000000080)='devtmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 55.7559ms ago: executing program 2 (id=8509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000110000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000003fffffe218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="38010000100013070000000000100000ac1414bb000000000000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) 237.88µs ago: executing program 4 (id=8510): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc000900b80006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 0s ago: executing program 2 (id=8511): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) setxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='os'], 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xa, 0x0, &(0x7f0000000280)) kernel console output (not intermixed with test programs): _adv: batadv0: Interface activated: batadv_slave_0 [ 240.079127][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.142526][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 240.151818][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.207183][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.218054][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.228049][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.238526][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.248693][T21161] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.259299][T21161] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.270606][T21161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.285325][T21161] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.294246][T21161] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.303248][T21161] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.311968][T21161] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.341966][T21324] netlink: 'syz.3.7258': attribute type 2 has an invalid length. [ 240.666089][T21357] loop5: detected capacity change from 0 to 512 [ 240.674212][T21357] EXT4-fs: Ignoring removed orlov option [ 240.681698][T21357] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 240.715369][T21357] EXT4-fs (loop5): 1 orphan inode deleted [ 240.721188][T21357] EXT4-fs (loop5): 1 truncate cleaned up [ 240.854497][T21384] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=21384 comm=syz.5.7284 [ 241.004421][T21397] Cannot find set identified by id 0 to match [ 241.154561][T21414] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 241.169750][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 241.301738][T21428] lo speed is unknown, defaulting to 1000 [ 241.589147][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 241.589166][ T29] audit: type=1326 audit(1732690264.361:8453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.635468][ T29] audit: type=1326 audit(1732690264.391:8454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.659079][ T29] audit: type=1326 audit(1732690264.391:8455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.682616][ T29] audit: type=1326 audit(1732690264.391:8456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.706210][ T29] audit: type=1326 audit(1732690264.391:8457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.729917][ T29] audit: type=1326 audit(1732690264.391:8458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.753486][ T29] audit: type=1326 audit(1732690264.391:8459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.777032][ T29] audit: type=1326 audit(1732690264.391:8460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.800680][ T29] audit: type=1326 audit(1732690264.391:8461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.824804][ T29] audit: type=1326 audit(1732690264.391:8462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21451 comm="syz.0.7316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fda5b0c0809 code=0x7ffc0000 [ 241.855983][T21460] loop4: detected capacity change from 0 to 1024 [ 241.870534][T21460] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.934555][T21460] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 241.962586][T21460] EXT4-fs (loop4): orphan cleanup on readonly fs [ 241.991238][T21460] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 242.027369][T21460] EXT4-fs (loop4): Remounting filesystem read-only [ 242.047096][T21460] EXT4-fs (loop4): 1 orphan inode deleted [ 242.074101][T21460] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 242.142579][T21467] lo speed is unknown, defaulting to 1000 [ 242.206876][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 242.573827][T21499] loop4: detected capacity change from 0 to 164 [ 242.613482][T21499] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 242.667133][T21499] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 242.731652][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.740735][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.765143][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.798787][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.808032][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.827210][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.861012][T21515] loop5: detected capacity change from 0 to 1024 [ 242.880592][T21515] EXT4-fs: Ignoring removed oldalloc option [ 242.887261][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.896365][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.915217][T21506] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7339'. [ 242.974872][T21515] loop5: detected capacity change from 1024 to 0 [ 242.982207][T21515] syz.5.7342: attempt to access beyond end of device [ 242.982207][T21515] loop5: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 242.998729][T21526] 9pnet_fd: Insufficient options for proto=fd [ 243.015661][T21515] EXT4-fs error (device loop5): __ext4_find_entry:1641: inode #2: comm syz.5.7342: reading directory lblock 0 [ 243.015737][T21515] syz.5.7342: attempt to access beyond end of device [ 243.015737][T21515] loop5: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 243.015769][T21515] buffer_io_error: 2 callbacks suppressed [ 243.015782][T21515] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 243.015798][T21515] EXT4-fs (loop5): I/O error while writing superblock [ 243.026075][T21161] syz-executor: attempt to access beyond end of device [ 243.026075][T21161] loop5: rw=12288, sector=32, nr_sectors = 2 limit=0 [ 243.080170][T21161] syz-executor: attempt to access beyond end of device [ 243.080170][T21161] loop5: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 243.080331][T21161] syz-executor: attempt to access beyond end of device [ 243.080331][T21161] loop5: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 243.080443][T21161] syz-executor: attempt to access beyond end of device [ 243.080443][T21161] loop5: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 243.121391][T21161] syz-executor: attempt to access beyond end of device [ 243.121391][T21161] loop5: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 243.121430][T21161] syz-executor: attempt to access beyond end of device [ 243.121430][T21161] loop5: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 243.121500][T21161] syz-executor: attempt to access beyond end of device [ 243.121500][T21161] loop5: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 243.121558][T21161] syz-executor: attempt to access beyond end of device [ 243.121558][T21161] loop5: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 243.121728][T21161] EXT4-fs error (device loop5): ext4_get_inode_loc:4573: inode #2: block 5: comm syz-executor: unable to read itable block [ 243.121791][T21161] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 243.121809][T21161] EXT4-fs (loop5): I/O error while writing superblock [ 243.121825][T21161] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5837: IO failure [ 243.121850][T21161] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 243.121914][T21161] EXT4-fs (loop5): I/O error while writing superblock [ 243.121925][T21161] EXT4-fs error (device loop5): ext4_dirty_inode:6041: inode #2: comm syz-executor: mark_inode_dirty error [ 243.121951][T21161] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 243.121970][T21161] EXT4-fs (loop5): I/O error while writing superblock [ 243.149915][ T1990] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4558: inode #2: block 5: comm kworker/u8:9: unable to read itable block [ 243.150025][ T1990] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 243.150044][ T1990] EXT4-fs (loop5): I/O error while writing superblock [ 243.167682][T21504] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 243.167705][T21504] EXT4-fs (loop5): I/O error while writing superblock [ 243.170052][T21520] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 243.252483][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 243.319332][T21539] loop1: detected capacity change from 0 to 512 [ 243.342836][T21539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 243.342873][T21539] EXT4-fs (loop1): failed to initialize system zone (-117) [ 243.342907][T21539] EXT4-fs (loop1): mount failed [ 243.592040][T21569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7367'. [ 243.711892][T21579] netlink: 'syz.3.7372': attribute type 32 has an invalid length. [ 243.762345][T21589] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 243.902175][T21609] xt_hashlimit: max too large, truncated to 1048576 [ 244.019386][T17081] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.074498][T17081] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.126334][T17081] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.183786][T21641] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 244.195535][T21641] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 244.196486][T17081] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.228081][T21626] lo speed is unknown, defaulting to 1000 [ 244.281378][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 244.297337][T17081] bridge_slave_1: left allmulticast mode [ 244.303291][T17081] bridge_slave_1: left promiscuous mode [ 244.309054][T17081] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.338284][T21654] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 244.346581][T17081] bridge_slave_0: left allmulticast mode [ 244.352352][T17081] bridge_slave_0: left promiscuous mode [ 244.358064][T17081] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.460124][T21672] loop4: detected capacity change from 0 to 128 [ 244.475406][T17081] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.486446][T21672] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.536424][T21678] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 244.545302][T17081] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.556422][T17081] bond0 (unregistering): Released all slaves [ 244.578720][T21626] chnl_net:caif_netlink_parms(): no params data found [ 244.647681][T17081] hsr_slave_0: left promiscuous mode [ 244.664305][T17081] hsr_slave_1: left promiscuous mode [ 244.684920][T17081] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.692543][T17081] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.701927][T17081] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.709417][T17081] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.721679][T17081] veth1_macvtap: left promiscuous mode [ 244.727257][T17081] veth0_macvtap: left promiscuous mode [ 244.732944][T17081] veth1_vlan: left promiscuous mode [ 244.738226][T17081] veth0_vlan: left promiscuous mode [ 244.828891][T17081] team0 (unregistering): Port device team_slave_1 removed [ 244.839370][T17081] team0 (unregistering): Port device team_slave_0 removed [ 244.932123][T21626] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.939243][T21626] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.948701][T21716] 9pnet_fd: Insufficient options for proto=fd [ 244.960688][T21626] bridge_slave_0: entered allmulticast mode [ 244.967252][T21626] bridge_slave_0: entered promiscuous mode [ 244.981980][T21626] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.989234][T21626] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.996850][T21626] bridge_slave_1: entered allmulticast mode [ 245.003877][T21626] bridge_slave_1: entered promiscuous mode [ 245.024929][T21626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.054394][T21626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.104120][T21626] team0: Port device team_slave_0 added [ 245.120455][T21626] team0: Port device team_slave_1 added [ 245.142892][T21734] loop4: detected capacity change from 