last executing test programs: 14.382816593s ago: executing program 0 (id=1110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) getresuid(&(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000300)) 14.339395755s ago: executing program 0 (id=1113): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 14.263656828s ago: executing program 0 (id=1116): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x2008, 0x20000000000000}) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2b, 0x9}) unshare(0x20000400) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x1, 0x90}) 13.362109638s ago: executing program 0 (id=1132): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$nfs4(0x0, &(0x7f0000000540)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) 13.323182989s ago: executing program 0 (id=1133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x8, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0xf9d, @loopback}}}, 0x32) 13.236587963s ago: executing program 0 (id=1135): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x94}}, 0x0) 13.236374693s ago: executing program 32 (id=1135): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'wg2\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x94}}, 0x0) 2.440813004s ago: executing program 5 (id=1573): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000002780)=[{{0x0, 0x0, &(0x7f00000024c0)=[{0x0}, {&(0x7f0000000280)=""/233, 0xe9}], 0x2}, 0x7}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can={{}, 0x4, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x54800}, 0x0) 2.405057875s ago: executing program 5 (id=1574): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb02163c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0xf) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) 1.028533265s ago: executing program 3 (id=1609): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000003c0)={0x3, 0x7, 0x8000, 0x7, 0x30b, 0x4, 0xf7c, 0x3, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000500)={r1, 0x5, 0x1, [0xe]}, &(0x7f0000000640)=0xa) shutdown(r0, 0x1) 996.716287ms ago: executing program 3 (id=1611): r0 = syz_io_uring_setup(0x593, &(0x7f0000000400)={0x0, 0xc459, 0x8, 0x2, 0x398}, &(0x7f0000000300)=0x0, &(0x7f0000000a40)=0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xff8, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000b00)=@IORING_OP_UNLINKAT={0x24, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 932.870039ms ago: executing program 1 (id=1612): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) sendmsg$tipc(r1, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8800}, 0x0) 896.499801ms ago: executing program 1 (id=1614): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 893.122781ms ago: executing program 3 (id=1616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000002800)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4000804) 872.224032ms ago: executing program 3 (id=1617): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000df000000bfa300000000000007030000f0ffffff720af0ff"], 0x0, 0xf}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203010100000000000000000400001a"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000103b13a00000000000000000000000a0c000200"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) 853.956473ms ago: executing program 1 (id=1618): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000bc0)="0100000200373a4541062101a59ea940d2cb0b36b8f5020000a00000050000000000eb000000a5e5be21c44e328e68f3922af831e4e51bfb30f7788fd57e51bc464355bd646d037ccc16ddb08a7b3a697aedb66ddd793acf37119e61f502d8bbb016f701890700000068d945af468c1c9090c76906b94e0f27761c75e58c82da54d010078660684a4106855beaf5e813ed18aa4acabb5bee7f082d24a16b01fc91471eba59152e716af8776ab90ac48bcbee6570df22513808ecab7a9680aa613a56aa11bfa73af4c4e94b5cfc855f0e910186d7e68ac24f8b125140ac5f7f4819168ce1c25550c6773b41011999d8d9827757d96c5e8aa4617cc54c5e67060a92661f84e698d1fe3cee10a85882cbecb29f2a22535ac50e64d95ecbab66f54373b94475e05b79a0a61bc2ae1e", 0x12d, r2) 852.259493ms ago: executing program 3 (id=1619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1fc, 0x0, 0xfffffc80, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x20, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x2, 0xffffffff, 0x2, 0xfff, 0x0, 0x2, 0x0, 0x1ff, 0x0, 0x0, 0x1, 0x0, 0x1000, 0xfffffffc, 0xd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2, 0x0, 0x2, 0x4, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x20, 0x7, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xb, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x3, 0x0, 0xfffc, 0x6}, {0xff, 0x0, 0x1}, 0x0, 0x7f}}]}}]}, 0x45c}}, 0x0) 823.425284ms ago: executing program 3 (id=1621): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000340)=""/236, 0xec}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000880)=""/98, 0x62}], 0x1}, 0x4}], 0x2, 0x0, 0x0) 812.501164ms ago: executing program 1 (id=1622): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 784.592175ms ago: executing program 1 (id=1624): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) mlockall(0x1) 750.981677ms ago: executing program 4 (id=1625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000559318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r2, &(0x7f0000000000)='.\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 731.494998ms ago: executing program 4 (id=1626): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_unlink(0x0) 684.83835ms ago: executing program 4 (id=1629): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5402"], 0x69) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 629.752952ms ago: executing program 4 (id=1631): r0 = socket$inet(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) 618.696953ms ago: executing program 4 (id=1633): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x104, 0x4, 0x3c8, 0x110, 0x110, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@empty, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @empty, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, 0x8, 0x1}}}, {{@arp={@loopback, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 553.552495ms ago: executing program 4 (id=1634): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r1, 0x0, 0x200000000000006}, 0x18) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x40000000) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) 553.158436ms ago: executing program 2 (id=1635): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x3}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 463.26148ms ago: executing program 2 (id=1636): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x39}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 374.576224ms ago: executing program 2 (id=1637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_call\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e22, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x20000054) 374.399963ms ago: executing program 2 (id=1638): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 336.441455ms ago: executing program 5 (id=1639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40090) 333.504515ms ago: executing program 2 (id=1640): prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = msgget$private(0x0, 0x722) msgsnd(r1, &(0x7f00000001c0)={0x3}, 0x8, 0x0) 309.178366ms ago: executing program 2 (id=1641): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x6, 0x9, 0x9, 0x1}]}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1", 0x5, 0x1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000340)=0x40) 308.828346ms ago: executing program 5 (id=1642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x0, 0x14, 0x0, &(0x7f0000000080)="f6f4e9a10000502468da5eb1c6b2feff8833c000", 0x0, 0x86, 0x0, 0x31, 0x0, &(0x7f0000000000)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904cf0d5bce1771889c98ffc0abf", 0x0}, 0x50) 282.231738ms ago: executing program 5 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r1, 0x5, 0x4) 280.796358ms ago: executing program 1 (id=1644): unshare(0x6a040000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x94173000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000000000000000000008000000002"], 0x0, 0x1a}, 0x28) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) 0s ago: executing program 5 (id=1645): r0 = socket$inet(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 33.888668][ T29] audit: type=1400 audit(1763713602.169:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.911998][ T29] audit: type=1400 audit(1763713602.199:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.913053][ T3304] cgroup: Unknown subsys name 'net' [ 33.942454][ T29] audit: type=1400 audit(1763713602.229:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.059891][ T3304] cgroup: Unknown subsys name 'cpuset' [ 34.066834][ T3304] cgroup: Unknown subsys name 'rlimit' [ 34.217201][ T29] audit: type=1400 audit(1763713602.499:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.241836][ T29] audit: type=1400 audit(1763713602.499:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.264034][ T29] audit: type=1400 audit(1763713602.499:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.274766][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.285633][ T29] audit: type=1400 audit(1763713602.499:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.315383][ T29] audit: type=1400 audit(1763713602.519:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.341708][ T29] audit: type=1400 audit(1763713602.519:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.365685][ T29] audit: type=1400 audit(1763713602.589:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.406056][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.500801][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.587627][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.594870][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.602071][ T3314] bridge_slave_0: entered allmulticast mode [ 35.609196][ T3314] bridge_slave_0: entered promiscuous mode [ 35.618282][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.625949][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.633319][ T3314] bridge_slave_1: entered allmulticast mode [ 35.640182][ T3314] bridge_slave_1: entered promiscuous mode [ 35.662985][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.673354][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 35.691239][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.730333][ T3314] team0: Port device team_slave_0 added [ 35.737409][ T3314] team0: Port device team_slave_1 added [ 35.786190][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.793258][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.819383][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.837528][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.844984][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.852284][ T3328] bridge_slave_0: entered allmulticast mode [ 35.858793][ T3328] bridge_slave_0: entered promiscuous mode [ 35.868143][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.875455][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.882639][ T3328] bridge_slave_1: entered allmulticast mode [ 35.889348][ T3328] bridge_slave_1: entered promiscuous mode [ 35.895808][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.902797][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.929237][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.951323][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 36.004178][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.016532][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.044651][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 36.076478][ T3328] team0: Port device team_slave_0 added [ 36.085239][ T3328] team0: Port device team_slave_1 added [ 36.098198][ T3314] hsr_slave_0: entered promiscuous mode [ 36.104518][ T3314] hsr_slave_1: entered promiscuous mode [ 36.115839][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.130565][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.137984][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.145892][ T3322] bridge_slave_0: entered allmulticast mode [ 36.152433][ T3322] bridge_slave_0: entered promiscuous mode [ 36.160002][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.167386][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.174871][ T3322] bridge_slave_1: entered allmulticast mode [ 36.181400][ T3322] bridge_slave_1: entered promiscuous mode [ 36.217706][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.224969][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.251619][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.278675][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.286240][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.312963][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.326690][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.355119][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.393820][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.401176][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.408475][ T3326] bridge_slave_0: entered allmulticast mode [ 36.415299][ T3326] bridge_slave_0: entered promiscuous mode [ 36.424317][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.431632][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.438816][ T3326] bridge_slave_1: entered allmulticast mode [ 36.445540][ T3326] bridge_slave_1: entered promiscuous mode [ 36.456484][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.463959][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.471623][ T3320] bridge_slave_0: entered allmulticast mode [ 36.478071][ T3320] bridge_slave_0: entered promiscuous mode [ 36.491609][ T3322] team0: Port device team_slave_0 added [ 36.498471][ T3322] team0: Port device team_slave_1 added [ 36.520609][ T3328] hsr_slave_0: entered promiscuous mode [ 36.527124][ T3328] hsr_slave_1: entered promiscuous mode [ 36.533358][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 36.539184][ T3328] Cannot create hsr debugfs directory [ 36.544863][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.552483][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.559839][ T3320] bridge_slave_1: entered allmulticast mode [ 36.566918][ T3320] bridge_slave_1: entered promiscuous mode [ 36.596338][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.618684][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.626084][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.652363][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.663831][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.671183][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.697284][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.709458][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.722960][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.753570][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.799149][ T3326] team0: Port device team_slave_0 added [ 36.820842][ T3326] team0: Port device team_slave_1 added [ 36.830640][ T3320] team0: Port device team_slave_0 added [ 36.841355][ T3322] hsr_slave_0: entered promiscuous mode [ 36.847506][ T3322] hsr_slave_1: entered promiscuous mode [ 36.853547][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 36.859400][ T3322] Cannot create hsr debugfs directory [ 36.874103][ T3320] team0: Port device team_slave_1 added [ 36.895435][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.903242][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.929944][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.959118][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.966359][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.993217][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.014768][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.026760][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.036664][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.044033][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.071193][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.082484][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.089662][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.116353][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.133345][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.145002][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.202322][ T3326] hsr_slave_0: entered promiscuous mode [ 37.208526][ T3326] hsr_slave_1: entered promiscuous mode [ 37.214680][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 37.220548][ T3326] Cannot create hsr debugfs directory [ 37.231023][ T3320] hsr_slave_0: entered promiscuous mode [ 37.237177][ T3320] hsr_slave_1: entered promiscuous mode [ 37.243452][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.249401][ T3320] Cannot create hsr debugfs directory [ 37.265673][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.275134][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.309760][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.331927][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.442457][ T3322] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.452002][ T3322] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.463197][ T3322] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.472538][ T3322] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.488924][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.521126][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.531668][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.552190][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.562720][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.575939][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.589185][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.596456][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.616895][ T3326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.627201][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.634312][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.650216][ T3326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.660469][ T3326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.674452][ T3326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.688772][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.714215][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.733237][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.751867][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.760189][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.767533][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.800763][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.808541][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.818557][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.825963][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.835561][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.842851][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.869930][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.883791][ T3328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.894297][ T3328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.918793][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.954376][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.964035][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.980348][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.987734][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.001712][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.020813][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.028259][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.046054][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.058965][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.076989][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.097315][ T3326] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.108054][ T3326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.132545][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.143256][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.162364][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.169785][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.178566][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.185877][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.253825][ T3314] veth0_vlan: entered promiscuous mode [ 38.288610][ T3314] veth1_vlan: entered promiscuous mode [ 38.325318][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.347237][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.361556][ T3314] veth0_macvtap: entered promiscuous mode [ 38.374342][ T3314] veth1_macvtap: entered promiscuous mode [ 38.386599][ T3322] veth0_vlan: entered promiscuous mode [ 38.405494][ T3322] veth1_vlan: entered promiscuous mode [ 38.417528][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.437737][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.453487][ T3322] veth0_macvtap: entered promiscuous mode [ 38.476741][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.488561][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.514676][ T3322] veth1_macvtap: entered promiscuous mode [ 38.537152][ T1130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.551217][ T1130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.562438][ T3328] veth0_vlan: entered promiscuous mode [ 38.575605][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.600370][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.606392][ T3326] veth0_vlan: entered promiscuous mode [ 38.622243][ T3320] veth0_vlan: entered promiscuous mode [ 38.629412][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.647037][ T3320] veth1_vlan: entered promiscuous mode [ 38.655106][ T3326] veth1_vlan: entered promiscuous mode [ 38.672872][ T3328] veth1_vlan: entered promiscuous