last executing test programs: 7.646976883s ago: executing program 4 (id=366): mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@posixacl}, {@version_u}, {@uname={'uname', 0x3d, '\''}}, {@mmap}, {}], [{@appraise}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x208ca44, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYBLOB="530e626dc5e67ac8497f92b73c1ae83a55859b40c2ffebbe1df70121ef86ee88431bc8bad3a9a2400a9df942b969a08f36ebe1787ac75aef8bd64694c22148aa935209c386ff7d2a8768f1a34b0735bc8be51505ab8ff7a316bb3e0d2abd80a0dd17073b9d65ae82b9cc11e48b3e708e42d4a76dfe38e3fe6cfdcc9fc1a38538d5242004e1ace0db55375a7e9b70886e223e653c449003a1a44ed360ec410a4e135fcc2294c37195872763bf4dca735d3d842e74d71421bc3d200142ec07686a2a360070331ab469ca70efa8535d54bfd20702b4828cad31a99a6308bfe030d36b8294583c212898b7b9e292b03b253439790ed207e0", @ANYRESHEX, @ANYRESOCT], 0x6, 0x360, &(0x7f0000000b00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB='\n\x00\x00'], 0x48) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2) r2 = open(&(0x7f0000000180)='./file0\x00', 0x109001, 0x88) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r3}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 7.356457657s ago: executing program 4 (id=369): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000004c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffd}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, 0x0) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2, 0x5063}], 0x1, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 4.2075813s ago: executing program 4 (id=421): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r4}, 0x10) r5 = gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) tkill(r5, 0x7) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) write(r6, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r6, r0, 0x0, 0x3ffff) sendfile(r6, r0, 0x0, 0x7fffeffd) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 3.362382348s ago: executing program 4 (id=431): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x112026, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x2, 0xffffffffffffffff, 0x21}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xffff7ffffffffffd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 3.185047453s ago: executing program 4 (id=436): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) nanosleep(&(0x7f0000000040), 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000c000000000000000000008f000000000000", @ANYBLOB="0000000004000000000000003516cecedf4d5a1501e95eb3855c08", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r5, 0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x10) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{}, &(0x7f0000000a00), &(0x7f0000000a40)}, 0x20) 2.405777526s ago: executing program 1 (id=443): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file0\x00', 0x2800810, &(0x7f00000007c0)=ANY=[], 0x23, 0x18d, &(0x7f0000000d80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.bfq.dequeue\x00', 0x275a, 0x0) close(r0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYRESOCT, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.272131776s ago: executing program 1 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 2.23440493s ago: executing program 1 (id=445): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0xe0, 0x30, 0x1, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ife={0x80, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x4c, 0x6, "715223828bc22379c555b64007d0ce53e23fa639b671eed3bad31d6a9a090db9ec35733a528c1a4f9720287904d7841da90f32dc9569b269592414ca783d52760682480aba308b30"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x4010) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @empty}, 0x4, 0x1, 0x2, 0x2}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.937195443s ago: executing program 3 (id=449): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) pipe2$9p(0x0, 0x80880) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f8481100", 0x16}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.844714261s ago: executing program 1 (id=450): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 1.449007463s ago: executing program 1 (id=453): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x40, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x6, 0x3}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000003000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0x8, 0x49d) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip_vti0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.446997273s ago: executing program 0 (id=454): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.423014665s ago: executing program 0 (id=455): syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000140)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) sysinfo(&(0x7f0000000540)=""/145) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) syz_open_dev$tty1(0xc, 0x4, 0x2) r8 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="080000000f8ba466aabe98d6c437a570690771ffdd8564b60220d89f9d3de34fda", @ANYRES32=r4, @ANYRESDEC=r0, @ANYRES64=r5, @ANYRES32, @ANYBLOB="000000000400"/28], 0x48) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000001080)={0x6, @dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x2, 'lc\x00', 0x0, 0x0, 0x4000}, 0x2c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private=0xa010102, 0x1fd, 0x0, 'lc\x00', 0x4c, 0x2, 0x3f}, 0x2c) syz_open_dev$loop(&(0x7f0000001040), 0x5, 0x101000) 1.348307811s ago: executing program 3 (id=456): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c30000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 1.299762765s ago: executing program 3 (id=457): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x112026, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x2, 0xffffffffffffffff, 0x21}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xffff7ffffffffffd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 1.288431656s ago: executing program 1 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0xe0, 0x30, 0x1, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ife={0x80, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x4c, 0x6, "715223828bc22379c555b64007d0ce53e23fa639b671eed3bad31d6a9a090db9ec35733a528c1a4f9720287904d7841da90f32dc9569b269592414ca783d52760682480aba308b30"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x4010) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @empty}, 0x4, 0x1, 0x2, 0x2}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r7, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 1.171134595s ago: executing program 3 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b0000000000000000000000000000000c8bd065b9153e229000020"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) sendfile(r5, r4, 0x0, 0x7ffff088) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000000)={r4}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="18000000120005010000000000000000050025"], 0x18}}, 0x20040810) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x300, 0x170bd27, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000500)=@req={0x1, 0xfff, 0xd, 0xfffffffd}, 0x10) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r11, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) 777.245757ms ago: executing program 2 (id=460): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) 752.231949ms ago: executing program 2 (id=461): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0xe0, 0x30, 0x1, 0x0, 0x0, {}, [{0xcc, 0x1, [@m_ife={0x80, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, {0x4c, 0x6, "715223828bc22379c555b64007d0ce53e23fa639b671eed3bad31d6a9a090db9ec35733a528c1a4f9720287904d7841da90f32dc9569b269592414ca783d52760682480aba308b30"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe, 0xffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe0}}, 0x4010) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @empty}, 0x4, 0x1, 0x2, 0x2}}, 0x26) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 535.503016ms ago: executing program 0 (id=462): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f000000a200)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="220733d69b211bb4a3f85730728e28424ba4cda255348a19dfc31da6b47d7904126212e0e8502fb4f3dadbbdfa5c952f12a9036dae3d2b0fc75a7bee726dc4c93d91e404a7c235d50738b60402190afaa9e06aff5bdd9087ac06c98060dd3ce9d5871751f599848cefda4e3893ed17b43fadafd1e859e9376358372d4f3cb3a0bf0fe13d15f63fee7e5753f3b19ae14a1226f1d0e748b0b0fc15af257611a13d40cc6aa716bd2733d9395d32fafe82dccc3b211e02659298134932c7c7d1033958c52744bb6adcf202f058a68249", 0xce}, {&(0x7f0000000400)="73fd5418cdbef924ba442463287fbdde2ab7da9d2b26d6b741a60e2aba6555bff157db432a06da33ed74145ddfec5146fe85c31fd70ec45ce1d1fe8dbf85f5e9eed99d6adec3a8a271e9fa501ef5898da20a50c603fbb5af49e0c36b53c91e33ccd527e2ba5edab0f61b9833642fcc839ced7b2ae3c5ab3c565aa52b38f42b865e07775777066808b3a7c4e70e4c05717bc6da503324a9ab9e13b738908b5e9f5b080b464098931a725cfbf8403017399050e250f8cb8b99bd8e5b138dcd386b324e381a36f63aac6099b8aa3979408d4f9db909a8d353a3dc533e2b558cd5921dbf0b33760bb481ffd108e820e871b6e19a87f8141e990d94de13dd8faee04b4e732b122fc85beb7f0163f169e9744ce609ea57fdaafd954cd8562ab91b47176ed0548096ca08ad7264c40f882894a2dbfa9bbc37bdc253a477eb4ae52faa1e6632bfc950b0209bb048349ea50d3527fbbc31a706ffe7c566551ca79d4b0e1359275f044cfbf90cd8497ed033fa064e58f0c11a1a8d18cf53866d4d7b232fb54ed86ea9654440deabd4e8ca66061633ba34a298732ba9605fe31a530f5198aa3e1d1c0fda4c036dc845c835b1959dc0b13cf15c75f58c6ef62f56588d7043c03cfeff1f7b0792e514ac00c9d7570ac95037f6fa4f0cfd7263649bd2b5342320f74ef89799307f596d5db41c683f615da96eb5a5b802fa8ecf3764f6ffd5271e66b382e0e14b81f145c22d4f90306ef02c8c8921521e46b23f72b2fdd2b4fc9a3eb6f03207ada71244714e67cbf65c138215e612a8c9a4420aa45fc39164f5cfc4f9fc014fcfd10b856c3ebd4e1e877046aaee29a642b211f356cb7ed483eda92450d5ff66ff23a20a8bb845265a2939cb34c48a2b22b33bb3e774383588b9f7a53333eb20f4c1054368e34d3acc692d3b12f746b729a122b0aa62a74f5bf0040d589f815c1bce1b4a5934384998df3ab48fe41f0b90fb4d4d8cb01bfecfc86a96d91facba50a5828a8f62bb8759f3dfaeb728e3e42744e83fbad739bd03de69d1c78f6d01b714b11a284caa1ebba69fe7d29e2cbc43db1e6d249545a7c6debd66b5b5f53d4c1d6cebcb2fa427160eb86e48047aab6ce43f7fa0d5bb1dc99ba03e65a7bf178ccba74cf71dec7712414b38f7bf98065a518366839ca4f4a1887ad28d495c1d5c4aa413128d80ab031bd7694cf1101fe9dd65e99849ce6b2e69d6e371bd1df1022e32125747356748d0d3b30fa7d2aa6394707a60b572606d7297091fb45a5534cf269f77f6fc61c92b94f141f06ba8e347667c2fb2c87de5eacf60fadc48f7d7c5516be44807b48583ecc13e00a58143e134706700d28357ac38611494311b049dd497cc5ce315051e215a57f33939d320f808f8dcdedeb60f42b71d618e272506f0bc28843d3fd337989d74600299ab187395347c5bfbb665e5bc03e27978c0b0a464355a47da458690f957122beac9bb139b4223bd156ad74bb76e6880823e52f9eb806aad122892ebd8355ff6cb15ff2e0ce7cad2219a333999318f59c986b4bee11b9f05e355fe32e98732015f17eb19db77088c55d321828bec2dd25ba0da232717e8dafed91f96636d930f3c38b46da4c5541ae963e30e89a341af805176d9e1c9c88068bd81f4acf0325d24fa76dacbff3b88615699f08ded43403b7aeecdd2bbec00e60555317a4e24828ba9e8b9a737621d8ba12fa83c963d67a5a5e5ebbf29ac272cad91786c269fc053ce3f50bb0c05926ccefcc4548d42142efbd86460ec4516aa48e34b54af6319b8c948b69a1fd0d49930d844f13cf5bd1e67c662cdca6dc5f4daf11a75a123ed0a740dfe3014515917a2b01d691803cd7c8f4c46a2fefeab1608498503df514da7c62692b3c2b927b0f09164b367a260aee0c619575891e98ec8391a0b385d4b9ca4a421e2766047cbc11264e89f7d704e7c83", 0x567}, {0x0}], 0x3, &(0x7f0000002480)}}, {{0x0, 0x0, 0x0}}], 0x2, 0x60000800) 