0 to 1024 [ 245.158937][T21734] EXT4-fs: Ignoring removed orlov option [ 245.164740][T21734] EXT4-fs: Ignoring removed nomblk_io_submit option [ 245.182906][T21626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.189948][T21626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.216125][T21626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.240342][T21626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.247412][T21626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.273662][T21626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.316871][T21626] hsr_slave_0: entered promiscuous mode [ 245.322570][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 245.331861][T21626] hsr_slave_1: entered promiscuous mode [ 245.347768][T21626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.364928][T21626] Cannot create hsr debugfs directory [ 245.485077][T21769] loop4: detected capacity change from 0 to 512 [ 245.491870][T21769] EXT4-fs: Ignoring removed orlov option [ 245.497955][T21769] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 245.511077][T21769] EXT4-fs (loop4): 1 orphan inode deleted [ 245.516884][T21769] EXT4-fs (loop4): 1 truncate cleaned up [ 245.525454][T21769] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 245.683061][T21626] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 245.692488][T21626] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 245.702892][T21626] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 245.713729][T21626] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 245.722007][T21786] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 245.755988][T21626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.770687][T21626] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.782177][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.789383][ T1934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.811301][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.818522][ T1934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.885593][T21626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.019093][T21626] veth0_vlan: entered promiscuous mode [ 246.029198][T21626] veth1_vlan: entered promiscuous mode [ 246.049273][T21626] veth0_macvtap: entered promiscuous mode [ 246.057458][T21626] veth1_macvtap: entered promiscuous mode [ 246.069176][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.079760][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.089805][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.100439][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.110424][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.121016][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.130968][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.141524][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.152956][T21626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.164202][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.174858][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.184797][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.195471][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.205452][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.216036][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.225945][T21626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.236488][T21626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.247435][T21626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.257457][T21626] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.266309][T21626] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.275243][T21626] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.284267][T21626] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.355940][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 246.370331][T21840] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 246.595087][T21882] syz.8.7496[21882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.595150][T21882] syz.8.7496[21882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.609067][T21882] syz.8.7496[21882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.620925][T21885] rdma_op ffff888114ca5980 conn xmit_rdma 0000000000000000 [ 246.681244][T21892] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 246.688794][T21882] hub 2-0:1.0: USB hub found [ 246.691387][T21892] SELinux: failed to load policy [ 246.696809][T21882] hub 2-0:1.0: 8 ports detected [ 246.751226][T21901] netlink: 'syz.1.7504': attribute type 1 has an invalid length. [ 246.788354][T21907] ALSA: seq fatal error: cannot create timer (-22) [ 246.804553][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 246.804653][ T29] audit: type=1326 audit(1732690269.585:8605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21906 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 246.842917][ T29] audit: type=1326 audit(1732690269.585:8606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21906 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 246.866779][ T29] audit: type=1326 audit(1732690269.595:8607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21906 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 246.890392][ T29] audit: type=1326 audit(1732690269.595:8608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21906 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 246.914074][ T29] audit: type=1326 audit(1732690269.595:8609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21906 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 246.937680][ T29] audit: type=1326 audit(1732690269.595:8610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21906 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 246.954878][T21916] loop4: detected capacity change from 0 to 512 [ 246.961317][ T29] audit: type=1326 audit(1732690269.595:8611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21906 comm="syz.3.7508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 247.018771][T21916] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.041030][T21924] loop1: detected capacity change from 0 to 764 [ 247.080871][ T29] audit: type=1400 audit(1732690269.866:8612): avc: denied { read } for pid=21919 comm="syz.8.7514" lport=44988 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 247.167540][T21942] loop1: detected capacity change from 0 to 256 [ 247.178944][ T29] audit: type=1326 audit(1732690269.966:8613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21940 comm="syz.8.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 247.209139][T21942] FAT-fs (loop1): Directory bread(block 64) failed [ 247.216574][T21942] FAT-fs (loop1): Directory bread(block 65) failed [ 247.223771][T21942] FAT-fs (loop1): Directory bread(block 66) failed [ 247.226160][ T29] audit: type=1326 audit(1732690270.006:8614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21940 comm="syz.8.7523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 247.253908][T21942] FAT-fs (loop1): Directory bread(block 67) failed [ 247.260559][T21942] FAT-fs (loop1): Directory bread(block 68) failed [ 247.271764][T21942] FAT-fs (loop1): Directory bread(block 69) failed [ 247.282990][T21942] FAT-fs (loop1): Directory bread(block 70) failed [ 247.305841][T21942] FAT-fs (loop1): Directory bread(block 71) failed [ 247.322742][T21947] loop8: detected capacity change from 0 to 128 [ 247.331425][T21942] FAT-fs (loop1): Directory bread(block 72) failed [ 247.339145][T21942] FAT-fs (loop1): Directory bread(block 73) failed [ 247.348807][T21947] ext4 filesystem being mounted at /12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 247.403252][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 247.611874][T21984] sd 0:0:1:0: device reset [ 247.614726][T21985] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 247.644798][T21988] netlink: '+}[@': attribute type 10 has an invalid length. [ 247.666377][T21988] team0: Port device netdevsim1 added [ 247.838858][T22014] __nla_validate_parse: 6 callbacks suppressed [ 247.838904][T22014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7555'. [ 247.855999][T22014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7555'. [ 248.000617][T22030] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 248.044411][T22034] loop8: detected capacity change from 0 to 128 [ 248.161138][T22035] bio_check_eod: 17 callbacks suppressed [ 248.161153][T22035] syz.8.7563: attempt to access beyond end of device [ 248.161153][T22035] loop8: rw=2049, sector=316, nr_sectors = 8 limit=128 [ 248.180650][T22035] syz.8.7563: attempt to access beyond end of device [ 248.180650][T22035] loop8: rw=2049, sector=332, nr_sectors = 8 limit=128 [ 248.194391][T22035] syz.8.7563: attempt to access beyond end of device [ 248.194391][T22035] loop8: rw=2049, sector=348, nr_sectors = 8 limit=128 [ 248.208336][T22035] syz.8.7563: attempt to access beyond end of device [ 248.208336][T22035] loop8: rw=2049, sector=364, nr_sectors = 8 limit=128 [ 248.222924][T22035] syz.8.7563: attempt to access beyond end of device [ 248.222924][T22035] loop8: rw=2049, sector=380, nr_sectors = 8 limit=128 [ 248.236979][T22035] syz.8.7563: attempt to access beyond end of device [ 248.236979][T22035] loop8: rw=2049, sector=396, nr_sectors = 8 limit=128 [ 248.250597][T22035] syz.8.7563: attempt to access beyond end of device [ 248.250597][T22035] loop8: rw=2049, sector=412, nr_sectors = 8 limit=128 [ 248.264273][T22035] syz.8.7563: attempt to access beyond end of device [ 248.264273][T22035] loop8: rw=2049, sector=428, nr_sectors = 8 limit=128 [ 248.278364][T22035] syz.8.7563: attempt to access beyond end of device [ 248.278364][T22035] loop8: rw=2049, sector=452, nr_sectors = 8 limit=128 [ 248.292214][T22035] syz.8.7563: attempt to access beyond end of device [ 248.292214][T22035] loop8: rw=2049, sector=468, nr_sectors = 8 limit=128 [ 248.363329][T22041] loop1: detected capacity change from 0 to 1024 [ 248.370136][T22041] EXT4-fs: Ignoring removed mblk_io_submit option [ 248.424813][T22048] loop1: detected capacity change from 0 to 128 [ 248.433739][T22048] ext4 filesystem being mounted at /394/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.440663][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.663713][T22069] loop0: detected capacity change from 0 to 2048 [ 249.036624][T22087] lo speed is unknown, defaulting to 1000 [ 249.363510][T22106] loop8: detected capacity change from 0 to 512 [ 249.404021][T22106] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 249.474333][T22106] EXT4-fs mount: 26 callbacks suppressed [ 249.474355][T22106] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.480187][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 249.504844][T22106] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.598822][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.621818][T22107] lo speed is unknown, defaulting to 1000 [ 249.676480][T22135] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 249.727566][T22107] chnl_net:caif_netlink_parms(): no params data found [ 249.822751][T22155] ALSA: seq fatal error: cannot create timer (-16) [ 249.825007][T22151] pim6reg1: entered promiscuous mode [ 249.834905][T22151] pim6reg1: entered allmulticast mode [ 249.847701][T22107] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.854834][T22107] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.868470][T22107] bridge_slave_0: entered allmulticast mode [ 249.876614][T22107] bridge_slave_0: entered promiscuous mode [ 249.884186][T22163] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 249.894897][T22163] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 249.910284][T22107] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.917621][T22107] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.928482][T22107] bridge_slave_1: entered allmulticast mode [ 249.937899][T22107] bridge_slave_1: entered promiscuous mode [ 249.971626][T22171] block device autoloading is deprecated and will be removed. [ 249.983517][T22107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.000923][T22107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.038932][T22107] team0: Port device team_slave_0 added [ 250.045781][T22107] team0: Port device team_slave_1 added [ 250.074925][T22107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.081964][T22107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.108337][T22107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.122754][T22107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.129806][T22107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.155825][T22107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.176676][T22107] hsr_slave_0: entered promiscuous mode [ 250.183255][T22107] hsr_slave_1: entered promiscuous mode [ 250.190344][T22107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.198026][T22107] Cannot create hsr debugfs directory [ 250.219338][T22191] atomic_op ffff88811e44f928 conn xmit_atomic 0000000000000000 [ 250.267356][T22199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7628'. [ 250.301972][T22204] loop8: detected capacity change from 0 to 1024 [ 250.309242][T22204] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 250.328153][T22204] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.342769][T22199] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.368405][T22107] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.378836][T22107] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.391104][T22211] loop1: detected capacity change from 0 to 128 [ 250.400170][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.438793][T22107] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.449233][T22107] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.505600][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 250.524044][T22107] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.534648][T22107] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.579230][T22107] netdevsim netdevsim6 netdevsim0 (unregistering): left promiscuous mode [ 250.589530][T22107] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.600037][T22107] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 250.664764][T22241] xt_hashlimit: max too large, truncated to 1048576 [ 250.721353][T22107] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 250.730666][T22107] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.748609][T22107] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.767987][T22107] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.814451][T22107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.831327][T22107] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.843795][T17081] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.851099][T17081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.865162][T17087] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.872280][T17087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.978741][T22107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.140997][T22107] veth0_vlan: entered promiscuous mode [ 251.149690][T22107] veth1_vlan: entered promiscuous mode [ 251.173450][T22107] veth0_macvtap: entered promiscuous mode [ 251.181054][T22107] veth1_macvtap: entered promiscuous mode [ 251.191947][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.202615][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.212577][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.223086][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.233139][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.243830][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.253654][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.264107][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.273976][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.284479][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.295726][T22107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.307042][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.317639][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.327574][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.338161][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.348038][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.358679][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.368837][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.379309][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.389362][T22107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.399943][T22107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.410915][T22107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.421146][T22107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.430188][T22107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.438961][T22107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.447849][T22107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.458286][T22297] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7664'. [ 251.499761][T22301] bridge0: port 3(vlan2) entered blocking state [ 251.506151][T22301] bridge0: port 3(vlan2) entered disabled state [ 251.512955][T22301] vlan2: entered allmulticast mode [ 251.523696][T22301] vlan2: left allmulticast mode [ 251.543094][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 251.572545][T22309] loop3: detected capacity change from 0 to 256 [ 251.594147][T22309] FAT-fs (loop3): Directory bread(block 64) failed [ 251.600895][T22309] FAT-fs (loop3): Directory bread(block 65) failed [ 251.608324][T22309] FAT-fs (loop3): Directory bread(block 66) failed [ 251.616510][T22309] FAT-fs (loop3): Directory bread(block 67) failed [ 251.625895][T22313] loop1: detected capacity change from 0 to 1024 [ 251.635206][T22313] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 251.639042][T22309] FAT-fs (loop3): Directory bread(block 68) failed [ 251.646566][T22313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.659389][T22309] FAT-fs (loop3): Directory bread(block 69) failed [ 251.669982][T22309] FAT-fs (loop3): Directory bread(block 70) failed [ 251.683083][T22309] FAT-fs (loop3): Directory bread(block 71) failed [ 251.689871][T22309] FAT-fs (loop3): Directory bread(block 72) failed [ 251.696709][T22309] FAT-fs (loop3): Directory bread(block 73) failed [ 251.705286][T17446] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 251.741736][T17446] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 251.795734][T22326] hub 9-0:1.0: USB hub found [ 251.796980][T22328] loop8: detected capacity change from 0 to 256 [ 251.810061][T22326] hub 9-0:1.0: 8 ports detected [ 251.824033][T21555] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.919401][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 251.919481][ T29] audit: type=1400 audit(1732690274.717:8672): avc: denied { write } for pid=22344 comm="syz.3.7687" name="file0" dev="tmpfs" ino=4404 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 251.949174][ T29] audit: type=1400 audit(1732690274.748:8673): avc: denied { ioctl } for pid=22344 comm="syz.3.7687" path="/850/file0" dev="tmpfs" ino=4404 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 251.997166][T22351] netem: unknown loss type 0 [ 252.038069][ T29] audit: type=1326 audit(1732690274.828:8674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 252.061757][ T29] audit: type=1326 audit(1732690274.828:8675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 252.085350][ T29] audit: type=1326 audit(1732690274.828:8676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22356 comm="syz.3.7693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 252.109237][ T29] audit: type=1400 audit(1732690274.858:8677): avc: denied { read } for pid=22358 comm="syz.3.7696" path="socket:[67413]" dev="sockfs" ino=67413 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 252.154236][T22366] loop8: detected capacity change from 0 to 2048 [ 252.187379][T22366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.214194][ T29] audit: type=1400 audit(1732690275.008:8678): avc: denied { ioctl } for pid=22362 comm="syz.8.7695" path="/74/file1/cpu.stat" dev="loop8" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 252.240612][T22366] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 252.278525][T22369] lo speed is unknown, defaulting to 1000 [ 252.346543][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.426087][T22369] chnl_net:caif_netlink_parms(): no params data found [ 252.454008][T22391] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7705'. [ 252.463079][T22391] netlink: 124 bytes leftover after parsing attributes in process `syz.6.7705'. [ 252.580623][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 252.588536][T22369] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.595947][T22369] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.603520][T22369] bridge_slave_0: entered allmulticast mode [ 252.610154][T22369] bridge_slave_0: entered promiscuous mode [ 252.625509][T22369] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.632802][T22369] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.656605][T22369] bridge_slave_1: entered allmulticast mode [ 252.665129][T22369] bridge_slave_1: entered promiscuous mode [ 252.689436][T22369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.717058][T22369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.763831][T22410] loop6: detected capacity change from 0 to 128 [ 252.777285][T22369] team0: Port device team_slave_0 added [ 252.823113][T22369] team0: Port device team_slave_1 added [ 252.850789][T22412] loop8: detected capacity change from 0 to 1024 [ 252.867261][T22369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.874359][T22369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.900551][T22369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.915322][T22412] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.933295][T22369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.940407][T22369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.966553][T22369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.992398][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.005080][T22369] hsr_slave_0: entered promiscuous mode [ 253.012210][T22369] hsr_slave_1: entered promiscuous mode [ 253.018433][T22369] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.026769][T22369] Cannot create hsr debugfs directory [ 253.075121][T22429] loop8: detected capacity change from 0 to 256 [ 253.095870][T22429] FAT-fs (loop8): Directory bread(block 64) failed [ 253.103642][T22429] FAT-fs (loop8): Directory bread(block 65) failed [ 253.116061][T22429] FAT-fs (loop8): Directory bread(block 66) failed [ 253.123780][ T29] audit: type=1326 audit(1732690275.920:8679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22430 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84d220809 code=0x7ffc0000 [ 253.159721][T22429] FAT-fs (loop8): Directory bread(block 67) failed [ 253.172079][ T29] audit: type=1326 audit(1732690275.920:8680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22430 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7fa84d220809 code=0x7ffc0000 [ 253.195704][ T29] audit: type=1326 audit(1732690275.920:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22430 comm="syz.6.7719" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa84d220809 code=0x7ffc0000 [ 253.199215][T22429] FAT-fs (loop8): Directory bread(block 68) failed [ 253.228293][T22429] FAT-fs (loop8): Directory bread(block 69) failed [ 253.235443][T22429] FAT-fs (loop8): Directory bread(block 70) failed [ 253.242128][T22429] FAT-fs (loop8): Directory bread(block 71) failed [ 253.248664][T22429] FAT-fs (loop8): Directory bread(block 72) failed [ 253.255314][T22429] FAT-fs (loop8): Directory bread(block 73) failed [ 253.268658][T22434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7720'. [ 253.284744][T22429] bio_check_eod: 22 callbacks suppressed [ 253.284760][T22429] syz.8.7718: attempt to access beyond end of device [ 253.284760][T22429] loop8: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 253.364151][T22436] program syz.3.7731 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 253.392403][T22369] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.442936][T22369] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.489652][T22451] : renamed from bond0 (while UP) [ 253.521569][T22369] team0: Port device netdevsim1 removed [ 253.530020][T22369] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.581130][T22369] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.618180][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 253.663222][T22470] netem: unknown loss type 5 [ 253.672113][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7737'. [ 253.677439][T22369] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 253.681088][T22472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7737'. [ 253.696741][T22472] netlink: 36 bytes leftover after parsing attributes in process `syz.6.7737'. [ 253.726886][T22369] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 253.751883][T22369] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 253.767834][T22369] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 253.776383][T22474] netlink: '+}[@': attribute type 10 has