mode [ 38.680288][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.695813][ T3326] veth0_macvtap: entered promiscuous mode [ 38.708868][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.718865][ T3326] veth1_macvtap: entered promiscuous mode [ 38.735126][ T3320] veth0_macvtap: entered promiscuous mode [ 38.751369][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.761262][ T3320] veth1_macvtap: entered promiscuous mode [ 38.784404][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.797072][ T3328] veth0_macvtap: entered promiscuous mode [ 38.811124][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.823930][ T3328] veth1_macvtap: entered promiscuous mode [ 38.843176][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.854621][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.866796][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.877878][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.888495][ T55] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.899958][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.910479][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 38.910560][ T29] audit: type=1326 audit(1763713607.189:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 38.940302][ T29] audit: type=1326 audit(1763713607.189:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 38.963869][ T29] audit: type=1326 audit(1763713607.189:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 38.988025][ T29] audit: type=1326 audit(1763713607.189:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 39.012463][ T29] audit: type=1326 audit(1763713607.199:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 39.036059][ T29] audit: type=1326 audit(1763713607.199:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 39.066925][ T29] audit: type=1326 audit(1763713607.199:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 39.091070][ T29] audit: type=1326 audit(1763713607.199:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 39.114716][ T29] audit: type=1326 audit(1763713607.199:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 39.139766][ T29] audit: type=1326 audit(1763713607.199:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3488 comm="syz.1.7" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 39.165852][ T55] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.174818][ T55] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.184140][ T55] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.193736][ T55] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.203749][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.212753][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.231357][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.265675][ T55] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.291959][ T55] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.322633][ T55] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.386575][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.517750][ T3523] 9pnet_fd: Insufficient options for proto=fd [ 39.564607][ T3527] syz.4.21 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.661418][ T3540] mmap: syz.3.26 (3540) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.775302][ T3548] IPv6: NLM_F_CREATE should be specified when creating new route [ 39.911108][ T3562] netlink: 'syz.0.34': attribute type 22 has an invalid length. [ 40.056751][ T3585] netlink: 'syz.4.47': attribute type 1 has an invalid length. [ 40.124543][ T3593] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.146153][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 40.162586][ T3595] hsr_slave_1 (unregistering): left promiscuous mode [ 40.171887][ T3599] loop2: detected capacity change from 0 to 2048 [ 40.178628][ T3599] EXT4-fs: inline encryption not supported [ 40.194424][ T3599] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.210791][ T3599] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.54: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 40.239940][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.402964][ T3618] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.507116][ T3622] loop2: detected capacity change from 0 to 1024 [ 40.521033][ T3622] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 40.530590][ T3622] System zones: 0-1, 3-36 [ 40.537025][ T3622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.565918][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.681699][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.691598][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.700984][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.721559][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.730730][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.739979][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.775839][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.785473][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.794943][ T3641] netlink: 28 bytes leftover after parsing attributes in process `syz.2.72'. [ 40.803966][ T3656] ip6gretap0: entered promiscuous mode [ 40.812216][ T3656] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 40.855790][ T3618] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.887990][ T3663] SELinux: Context system_u:object_r:traceroute_exec_t:s0 is not valid (left unmapped). [ 41.040311][ T3690] netlink: 'syz.2.88': attribute type 21 has an invalid length. [ 41.122252][ T3618] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.182656][ T3618] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.285394][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.298686][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.312156][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.324458][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.557070][ T3712] loop4: detected capacity change from 0 to 764 [ 41.564957][ T3712] rock: directory entry would overflow storage [ 41.571505][ T3712] rock: sig=0x4654, size=5, remaining=4 [ 42.161145][ T3775] xt_hashlimit: max too large, truncated to 1048576 [ 42.365723][ T3793] syz_tun: entered allmulticast mode [ 42.379803][ T3792] syz_tun: left allmulticast mode [ 42.881538][ T3838] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 42.881742][ T3836] IPVS: stopping master sync thread 3838 ... [ 43.066716][ T3857] Driver unsupported XDP return value 0 on prog (id 129) dev N/A, expect packet loss! [ 43.145982][ T3865] loop1: detected capacity change from 0 to 512 [ 43.161981][ T3865] ======================================================= [ 43.161981][ T3865] WARNING: The mand mount option has been deprecated and [ 43.161981][ T3865] and is ignored by this kernel. Remove the mand [ 43.161981][ T3865] option from the mount to silence this warning. [ 43.161981][ T3865] ======================================================= [ 43.235474][ T3865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.260091][ T3865] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.301095][ T3865] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.165: corrupted inode contents [ 43.329638][ T3877] syz_tun: entered promiscuous mode [ 43.335301][ T3877] macvtap1: entered promiscuous mode [ 43.343996][ T3865] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #2: comm syz.1.165: mark_inode_dirty error [ 43.359304][ T3877] syz_tun: left promiscuous mode [ 43.387668][ T3865] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #2: comm syz.1.165: corrupted inode contents [ 43.422382][ T3865] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.165: mark_inode_dirty error [ 43.484386][ T3886] syzkaller0: entered promiscuous mode [ 43.490268][ T3886] syzkaller0: entered allmulticast mode [ 43.526037][ T3897] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 43.556118][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.624004][ T3907] macvtap0: entered promiscuous mode [ 43.655212][ T3907] macvtap0: left promiscuous mode [ 43.801953][ T3922] loop2: detected capacity change from 0 to 512 [ 43.845755][ T3922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.859188][ T3922] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.899639][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.116753][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 44.116803][ T29] audit: type=1400 audit(1763713868.403:364): avc: denied { read } for pid=3954 comm="syz.2.206" dev="nsfs" ino=4026532712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.118677][ T3955] netlink: 'syz.2.206': attribute type 1 has an invalid length. [ 44.123092][ T29] audit: type=1400 audit(1763713868.403:365): avc: denied { open } for pid=3954 comm="syz.2.206" path="net:[4026532712]" dev="nsfs" ino=4026532712 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.265786][ T29] audit: type=1400 audit(1763713868.553:366): avc: denied { write } for pid=3959 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.287347][ T29] audit: type=1400 audit(1763713868.553:367): avc: denied { nlmsg_write } for pid=3959 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.342802][ T3965] ªªªªªª: renamed from wg2 (while UP) [ 44.451742][ T29] audit: type=1400 audit(1763713868.743:368): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 44.481203][ T3988] process 'syz.4.221' launched './file1' with NULL argv: empty string added [ 44.505636][ T29] audit: type=1400 audit(1763713868.773:369): avc: denied { watch watch_reads } for pid=3987 comm="syz.4.221" path="/65/file1" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.531225][ T29] audit: type=1400 audit(1763713868.793:370): avc: denied { execute_no_trans } for pid=3987 comm="syz.4.221" path="/65/file1" dev="tmpfs" ino=355 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.661302][ T4004] SELinux: policydb table sizes (133,1) do not match mine (8,7) [ 44.670843][ T29] audit: type=1400 audit(1763713868.953:371): avc: denied { load_policy } for pid=4003 comm="syz.3.228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.688439][ T4004] SELinux: failed to load policy [ 44.691785][ T29] audit: type=1400 audit(1763713868.963:372): avc: denied { bind } for pid=4005 comm="syz.2.229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 44.719515][ T4009] netlink: 'syz.2.230': attribute type 21 has an invalid length. [ 44.767629][ T4017] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.816854][ T4026] IPv6: Can't replace route, no match found [ 44.872436][ T29] audit: type=1400 audit(1763713869.163:373): avc: denied { ioctl } for pid=4034 comm="syz.2.242" path="socket:[6464]" dev="sockfs" ino=6464 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.906140][ T4038] macvtap1: entered promiscuous mode [ 44.912168][ T4038] macvtap1: entered allmulticast mode [ 44.918328][ T4038] veth1: entered promiscuous mode [ 44.923443][ T4038] veth1: entered allmulticast mode [ 44.930637][ T4038] team0: Device macvtap1 failed to register rx_handler [ 44.955129][ T4038] veth1: left allmulticast mode [ 