511.149259ms ago: executing program 0 (id=463): setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f0000000000)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x5314}}, {@usrquota}, {@jqfmt_vfsv1}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x453, &(0x7f0000002a80)="$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") ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 448.794003ms ago: executing program 2 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x1}], 0x1}}], 0x2, 0x0) 367.82071ms ago: executing program 2 (id=465): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x1088aa, 0x3, 0xfffffffc, 0xb95b5ec032cc8e84, 0x40000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 353.325371ms ago: executing program 2 (id=466): mount$9p_tcp(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={'trans=tcp,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@posixacl}, {@version_u}, {@uname={'uname', 0x3d, '\''}}, {@mmap}, {}], [{@appraise}]}}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0xb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x208ca44, &(0x7f0000001040)=ANY=[@ANYRESDEC, @ANYBLOB="530e626dc5e67ac8497f92b73c1ae83a55859b40c2ffebbe1df70121ef86ee88431bc8bad3a9a2400a9df942b969a08f36ebe1787ac75aef8bd64694c22148aa935209c386ff7d2a8768f1a34b0735bc8be51505ab8ff7a316bb3e0d2abd80a0dd17073b9d65ae82b9cc11e48b3e708e42d4a76dfe38e3fe6cfdcc9fc1a38538d5242004e1ace0db55375a7e9b70886e223e653c449003a1a44ed360ec410a4e135fcc2294c37195872763bf4dca735d3d842e74d71421bc3d200142ec07686a2a360070331ab469ca70efa8535d54bfd20702b4828cad31a99a6308bfe030d36b8294583c212898b7b9e292b03b253439790ed207e0", @ANYRESHEX, @ANYRESOCT], 0x6, 0x360, &(0x7f0000000b00)="$eJzs3c1rO0UYwPEnaZImKW1yEEVBOtiLXpY2ehaDtCAELG0jtoKwbTcasiYlG6oRse3Jq3j3JHgovVnwUND+A71404sI3noRPFhBXdm3ZPPWl5g0/trvB0omM/PszmQn5dm0m718+/MPKiVLK+kNiSaVRERErkSyEpVAxH+MuuWEhB3KSzO///j8+mYx6VWolfzGyzml1Nz8dx9+kvK7nU3LRfbdy99yv148ffHs5T8b75ctVbZUtdZQutqu/dzQt01D7ZatiqbUqmnolqHKVcuoe+3f+Nsxa3t7TaVXd2fTe3XDspRebaqK0VSNmmrUm0p/Ty9XlaZpajYtuEnxeG1Nzw8ZvDPiwWBM6vW8PiUiqZ6W4vFEBgQAACaqO/+POin9MPn/lswVCstryunczv9PXjhvzLx1Oufn/2eJfvn/Kz952+rI/53TiXb+X/POD0o35/9fyh3y/96M6HEZOv/PjmEwGM58oqcq0vHMyf/T/vvXdfTOyaJbIP8HAAAAAAAAAAAAAAAAAAAAAOBJcGXbGdu2M8Fj8NO+hMB/jgdp0PGfFpGkc/Rtjv9Dtr65JUn3wj3nGJuf7Rf3i96j3+FcREwx/ra7OWsjuPJIObLyvXngxx/sF6fclnxJyk68LElGsu56CsXb9sobheUl5fHjW5cppcPxOcnIU+H4b93V6cTnOuP9/SfkxYVQvCYZ+WFHamLKrhvZ3v+nS0q9/mahKz7l9hORX+79oAAAAAAAMGKaaul7/q5pg9q9bxnJl9yPiQxZlIz81f/8frHv+Xks81xs0rMHAAAAAOBxsJofV3SJGnW3YJr9CikZ2DSCQqyjJi4ifTsnumri1215KjTD244nId4dTP7rvL4KXtW7RAX/SOEMvNXk31FFhhtPMH+3JhJrNf1513lFDsVdAIfhpqjcIjzWPfh5p0L17bwwcDtH/kRaNcHHRokBr7Os9m4nes1KiPfU2JHhFsAzX3z9x+jeIK+e+ivgo5s7H5mGfSC3OShdBWcXvU3xsf/iAQAAAHDv2kl/UPNauDl8I5HwzXL4yz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAACM0lq/06ypMeo4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/8W/AQAA//9/d/Qh") mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x2000000000a, 0x2) r1 = open(&(0x7f0000000180)='./file0\x00', 0x109001, 0x88) openat$cgroup(0xffffffffffffffff, &(0x7f00000004c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000300)={0x2, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r2}, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000480), 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[], 0xfe44, 0x2) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 327.755743ms ago: executing program 0 (id=467): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000080000000100000000000007000000000100000002000084d6000000040000000200000075000000070000000900000003000000006130"], 0x0, 0x50, 0x0, 0x1, 0x9}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000009500060000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_config_ext={0x1, 0x6}, 0x112026, 0x0, 0x2, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000400)={0x0, 0x2, r1, 0x21}) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000e40)="d8000000180081064a81f782db44b904021d080400007c09e8fe55a10a0015c0050014a603600e1208000f0000000401a80016009a00014004000000036010fab94dcf5c0461c1d6900094007134cf6ee080000190d0a2ac922353a606487ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00320db70103000040fad95667dc06dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x48084) r2 = memfd_create(&(0x7f0000000cc0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\xd5\xfd\xa9\r\xac7V\xf2\x93A\x94k\xcd\t\x00\x90\xbe\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\agB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\x9f#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xd8\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x96!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2_\x16\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0V\\w\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x17fNo\xb3\x1d\xbb\xcaI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%UH\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\x02Y\x8e\xae\xf5m\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5\x04\x00\x00\x00\x00\x00\x00\x00\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9\xcfJ\t}\xd4:\xe4\xbe\x1c\x10\n\xc6hPO\xeagxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!D\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\xca\xc5kz\x8e9\xd6\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa3d5V\x80\x1a\x90\x10\xe3\xdf%\xfdz\xf7\x9aE\xe6\x9b\x00'/993, 0x3) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0x6, 0x1000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00'}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x44040, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xffff7ffffffffffd}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r5}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 259.661049ms ago: executing program 3 (id=468): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port1\x00', 0x40, 0x80462, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xff}, 'port1\x00', 0x60, 0x1b1878, 0x4, 0x2, 0x3e4, 0x0, 0x100004, 0x0, 0x6, 0x3}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f0000000080)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b702000003000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)='\x00!G', 0x3}], 0x1, 0x8, 0x49d) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0xfffc}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'ip_vti0\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 213.042323ms ago: executing program 3 (id=469): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000004000000b705000008000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="e4921d6e6453824391a3cf5c263df73f5260a467582b7a2f832dd6b868e0fc269a032d86dde9cd0c62f7b6b567eb5e256b79ffeee99d12bb7cd31cec489d69c3b2a6deb89956e004c97aa2ce25f94708c65817cd9072d85fed4a9a67a71853652bf8ee76b0e176ddd535efcf557984f951f5ac58c0d4ae9312d015991edde6b2", @ANYRES32=r0, @ANYRES64=r1, @ANYRES8], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) syslog(0x2, &(0x7f00000000c0)=""/88, 0x58) mremap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ff9000/0x2000)=nil) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) semop(0x0, &(0x7f0000000040)=[{0x4, 0x1}, {0x4}], 0x2) semop(0x0, &(0x7f0000000080)=[{0x1, 0xffff, 0x1400}], 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000400)=[0x8, 0x1]) 170.226746ms ago: executing program 2 (id=470): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r5}, 0x10) gettid() rt_sigtimedwait(&(0x7f0000000100)={[0x3ff]}, 0x0, 0x0, 0x8) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) write(r6, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r6, r0, 0x0, 0x3ffff) sendfile(r6, r0, 0x0, 0x7fffeffd) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) 115.001911ms ago: executing program 4 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000008000000020000000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000b0000000000000000000000000000000c8bd065b9153e229000020"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r3, &(0x7f0000000340)={0x23, 0x0, 0x0, 0x2}, 0x10) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) sendfile(r5, r4, 0x0, 0x7ffff088) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000000)={r4}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000340)={'pimreg1\x00', 0x1}) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000026c0)=ANY=[@ANYBLOB="18000000120005010000000000000000050025"], 0x18}}, 0x20040810) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x300, 0x170bd27, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2100}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000500)=@req={0x1, 0xfff, 0xd, 0xfffffffd}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r11, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/144, 0x90}], 0x1) readv(r11, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) read(0xffffffffffffffff, &(0x7f0000000040)=""/170, 0xaa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001380)=ANY=[@ANYBLOB="300000ff0f00000025b57000f9dbdf2500000004", @ANYRESOCT=r10, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 0s ago: executing program 0 (id=472): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000280)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@lazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x451, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000ac0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a400000", @ANYRES32=r3, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000c00)='sys_enter\x00', r5}, 0x10) r6 = gettid() tkill(r6, 0x7) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x30, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) write(r7, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r7, r0, 0x0, 0x3ffff) sendfile(r7, r0, 0x0, 0x7fffeffd) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.5' (ED25519) to the list of known hosts. [ 27.820617][ T29] audit: type=1400 audit(1756535595.258:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.821827][ T3291] cgroup: Unknown subsys name 'net' [ 27.843365][ T29] audit: type=1400 audit(1756535595.258:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.870755][ T29] audit: type=1400 audit(1756535595.288:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.024336][ T3291] cgroup: Unknown subsys name 'cpuset' [ 28.030695][ T3291] cgroup: Unknown subsys name 'rlimit' [ 28.122770][ T29] audit: type=1400 audit(1756535595.558:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.146035][ T29] audit: type=1400 audit(1756535595.568:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.166570][ T29] audit: type=1400 audit(1756535595.568:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.186966][ T29] audit: type=1400 audit(1756535595.568:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.207357][ T29] audit: type=1400 audit(1756535595.578:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.232350][ T29] audit: type=1400 audit(1756535595.578:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.241032][ T3296] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.264561][ T29] audit: type=1400 audit(1756535595.708:71): avc: denied { relabelto } for pid=3296 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 28.336120][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.509443][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.575158][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.582334][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.589670][ T3302] bridge_slave_0: entered allmulticast