an invalid length. [ 253.887774][T22369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.910871][T22482] loop6: detected capacity change from 0 to 1024 [ 253.916289][T22369] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.951630][T22482] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 253.961634][T22482] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 253.981709][T17087] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.988923][T17087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.990766][T22482] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 253.998482][T22484] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.021562][T22482] EXT4-fs error (device loop6): ext4_get_journal_inode:5809: inode #5: comm syz.6.7742: unexpected bad inode w/o EXT4_IGET_BAD [ 254.046239][T22482] EXT4-fs (loop6): no journal found [ 254.051557][T22482] EXT4-fs (loop6): can't get journal size [ 254.057581][T17087] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.062909][T22482] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 254.064713][T17087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.094621][T22482] EXT4-fs error (device loop6): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.6.7742: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 254.150298][T22369] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.235568][T22107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.256711][T22369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.403008][T22512] rdma_op ffff88811fa97d80 conn xmit_rdma 0000000000000000 [ 254.423813][T22515] syz.6.7751[22515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.423881][T22515] syz.6.7751[22515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.455739][T22515] syz.6.7751[22515] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.495428][T22369] veth0_vlan: entered promiscuous mode [ 254.545440][T22369] veth1_vlan: entered promiscuous mode [ 254.577541][T22369] veth0_macvtap: entered promiscuous mode [ 254.602233][T22369] veth1_macvtap: entered promiscuous mode [ 254.613821][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.624517][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.634594][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.645085][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.654940][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.665429][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 254.672609][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.682477][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.693016][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.702883][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.720143][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.730140][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.740649][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.755138][T22369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.774232][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.784800][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.794766][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.805238][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.815122][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.825656][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.835562][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.846113][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.856019][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.866716][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.876618][T22369] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.887119][T22369] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.900429][T22369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.921996][T22369] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.936399][T22369] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.945211][T22369] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.953995][T22369] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.065623][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7699'. [ 255.088725][T22535] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7699'. [ 255.163239][T22546] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7760'. [ 255.203652][T22548] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 255.338837][T22566] 9pnet_fd: Insufficient options for proto=fd [ 255.682375][T22599] ALSA: seq fatal error: cannot create timer (-16) [ 255.693430][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 255.758326][T22612] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 256.005624][T22657] loop8: detected capacity change from 0 to 256 [ 256.021612][T22657] FAT-fs (loop8): Directory bread(block 64) failed [ 256.027990][T22659] loop6: detected capacity change from 0 to 164 [ 256.030028][T22657] FAT-fs (loop8): Directory bread(block 65) failed [ 256.041387][T22657] FAT-fs (loop8): Directory bread(block 66) failed [ 256.048375][T22657] FAT-fs (loop8): Directory bread(block 67) failed [ 256.055115][T22657] FAT-fs (loop8): Directory bread(block 68) failed [ 256.055124][T22659] 1 [ 256.055143][T22657] FAT-fs (loop8): Directory bread(block 69) failed [ 256.061663][T22659] 991A [ 256.068388][T22661] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 256.083968][T22661] TCP: tcp_parse_options: Illegal window scaling value 16 > 14 received [ 256.093863][T22657] FAT-fs (loop8): Directory bread(block 70) failed [ 256.100512][T22657] FAT-fs (loop8): Directory bread(block 71) failed [ 256.107224][T22657] FAT-fs (loop8): Directory bread(block 72) failed [ 256.122423][T22657] FAT-fs (loop8): Directory bread(block 73) failed [ 256.150815][T22657] syz.8.7810: attempt to access beyond end of device [ 256.150815][T22657] loop8: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 256.165076][T22657] syz.8.7810: attempt to access beyond end of device [ 256.165076][T22657] loop8: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 256.251235][T22684] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22684 comm=syz.6.7819 [ 256.301493][T22690] loop8: detected capacity change from 0 to 512 [ 256.347545][T22690] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.368157][T22690] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.383559][T22690] EXT4-fs error (device loop8): ext4_empty_dir:3097: inode #12: comm syz.8.7822: Directory hole found for htree leaf block 0 [ 256.409865][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.455031][T22712] netlink: 16 bytes leftover after parsing attributes in process `syz.8.7830'. [ 256.486439][T22718] xt_hashlimit: max too large, truncated to 1048576 [ 256.496990][T22718] Cannot find set identified by id 0 to match [ 256.541119][T22724] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.660819][T22735] lo speed is unknown, defaulting to 1000 [ 256.666868][T22737] syz.3.7842[22737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.666936][T22737] syz.3.7842[22737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.678539][T22737] syz.3.7842[22737] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 256.740986][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 256.782365][T22745] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 256.823050][T22747] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7847'. [ 256.901300][T22747] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.977517][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 256.977534][ T29] audit: type=1400 audit(1732690279.779:8736): avc: denied { mount } for pid=22765 comm="syz.3.7855" name="/" dev="rpc_pipefs" ino=70191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 257.063144][T22776] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7860'. [ 257.092903][T22778] loop8: detected capacity change from 0 to 2048 [ 257.104032][ T29] audit: type=1326 audit(1732690279.909:8737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.127715][ T29] audit: type=1326 audit(1732690279.909:8738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.152090][ T29] audit: type=1326 audit(1732690279.909:8739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.175683][ T29] audit: type=1326 audit(1732690279.909:8740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.199651][ T29] audit: type=1326 audit(1732690279.909:8741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.223256][ T29] audit: type=1326 audit(1732690279.909:8742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.246769][ T29] audit: type=1326 audit(1732690279.909:8743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.270290][ T29] audit: type=1326 audit(1732690279.909:8744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.294123][ T29] audit: type=1326 audit(1732690279.909:8745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22779 comm="syz.3.7862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcaa5180809 code=0x7ffc0000 [ 257.330843][T22778] loop8: p1 < > p4 [ 257.336089][T22778] loop8: p4 size 8388608 extends beyond EOD, truncated [ 257.348722][ C0] operation not supported error, dev loop8, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10000800 phys_seg 0 prio class 0 [ 257.419187][T22806] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 257.545290][T22823] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 257.724512][T22850] Cannot find add_set index 0 as target [ 257.778783][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 257.795875][T22862] loop6: detected capacity change from 0 to 512 [ 257.811038][T22862] EXT4-fs: Ignoring removed oldalloc option [ 257.830775][T22862] EXT4-fs error (device loop6): ext4_xattr_inode_iget:436: comm syz.6.7901: Parent and EA inode have the same ino 15 [ 257.853819][T22862] EXT4-fs (loop6): Remounting filesystem read-only [ 257.860483][T22862] EXT4-fs warning (device loop6): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 257.879463][T22862] EXT4-fs (loop6): 1 orphan inode deleted [ 257.885866][T22862] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.898596][T22862] SELinux: (dev loop6, type ext4) getxattr errno 5 [ 257.905960][T22862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.184353][T22919] netlink: 'syz.6.7926': attribute type 1 has an invalid length. [ 258.215178][T22922] usb usb1: usbfs: process 22922 (syz.6.7927) did not claim interface 0 before use [ 258.265830][T22925] __nla_validate_parse: 14 callbacks suppressed [ 258.265851][T22925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7928'. [ 258.442324][T22937] loop9: detected capacity change from 0 to 1024 [ 258.450737][T22937] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 258.475173][T22937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.529888][T22369] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 258.552598][T22369] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 258.614738][T22942] loop3: detected capacity change from 0 to 1024 [ 258.631145][T22942] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 258.641918][T22944] program syz.6.7937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.762858][T22950] sctp: [Deprecated]: syz.4.7940 (pid 22950) Use of int in max_burst socket option deprecated. [ 258.762858][T22950] Use struct sctp_assoc_value instead [ 258.780330][T22954] hub 9-0:1.0: USB hub found [ 258.794635][T22954] hub 9-0:1.0: 8 ports detected [ 258.806465][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 258.870216][T22369] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.880268][ T1934] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.899793][T22975] Cannot find set identified by id 0 to match [ 258.939395][ T1934] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.972106][T22983] loop8: detected capacity change from 0 to 512 [ 258.989904][ T1934] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.005670][T22986] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7957'. [ 259.039587][ T1934] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.064598][T22983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.090643][T22997] syz.4.7960[22997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.090754][T22997] syz.4.7960[22997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.092926][T22983] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.109386][T22997] syz.4.7960[22997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.142681][ T1934] bridge_slave_1: left allmulticast mode [ 259.153130][T22983] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, [ 259.154213][ T1934] bridge_slave_1: left promiscuous mode [ 