44.960599][ T4038] veth1: left promiscuous mode [ 44.968416][ T4042] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 44.981714][ T4042] batadv0: entered allmulticast mode [ 44.992014][ T4042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.003532][ T4042] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 45.020737][ T4042] netlink: 'syz.3.245': attribute type 10 has an invalid length. [ 45.030316][ T4042] batadv0: entered promiscuous mode [ 45.047158][ T4042] bond0: (slave batadv0): Releasing backup interface [ 45.065226][ T4042] bridge0: port 3(batadv0) entered blocking state [ 45.065281][ T4048] loop2: detected capacity change from 0 to 512 [ 45.079409][ T4042] bridge0: port 3(batadv0) entered disabled state [ 45.093378][ T4048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.117152][ T4048] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.170936][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.269777][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 45.279349][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 45.431607][ T4090] __nla_validate_parse: 12 callbacks suppressed [ 45.431628][ T4090] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 45.607924][ T4107] vhci_hcd: invalid port number 96 [ 45.613476][ T4107] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 45.890888][ T4143] loop2: detected capacity change from 0 to 512 [ 45.906507][ T4143] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.288: inode #1792: comm syz.2.288: iget: illegal inode # [ 45.923430][ T4143] EXT4-fs (loop2): Remounting filesystem read-only [ 45.932323][ T4143] EXT4-fs (loop2): no journal found [ 45.939999][ T4143] EXT4-fs (loop2): can't get journal size [ 45.956334][ T4143] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 45.970033][ T4145] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 46.002944][ T4143] EXT4-fs (loop2): Errors on filesystem, clearing orphan list. [ 46.019760][ T4150] netlink: 'syz.3.291': attribute type 1 has an invalid length. [ 46.023628][ T4143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.028786][ T4150] netlink: 224 bytes leftover after parsing attributes in process `syz.3.291'. [ 46.081822][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.137422][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 46.147512][ T4164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 46.355605][ T4192] loop2: detected capacity change from 0 to 512 [ 46.377225][ T4192] ------------[ cut here ]------------ [ 46.383080][ T4192] EA inode 11 i_nlink=2 [ 46.383403][ T4192] WARNING: CPU: 1 PID: 4192 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 46.398644][ T4192] Modules linked in: [ 46.402967][ T4192] CPU: 1 UID: 0 PID: 4192 Comm: syz.2.310 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.414173][ T4192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 46.425053][ T4192] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 46.425336][ T4196] loop3: detected capacity change from 0 to 2048 [ 46.432332][ T4192] Code: 90 49 8d 7e 40 e8 06 f8 b8 ff 4d 8b 6e 40 4c 89 e7 e8 1a f3 b8 ff 41 8b 56 48 48 c7 c7 ae d5 55 86 4c 89 ee e8 f7 f3 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 78 f2 b5 03 0f 1f 84 00 00 00 00 00 [ 46.432364][ T4192] RSP: 0018:ffffc900014475a0 EFLAGS: 00010246 [ 46.467735][ T4192] RAX: ea9b444a681dd900 RBX: ffff88810731d760 RCX: 0000000000080000 [ 46.476801][ T4192] RDX: ffffc9000314d000 RSI: 0000000000003fcd RDI: 0000000000003fce [ 46.486172][ T4192] RBP: 0000000000000002 R08: 0001c90001447427 R09: 0000000000000000 [ 46.490863][ T4196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.494938][ T4192] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88810731d710 [ 46.519470][ T4192] R13: 000000000000000b R14: ffff88810731d6c8 R15: 0000000000000001 [ 46.529157][ T4192] FS: 00007f2cf18876c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 46.538822][ T4192] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.539217][ T4196] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.547010][ T4192] CR2: 000055558c0124a8 CR3: 000000011ae70000 CR4: 00000000003506f0 [ 46.567303][ T4192] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.575356][ T4192] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 46.583722][ T4192] Call Trace: [ 46.587266][ T4192] [ 46.590576][ T4192] ext4_xattr_set_entry+0x77f/0x1020 [ 46.596252][ T4192] ext4_xattr_ibody_set+0x184/0x3c0 [ 46.601579][ T4192] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 46.607807][ T4192] __ext4_expand_extra_isize+0x246/0x280 [ 46.613775][ T4192] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 46.619520][ T4192] ext4_evict_inode+0x80e/0xd90 [ 46.624541][ T4192] ? __pfx_ext4_evict_inode+0x10/0x10 [ 46.630084][ T4192] evict+0x2e3/0x550 [ 46.634038][ T4192] ? __dquot_initialize+0x146/0x7c0 [ 46.639860][ T4192] iput+0x4ed/0x650 [ 46.644010][ T4192] ext4_process_orphan+0x1a9/0x1c0 [ 46.649442][ T4192] ext4_orphan_cleanup+0x6a8/0xa00 [ 46.654806][ T4192] ext4_fill_super+0x3483/0x3810 [ 46.659883][ T4192] ? snprintf+0x86/0xb0 [ 46.664188][ T4192] ? set_blocksize+0x1a8/0x310 [ 46.669089][ T4192] ? sb_set_blocksize+0xe3/0x100 [ 46.674590][ T4192] ? setup_bdev_super+0x30e/0x370 [ 46.680031][ T4192] ? __pfx_ext4_fill_super+0x10/0x10 [ 46.685780][ T4192] get_tree_bdev_flags+0x291/0x300 [ 46.691513][ T4192] ? __pfx_ext4_fill_super+0x10/0x10 [ 46.698113][ T4192] get_tree_bdev+0x1f/0x30 [ 46.702651][ T4192] ext4_get_tree+0x1c/0x30 [ 46.707504][ T4192] vfs_get_tree+0x57/0x1d0 [ 46.712103][ T4192] do_new_mount+0x24d/0x660 [ 46.717666][ T4192] path_mount+0x4a5/0xb70 [ 46.722599][ T4192] ? user_path_at+0x109/0x130 [ 46.727642][ T4192] __se_sys_mount+0x28c/0x2e0 [ 46.733664][ T4192] __x64_sys_mount+0x67/0x80 [ 46.738828][ T4192] x64_sys_call+0x2b51/0x3000 [ 46.743837][ T4192] do_syscall_64+0xd2/0x200 [ 46.748565][ T4192] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.755935][ T4192] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.762042][ T4192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.768085][ T4192] RIP: 0033:0x7f2cf2e20eea [ 46.772807][ T4192] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.796638][ T4192] RSP: 002b:00007f2cf1886e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 46.807257][ T4192] RAX: ffffffffffffffda RBX: 00007f2cf1886ef0 RCX: 00007f2cf2e20eea [ 46.816014][ T4192] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f2cf1886eb0 [ 46.824443][ T4192] RBP: 0000200000000180 R08: 00007f2cf1886ef0 R09: 0000000000800700 [ 46.833157][ T4192] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 46.841262][ T4192] R13: 00007f2cf1886eb0 R14: 000000000000046f R15: 0000200000000200 [ 46.849578][ T4192] [ 46.852635][ T4192] ---[ end trace 0000000000000000 ]--- [ 46.859342][ T4192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.310: iget: bad extra_isize 90 (inode size 256) [ 46.874496][ T4192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.310: error while reading EA inode 18 err=-117 [ 46.888184][ T4192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.310: iget: bad extra_isize 90 (inode size 256) [ 46.903121][ T4192] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.310: error while reading EA inode 18 err=-117 [ 46.924655][ T4192] EXT4-fs (loop2): 1 orphan inode deleted [ 46.933028][ T4192] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.993132][ T4192] syz.2.310 (4192) used greatest stack depth: 10680 bytes left [ 47.030915][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.155116][ T4236] netlink: 'syz.2.329': attribute type 39 has an invalid length. [ 47.423268][ T4260] loop2: detected capacity change from 0 to 512 [ 47.433068][ T4260] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.451960][ T4260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.466961][ T4260] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.500693][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.517380][ T4266] netlink: 96 bytes leftover after parsing attributes in process `syz.4.342'. [ 47.571989][ T4270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.343'. [ 47.583512][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 47.597479][ T4270] vlan2: entered promiscuous mode [ 47.603332][ T4270] gretap0: entered promiscuous mode [ 47.681120][ T4285] netlink: 'syz.0.350': attribute type 39 has an invalid length. [ 47.854576][ T4303] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.066265][ T4335] $Hÿ: renamed from bond0 (while UP) [ 48.088597][ T4335] $Hÿ: entered promiscuous mode [ 48.094317][ T4335] bond_slave_0: entered promiscuous mode [ 48.100408][ T4335] bond_slave_1: entered promiscuous mode [ 48.172873][ T4351] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 48.182704][ T4351] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 48.850886][ T4435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.409'. [ 48.860127][ T4435] netlink: 3 bytes leftover after parsing attributes in process `syz.4.409'. [ 49.165640][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 49.165656][ T29] audit: type=1326 audit(1763713873.433:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.196104][ T29] audit: type=1326 audit(1763713873.433:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.219695][ T29] audit: type=1326 audit(1763713873.433:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.243597][ T29] audit: type=1326 audit(1763713873.433:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.268014][ T29] audit: type=1326 audit(1763713873.433:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4480 comm="syz.1.