mode [ 29.596199][ T3302] bridge_slave_0: entered promiscuous mode [ 29.615048][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.622221][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.629565][ T3302] bridge_slave_1: entered allmulticast mode [ 29.636013][ T3302] bridge_slave_1: entered promiscuous mode [ 29.668085][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.680010][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.696679][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.713903][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.764408][ T3302] team0: Port device team_slave_0 added [ 29.787497][ T3302] team0: Port device team_slave_1 added [ 29.803433][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.810607][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.818668][ T3312] bridge_slave_0: entered allmulticast mode [ 29.825097][ T3312] bridge_slave_0: entered promiscuous mode [ 29.831721][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 29.854408][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.861598][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.868954][ T3312] bridge_slave_1: entered allmulticast mode [ 29.875431][ T3312] bridge_slave_1: entered promiscuous mode [ 29.884648][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 29.900261][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.907246][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.933308][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.944573][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.951583][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.977587][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.028681][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.035816][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.042941][ T3309] bridge_slave_0: entered allmulticast mode [ 30.049676][ T3309] bridge_slave_0: entered promiscuous mode [ 30.057266][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.066513][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.073603][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.080735][ T3309] bridge_slave_1: entered allmulticast mode [ 30.087157][ T3309] bridge_slave_1: entered promiscuous mode [ 30.103472][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.148249][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.159486][ T3302] hsr_slave_0: entered promiscuous mode [ 30.165580][ T3302] hsr_slave_1: entered promiscuous mode [ 30.176726][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.183862][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.191090][ T3303] bridge_slave_0: entered allmulticast mode [ 30.197695][ T3303] bridge_slave_0: entered promiscuous mode [ 30.208955][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.216076][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.223241][ T3307] bridge_slave_0: entered allmulticast mode [ 30.229744][ T3307] bridge_slave_0: entered promiscuous mode [ 30.237452][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.257473][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.264596][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.272411][ T3303] bridge_slave_1: entered allmulticast mode [ 30.279151][ T3303] bridge_slave_1: entered promiscuous mode [ 30.290600][ T3312] team0: Port device team_slave_0 added [ 30.297377][ T3312] team0: Port device team_slave_1 added [ 30.303189][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.310322][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.317530][ T3307] bridge_slave_1: entered allmulticast mode [ 30.324090][ T3307] bridge_slave_1: entered promiscuous mode [ 30.335812][ T3309] team0: Port device team_slave_0 added [ 30.361533][ T3309] team0: Port device team_slave_1 added [ 30.373905][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.389942][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.396968][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.423012][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.435686][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.456515][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.465964][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.472914][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.498859][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.510825][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.524991][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.531945][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.557958][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.593184][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.600281][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.626318][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.637704][ T3303] team0: Port device team_slave_0 added [ 30.663364][ T3303] team0: Port device team_slave_1 added [ 30.678015][ T3307] team0: Port device team_slave_0 added [ 30.684742][ T3307] team0: Port device team_slave_1 added [ 30.697934][ T3312] hsr_slave_0: entered promiscuous mode [ 30.704113][ T3312] hsr_slave_1: entered promiscuous mode [ 30.709866][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 30.715663][ T3312] Cannot create hsr debugfs directory [ 30.728877][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.735896][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.761931][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.778254][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.785264][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.811620][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.825980][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.832973][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.858899][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.872446][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.879460][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.905477][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.959330][ T3309] hsr_slave_0: entered promiscuous mode [ 30.965391][ T3309] hsr_slave_1: entered promiscuous mode [ 30.971208][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 30.977027][ T3309] Cannot create hsr debugfs directory [ 31.007448][ T3303] hsr_slave_0: entered promiscuous mode [ 31.013762][ T3303] hsr_slave_1: entered promiscuous mode [ 31.019813][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.025599][ T3303] Cannot create hsr debugfs directory [ 31.057895][ T3307] hsr_slave_0: entered promiscuous mode [ 31.064084][ T3307] hsr_slave_1: entered promiscuous mode [ 31.069946][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 31.075799][ T3307] Cannot create hsr debugfs directory [ 31.110043][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.136382][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.157214][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.168249][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.268583][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.281866][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.291734][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.303005][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.335384][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.355724][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.365004][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.375803][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.389012][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.415050][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.424372][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.435697][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.455900][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.466631][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.501523][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.509559][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.516688][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.529844][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.540044][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.547173][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.562833][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.571754][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.587606][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.596098][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.607334][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.614425][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.637746][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.644944][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.684817][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.700184][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.710651][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.735134][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.745577][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.752710][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.776894][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.784016][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.808750][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.836166][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.844487][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.854436][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.871851][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.883312][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.901910][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.909039][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.926577][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.933649][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.942506][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.949615][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.966737][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.973855][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.996435][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.031363][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.041927][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.068512][ T3303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.079006][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.160033][ T3302] veth0_vlan: entered promiscuous mode [ 32.183070][ T3312] veth0_vlan: entered promiscuous mode [ 32.191977][ T3302] veth1_vlan: entered promiscuous mode [ 32.208232][ T3312] veth1_vlan: entered promiscuous mode [ 32.222206][ T3302] veth0_macvtap: entered promiscuous mode [ 32.233336][ T3302] veth1_macvtap: entered promiscuous mode [ 32.245096][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.257206][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.269673][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.297883][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.317075][ T3312] veth0_macvtap: entered promiscuous mode [ 32.330640][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.339296][ T3312] veth1_macvtap: entered promiscuous mode [ 32.359865][ T56] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.369609][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.380147][ T56] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.402671][ T56] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.415867][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.442852][ T56] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.465424][ T56] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.483072][ T3309] veth0_vlan: entered promiscuous mode [ 32.501783][ T56] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.512676][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.517594][ T3309] veth1_vlan: entered promiscuous mode [ 32.535570][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.550311][ T3303] veth0_vlan: entered promiscuous mode [ 32.562967][ T3307] veth0_vlan: entered promiscuous mode [ 32.577867][ T3307] veth1_vlan: entered promiscuous mode [ 32.587982][ T56] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.599323][ T3303] veth1_vlan: entered promiscuous mode [ 32.610011][ T3473] netlink: 'syz.2.3': attribute type 37 has an invalid length. [ 32.632717][ T3307] veth0_macvtap: entered promiscuous mode [ 32.644951][ T3307] veth1_macvtap: entered promiscuous mode [ 32.659608][ T3475] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.673745][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.688151][ T3309] veth0_macvtap: entered promiscuous mode [ 32.695971][ T3303] veth0_macvtap: entered promiscuous mode [ 32.704461][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.714689][ T3309] veth1_macvtap: entered promiscuous mode [ 32.724148][ T3475] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.738794][ T3303] veth1_macvtap: entered promiscuous mode [ 32.746467][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.755248][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.766340][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.781484][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.788978][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.806308][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.815981][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.829709][ T3443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844792][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.852712][ T3443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.867090][ T3443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.875989][ T3443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902896][ T56] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.924446][ T56] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.934127][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.957689][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.999306][ T3484] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.031142][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 33.031160][ T29] audit: type=1400 audit(1756535600.468:111): avc: denied { create } for pid=3489 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.061020][ T29] audit: type=1400 audit(1756535600.468:112): avc: denied { ioctl } for pid=3489 comm="syz.3.7" path="socket:[4077]" dev="sockfs" ino=4077 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.085206][ T29] audit: type=1400 audit(1756535600.468:113): avc: denied { bind } for pid=3489 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.087495][ T3493] loop3: detected capacity change from 0 to 512 [ 33.104378][ T29] audit: type=1400 audit(1756535600.468:114): avc: denied { connect } for pid=3489 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.116301][ T3493] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.129900][ T29] audit: type=1400 audit(1756535600.468:115): avc: denied { write } for pid=3489 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.142832][ T3493] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 33.175181][ T29] audit: type=1400 audit(1756535600.498:116): avc: denied { ioctl } for pid=3483 comm="syz.0.6" path="socket:[4663]" dev="sockfs" ino=4663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.203405][ T3493] EXT4-fs (loop3): 1 truncate cleaned up [ 33.216467][ T3493] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.217980][ T3484] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.231064][ T29] audit: type=1400 audit(1756535600.668:117): avc: denied { mount } for pid=3492 comm="syz.3.8" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.274968][ T29] audit: type=1326 audit(1756535600.718:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 33.298280][ T29] audit: type=1326 audit(1756535600.718:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 33.321540][ T29] audit: type=1326 audit(1756535600.718:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3498 comm="syz.1.10" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 33.379007][ T3484] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.483527][ C1] hrtimer: interrupt took 29996 ns [ 33.495946][ T3503] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 33.507248][ T3475] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.583480][ T3505] sd 0:0:1:0: device reset [ 33.679827][ T3504] loop2: detected capacity change from 0 to 512 [ 33.864213][ T3504] ======================================================= [ 33.864213][ T3504] WARNING: The mand mount option has been deprecated and [ 33.864213][ T3504] and is ignored by this kernel. Remove the mand [ 33.864213][ T3504] option from the mount to silence this warning. [ 33.864213][ T3504] ======================================================= [ 33.973722][ T3503] team0: Port device dummy0 added [ 33.980001][ T3504] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.987064][ T3504] EXT4-fs: Ignoring removed i_version option [ 34.008803][ T3504] EXT4-fs (loop2): 1 orphan inode deleted [ 34.015082][ T3504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.087226][ T3503] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 34.119347][ T3493] syz.3.8 (3493) used greatest stack depth: 10944 bytes left [ 34.141618][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.157435][ T3503] team0: Port device dummy0 removed [ 34.190575][ T3503] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 34.212368][ T3503] syz.2.11 (3503) used greatest stack depth: 9288 bytes left [ 34.233109][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.378044][ T3475] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.378235][ T3520] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16'. [ 34.865836][ T3525] netlink: 'syz.2.18': attribute type 21 has an invalid length. [ 34.873753][ T3525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.18'. [ 34.909937][ T3527] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 34.927652][ T3527] bond0: (slave dummy0): Releasing backup interface [ 34.943132][ T3527] team0: Port device dummy0 added [ 34.984033][ T3527] loop2: detected capacity change from 0 to 512 [ 34.992188][ T3527] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.001044][ T3527] EXT4-fs: Ignoring removed i_version option [ 35.020200][ T3527] EXT4-fs (loop2): 1 orphan inode deleted [ 35.027888][ T3527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.047659][ T3527] netlink: 'syz.2.19': attribute type 10 has an invalid length. [ 35.087938][ T3527] team0: Port device dummy0 removed [ 35.116191][ T3527] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.139912][ T3484] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.158615][ T3531] loop3: detected capacity change from 0 to 512 [ 35.168159][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.196986][ T3533] loop2: detected capacity change from 0 to 512 [ 35.204975][ T3533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.216021][ T3531] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 35.223549][ T3533] EXT4-fs (loop2): 1 truncate cleaned up [ 35.224283][ T3531] EXT4-fs (loop3): orphan cleanup on readonly fs [ 35.231173][ T3533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.239469][ T3531] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.20: corrupted inode contents [ 35.261557][ T3531] EXT4-fs (loop3): Remounting filesystem read-only [ 35.268367][ T3531] EXT4-fs (loop3): 1 truncate cleaned up [ 35.277186][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.283700][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.287785][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 35.306187][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.313989][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 35.315521][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.334908][ T3531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.363338][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.382403][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.459929][ T3542] netlink: 'syz.3.22': attribute type 10 has an invalid length. [ 35.509282][ T3542] team0: Port device dummy0 added [ 35.563986][ T3549] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 35.635211][ T3549] loop3: detected capacity change from 0 to 512 [ 35.646351][ T3549] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.654870][ T3549] EXT4-fs: Ignoring removed i_version option [ 35.683940][ T3549] EXT4-fs (loop3): 1 orphan inode deleted [ 35.698563][ T3549] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.717963][ T3549] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 35.736281][ T3549] team0: Port device dummy0 removed [ 35.771787][ T3549] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 35.797936][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.820605][ T3552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.26'. [ 35.863447][ T3554] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.090700][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.114544][ T3556] loop2: detected capacity change from 0 to 512 [ 36.121680][ T3556] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 36.134736][ T3556] EXT4-fs (loop2): 1 truncate cleaned up [ 36.140853][ T3556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.352322][ T3561] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.442548][ T3566] loop4: detected capacity change from 0 to 128 [ 36.467229][ T3561] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.482760][ T3566] loop4: detected capacity change from 0 to 2048 [ 36.517657][ T3561] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.535210][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.567299][ T3561] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.609897][ T3554] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.633315][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.670666][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.711333][ T3554] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.722871][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.772746][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.783831][ T56] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.794942][ T3554] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.811106][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.840840][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.884050][ T3443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.895990][ T3443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.934165][ T3572] loop4: detected capacity change from 0 to 128 [ 36.970697][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.980621][ T3576] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.999237][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.020432][ T3578] Zero length message leads to an empty skb [ 37.028314][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.033226][ T3572] loop4: detected capacity change