259.160084][T22983] block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 259.168524][ T1934] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.181579][T22983] EXT4-fs error (device loop8): ext4_acquire_dquot:6938: comm syz.8.7956: Failed to acquire dquot type 0 [ 259.229273][ T1934] bridge_slave_0: left allmulticast mode [ 259.234986][ T1934] bridge_slave_0: left promiscuous mode [ 259.240809][ T1934] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.252419][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.391976][ T1934] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.411325][ T1934] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.426597][T23026] loop8: detected capacity change from 0 to 512 [ 259.434641][ T1934] bond0 (unregistering): Released all slaves [ 259.457402][T23026] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.478574][T23026] ext4 filesystem being mounted at /131/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.524206][ T1934] hsr_slave_0: left promiscuous mode [ 259.533153][T23040] loop6: detected capacity change from 0 to 512 [ 259.542073][T23040] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 259.552353][ T1934] hsr_slave_1: left promiscuous mode [ 259.560607][ T1934] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.561351][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.568215][ T1934] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.578945][T23040] EXT4-fs (loop6): 1 truncate cleaned up [ 259.590306][T23040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 259.590633][ T1934] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.610109][ T1934] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.620651][T22107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.630041][ T1934] veth1_macvtap: left promiscuous mode [ 259.635624][ T1934] veth0_macvtap: left promiscuous mode [ 259.641262][ T1934] veth1_vlan: left promiscuous mode [ 259.646652][ T1934] veth0_vlan: left promiscuous mode [ 259.736021][ T1934] team0 (unregistering): Port device team_slave_1 removed [ 259.746380][ T1934] team0 (unregistering): Port device team_slave_0 removed [ 259.782158][T23043] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 259.803357][T22991] lo speed is unknown, defaulting to 1000 [ 259.854156][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 259.909704][T23067] netlink: '+}[@': attribute type 10 has an invalid length. [ 259.928242][T23067] team0: Port device netdevsim1 added [ 259.943145][T22991] chnl_net:caif_netlink_parms(): no params data found [ 259.991292][T23078] macsec1: entered promiscuous mode [ 259.996586][T23078] macvlan1: entered promiscuous mode [ 260.002091][T23078] macsec1: entered allmulticast mode [ 260.007599][T23078] macvlan1: entered allmulticast mode [ 260.013052][T23078] veth1_vlan: entered allmulticast mode [ 260.021593][T23078] macvlan1: left allmulticast mode [ 260.026843][T23078] veth1_vlan: left allmulticast mode [ 260.032193][T23078] macvlan1: left promiscuous mode [ 260.051799][T22991] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.059014][T22991] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.068048][T22991] bridge_slave_0: entered allmulticast mode [ 260.074885][T22991] bridge_slave_0: entered promiscuous mode [ 260.087295][T23083] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 260.096231][T22991] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.103454][T22991] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.110922][T22991] bridge_slave_1: entered allmulticast mode [ 260.117908][T22991] bridge_slave_1: entered promiscuous mode [ 260.171117][T22991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.183910][T22991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.214779][T22991] team0: Port device team_slave_0 added [ 260.223880][T22991] team0: Port device team_slave_1 added [ 260.243557][T22991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.250561][T22991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.276683][T22991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.291131][T22991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.298169][T22991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.324446][T22991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.346199][T23097] lo speed is unknown, defaulting to 1000 [ 260.380614][T22991] hsr_slave_0: entered promiscuous mode [ 260.387239][T22991] hsr_slave_1: entered promiscuous mode [ 260.395956][T22991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.403854][T22991] Cannot create hsr debugfs directory [ 260.462320][T23113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8007'. [ 260.564020][T22991] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.620378][T22991] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.676153][T22991] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.704308][T23132] loop6: detected capacity change from 0 to 512 [ 260.732128][T23132] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.744787][T23132] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.765960][T22991] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.792263][T23140] xt_hashlimit: max too large, truncated to 1048576 [ 260.809945][T23140] Cannot find set identified by id 0 to match [ 260.817994][T22107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.862929][T22991] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 260.876784][T22991] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 260.892927][ C1] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 260.909385][T22991] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 260.931890][T22991] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 260.951238][T23154] loop3: detected capacity change from 0 to 2048 [ 261.017301][T23154] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.079427][T22991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.091394][T22991] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.102832][T17081] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.109981][T17081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.123902][ T1990] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.131046][ T1990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.183453][T22991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 261.193884][T22991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.247923][T23180] dvmrp0: entered allmulticast mode [ 261.263776][T23180] pimreg: entered allmulticast mode [ 261.271516][T15195] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.307061][T22991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.393417][T23192] syzkaller0: entered promiscuous mode [ 261.398937][T23192] syzkaller0: entered allmulticast mode [ 261.474066][T22991] veth0_vlan: entered promiscuous mode [ 261.483409][T22991] veth1_vlan: entered promiscuous mode [ 261.504540][T22991] veth0_macvtap: entered promiscuous mode [ 261.522962][T22991] veth1_macvtap: entered promiscuous mode [ 261.535147][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.545827][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.555804][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.566596][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.576674][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.587150][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.597087][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.607911][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.617905][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.628439][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.638374][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.648889][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.660779][T22991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.676199][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.686799][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.696920][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.707529][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.717508][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.727992][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.737940][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.748382][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.758274][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.768710][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.778560][T22991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.789075][T22991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.799847][T22991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.846239][T23214] pim6reg1: entered promiscuous mode [ 261.856179][T22991] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.865260][T22991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.874069][T22991] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.882955][T22991] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.934662][T23208] lo speed is unknown, defaulting to 1000 [ 262.011157][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 262.011172][ T29] audit: type=1400 audit(1732690284.830:8955): avc: denied { create } for pid=23229 comm="syz.7.8045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.037143][ T29] audit: type=1400 audit(1732690284.830:8956): avc: denied { write } for pid=23229 comm="syz.7.8045" path="socket:[72411]" dev="sockfs" ino=72411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 262.101949][T23208] chnl_net:caif_netlink_parms(): no params data found [ 262.138023][T23236] loop6: detected capacity change from 0 to 512 [ 262.172103][T23236] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 262.185931][T23236] EXT4-fs (loop6): failed to initialize system zone (-117) [ 262.210265][T23236] EXT4-fs (loop6): mount failed [ 262.243878][T23208] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.251013][T23208] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.258904][T23208] bridge_slave_0: entered allmulticast mode [ 262.265955][T23208] bridge_slave_0: entered promiscuous mode [ 262.273372][T23208] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.280704][T23208] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.288855][ T29] audit: type=1326 audit(1732690285.091:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.291695][T23208] bridge_slave_1: entered allmulticast mode [ 262.312539][ T29] audit: type=1326 audit(1732690285.091:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.312652][ T29] audit: type=1326 audit(1732690285.091:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.321025][T23208] bridge_slave_1: entered promiscuous mode [ 262.342200][ T29] audit: type=1326 audit(1732690285.091:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.395190][ T29] audit: type=1326 audit(1732690285.091:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.418741][ T29] audit: type=1326 audit(1732690285.101:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.460002][T23208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.469679][ T29] audit: type=1326 audit(1732690285.291:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.471026][T23208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.493419][ T29] audit: type=1326 audit(1732690285.291:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23262 comm="syz.8.8061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0de1ab0809 code=0x7ffc0000 [ 262.532517][T23268] program syz.7.8063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.556120][T23208] team0: Port device team_slave_0 added [ 262.563695][T23208] team0: Port device team_slave_1 added [ 262.609156][T23208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.616151][T23208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.642213][T23208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.656449][T23208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.663524][T23208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.689533][T23208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.723692][T23282] loop6: detected capacity change from 0 to 256 [ 262.739431][T23208] hsr_slave_0: entered promiscuous mode [ 262.746394][T23208] hsr_slave_1: entered promiscuous mode [ 262.752656][T23208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.760897][T23208] Cannot create hsr debugfs directory [ 262.768073][T23284] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 262.780597][T23286] loop7: detected capacity change from 0 to 164 [ 262.792701][T23282] FAT-fs (loop6): Directory bread(block 64) failed [ 262.801279][T23282] FAT-fs (loop6): Directory bread(block 65) failed [ 