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.303838][ T29] audit: type=1326 audit(1763713873.593:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.327305][ T29] audit: type=1326 audit(1763713873.593:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.350804][ T29] audit: type=1326 audit(1763713873.593:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.374468][ T29] audit: type=1326 audit(1763713873.593:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.398321][ T29] audit: type=1326 audit(1763713873.593:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4482 comm="syz.1.425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 49.445357][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.541191][ T4499] netlink: 'syz.1.432': attribute type 1 has an invalid length. [ 49.639897][ T4513] capability: warning: `syz.2.438' uses 32-bit capabilities (legacy support in use) [ 49.751995][ T4525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.444'. [ 49.768233][ T4525] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 49.812796][ T4532] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 49.889468][ T4540] xt_hashlimit: max too large, truncated to 1048576 [ 49.999513][ T4560] netlink: 'syz.0.458': attribute type 13 has an invalid length. [ 50.079671][ T4560] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.086973][ T4560] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.224552][ T4580] netlink: 'syz.3.466': attribute type 1 has an invalid length. [ 50.240094][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.253326][ T4560] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.315565][ T1130] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.326732][ T1130] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.336428][ T1130] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.360328][ T1130] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.464287][ T4603] netlink: 'syz.1.475': attribute type 1 has an invalid length. [ 50.571632][ T4620] __nla_validate_parse: 4 callbacks suppressed [ 50.571647][ T4620] netlink: 256 bytes leftover after parsing attributes in process `syz.1.484'. [ 50.649364][ T4629] xt_hashlimit: max too large, truncated to 1048576 [ 50.669847][ T4629] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 50.812143][ T4642] loop1: detected capacity change from 0 to 512 [ 50.827308][ T4642] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.838646][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'. [ 50.847801][ T4645] netlink: 108 bytes leftover after parsing attributes in process `syz.4.494'. [ 50.858513][ T4645] netlink: 28 bytes leftover after parsing attributes in process `syz.4.494'. [ 50.872521][ T4642] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.886214][ T4642] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 50.898223][ T4645] netlink: 108 bytes leftover after parsing attributes in process `syz.4.494'. [ 50.907726][ T4645] netlink: 84 bytes leftover after parsing attributes in process `syz.4.494'. [ 50.918847][ T4642] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.932574][ T4642] EXT4-fs (loop1): 1 truncate cleaned up [ 50.938948][ T4642] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.972233][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.185205][ T4665] netlink: 28 bytes leftover after parsing attributes in process `syz.2.502'. [ 51.205220][ T4665] netem: change failed [ 51.858861][ T4738] hub 9-0:1.0: USB hub found [ 51.865637][ T4738] hub 9-0:1.0: 8 ports detected [ 51.934055][ T4747] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.541'. [ 51.957104][ T4747] netlink: zone id is out of range [ 51.962521][ T4747] netlink: zone id is out of range [ 51.969908][ T4747] netlink: zone id is out of range [ 51.975733][ T4747] netlink: zone id is out of range [ 52.012474][ T4747] netlink: set zone limit has 8 unknown bytes [ 52.166348][ T4771] loop0: detected capacity change from 0 to 512 [ 52.468971][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.564'. [ 52.582120][ T4819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'. [ 52.628924][ T4828] netem: change failed [ 52.754101][ T10] Process accounting resumed [ 52.797053][ T4854] infiniband syz!: set active [ 52.802437][ T4854] infiniband syz!: added team_slave_0 [ 52.809785][ T4861] netlink: 'syz.4.592': attribute type 10 has an invalid length. [ 52.815171][ T4854] RDS/IB: syz!: added [ 52.818594][ T4861] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 52.822547][ T4854] smc: adding ib device syz! with port count 1 [ 52.834825][ T4861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 52.840701][ T4854] smc: ib device syz! port 1 has no pnetid [ 53.087052][ T4854] syz.1.588 (4854) used greatest stack depth: 10584 bytes left [ 53.383271][ T4913] hub 9-0:1.0: USB hub found [ 53.388229][ T4913] hub 9-0:1.0: 8 ports detected [ 53.456100][ T4924] unsupported nla_type 52263 [ 53.804630][ T4958] hub 9-0:1.0: USB hub found [ 53.809797][ T4958] hub 9-0:1.0: 8 ports detected [ 53.840755][ T4960] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.853108][ T4960] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 53.941272][ T4971] loop4: detected capacity change from 0 to 512 [ 53.961419][ T4971] EXT4-fs (loop4): too many log groups per flexible block group [ 53.975994][ T4971] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 53.983171][ T4971] EXT4-fs (loop4): mount failed [ 54.064689][ T4983] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.075443][ T4982] loop0: detected capacity change from 0 to 2048 [ 54.095652][ T4982] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.177312][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.230828][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 54.230845][ T29] audit: type=1400 audit(1763713878.513:799): avc: denied { connect } for pid=5001 comm="syz.0.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.257474][ T5000] netlink: 'syz.1.654': attribute type 13 has an invalid length. [ 54.316006][ T29] audit: type=1400 audit(1763713878.603:800): avc: denied { read } for pid=5005 comm="syz.3.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 54.385265][ T29] audit: type=1400 audit(1763713878.673:801): avc: denied { ioctl } for pid=5007 comm="syz.4.657" path="socket:[8852]" dev="sockfs" ino=8852 ioctlcmd=0x48e7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.446535][ T29] audit: type=1400 audit(1763713878.733:802): avc: denied { create } for pid=5023 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.485774][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.493030][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.535749][ T29] audit: type=1400 audit(1763713878.753:803): avc: denied { connect } for pid=5023 comm="syz.4.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.555711][ T29] audit: type=1400 audit(1763713878.763:804): avc: denied { ioctl } for pid=5023 comm="syz.4.660" path="socket:[9934]" dev="sockfs" ino=9934 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 54.613003][ T29] audit: type=1326 audit(1763713878.903:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524cff749 code=0x7ffc0000 [ 54.647205][ T29] audit: type=1326 audit(1763713878.923:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe524cff749 code=0x7ffc0000 [ 54.670675][ T29] audit: type=1326 audit(1763713878.923:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524cff749 code=0x7ffc0000 [ 54.694293][ T29] audit: type=1326 audit(1763713878.923:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5040 comm="syz.0.665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe524cff749 code=0x7ffc0000 [ 54.773509][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.785189][ T5000] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.918808][ T5028] Zero length message leads to an empty skb [ 54.926468][ T31] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.939775][ T31] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.990109][ T31] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.030356][ T31] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.069329][ T5063] tls_set_device_offload_rx: netdev not found [ 55.499479][ T5106] bridge0: port 3(batadv1) entered blocking state [ 55.506143][ T5106] bridge0: port 3(batadv1) entered disabled state [ 55.537199][ T5106] batadv1: entered allmulticast mode [ 55.550366][ T5106] batadv1: entered promiscuous mode [ 55.617980][ T5117] __nla_validate_parse: 6 callbacks suppressed [ 55.617994][ T5117] netlink: 19 bytes leftover after parsing attributes in process `syz.4.695'. [ 55.663945][ T5121] loop2: detected capacity change from 0 to 512 [ 55.689772][ T5121] EXT4-fs: Ignoring removed oldalloc option [ 55.714581][ T5121] EXT4-fs (loop2): 1 truncate cleaned up [ 55.735956][ T5121] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.770156][ T5130] netlink: 96 bytes leftover after parsing attributes in process `syz.4.699'. [ 55.885469][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.933874][ T5138] loop2: detected capacity change from 0 to 128 [ 55.950364][ T5138] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.975243][ T5138] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 55.999157][ T31] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 56.008588][ T31] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 56.455337][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.718'. [ 56.734983][ T5247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.728'. [ 56.769536][ T5247] hsr_slave_0: left promiscuous mode [ 56.777524][ T5251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.730'. [ 56.786868][ T5247] hsr_slave_1: left promiscuous mode [ 56.819123][ T5251] netlink: 32 bytes leftover after parsing attributes in process `syz.4.730'. [ 56.959975][ T5259] loop4: detected capacity change from 0 to 1024 [ 56.989612][ T5259] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 56.989902][ T5262] netlink: 'syz.1.735': attribute type 21 has an invalid length. [ 57.039281][ T5262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.735'. [ 57.122259][ T5270] netlink: 'syz.1.739': attribute type 13 has an invalid length. [ 57.130355][ T5271] loop0: detected capacity change from 0 to 1024 [ 57.137283][ T5271] EXT4-fs: Ignoring removed orlov option [ 57.139839][ T5270] gretap0: refused to change device tx_queue_len [ 57.149498][ T5270] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 57.192992][ T5271] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.249877][ T3322] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.513069][ T5305] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 57.572668][ T5313] loop2: detected capacity change from 0 to 512 [ 57.602096][ T5313] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.623147][ T5313] EXT4-fs (loop2): 1 truncate cleaned up [ 57.629734][ T5313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.686270][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.712397][ T5202] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.731437][ T5202] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.759171][ T5324] netlink: 'wÞ£ÿ': attribute type 3 has an invalid length. [ 57.773506][ T5202] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.795689][ T5331] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5331 comm=syz.0.766 [ 57.808161][ T5331] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5331 comm=syz.0.766 [ 57.822308][ T5210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.913174][ T5345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.772'. [ 57.962784][ T5354] netlink: 'syz.2.777': attribute type 13 has an invalid length. [ 58.034353][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.041668][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.060700][ T5361] netlink: 'syz.1.780': attribute type 7 has an invalid length. [ 58.100769][ T5354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.112433][ T5354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.171918][ T5357] netlink: 8 bytes leftover after parsing attributes in process `syz.4.778'. [ 58.180957][ T5357] netlink: 'syz.4.778': attribute type 15 has an invalid length. [ 58.188898][ T5357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 58.202698][ T5361] netlink: 'syz.1.780': attribute type 7 has an invalid length. [ 58.210635][ T5210] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.219897][ T5210] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.253990][ T5210] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.299207][ T5210] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.323781][ T5210] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.369324][ T5210] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.389419][ T5210] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.419961][ T5210] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.428829][ T5210] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.477938][ T5210] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.496392][ T5210] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.533028][ T5166] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.846428][ T5435] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 58.880726][ T5435] netlink: 'syz.0.814': attribute type 1 has an invalid length. [ 58.880729][ T5166] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.941438][ T5166] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.962417][ T5166] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 58.984639][ T5166] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.054448][ T5453] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.109184][ T5455] netlink: 'syz.4.823': attribute type 27 has an invalid length. [ 59.225642][ T5455] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.233123][ T5455] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.303586][ T5466] IPv6: NLM_F_CREATE should be specified when creating new route [ 59.353333][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 59.353352][ T29] audit: type=1326 audit(1763713883.643:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.383608][ T29] audit: type=1326 audit(1763713883.643:936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.412200][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.435135][ T5455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.505971][ T29] audit: type=1326 audit(1763713883.643:937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.530162][ T29] audit: type=1326 audit(1763713883.643:938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.553949][ T29] audit: type=1326 audit(1763713883.653:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.577272][ T29] audit: type=1326 audit(1763713883.653:940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.600706][ T29] audit: type=1326 audit(1763713883.703:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.624268][ T29] audit: type=1326 audit(1763713883.703:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.648310][ T29] audit: type=1326 audit(1763713883.733:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.672117][ T29] audit: type=1326 audit(1763713883.733:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5467 comm="syz.1.829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 59.739089][ T5458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.747916][ T5458] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.768094][ T5458] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.798828][ T5464] tipc: Started in network mode [ 59.803935][ T5464] tipc: Node identity ac14140f, cluster identity 4711 [ 59.837994][ T5464] tipc: New replicast peer: 255.255.255.83 [ 59.844025][ T5464] tipc: Enabled bearer , priority 10 [ 59.851919][ T5166] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.860614][ T5166] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.876054][ T5455] syz.4.823 (5455) used greatest stack depth: 10512 bytes left [ 59.884778][ T5166] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.893404][ T5166] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.902769][ T5166] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.911348][ T5166] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.920977][ T5166] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 59.929554][ T5166] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.963321][ T5481] 9pnet_fd: Insufficient options for proto=fd [ 60.577568][ T5550] loop1: detected capacity change from 0 to 8192 [ 60.629910][ T3314] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1) [ 60.637886][ T3314] FAT-fs (loop1): Filesystem has been set read-only [ 60.680216][ T5556] loop3: detected capacity change from 0 to 128 [ 60.757226][ T5556] syz.3.871: attempt to access beyond end of device [ 60.757226][ T5556] loop3: rw=0, sector=121, nr_sectors = 920 limit=128 [ 60.935520][ T5573] __nla_validate_parse: 7 callbacks suppressed [ 60.935584][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 60.970872][ T5017] tipc: Node number set to 2886997007 [ 61.096557][ T5567] loop1: detected capacity change from 0 to 512 [ 61.104027][ T5567] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.134568][ T5567] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.874: bg 0: block 384: padding at end of block bitmap is not set [ 61.164749][ T5567] EXT4-fs (loop1): Remounting filesystem read-only [ 61.179667][ T5567] EXT4-fs (loop1): 1 truncate cleaned up [ 61.197168][ T5567] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.234565][ T5603] netlink: 96 bytes leftover after parsing attributes in process `syz.3.890'. [ 61.279259][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.351197][ T5618] loop2: detected capacity change from 0 to 512 [ 61.381346][ T5618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.389922][ T5629] netlink: 830 bytes leftover after parsing attributes in process `syz.3.901'. [ 61.403400][ T5618] ext4 filesystem being mounted at /186/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.441226][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.580197][ T5662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5662 comm=syz.1.914 [ 61.592766][ T5662] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5662 comm=syz.1.914 [ 61.634533][ T5670] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.915'. [ 61.654511][ T5660] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.915'. [ 61.803253][ T5688] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 62.012506][ T5712] atomic_op ffff88811d36bd28 conn xmit_atomic 0000000000000000 [ 62.061989][ T5717] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.936'. [ 62.062256][ T5716] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.939'. [ 62.084218][ T5710] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.936'. [ 62.291079][ T5734] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 62.380946][ T5738] atomic_op ffff88811d368928 conn xmit_atomic 0000000000000000 [ 62.436852][ T5745] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 62.445199][ T5745] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 62.773664][ T5770] loop2: detected capacity change from 0 to 2048 [ 62.792475][ T5770] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.821030][ T5776] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 62.835903][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.864727][ T5778] loop0: detected capacity change from 0 to 736 [ 62.884873][ T5778] rock: directory entry would overflow storage [ 62.891132][ T5778] rock: sig=0x3b10, size=4, remaining=3 [ 62.949475][ T5785] atomic_op ffff888104665528 conn xmit_atomic 0000000000000000 [ 62.964505][ T5017] IPVS: starting estimator thread 0... [ 63.059267][ T5790] IPVS: using max 2400 ests per chain, 120000 per kthread [ 63.218516][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 63.424567][ T5834] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.992'. [ 63.540486][ T5847] tls_set_device_offload_rx: netdev not found [ 64.751268][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 64.751332][ T29] audit: type=1326 audit(1763713889.043:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.781088][ T29] audit: type=1326 audit(1763713889.043:1196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.817556][ T29] audit: type=1326 audit(1763713889.043:1197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.841704][ T29] audit: type=1326 audit(1763713889.043:1198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.865898][ T29] audit: type=1326 audit(1763713889.043:1199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.889544][ T29] audit: type=1326 audit(1763713889.043:1200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.913306][ T29] audit: type=1326 audit(1763713889.043:1201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.938606][ T29] audit: type=1326 audit(1763713889.133:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.962401][ T29] audit: type=1326 audit(1763713889.133:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 64.986015][ T29] audit: type=1326 audit(1763713889.183:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5928 comm="syz.3.1036" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f460121f749 code=0x7ffc0000 [ 65.722417][ T5973] loop1: detected capacity change from 0 to 512 [ 65.754018][ T5973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.766793][ T5973] ext4 filesystem being mounted at /232/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.793396][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.945472][ T5988] __nla_validate_parse: 9 callbacks suppressed [ 65.945540][ T5988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1059'. [ 65.996414][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1061'. [ 66.007551][ T5990] hsr_slave_0: left promiscuous mode [ 66.013488][ T5990] hsr_slave_1: left promiscuous mode [ 67.023129][ T6048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6048 comm=syz.4.1086 [ 67.035748][ T6048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6048 comm=syz.4.1086 [ 67.642985][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1096'. [ 67.989918][ T6082] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6082 comm=syz.3.1099 [ 68.002665][ T6082] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6082 comm=syz.3.1099 [ 68.396929][ T6112] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6112 comm=syz.0.1113 [ 68.483373][ T6118] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 68.491182][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 68.522614][ T6120] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 68.531122][ T6120] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 68.568255][ T5202] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.568332][ T6118] netlink: 'syz.4.1117': attribute type 1 has an invalid length. [ 68.578928][ T5202] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.584326][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1117'. [ 68.602528][ T5202] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.610978][ T5202] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.811500][ T6136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.991151][ T6143] loop4: detected capacity change from 0 to 1024 [ 69.023336][ T6143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.117064][ T6143] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.1128: Allocating blocks 449-513 which overlap fs metadata [ 69.175787][ T6142] EXT4-fs (loop4): pa ffff8881070eb150: logic 48, phys. 177, len 21 [ 69.183977][ T6142] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 69.254188][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.280662][ T6149] loop1: detected capacity change from 0 to 1024 [ 69.314483][ T5162] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.323383][ T6149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.346764][ T5162] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.359646][ T5162] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.368413][ T5161] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.415026][ T5162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.560486][ T5162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.650571][ T5162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.759510][ T5162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 69.789862][ T6172] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.885178][ T5162] bridge_slave_1: left allmulticast mode [ 69.891023][ T5162] bridge_slave_1: left promiscuous mode [ 69.896827][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.909334][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.920079][ T5162] bridge_slave_0: left allmulticast mode [ 69.926047][ T5162] bridge_slave_0: left promiscuous mode [ 69.931896][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.932433][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 69.932450][ T29] audit: type=1326 audit(1763713894.223:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 69.972846][ T29] audit: type=1326 audit(1763713894.223:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 70.000495][ T29] audit: type=1326 audit(1763713894.293:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 70.026496][ T29] audit: type=1326 audit(1763713894.293:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 70.051154][ T29] audit: type=1326 audit(1763713894.293:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 70.116111][ T29] audit: type=1326 audit(1763713894.343:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 70.140696][ T29] audit: type=1326 audit(1763713894.343:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 70.164844][ T29] audit: type=1326 audit(1763713894.343:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6179 comm="syz.4.1143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19293ff749 code=0x7ffc0000 [ 70.189664][ T29] audit: type=1400 audit(1763713894.393:1345): avc: denied { ioctl } for pid=6182 comm="+}[@" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 70.261432][ T5162] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.270611][ T5162] bond_slave_0: left promiscuous mode [ 70.276896][ T5162] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.286014][ T5162] bond_slave_1: left promiscuous mode [ 70.292056][ T5162] $Hÿ (unregistering): Released all slaves [ 70.344562][ T5162] tipc: Disabling bearer [ 70.349746][ T5162] tipc: Left network mode [ 70.428772][ T5162] hsr_slave_0: left promiscuous mode [ 70.445848][ T5162] hsr_slave_1: left promiscuous mode [ 70.477374][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.489700][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.547901][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 70.559613][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 70.604156][ T6159] chnl_net:caif_netlink_parms(): no params data found [ 70.647264][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.654576][ T6159] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.665175][ T6159] bridge_slave_0: entered allmulticast mode [ 70.672484][ T6159] bridge_slave_0: entered promiscuous mode [ 70.680063][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.688269][ T6159] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.695751][ T6159] bridge_slave_1: entered allmulticast mode [ 70.702516][ T6159] bridge_slave_1: entered promiscuous mode [ 70.722892][ T6159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.734184][ T6159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.755752][ T6159] team0: Port device team_slave_0 added [ 70.762883][ T6159] team0: Port device team_slave_1 added [ 70.781010][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.788179][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.814942][ T6159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.826959][ T6159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.833999][ T6159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.860270][ T6159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.889955][ T6159] hsr_slave_0: entered promiscuous mode [ 70.896428][ T6159] hsr_slave_1: entered promiscuous mode [ 70.975131][ T6159] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.984677][ T6159] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 70.994112][ T6159] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 71.003547][ T6159] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 71.019438][ T6159] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.026585][ T6159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.034194][ T6159] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.041421][ T6159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.069545][ T6159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.082807][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.091547][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.107832][ T6159] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.125772][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.133002][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.154349][ T5166] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.161570][ T5166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.181835][ T6159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.192856][ T6159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.273822][ T6159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.402557][ T6159] veth0_vlan: entered promiscuous mode [ 71.410970][ T6159] veth1_vlan: entered promiscuous mode [ 71.428006][ T6159] veth0_macvtap: entered promiscuous mode [ 71.436229][ T6159] veth1_macvtap: entered promiscuous mode [ 71.453381][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.470940][ T6159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.499553][ T5162] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.519334][ T5162] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.541182][ T29] audit: type=1400 audit(1763713895.833:1346): avc: denied { mounton } for pid=6159 comm="syz-executor" path="/root/syzkaller.Caxjog/syz-tmp" dev="sda1" ino=2047 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.543395][ T5162] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.605594][ T5162] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.693011][ T6244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.790461][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 71.815085][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1157'. [ 72.053952][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1171'. [ 72.367554][ T6287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 72.393965][ T6288] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 72.414203][ T6288] vhci_hcd: invalid port number 96 [ 72.419647][ T6288] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 72.424852][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 72.442712][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 72.577488][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1190'. [ 72.710962][ T6328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.718427][ T6328] IPv6: NLM_F_CREATE should be set when creating new route [ 72.726078][ T6328] IPv6: NLM_F_CREATE should be set when creating new route [ 72.733397][ T6328] IPv6: NLM_F_CREATE should be set when creating new route [ 72.746986][ T6334] netlink: 'syz.2.1199': attribute type 27 has an invalid length. [ 72.789008][ T6328] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.804103][ T6334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.837832][ T6334] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.850926][ T6344] program syz.5.1203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.860795][ T6334] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 72.890410][ T6343] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 73.147096][ T6375] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1216'. [ 73.517958][ T6420] netlink: 'syz.5.1236': attribute type 3 has an invalid length. [ 73.525951][ T6420] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1236'. [ 73.638450][ T6438] loop2: detected capacity change from 0 to 1024 [ 73.659009][ T6438] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.031929][ T6480] loop4: detected capacity change from 0 to 512 [ 74.045861][ T6476] syz.3.1263 (6476) used greatest stack depth: 10472 bytes left [ 74.070965][ T6480] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.085057][ T6480] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.147841][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.319954][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.517670][ T5194] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 74.639725][ T6554] $Hÿ: renamed from bond0 [ 74.657783][ T6554] $Hÿ: entered promiscuous mode [ 74.663023][ T6554] bond_slave_0: entered promiscuous mode [ 74.668864][ T6554] bond_slave_1: entered promiscuous mode [ 74.851115][ T6580] loop1: detected capacity change from 0 to 512 [ 74.857992][ T6580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.888630][ T6580] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.1308: Parent and EA inode have the same ino 15 [ 74.901617][ T6585] $Hÿ: renamed from bond0 (while UP) [ 74.909743][ T6580] EXT4-fs (loop1): Remounting filesystem read-only [ 74.916920][ T6585] $Hÿ: entered promiscuous mode [ 74.922497][ T6585] bond_slave_0: entered promiscuous mode [ 74.928489][ T6585] bond_slave_1: entered promiscuous mode [ 74.934996][ T6580] EXT4-fs (loop1): 1 orphan inode deleted [ 74.941612][ T6580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.955939][ T6591] netlink: 'syz.3.1313': attribute type 12 has an invalid length. [ 74.992324][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.013897][ T29] kauditd_printk_skb: 217 callbacks suppressed [ 75.013915][ T29] audit: type=1326 audit(1763713899.303:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.059173][ T29] audit: type=1326 audit(1763713899.303:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.083285][ T29] audit: type=1326 audit(1763713899.333:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="syz.1.1316" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.107163][ T29] audit: type=1326 