from 0 to 2048 [ 37.054137][ T3576] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.084855][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.115147][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.136861][ T3580] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.150014][ T3576] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.173652][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.185608][ T3580] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.236429][ T3588] loop3: detected capacity change from 0 to 512 [ 37.245727][ T3576] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.258833][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.263386][ T3590] loop2: detected capacity change from 0 to 128 [ 37.285790][ T3580] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.309402][ T3588] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.314382][ T3590] loop2: detected capacity change from 0 to 2048 [ 37.319657][ T3588] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.332208][ T3595] netlink: 'syz.4.41': attribute type 21 has an invalid length. [ 37.336183][ T3588] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.40: corrupted inode contents [ 37.343957][ T3595] netlink: 8 bytes leftover after parsing attributes in process `syz.4.41'. [ 37.357156][ T3588] EXT4-fs (loop3): Remounting filesystem read-only [ 37.367815][ T3588] EXT4-fs (loop3): 1 truncate cleaned up [ 37.375875][ T3580] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.386359][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.397139][ T12] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 37.409375][ T12] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 37.421423][ T3588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.448292][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.461012][ T3590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.509416][ T3600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.42'. [ 37.536024][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.644127][ T3613] validate_nla: 1 callbacks suppressed [ 37.644158][ T3613] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 37.652134][ T3615] netlink: 'syz.2.49': attribute type 10 has an invalid length. [ 37.686879][ T3613] team0: Port device dummy0 added [ 37.699083][ T3617] loop4: detected capacity change from 0 to 512 [ 37.708633][ T3617] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.715587][ T3617] EXT4-fs: Ignoring removed i_version option [ 37.728340][ T3617] EXT4-fs (loop4): 1 orphan inode deleted [ 37.735262][ T3617] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.750946][ T3613] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 37.769983][ T3613] team0: Port device dummy0 removed [ 37.790456][ T3613] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 37.822618][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.831920][ T3623] loop2: detected capacity change from 0 to 512 [ 37.839196][ T3623] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 37.858505][ T3623] EXT4-fs (loop2): 1 truncate cleaned up [ 37.867411][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.886750][ T3626] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 37.907745][ T3626] bond0: (slave dummy0): Releasing backup interface [ 37.923328][ T3626] team0: Port device dummy0 added [ 37.966624][ T3626] loop4: detected capacity change from 0 to 512 [ 37.977676][ T3626] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.986785][ T3626] EXT4-fs: Ignoring removed i_version option [ 38.012702][ T3626] EXT4-fs (loop4): 1 orphan inode deleted [ 38.030188][ T3626] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.050818][ T3626] netlink: 'syz.4.52': attribute type 10 has an invalid length. [ 38.083048][ T3626] team0: Port device dummy0 removed [ 38.123544][ T3626] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.149914][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.167864][ T3632] loop4: detected capacity change from 0 to 128 [ 38.181565][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 38.181583][ T29] audit: type=1400 audit(1756535605.618:275): avc: denied { mount } for pid=3631 comm="syz.4.53" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.214953][ T29] audit: type=1400 audit(1756535605.638:276): avc: denied { bind } for pid=3631 comm="syz.4.53" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 38.234178][ T29] audit: type=1400 audit(1756535605.638:277): avc: denied { name_bind } for pid=3631 comm="syz.4.53" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 38.256287][ T29] audit: type=1400 audit(1756535605.638:278): avc: denied { node_bind } for pid=3631 comm="syz.4.53" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 38.277769][ T29] audit: type=1400 audit(1756535605.658:279): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 38.312216][ T3634] loop4: detected capacity change from 0 to 512 [ 38.337793][ T3634] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 38.360122][ T3634] EXT4-fs (loop4): orphan cleanup on readonly fs [ 38.369032][ T3634] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.54: corrupted inode contents [ 38.381047][ T3634] EXT4-fs (loop4): Remounting filesystem read-only [ 38.387855][ T3634] EXT4-fs (loop4): 1 truncate cleaned up [ 38.393739][ T3443] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.404331][ T3443] Quota error (device loop4): write_blk: dquota write failed [ 38.411777][ T3443] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 38.421909][ T3443] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 38.432501][ T3443] Quota error (device loop4): write_blk: dquota write failed [ 38.440002][ T3443] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 38.450284][ T3443] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 38.460541][ T3443] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 38.470440][ T3634] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.512118][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.514853][ T3638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.55'. [ 38.541694][ T3640] netlink: 'syz.4.56': attribute type 21 has an invalid length. [ 38.549695][ T3640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.56'. [ 38.726166][ T3649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.60'. [ 38.785430][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.828290][ T3656] netlink: 'syz.3.64': attribute type 37 has an invalid length. [ 38.900116][ T3662] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.058477][ T3662] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.118402][ T3662] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.177380][ T3662] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.267903][ T56] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.303060][ T56] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.338543][ T56] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.385917][ T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.400881][ T3666] loop2: detected capacity change from 0 to 512 [ 39.416183][ T3666] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 39.424886][ T3666] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.432703][ T3666] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.66: corrupted inode contents [ 39.445298][ T3666] EXT4-fs (loop2): Remounting filesystem read-only [ 39.452047][ T3666] EXT4-fs (loop2): 1 truncate cleaned up [ 39.457918][ T3443] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.468515][ T3443] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 39.479146][ T3443] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 39.489799][ T3666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.512666][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.530782][ T3670] loop2: detected capacity change from 0 to 128 [ 39.563430][ T3672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 39.755548][ T3686] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.846345][ T3689] loop2: detected capacity change from 0 to 512 [ 39.867110][ T9] IPVS: starting estimator thread 0... [ 39.873995][ T3686] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.881521][ T3689] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.907749][ T3689] EXT4-fs (loop2): 1 truncate cleaned up [ 39.922620][ T3689] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.945112][ T3686] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.963623][ T3691] IPVS: using max 2400 ests per chain, 120000 per kthread [ 40.005601][ T3686] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.503967][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.533238][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.555417][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.574728][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.604404][ T3700] loop1: detected capacity change from 0 to 512 [ 40.626786][ T3700] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 40.634956][ T3700] EXT4-fs (loop1): orphan cleanup on readonly fs [ 40.642836][ T3700] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.77: corrupted inode contents [ 40.656398][ T3700] EXT4-fs (loop1): Remounting filesystem read-only [ 40.690176][ T3700] EXT4-fs (loop1): 1 truncate cleaned up [ 40.696827][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.707413][ T37] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.718166][ T37] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.729427][ T3700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.743747][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.788773][ T3709] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.810989][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.825699][ T3709] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.849357][ T3712] netlink: 24 bytes leftover after parsing attributes in process `syz.1.80'. [ 40.875172][ T3709] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.965765][ T3709] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.555237][ T3720] netlink: 'syz.4.83': attribute type 37 has an invalid length. [ 41.639990][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.651984][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.664735][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.676770][ T56] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.690301][ T56] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.698570][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b73000: rx timeout, send abort [ 41.698625][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119b73200: rx timeout, send abort [ 41.707233][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119b73000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.707328][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888119b73200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 41.754973][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.775109][ T3725] loop1: detected capacity change from 0 to 128 [ 41.783437][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.797684][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.833208][ T3725] loop1: detected capacity change from 0 to 2048 [ 41.856531][ T3731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.87'. [ 41.900081][ T3725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.247311][ T36] IPVS: starting estimator thread 0... [ 42.302359][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.333835][ T3740] IPVS: using max 2400 ests per chain, 120000 per kthread [ 43.408331][ T3747] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 43.444415][ T3747] team0: Port device dummy0 added [ 43.468663][ T3750] netlink: 24 bytes leftover after parsing attributes in process `syz.4.93'. [ 43.513464][ T3753] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 43.562765][ T3753] team0: Port device dummy0 added [ 43.573067][ T3758] loop1: detected capacity change from 0 to 512 [ 43.587230][ T3747] loop0: detected capacity change from 0 to 512 [ 43.597777][ T3758] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.604925][ T3747] EXT4-fs: Ignoring removed nomblk_io_submit option [ 43.614333][ T3758] EXT4-fs: Ignoring removed i_version option [ 43.618482][ T3747] EXT4-fs: Ignoring removed i_version option [ 43.627999][ T3758] EXT4-fs (loop1): 1 orphan inode deleted [ 43.637206][ T3755] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.642165][ T3758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.670121][ T3753] netlink: 'syz.1.94': attribute type 10 has an invalid length. [ 43.687028][ T3747] EXT4-fs (loop0): 1 orphan inode deleted [ 43.717902][ T3747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.742910][ T3753] team0: Port device dummy0 removed [ 43.772838][ T3753] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.784665][ T3755] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.809730][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.826004][ T3755] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.841157][ T3747] netlink: 'syz.0.91': attribute type 10 has an invalid length. [ 43.902831][ T3747] team0: Port device dummy0 removed [ 43.949835][ T3747] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.964447][ T3755] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.975421][ T29] kauditd_printk_skb: 124 callbacks suppressed [ 43.975436][ T29] audit: type=1326 audit(1756535611.418:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.004909][ T29] audit: type=1326 audit(1756535611.418:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.032787][ T29] audit: type=1326 audit(1756535611.468:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.055995][ T29] audit: type=1326 audit(1756535611.468:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.079188][ T29] audit: type=1326 audit(1756535611.468:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.102411][ T29] audit: type=1326 audit(1756535611.468:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.125581][ T29] audit: type=1326 audit(1756535611.468:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.148759][ T29] audit: type=1326 audit(1756535611.468:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.171930][ T29] audit: type=1326 audit(1756535611.468:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.195283][ T29] audit: type=1326 audit(1756535611.468:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3768 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f69cbc2ebe9 code=0x7ffc0000 [ 44.220758][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.263070][ T3443] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.287627][ T3443] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.299384][ T3776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'. [ 44.303430][ T3443] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.319361][ T3443] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.381490][ T3780] netlink: 'syz.1.104': attribute type 37 has an invalid length. [ 44.390816][ T3781] loop0: detected capacity change from 0 to 128 [ 44.411995][ T3782] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 44.465910][ T3787] loop1: detected capacity change from 0 to 128 [ 44.475225][ T3781] loop0: detected capacity change from 0 to 2048 [ 44.487915][ T3787] loop1: detected capacity change from 0 to 2048 [ 44.502560][ T3788] netlink: 'syz.3.106': attribute type 37 has an invalid length. [ 44.524748][ T3787] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.526132][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.578891][ T3781] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.591138][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.620876][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.656638][ T37] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.675001][ T3801] netlink: 'syz.4.110': attribute type 21 has an invalid length. [ 44.700904][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 44.799123][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.822434][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.837893][ T3808] netlink: 24 bytes leftover after parsing attributes in process `syz.2.115'. [ 44.867308][ T3810] loop1: detected capacity change from 0 to 128 [ 45.010494][ T3817] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 45.033360][ T3817] bond0: (slave dummy0): Releasing backup interface [ 45.065544][ T3817] team0: Port device dummy0 added [ 45.075901][ T3821] loop1: detected capacity change from 0 to 512 [ 45.093115][ T3823] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 45.176798][ T3821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.184401][ T3821] EXT4-fs: Ignoring removed i_version option [ 45.193878][ T3827] loop4: detected capacity change from 0 to 512 [ 45.208514][ T3827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.214432][ T1038] IPVS: starting estimator thread 0... [ 45.222970][ T3827] EXT4-fs: Ignoring removed i_version option [ 45.233598][ T3823] bond0: (slave dummy0): Releasing backup interface [ 45.250840][ T3827] EXT4-fs (loop4): 1 orphan inode deleted [ 45.257289][ T3827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.263908][ T3821] EXT4-fs (loop1): 1 orphan inode deleted [ 45.282920][ T3827] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 45.293410][ T3823] team0: Port device dummy0 added [ 45.303573][ T3826] IPVS: using max 2208 ests per chain, 110400 per kthread [ 45.304994][ T3821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.323486][ T3827] team0: Port device dummy0 removed [ 45.374420][ T3827] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.406056][ T3817] team0: Port device dummy0 removed [ 45.459538][ T3817] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.469756][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.507721][ T3838] loop3: detected capacity change from 0 to 512 [ 45.519951][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.535970][ T3838] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 45.560976][ T3838] EXT4-fs (loop3): 1 truncate cleaned up [ 45.568283][ T3841] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.568367][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.626303][ T3841] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.675486][ T3841] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.716794][ T3841] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.917551][ T3507] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.951990][ T3507] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.962537][ T3507] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.984580][ T3852] loop0: detected capacity change from 0 to 128 [ 45.996192][ T3507] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.018026][ T3856] loop1: detected capacity change from 0 to 128 [ 46.055490][ T3858] loop2: detected capacity change from 0 to 512 [ 46.073049][ T3852] loop0: detected capacity change from 0 to 2048 [ 46.110272][ T3852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.184653][ T3858] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 46.193448][ T3858] EXT4-fs (loop2): orphan cleanup on readonly fs [ 46.215108][ T3858] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.130: corrupted inode contents [ 46.340489][ T3858] EXT4-fs (loop2): Remounting filesystem read-only [ 46.377991][ T3858] EXT4-fs (loop2): 1 truncate cleaned up [ 46.632151][ T3507] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.642830][ T3507] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 46.653617][ T3507] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.664820][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.665029][ T3858] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.675579][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.719358][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.781982][ T3876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 46.858527][ T3883] bond0: (slave dummy0): Releasing backup interface [ 46.887879][ T3883] team0: Port device dummy0 added [ 47.310201][ T9] IPVS: starting estimator thread 0... [ 48.286865][ T3898] IPVS: using max 2400 ests per chain, 120000 per kthread [ 48.425531][ T3910] loop2: detected capacity change from 0 to 128 [ 48.446588][ T3906] loop3: detected capacity change from 0 to 512 [ 48.456848][ T3906] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.470131][ T3906] EXT4-fs: Ignoring removed i_version option [ 48.477652][ T3912] validate_nla: 3 callbacks suppressed [ 48.477697][ T3912] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 48.534699][ T3912] bond0: (slave dummy0): Releasing backup interface [ 48.542925][ T3906] EXT4-fs (loop3): 1 orphan inode deleted [ 48.549444][ T3914] loop1: detected capacity change from 0 to 512 [ 48.570721][ T3906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.591956][ T3914] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.601715][ T3916] loop4: detected capacity change from 0 to 128 [ 48.611454][ T3914] EXT4-fs: Ignoring removed i_version option [ 48.642962][ T3906] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 48.672130][ T3914] EXT4-fs (loop1): 1 orphan inode deleted [ 48.686053][ T3914] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.703359][ T3912] team0: Port device dummy0 added [ 48.732507][ T3912] netlink: 'syz.1.146': attribute type 10 has an invalid length. [ 48.798451][ T3906] team0: Port device dummy0 removed [ 48.837972][ T3906] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.890694][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.925235][ T3912] team0: Port device dummy0 removed [ 48.932176][ T3929] loop3: detected capacity change from 0 to 128 [ 48.944895][ T3928] loop0: detected capacity change from 0 to 128 [ 48.987406][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 48.987422][ T29] audit: type=1326 audit(1756535616.428:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7effc7a8d69f code=0x7ffc0000 [ 49.037367][ T3928] loop0: detected capacity change from 0 to 2048 [ 49.048752][ T3912] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.060225][ T3920] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.064124][ T3934] netlink: 'syz.4.155': attribute type 37 has an invalid length. [ 49.085574][ T29] audit: type=1326 audit(1756535616.478:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7effc7a8ec77 code=0x7ffc0000 [ 49.105058][ T3928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.108815][ T29] audit: type=1326 audit(1756535616.478:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effc7a8d550 code=0x7ffc0000 [ 49.144528][ T29] audit: type=1326 audit(1756535616.478:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7effc7a8e7eb code=0x7ffc0000 [ 49.167717][ T29] audit: type=1326 audit(1756535616.488:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7effc7a8d84a code=0x7ffc0000 [ 49.190884][ T29] audit: type=1326 