262.807924][T23282] FAT-fs (loop6): Directory bread(block 66) failed [ 262.814508][T23282] FAT-fs (loop6): Directory bread(block 67) failed [ 262.824222][T23282] FAT-fs (loop6): Directory bread(block 68) failed [ 262.830918][T23282] FAT-fs (loop6): Directory bread(block 69) failed [ 262.839416][T23282] FAT-fs (loop6): Directory bread(block 70) failed [ 262.845968][T23282] FAT-fs (loop6): Directory bread(block 71) failed [ 262.852847][T23282] FAT-fs (loop6): Directory bread(block 72) failed [ 262.861199][T23282] FAT-fs (loop6): Directory bread(block 73) failed [ 262.885618][T23282] syz.6.8079: attempt to access beyond end of device [ 262.885618][T23282] loop6: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 262.899854][T23282] syz.6.8079: attempt to access beyond end of device [ 262.899854][T23282] loop6: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 263.140630][T23318] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 263.151815][T23208] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 263.161539][T23208] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 263.181461][T23208] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 263.209057][T23208] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 263.269288][T23208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.282701][T23336] loop4: detected capacity change from 0 to 2048 [ 263.290342][T23208] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.302968][T23336] EXT4-fs error (device loop4): __ext4_fill_super:5505: inode #2: comm syz.4.8095: casefold flag without casefold feature [ 263.317697][ T8880] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.325031][ T8880] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.337676][T23336] EXT4-fs (loop4): get root inode failed [ 263.338504][ T8880] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.343392][T23336] EXT4-fs (loop4): mount failed [ 263.350481][ T8880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.364312][T23208] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.374715][T23208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.456820][T23208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.535042][T23208] veth0_vlan: entered promiscuous mode [ 263.537938][T23361] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 263.546449][T23208] veth1_vlan: entered promiscuous mode [ 263.571371][T23208] veth0_macvtap: entered promiscuous mode [ 263.580919][T23208] veth1_macvtap: entered promiscuous mode [ 263.593215][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.603865][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.613861][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.624427][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.634313][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.644786][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.654656][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.665318][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.675202][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.685768][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.695758][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.706364][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.716211][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.726733][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.738387][T23208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.747136][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.757648][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.767540][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.778022][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.787969][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.798512][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.808358][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.818808][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.828695][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.839178][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.849142][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.859599][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.869516][T23208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.879983][T23208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.891104][T23208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.902400][T23208] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.911495][T23208] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.920605][T23208] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.929432][T23208] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.048134][T23380] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 264.193413][T23399] netlink: 'syz.4.8118': attribute type 10 has an invalid length. [ 264.202186][T23399] bridge0: port 3(team0) entered blocking state [ 264.208530][T23399] bridge0: port 3(team0) entered disabled state [ 264.215404][T23399] team0: entered allmulticast mode [ 264.220605][T23399] team_slave_0: entered allmulticast mode [ 264.226413][T23399] team_slave_1: entered allmulticast mode [ 264.232255][T23399] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 264.286396][T23399] team0: entered promiscuous mode [ 264.291520][T23399] team_slave_0: entered promiscuous mode [ 264.297294][T23399] team_slave_1: entered promiscuous mode [ 264.303066][T23399] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 264.332574][T23410] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 264.343728][T23399] bridge0: port 3(team0) entered blocking state [ 264.350072][T23399] bridge0: port 3(team0) entered forwarding state [ 264.573235][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.582347][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.606843][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.640984][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.650063][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.664089][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.706293][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.715481][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.745689][T23440] loop8: detected capacity change from 0 to 128 [ 264.752585][T23425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8129'. [ 264.768021][T23440] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 264.787753][T23439] netem: unknown loss type 0 [ 264.792437][T23439] netem: change failed [ 264.796932][T23440] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.886092][T17081] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 264.952499][T23461] usb usb1: usbfs: process 23461 (syz.4.8145) did not claim interface 0 before use [ 264.976486][T23465] loop2: detected capacity change from 0 to 512 [ 264.988121][T23467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.008874][T23467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.060007][T23465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.074856][T23476] Cannot find set identified by id 0 to match [ 265.101250][T23478] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8152'. [ 265.121093][T23465] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.198532][T23482] hsr_slave_0: left promiscuous mode [ 265.225901][T23482] hsr_slave_1: left promiscuous mode [ 265.236159][T23208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.328085][T23498] loop4: detected capacity change from 0 to 512 [ 265.348597][T23497] lo speed is unknown, defaulting to 1000 [ 265.358843][T23498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.377542][T23498] ext4 filesystem being mounted at /193/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.386055][ T3391] IPVS: starting estimator thread 0... [ 265.394237][T23502] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 265.412996][T23498] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.8162: corrupted inode contents [ 265.448221][T23498] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #18: comm syz.4.8162: mark_inode_dirty error [ 265.466771][T23498] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.8162: corrupted inode contents [ 265.484420][T23498] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.8162: mark_inode_dirty error [ 265.497330][T23503] IPVS: using max 2352 ests per chain, 117600 per kthread [ 265.534674][T23498] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.8162: mark inode dirty (error -117) [ 265.557862][T23498] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 265.608061][T21082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.714871][T23513] ebtables: ebtables: counters copy to user failed while replacing table [ 265.767251][T23527] lo speed is unknown, defaulting to 1000 [ 265.988130][T23541] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 266.079963][T23551] loop4: detected capacity change from 0 to 512 [ 266.121311][T23551] EXT4-fs: inline encryption not supported [ 266.148036][T23551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.161611][T23551] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.182954][T23551] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.8183: corrupted inode contents [ 266.214251][T23561] loop8: detected capacity change from 0 to 512 [ 266.236434][T23551] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #2: comm syz.4.8183: mark_inode_dirty error [ 266.265339][T23561] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2240: inode #15: comm syz.8.8186: corrupted in-inode xattr: invalid ea_ino [ 266.303057][T23551] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #2: comm syz.4.8183: corrupted inode contents [ 266.327926][T23566] bridge0: entered allmulticast mode [ 266.330698][T23561] EXT4-fs error (device loop8): ext4_orphan_get:1394: comm syz.8.8186: couldn't read orphan inode 15 (err -117) [ 266.336396][T23566] pim6reg: entered allmulticast mode [ 266.372936][T23561] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.395387][T21082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.417294][T23570] 9p: Unknown access argument ): -22 [ 266.445863][T23574] loop4: detected capacity change from 0 to 512 [ 266.460420][T23574] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 266.476344][T23561] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 266.491767][T23574] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8191: corrupted in-inode xattr: invalid ea_ino [ 266.508676][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.545385][T23574] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.8191: couldn't read orphan inode 15 (err -117) [ 266.603058][T23574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.651537][T21082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.741382][T23612] loop4: detected capacity change from 0 to 128 [ 266.902766][T23619] syz.4.8204: attempt to access beyond end of device [ 266.902766][T23619] loop4: rw=2049, sector=292, nr_sectors = 8 limit=128 [ 266.936989][T23619] syz.4.8204: attempt to access beyond end of device [ 266.936989][T23619] loop4: rw=2049, sector=308, nr_sectors = 8 limit=128 [ 266.965951][T23635] loop2: detected capacity change from 0 to 1024 [ 266.974501][T23619] syz.4.8204: attempt to access beyond end of device [ 266.974501][T23619] loop4: rw=2049, sector=332, nr_sectors = 24 limit=128 [ 266.989142][T23635] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 266.999054][T23635] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 267.010722][T23619] syz.4.8204: attempt to access beyond end of device [ 267.010722][T23619] loop4: rw=2049, sector=364, nr_sectors = 8 limit=128 [ 267.026187][T23635] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 267.038957][T23619] syz.4.8204: attempt to access beyond end of device [ 267.038957][T23619] loop4: rw=2049, sector=380, nr_sectors = 8 limit=128 [ 267.056519][T23635] EXT4-fs error (device loop2): ext4_get_journal_inode:5809: inode #5: comm syz.2.8214: unexpected bad inode w/o EXT4_IGET_BAD [ 267.059674][T23619] syz.4.8204: attempt to access beyond end of device [ 267.059674][T23619] loop4: rw=2049, sector=396, nr_sectors = 8 limit=128 [ 267.084837][T23635] EXT4-fs (loop2): no journal found [ 267.090337][T23635] EXT4-fs (loop2): can't get journal size [ 267.112486][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 267.112500][ T29] audit: type=1400 audit(1732690289.941:9010): avc: denied { mount } for pid=23642 comm="syz.7.8218" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 267.141785][T23635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 267.164778][T23619] syz.4.8204: attempt to access beyond end of device [ 267.164778][T23619] loop4: rw=2049, sector=412, nr_sectors = 8 limit=128 [ 267.168031][ T29] audit: type=1400 audit(1732690289.991:9011): avc: denied { unmount } for pid=22991 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 267.179348][T23635] EXT4-fs error (device loop2): ext4_inlinedir_to_tree:1404: inode #12: block 16: comm syz.2.8214: path /: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0 [ 267.201989][T23619] syz.4.8204: attempt to access beyond end of device [ 267.201989][T23619] loop4: rw=2049, sector=428, nr_sectors = 8 limit=128 [ 267.243436][T23208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.281520][T23648] loop8: detected capacity change from 0 to 512 [ 267.295538][ T29] audit: type=1400 audit(1732690290.121:9012): avc: denied { relabelto } for pid=23649 comm="syz.6.8224" name="memfd:" dev="tmpfs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 267.340982][T23648] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.341332][ T29] audit: type=1400 audit(1732690290.121:9013): avc: denied { associate } for pid=23649 comm="syz.6.8224" name="memfd:" dev="tmpfs" ino=421 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 267.381952][T23648] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.431071][T23648] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #18: comm syz.8.8222: corrupted inode contents [ 267.443690][T23648] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #18: comm syz.8.8222: mark_inode_dirty error [ 267.457422][T23648] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #18: comm syz.8.8222: corrupted inode contents [ 267.477246][T23648] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3006: inode #18: comm syz.8.8222: mark_inode_dirty error [ 267.491596][T23648] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3009: inode #18: comm syz.8.8222: mark inode dirty (error -117) [ 267.522875][ T1990] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.533304][T23648] EXT4-fs warning (device loop8): ext4_evict_inode:276: xattr delete (err -117) [ 267.559277][T23669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.567832][T23669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.593782][ T1990] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.606443][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.618310][ T29] audit: type=1400 audit(1732690290.442:9014): avc: denied { unmount } for pid=23673 comm="syz.4.8233" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 267.655463][ T29] audit: type=1400 audit(1732690290.482:9015): avc: denied { read } for pid=23676 comm="syz.4.8234" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 267.685410][ T1990] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.725079][ T29] audit: type=1326 audit(1732690290.542:9016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.4.8237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb150809 code=0x7ffc0000 [ 267.748825][ T29] audit: type=1326 audit(1732690290.542:9017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.4.8237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7ccb150809 code=0x7ffc0000 [ 267.772836][ T29] audit: type=1326 audit(1732690290.552:9018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.4.8237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb150809 code=0x7ffc0000 [ 267.796461][ T29] audit: type=1326 audit(1732690290.552:9019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23685 comm="syz.4.8237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccb150809 code=0x7ffc0000 [ 267.842305][ T1990] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.866191][T23663] lo speed is unknown, defaulting to 1000 [ 267.887985][T23683] Falling back ldisc for ttyS3. [ 267.932571][T23699] loop4: detected capacity change from 0 to 512 [ 267.941230][T23702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.953209][T23702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.962731][T23699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.975537][ T1990] bridge_slave_1: left allmulticast mode [ 267.981314][ T1990] bridge_slave_1: left promiscuous mode [ 267.981420][T23699] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.987014][ T1990] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.006844][T23699] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.8241: corrupted inode contents [ 268.007493][ T1990] bridge_slave_0: left allmulticast mode [ 268.023539][T23699] EXT4-fs error (device loop4): ext4_dirty_inode:6041: inode #18: comm syz.4.8241: mark_inode_dirty error [ 268.024418][ T1990] bridge_slave_0: left promiscuous mode [ 268.035960][T23699] EXT4-fs error (device loop4): ext4_do_update_inode:5153: inode #18: comm syz.4.8241: corrupted inode contents [ 268.041411][ T1990] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.056985][T23699] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3006: inode #18: comm syz.4.8241: mark_inode_dirty error [ 268.073163][T23699] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3009: inode #18: comm syz.4.8241: mark inode dirty (error -117) [ 268.085924][T23699] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 268.113189][T21082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.189549][ T1990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.199889][ T1990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.209955][ T1990] bond0 (unregistering): Released all slaves [ 268.235592][T23663] chnl_net:caif_netlink_parms(): no params data found [ 268.270848][ T1990] hsr_slave_0: left promiscuous mode [ 268.285508][ T1990] hsr_slave_1: left promiscuous mode [ 268.294419][ T1990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.302033][ T1990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.313161][ T1990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.320671][ T1990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.331143][ T1990] veth1_macvtap: left promiscuous mode [ 268.336769][ T1990] veth0_macvtap: left promiscuous mode [ 268.342532][ T1990] veth1_vlan: left promiscuous mode [ 268.347846][ T1990] veth0_vlan: left promiscuous mode [ 268.420705][ T1990] team0 (unregistering): Port device team_slave_1 removed [ 268.431589][ T1990] team0 (unregistering): Port device team_slave_0 removed [ 268.506119][T23727] syzkaller0: entered promiscuous mode [ 268.511702][T23727] syzkaller0: entered allmulticast mode [ 268.518014][T23663] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.525100][T23663] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.534839][T23663] bridge_slave_0: entered allmulticast mode [ 268.546459][T23663] bridge_slave_0: entered promiscuous mode [ 268.559500][T23733] dvmrp0: entered allmulticast mode [ 268.576608][T23663] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.583675][T23663] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.591062][T23663] bridge_slave_1: entered allmulticast mode [ 268.597865][T23663] bridge_slave_1: entered promiscuous mode [ 268.608743][T23733] pimreg: entered allmulticast mode [ 268.630471][T23663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.641485][T23736] syz.8.8251[23736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.641544][T23736] syz.8.8251[23736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.641644][T23663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.663153][T23736] syz.8.8251[23736] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 268.681638][T23736] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.700265][T23736] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.710591][T23738] netem: change failed [ 268.733831][T23663] team0: Port device team_slave_0 added [ 268.745686][T23663] team0: Port device team_slave_1 added [ 268.778469][T23663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.785525][T23663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.803000][T23748] loop8: detected capacity change from 0 to 2048 [ 268.811660][T23663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.829506][T23663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.836598][T23663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.862626][T23663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.884282][T23748] loop8: p1 < > p3 < > p4 < > [ 268.889193][T23748] loop8: partition table partially beyond EOD, truncated [ 268.915231][T23748] loop8: p3 start 4284289 is beyond EOD, truncated [ 268.934409][T23663] hsr_slave_0: entered promiscuous mode [ 268.950071][T23663] hsr_slave_1: entered promiscuous mode [ 268.966932][T23663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.986448][T23663] Cannot create hsr debugfs directory [ 269.145242][T23775] atomic_op ffff8881134bc928 conn xmit_atomic 0000000000000000 [ 269.161233][T23777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.177631][T23777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.402341][T23663] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.411668][T23663] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.420992][T23663] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.430023][T23663] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.473419][T23663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.487222][T23663] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.497289][ T1934] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.504427][ T1934] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.521571][ T1934] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.528686][ T1934] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.615800][T23663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.760257][T23663] veth0_vlan: entered promiscuous mode [ 269.772538][T23663] veth1_vlan: entered promiscuous mode [ 269.795520][T23663] veth0_macvtap: entered promiscuous mode [ 269.804253][T23663] veth1_macvtap: entered promiscuous mode [ 269.819546][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.830156][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.840003][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.850502][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.860355][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.870977][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.881033][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.891611][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.901519][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.912296][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.922136][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.932724][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.942602][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 269.953103][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.965889][T23663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.976295][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.986882][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.996832][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.007472][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.017406][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.027849][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.037750][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.048223][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.058066][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.068646][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.078573][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.089021][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.098954][T23663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.109479][T23663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.120409][T23663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.138184][T23663] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.146989][T23663] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.155885][T23663] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.164684][T23663] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.421196][T23870] loop8: detected capacity change from 0 to 2048 [ 270.453362][T23870] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.482011][T23870] EXT4-fs error (device loop8): ext4_ext_precache:631: inode #2: comm syz.8.8300: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 270.508315][T23870] EXT4-fs (loop8): Remounting filesystem read-only [ 270.579107][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.597017][T23894] x_tables: ip_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 270.698540][T23907] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 