audit(1763713899.333:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.131059][ T29] audit: type=1326 audit(1763713899.333:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.155970][ T29] audit: type=1326 audit(1763713899.333:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.179762][ T29] audit: type=1326 audit(1763713899.333:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.203780][ T29] audit: type=1326 audit(1763713899.333:1571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.228362][ T29] audit: type=1326 audit(1763713899.333:1572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.251937][ T29] audit: type=1326 audit(1763713899.333:1573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6596 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 75.317260][ T6608] loop1: detected capacity change from 0 to 512 [ 75.355184][ T6608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.389189][ T6608] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.420165][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.469934][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 75.479735][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1330'. [ 75.677043][ T5017] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 75.705002][ T5017] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.735364][ T6661] loop5: detected capacity change from 0 to 512 [ 75.754489][ T6661] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.773139][ T6661] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.1353: Parent and EA inode have the same ino 15 [ 75.799134][ T6661] EXT4-fs (loop5): Remounting filesystem read-only [ 75.818272][ T6661] EXT4-fs (loop5): 1 orphan inode deleted [ 75.838128][ T6661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.880773][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.326608][ T6740] loop3: detected capacity change from 0 to 1024 [ 76.358493][ T6740] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.841573][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.874293][ T6814] netlink: 'syz.3.1413': attribute type 3 has an invalid length. [ 76.940214][ T6824] __nla_validate_parse: 4 callbacks suppressed [ 76.940234][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1419'. [ 76.955605][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1419'. [ 76.955866][ T6822] loop3: detected capacity change from 0 to 2048 [ 76.982722][ T6826] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1420'. [ 77.001421][ T6822] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.125681][ T6843] vhci_hcd: invalid port number 9 [ 77.130898][ T6843] vhci_hcd: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 77.333353][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.505530][ T6878] netlink: 'syz.2.1443': attribute type 12 has an invalid length. [ 77.514082][ T6878] netlink: 'syz.2.1443': attribute type 29 has an invalid length. [ 77.522403][ T6878] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1443'. [ 77.531706][ T6878] netlink: 'syz.2.1443': attribute type 1 has an invalid length. [ 77.696180][ T6900] loop4: detected capacity change from 0 to 256 [ 78.037783][ T6946] loop5: detected capacity change from 0 to 1024 [ 78.053797][ T6946] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.054658][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 78.130234][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.530415][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.573035][ T6986] loop4: detected capacity change from 0 to 1024 [ 78.580942][ T6986] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.600251][ T6986] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 78.608639][ T6986] System zones: 0-1, 3-36 [ 78.614649][ T6986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.631973][ T6986] capability: warning: `syz.4.1493' uses deprecated v2 capabilities in a way that may be insecure [ 78.668587][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.448516][ T7068] SELinux: failed to load policy [ 79.497257][ T7080] loop2: detected capacity change from 0 to 1024 [ 79.504251][ T7080] EXT4-fs: Ignoring removed nomblk_io_submit option [ 79.516234][ T7080] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 79.525107][ T7080] System zones: 0-1, 3-36 [ 79.534376][ T7080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.578204][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.622716][ T7095] loop4: detected capacity change from 0 to 1024 [ 79.632534][ T7095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.798700][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1551'. [ 79.808774][ T7114] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1551'. [ 79.954219][ T7125] netlink: 'syz.1.1556': attribute type 3 has an invalid length. [ 80.005729][ T7137] loop3: detected capacity change from 0 to 1024 [ 80.021139][ T7137] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.029987][ T7137] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 80.039118][ T7137] System zones: 0-1, 3-36 [ 80.048475][ T7137] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.137931][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.222125][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 80.222144][ T29] audit: type=1400 audit(1763713904.513:1770): avc: denied { read write } for pid=7157 comm="syz.5.1571" name="cgroup.subtree_control" dev="cgroup2" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.285058][ T29] audit: type=1400 audit(1763713904.513:1771): avc: denied { open } for pid=7157 comm="syz.5.1571" path="" dev="cgroup2" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.310152][ T29] audit: type=1400 audit(1763713904.513:1772): avc: denied { ioctl } for pid=7157 comm="syz.5.1571" path="" dev="cgroup2" ino=171 ioctlcmd=0x54d5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.350338][ T44] Bluetooth: hci0: unexpected event 0x0f length: 0 < 4 [ 80.363302][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.440055][ T7169] loop3: detected capacity change from 0 to 8192 [ 80.451745][ T7169] syz.3.1577: attempt to access beyond end of device [ 80.451745][ T7169] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 80.468677][ T7169] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 80.477909][ T7169] FAT-fs (loop3): Filesystem has been set read-only [ 80.485812][ T7169] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 80.496468][ T7169] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 80.566167][ T29] audit: type=1400 audit(1763713904.853:1773): avc: denied { name_bind } for pid=7179 comm="syz.3.1582" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 80.591360][ T7181] loop4: detected capacity change from 0 to 2048 [ 80.612158][ T7181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.782600][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.807434][ T7196] loop4: detected capacity change from 0 to 1024 [ 80.821329][ T7196] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.944424][ T29] audit: type=1326 audit(1763713905.233:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 80.975345][ T29] audit: type=1326 audit(1763713905.263:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 81.003195][ T29] audit: type=1326 audit(1763713905.263:1776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 81.037251][ T29] audit: type=1326 audit(1763713905.303:1777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 81.063634][ T29] audit: type=1326 audit(1763713905.303:1778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 81.089009][ T29] audit: type=1326 audit(1763713905.303:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7201 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f1a7d75f749 code=0x7ffc0000 [ 81.128184][ T7204] syz.2.1590 (7204) used greatest stack depth: 9848 bytes left [ 81.219657][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.873282][ T7266] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 81.942455][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1623'. [ 82.266530][ T7308] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 82.266530][ T7308] program +}[@ not setting count and/or reply_len properly [ 82.331943][ T7313] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1638'. [ 82.349263][ T3574] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 82.464646][ T7326] loop5: detected capacity change from 0 to 4096 [ 82.473037][ T7326] EXT4-fs: Ignoring removed nomblk_io_submit option [ 82.482948][ T7326] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.726375][ T6159] ================================================================== [ 82.734967][ T6159] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 82.742511][ T6159] [ 82.744964][ T6159] read-write to 0xffff8881073ca478 of 8 bytes by task 5166 on cpu 0: [ 82.753309][ T6159] __xa_clear_mark+0xf5/0x1e0 [ 82.758413][ T6159] __folio_end_writeback+0xf7/0x3b0 [ 82.765142][ T6159] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 82.771628][ T6159] folio_end_writeback+0x1c/0x70 [ 82.778004][ T6159] ext4_finish_bio+0x459/0x8c0 [ 82.782998][ T6159] ext4_release_io_end+0x9f/0x1f0 [ 82.788777][ T6159] ext4_end_io_end+0x18d/0x240 [ 82.793937][ T6159] ext4_end_io_rsv_work+0x151/0x1e0 [ 82.799603][ T6159] process_scheduled_works+0x4ce/0x9d0 [ 82.806071][ T6159] worker_thread+0x582/0x770 [ 82.810780][ T6159] kthread+0x489/0x510 [ 82.814910][ T6159] ret_from_fork+0x122/0x1b0 [ 82.820228][ T6159] ret_from_fork_asm+0x1a/0x30 [ 82.825588][ T6159] [ 82.828758][ T6159] read to 0xffff8881073ca478 of 8 bytes by task 6159 on cpu 1: [ 82.836691][ T6159] xas_find_marked+0x218/0x620 [ 82.844722][ T6159] find_get_entry+0x5d/0x380 [ 82.849873][ T6159] filemap_get_folios_tag+0x13b/0x210 [ 82.856433][ T6159] filemap_fdatawait_keep_errors+0x6c/0x180 [ 82.862588][ T6159] sync_inodes_sb+0x39c/0x440 [ 82.867749][ T6159] sync_filesystem+0x102/0x190 [ 82.872532][ T6159] generic_shutdown_super+0x44/0x210 [ 82.878008][ T6159] kill_block_super+0x2a/0x70 [ 82.883240][ T6159] ext4_kill_sb+0x42/0x80 [ 82.887852][ T6159] deactivate_locked_super+0x75/0x1c0 [ 82.893549][ T6159] deactivate_super+0x97/0xa0 [ 82.898572][ T6159] cleanup_mnt+0x269/0x2e0 [ 82.903617][ T6159] __cleanup_mnt+0x19/0x20 [ 82.908248][ T6159] task_work_run+0x131/0x1a0 [ 82.912955][ T6159] exit_to_user_mode_loop+0xed/0x110 [ 82.918442][ T6159] do_syscall_64+0x1d6/0x200 [ 82.923245][ T6159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.929463][ T6159] [ 82.932117][ T6159] value changed: 0xffc0000000000000 -> 0xfe00000000000000 [ 82.939930][ T6159] [ 82.942641][ T6159] Reported by Kernel Concurrency Sanitizer on: [ 82.948911][ T6159] CPU: 1 UID: 0 PID: 6159 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 82.964419][ T6159] Tainted: [W]=WARN [ 82.968490][ T6159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 82.979552][ T6159] ================================================================== [ 82.996640][ T6159] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.