audit(1756535616.488:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7effc7a8d84a code=0x7ffc0000 [ 49.214003][ T29] audit: type=1326 audit(1756535616.488:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7effc7a8d457 code=0x7ffc0000 [ 49.237254][ T29] audit: type=1326 audit(1756535616.488:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7effc7a9038a code=0x7ffc0000 [ 49.260654][ T29] audit: type=1326 audit(1756535616.568:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7effc7a8d550 code=0x7ffc0000 [ 49.284119][ T29] audit: type=1326 audit(1756535616.568:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3926 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7effc7a8d937 code=0x7ffc0000 [ 49.308371][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.320816][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.335940][ T3920] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.385936][ T3920] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.400691][ T3944] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.506487][ T3944] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.518362][ T3920] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.617197][ T3944] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.685264][ T3944] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.002707][ T3958] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.065444][ T3958] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.175468][ T3958] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.211521][ T37] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.222947][ T37] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.235292][ T37] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.295903][ T3958] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.316407][ T56] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.351351][ T56] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.383430][ T56] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.392239][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.416828][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.436790][ T3971] loop0: detected capacity change from 0 to 512 [ 50.458287][ T3971] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 50.487457][ T3971] EXT4-fs (loop0): orphan cleanup on readonly fs [ 50.496300][ T3973] loop2: detected capacity change from 0 to 512 [ 50.508150][ T3973] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.508322][ T3979] netlink: 'syz.3.171': attribute type 37 has an invalid length. [ 50.517625][ T3971] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.167: corrupted inode contents [ 50.531741][ T3973] EXT4-fs: Ignoring removed i_version option [ 50.539614][ T3971] EXT4-fs (loop0): Remounting filesystem read-only [ 50.549781][ T3971] EXT4-fs (loop0): 1 truncate cleaned up [ 50.556879][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.567550][ T37] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.580636][ T37] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.584722][ T3973] EXT4-fs (loop2): 1 orphan inode deleted [ 50.591363][ T3971] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.609586][ T3973] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.629205][ T3973] netlink: 'syz.2.168': attribute type 10 has an invalid length. [ 50.639675][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.672651][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.795831][ T3987] loop4: detected capacity change from 0 to 128 [ 50.839604][ T3987] loop4: detected capacity change from 0 to 2048 [ 51.046548][ T3987] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.088795][ T3996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.177'. [ 51.364586][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.390568][ T4006] loop4: detected capacity change from 0 to 512 [ 51.425747][ T4006] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 51.441584][ T4006] EXT4-fs (loop4): orphan cleanup on readonly fs [ 51.459861][ T4014] loop2: detected capacity change from 0 to 128 [ 51.469045][ T4006] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.182: corrupted inode contents [ 51.486515][ T4009] loop3: detected capacity change from 0 to 512 [ 51.496189][ T4009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.504948][ T4009] EXT4-fs: Ignoring removed i_version option [ 51.517849][ T4006] EXT4-fs (loop4): Remounting filesystem read-only [ 51.524700][ T4006] EXT4-fs (loop4): 1 truncate cleaned up [ 51.538273][ T3507] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.548874][ T3507] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 51.578103][ T4009] EXT4-fs (loop3): 1 orphan inode deleted [ 51.591548][ T4009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.608787][ T4009] netlink: 'syz.3.184': attribute type 10 has an invalid length. [ 51.624778][ T3507] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 51.638134][ T4006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.700693][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.703390][ T4022] netlink: 'syz.2.188': attribute type 21 has an invalid length. [ 51.711258][ T4024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 51.720962][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.737125][ T4022] netlink: 8 bytes leftover after parsing attributes in process `syz.2.188'. [ 51.789872][ T4030] netlink: 'syz.0.192': attribute type 37 has an invalid length. [ 51.842874][ T4032] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.920062][ T4040] loop2: detected capacity change from 0 to 128 [ 51.928714][ T4032] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.129578][ T4032] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.466637][ T4032] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.550678][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.560094][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.741069][ T4047] netlink: 'syz.0.198': attribute type 10 has an invalid length. [ 52.770559][ T56] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.772175][ T4049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.199'. [ 52.796570][ T4050] loop0: detected capacity change from 0 to 512 [ 52.804988][ T4050] EXT4-fs: Ignoring removed nomblk_io_submit option [ 52.814759][ T4050] EXT4-fs: Ignoring removed i_version option [ 52.846594][ T4047] bond0: (slave dummy0): Releasing backup interface [ 52.846624][ T4050] EXT4-fs (loop0): 1 orphan inode deleted [ 52.847014][ T4050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.886148][ T4047] team0: Port device dummy0 added [ 52.907329][ T56] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.026044][ T4055] bond0: (slave dummy0): Releasing backup interface [ 53.111205][ T4055] team0: Port device dummy0 added [ 53.124206][ T4065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.204'. [ 53.143851][ T4052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.200'. [ 53.159920][ T4050] team0: Port device dummy0 removed [ 53.171226][ T4050] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 53.188444][ T56] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.197792][ T56] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.206229][ T56] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.243761][ T4070] sd 0:0:1:0: device reset [ 53.377671][ T56] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.459707][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.540548][ T4075] validate_nla: 3 callbacks suppressed [ 53.540568][ T4075] netlink: 'syz.2.209': attribute type 37 has an invalid length. [ 53.726984][ T4083] loop0: detected capacity change from 0 to 512 [ 53.755078][ T4083] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 53.763730][ T4083] EXT4-fs (loop0): orphan cleanup on readonly fs [ 53.771767][ T4083] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.208: corrupted inode contents [ 53.786769][ T4083] EXT4-fs (loop0): Remounting filesystem read-only [ 53.793418][ T4083] EXT4-fs (loop0): 1 truncate cleaned up [ 53.799359][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.809917][ T56] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 53.820480][ T56] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 53.963354][ T4083] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.986795][ T4088] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.066247][ T4088] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.089835][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.146396][ T4088] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.206082][ T4088] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.376094][ T4095] netlink: 'syz.0.213': attribute type 10 has an invalid length. [ 54.406376][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 54.406394][ T29] audit: type=1326 audit(1756535621.848:970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.438647][ T4100] loop0: detected capacity change from 0 to 512 [ 54.445492][ T4100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.457598][ T4100] EXT4-fs: Ignoring removed i_version option [ 54.481255][ T29] audit: type=1326 audit(1756535621.848:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.504686][ T29] audit: type=1326 audit(1756535621.878:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.528017][ T29] audit: type=1326 audit(1756535621.878:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.551309][ T29] audit: type=1326 audit(1756535621.878:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.574660][ T29] audit: type=1326 audit(1756535621.878:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.597953][ T29] audit: type=1326 audit(1756535621.878:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.621417][ T29] audit: type=1326 audit(1756535621.878:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.644722][ T29] audit: type=1326 audit(1756535621.878:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.667990][ T29] audit: type=1326 audit(1756535621.878:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4098 comm="syz.2.