270.758272][T23916] syz.6.8318[23916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.758369][T23916] syz.6.8318[23916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.774346][T23916] syz.6.8318[23916] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 270.979054][T23942] IPv6: Can't replace route, no match found [ 271.011152][T23944] loop2: detected capacity change from 0 to 2048 [ 271.047244][T23944] loop2: p1 < > p3 < > p4 < > [ 271.052196][T23944] loop2: partition table partially beyond EOD, truncated [ 271.061753][T23944] loop2: p3 start 4284289 is beyond EOD, truncated [ 271.139857][T23955] loop2: detected capacity change from 0 to 512 [ 271.146764][T23955] EXT4-fs: Ignoring removed oldalloc option [ 271.159898][T23955] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.8337: Parent and EA inode have the same ino 15 [ 271.173464][T23955] EXT4-fs (loop2): Remounting filesystem read-only [ 271.180036][T23955] EXT4-fs warning (device loop2): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 271.191656][T23955] EXT4-fs (loop2): 1 orphan inode deleted [ 271.207212][T23955] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.243272][T23958] loop8: detected capacity change from 0 to 512 [ 271.250434][T23955] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 271.261649][T23955] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.271993][T23958] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 271.315005][T23958] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.338899][T23958] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.8338: corrupted inode contents [ 271.374901][T23958] EXT4-fs error (device loop8): ext4_dirty_inode:6041: inode #2: comm syz.8.8338: mark_inode_dirty error [ 271.392272][T23966] lo speed is unknown, defaulting to 1000 [ 271.413813][T23958] EXT4-fs error (device loop8): ext4_do_update_inode:5153: inode #2: comm syz.8.8338: corrupted inode contents [ 271.538056][T21626] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.615952][T23992] usb usb1: usbfs: process 23992 (syz.5.8352) did not claim interface 0 before use [ 271.676775][T23990] syzkaller0: entered promiscuous mode [ 271.682358][T23990] syzkaller0: entered allmulticast mode [ 271.726365][T24001] Cannot find set identified by id 0 to match [ 271.739835][T24003] loop5: detected capacity change from 0 to 256 [ 271.892886][T24020] syzkaller0: entered promiscuous mode [ 271.898404][T24020] syzkaller0: entered allmulticast mode [ 272.005132][T24040] loop6: detected capacity change from 0 to 1024 [ 272.032044][T24040] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.032331][T24042] loop4: detected capacity change from 0 to 512 [ 272.051073][T24042] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.070464][T24042] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b856c118, mo2=0002] [ 272.078664][T24042] System zones: 1-12 [ 272.083056][T24042] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.8373: corrupted in-inode xattr: e_value size too large [ 272.098116][T24042] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.8373: couldn't read orphan inode 15 (err -117) [ 272.112389][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 272.112407][ T29] audit: type=1400 audit(1732690294.950:9142): avc: denied { unmount } for pid=22107 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 272.139095][T24042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.152303][ T29] audit: type=1400 audit(1732690294.990:9143): avc: denied { mount } for pid=24041 comm="syz.4.8373" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 272.157507][T22107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.177071][ T29] audit: type=1400 audit(1732690295.020:9144): avc: denied { read } for pid=24041 comm="syz.4.8373" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 272.206343][ T29] audit: type=1400 audit(1732690295.020:9145): avc: denied { open } for pid=24041 comm="syz.4.8373" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 272.229974][ T29] audit: type=1400 audit(1732690295.020:9146): avc: denied { write } for pid=24041 comm="syz.4.8373" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.251858][ T29] audit: type=1400 audit(1732690295.020:9147): avc: denied { add_name } for pid=24041 comm="syz.4.8373" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 272.274866][ T29] audit: type=1400 audit(1732690295.020:9148): avc: denied { create } for pid=24041 comm="syz.4.8373" name="blkio.bfq.io_merged_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.297350][ T29] audit: type=1400 audit(1732690295.020:9149): avc: denied { read append open } for pid=24041 comm="syz.4.8373" path="/253/file0/blkio.bfq.io_merged_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 272.324024][ T29] audit: type=1400 audit(1732690295.050:9150): avc: denied { create } for pid=24051 comm="syz.8.8378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.343736][ T29] audit: type=1400 audit(1732690295.050:9151): avc: denied { setopt } for pid=24051 comm="syz.8.8378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 272.366149][T21082] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.377331][T24057] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 272.400951][T24057] vhci_hcd: invalid port number 23 [ 272.491734][T24070] __nla_validate_parse: 19 callbacks suppressed [ 272.491754][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8386'. [ 272.492730][T24071] loop2: detected capacity change from 0 to 512 [ 272.548670][T24071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.568779][T24071] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.594235][T24071] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 272.617602][T24071] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.8387: Failed to acquire dquot type 0 [ 272.678908][T24088] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.686099][T24088] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.696356][T23208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.708978][T24089] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8393'. [ 272.793289][T24102] loop2: detected capacity change from 0 to 1024 [ 272.821147][T24102] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.865558][T24102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.894297][T24116] bond1: entered promiscuous mode [ 272.899637][T24116] bond1: entered allmulticast mode [ 272.911908][T24116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.944164][T24116] bond1 (unregistering): Released all slaves [ 272.978538][T23208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.145438][T24159] SELinux: syz.5.8421 (24159) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 273.201034][T24164] loop6: detected capacity change from 0 to 512 [ 273.211850][T24164] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.8422: corrupted in-inode xattr: invalid ea_ino [ 273.225746][T24170] netlink: 'syz.4.8427': attribute type 13 has an invalid length. [ 273.233612][T24164] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.8422: couldn't read orphan inode 15 (err -117) [ 273.234364][T24164] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.245491][T24170] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8427'. [ 273.270901][T24170] syz_tun: refused to change device tx_queue_len [ 273.277322][T24170] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 273.286458][T24164] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 273.379860][T22107] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.388491][T24189] loop4: detected capacity change from 0 to 128 [ 273.442107][T24198] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 273.474746][T24201] loop2: detected capacity change from 0 to 512 [ 273.480981][T24203] bridge0: port 3(syz_tun) entered blocking state [ 273.487713][T24203] bridge0: port 3(syz_tun) entered disabled state [ 273.494535][T24203] syz_tun: entered allmulticast mode [ 273.501458][T24203] syz_tun: entered promiscuous mode [ 273.507461][T24203] bridge0: port 3(syz_tun) entered blocking state [ 273.513959][T24203] bridge0: port 3(syz_tun) entered forwarding state [ 273.531403][T24201] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.544550][T24201] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.606448][T23208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.840904][T24245] syz.6.8460[24245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.840980][T24245] syz.6.8460[24245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.868780][T24245] syz.6.8460[24245] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 273.907143][T24250] netlink: 'syz.5.8461': attribute type 3 has an invalid length. [ 273.952918][T24256] IPv6: Can't replace route, no match found [ 274.147953][T24271] Process accounting resumed [ 274.219679][T24273] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8473'. [ 274.328422][T24286] syz.6.8479[24286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.328533][T24286] syz.6.8479[24286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.365288][T24286] syz.6.8479[24286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 274.741591][T24311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.791169][T24311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.916264][T24320] loop2: detected capacity change from 0 to 512 [ 274.949100][T24320] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.8495: corrupted in-inode xattr: invalid ea_ino [ 274.976614][T24320] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.8495: couldn't read orphan inode 15 (err -117) [ 275.013825][T24320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.033975][T24320] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 275.074436][T23208] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.415897][ C0] ================================================================== [ 275.424001][ C0] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 275.431032][ C0] [ 275.433351][ C0] read-write to 0xffff888237d2e8a4 of 4 bytes by task 35 on cpu 1: [ 275.441234][ C0] wq_worker_running+0x98/0x130 [ 275.446084][ C0] schedule_timeout+0xb8/0x160 [ 275.450845][ C0] wait_for_common+0xfb/0x1c0 [ 275.455521][ C0] usb_start_wait_urb+0xdc/0x190 [ 275.460464][ C0] usb_control_msg+0x182/0x240 [ 275.465232][ C0] hub_ext_port_status+0xbf/0x480 [ 275.470278][ C0] hub_event+0x538/0x2910 [ 275.474613][ C0] process_scheduled_works+0x483/0x9a0 [ 275.480072][ C0] worker_thread+0x51d/0x6f0 [ 275.484688][ C0] kthread+0x1d1/0x210 [ 275.488760][ C0] ret_from_fork+0x4b/0x60 [ 275.493191][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.497979][ C0] [ 275.500314][ C0] read to 0xffff888237d2e8a4 of 4 bytes by interrupt on cpu 0: [ 275.507868][ C0] kick_pool+0x4d/0x2c0 [ 275.512029][ C0] __queue_work+0x8bb/0xb40 [ 275.516537][ C0] queue_work_on+0xd3/0x180 [ 275.521046][ C0] wg_packet_receive+0xf53/0x1340 [ 275.526081][ C0] wg_receive+0x4e/0x80 [ 275.530240][ C0] udpv6_queue_rcv_one_skb+0xb50/0xbe0 [ 275.535728][ C0] udpv6_queue_rcv_skb+0x1fa/0x2a0 [ 275.540882][ C0] udp6_unicast_rcv_skb+0x195/0x1b0 [ 275.546085][ C0] __udp6_lib_rcv+0xa82/0xd30 [ 275.550765][ C0] udpv6_rcv+0x4f/0x60 [ 275.554835][ C0] ip6_protocol_deliver_rcu+0xa41/0x1060 [ 275.560465][ C0] ip6_input+0xbf/0x1c0 [ 275.564659][ C0] ip6_rcv_finish+0x1fa/0x330 [ 275.569351][ C0] ipv6_rcv+0x74/0x150 [ 275.573432][ C0] __netif_receive_skb+0xa2/0x280 [ 275.578591][ C0] process_backlog+0x22e/0x440 [ 275.583395][ C0] __napi_poll+0x63/0x3c0 [ 275.587741][ C0] net_rx_action+0x3a1/0x7f0 [ 275.592362][ C0] handle_softirqs+0xbf/0x280 [ 275.597049][ C0] do_softirq+0x5e/0x90 [ 275.601210][ C0] __local_bh_enable_ip+0x6e/0x70 [ 275.606236][ C0] _raw_read_unlock_bh+0x1b/0x20 [ 275.611173][ C0] wg_socket_send_skb_to_peer+0x109/0x130 [ 275.616913][ C0] wg_packet_tx_worker+0x127/0x360 [ 275.622022][ C0] process_scheduled_works+0x483/0x9a0 [ 275.627477][ C0] worker_thread+0x51d/0x6f0 [ 275.632087][ C0] kthread+0x1d1/0x210 [ 275.636156][ C0] ret_from_fork+0x4b/0x60 [ 275.640584][ C0] ret_from_fork_asm+0x1a/0x30 [ 275.645369][ C0] [ 275.647689][ C0] value changed: 0x00000000 -> 0x00000001 [ 275.653398][ C0] [ 275.655715][ C0] Reported by Kernel Concurrency Sanitizer on: [ 275.661859][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:1 Tainted: G W 6.12.0-syzkaller-10296-gaaf20f870da0 #0 [ 275.673584][ C0] Tainted: [W]=WARN [ 275.677410][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 275.687465][ C0] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 275.693537][ C0] ================================================================== [ 275.720515][T24356] IPv6: Can't replace route, no match found