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 54.701817][ T4095] bond0: (slave dummy0): Releasing backup interface [ 54.720900][ T4100] EXT4-fs (loop0): 1 orphan inode deleted [ 54.728852][ T4100] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.762667][ T4100] netlink: 'syz.0.213': attribute type 10 has an invalid length. [ 54.869901][ T4095] team0: Port device dummy0 added [ 55.015335][ T4117] loop2: detected capacity change from 0 to 128 [ 55.026520][ T4100] team0: Port device dummy0 removed [ 55.036699][ T4100] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.142330][ T4117] loop2: detected capacity change from 0 to 2048 [ 55.156837][ T4117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.181949][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.226185][ T4121] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.258343][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.284353][ T4123] loop2: detected capacity change from 0 to 512 [ 55.285360][ T4121] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.302018][ T4123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 55.315076][ T4123] EXT4-fs (loop2): 1 truncate cleaned up [ 55.321178][ T4123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.357121][ T4121] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.474778][ T4121] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.527442][ T3443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.549313][ T4130] loop4: detected capacity change from 0 to 512 [ 55.552729][ T3443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.565868][ T4130] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.585504][ T4130] EXT4-fs (loop4): 1 truncate cleaned up [ 55.595821][ T3443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.614851][ T4130] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.633874][ T3443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.791256][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.806422][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.855525][ T56] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.864575][ T56] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.176254][ T4138] netlink: 24 bytes leftover after parsing attributes in process `syz.1.227'. [ 56.334375][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.463193][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.522662][ T4149] loop2: detected capacity change from 0 to 512 [ 56.564728][ T4149] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.573038][ T4149] EXT4-fs: Ignoring removed i_version option [ 56.610335][ T4153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.233'. [ 56.623999][ T4154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 56.650324][ T4149] EXT4-fs (loop2): 1 orphan inode deleted [ 56.718854][ T4149] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.737456][ T4149] netlink: 'syz.2.229': attribute type 10 has an invalid length. [ 56.750789][ T4166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.237'. [ 56.800899][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.831591][ T4170] loop0: detected capacity change from 0 to 512 [ 56.839911][ T4170] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 56.872503][ T4171] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.012990][ T4177] netlink: 'syz.2.238': attribute type 21 has an invalid length. [ 57.038488][ T4170] EXT4-fs (loop0): 1 truncate cleaned up [ 57.045107][ T4170] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.058409][ T4177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'. [ 57.445871][ T4171] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.564545][ T4185] loop4: detected capacity change from 0 to 512 [ 57.575480][ T4185] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.599809][ T4171] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.611495][ T4185] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.620673][ T4185] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.241: corrupted inode contents [ 57.632850][ T4185] EXT4-fs (loop4): Remounting filesystem read-only [ 57.641176][ T4185] EXT4-fs (loop4): 1 truncate cleaned up [ 57.647074][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.657637][ T37] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.677378][ T4171] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.682957][ T37] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.700078][ T4185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.747098][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.763644][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.806839][ T4189] netlink: 'syz.2.243': attribute type 10 has an invalid length. [ 57.838681][ T4189] bond0: (slave dummy0): Releasing backup interface [ 57.886893][ T4189] team0: Port device dummy0 added [ 57.921612][ T4201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.247'. [ 58.026195][ T4211] netlink: 24 bytes leftover after parsing attributes in process `syz.3.252'. [ 58.043201][ T4209] loop0: detected capacity change from 0 to 512 [ 58.058338][ T4209] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.066921][ T4207] loop2: detected capacity change from 0 to 512 [ 58.075822][ T4207] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.086298][ T4207] EXT4-fs: Ignoring removed i_version option [ 58.098119][ T4209] EXT4-fs: Ignoring removed i_version option [ 58.119576][ T4207] EXT4-fs (loop2): 1 orphan inode deleted [ 58.144373][ T4209] EXT4-fs (loop0): 1 orphan inode deleted [ 58.153177][ T4215] loop3: detected capacity change from 0 to 512 [ 58.155614][ T4207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.172756][ T4209] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.175563][ T4215] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.199659][ T4209] netlink: 'syz.0.251': attribute type 10 has an invalid length. [ 58.203281][ T4207] netlink: 'syz.2.249': attribute type 10 has an invalid length. [ 58.231247][ T4215] EXT4-fs (loop3): 1 truncate cleaned up [ 58.242181][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.280596][ T4207] team0: Port device dummy0 removed [ 58.298411][ T4207] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.307383][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.320282][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.329155][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.340615][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.391127][ T4222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 58.507012][ T4236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 58.554143][ T4232] netlink: 'syz.0.257': attribute type 21 has an invalid length. [ 58.557448][ T4235] netlink: 'syz.1.258': attribute type 10 has an invalid length. [ 58.562938][ T4232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.257'. [ 58.637302][ T4235] bond0: (slave dummy0): Releasing backup interface [ 58.689673][ T4235] team0: Port device dummy0 added [ 58.895032][ T4250] loop4: detected capacity change from 0 to 512 [ 58.909639][ T4250] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.950893][ T4254] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.964231][ T4250] EXT4-fs (loop4): 1 truncate cleaned up [ 58.980660][ T4248] loop1: detected capacity change from 0 to 512 [ 58.995900][ T4254] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.010739][ T4248] EXT4-fs: Ignoring removed nomblk_io_submit option [ 59.018849][ T4248] EXT4-fs: Ignoring removed i_version option [ 59.035603][ T4248] EXT4-fs (loop1): 1 orphan inode deleted [ 59.046463][ T4254] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.071661][ T4248] netlink: 'syz.1.265': attribute type 10 has an invalid length. [ 59.139688][ T4248] team0: Port device dummy0 removed [ 59.189026][ T4248] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 59.200260][ T4254] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.925369][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 59.925449][ T29] audit: type=1326 audit(1756535627.368:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 59.978228][ T3443] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.985608][ T29] audit: type=1326 audit(1756535627.398:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.009724][ T29] audit: type=1326 audit(1756535627.398:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.033402][ T29] audit: type=1326 audit(1756535627.398:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.036979][ T3443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.056898][ T29] audit: type=1326 audit(1756535627.398:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.056932][ T29] audit: type=1326 audit(1756535627.398:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.111857][ T29] audit: type=1326 audit(1756535627.408:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.135308][ T29] audit: type=1326 audit(1756535627.408:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.158743][ T29] audit: type=1326 audit(1756535627.408:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.172275][ T4284] netlink: 'syz.4.274': attribute type 10 has an invalid length. [ 60.182080][ T29] audit: type=1326 audit(1756535627.408:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4279 comm="syz.2.275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbdc51febe9 code=0x7ffc0000 [ 60.185418][ T3443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.243924][ T3443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.290841][ T4284] bond0: (slave dummy0): Releasing backup interface [ 60.361682][ T4297] loop1: detected capacity change from 0 to 512 [ 60.371739][ T4297] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 60.387542][ T4284] team0: Port device dummy0 added [ 60.401866][ T4297] EXT4-fs (loop1): 1 truncate cleaned up [ 60.446789][ T4300] loop2: detected capacity change from 0 to 512 [ 60.465608][ T4300] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 60.465733][ T4304] netlink: 'syz.4.280': attribute type 21 has an invalid length. [ 60.497652][ T4300] EXT4-fs (loop2): 1 truncate cleaned up [ 60.641580][ T4316] loop0: detected capacity change from 0 to 128 [ 61.309015][ T4338] loop1: detected capacity change from 0 to 512 [ 61.337051][ T4338] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 61.382522][ T4338] EXT4-fs (loop1): 1 truncate cleaned up [ 61.706941][ T4348] __nla_validate_parse: 4 callbacks suppressed [ 61.706958][ T4348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.295'. [ 61.916948][ T4353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.297'. [ 62.003920][ T4357] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 62.023474][ T4357] bond0: (slave dummy0): Releasing backup interface [ 62.047956][ T4355] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 62.062187][ T4358] loop0: detected capacity change from 0 to 512 [ 62.080419][ T4357] team0: Port device dummy0 added [ 62.100655][ T4359] loop2: detected capacity change from 0 to 512 [ 62.109511][ T4358] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.126516][ T4359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.183984][ T4358] EXT4-fs: Ignoring removed i_version option [ 62.186153][ T4359] EXT4-fs: Ignoring removed i_version option [ 62.198663][ T4358] EXT4-fs (loop0): 1 orphan inode deleted [ 62.234100][ T4357] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 62.256374][ T4355] bond0: (slave dummy0): Releasing backup interface [ 62.268826][ T4359] EXT4-fs (loop2): 1 orphan inode deleted [ 62.281438][ T4359] netlink: 'syz.2.298': attribute type 10 has an invalid length. [ 62.304923][ T4355] team0: Port device dummy0 added [ 62.366072][ T4357] team0: Port device dummy0 removed [ 62.402227][ T4363] loop1: detected capacity change from 0 to 512 [ 62.417635][ T4363] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.426551][ T4363] EXT4-fs: Ignoring removed i_version option [ 62.461466][ T4363] EXT4-fs (loop1): 1 orphan inode deleted [ 62.469483][ T4357] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.488395][ T4359] team0: Port device dummy0 removed [ 62.490650][ T4363] netlink: 'syz.1.300': attribute type 10 has an invalid length. [ 62.496120][ T4359] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 62.670997][ T4375] netlink: 24 bytes leftover after parsing attributes in process `syz.1.304'. [ 62.816179][ T4383] sd 0:0:1:0: device reset [ 62.942920][ T4387] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.036215][ T4387] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.117630][ T4387] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.163020][ T4395] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 63.199240][ T4397] loop1: detected capacity change from 0 to 512 [ 63.215813][ T4397] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 63.237645][ T4387] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.249661][ T4397] EXT4-fs (loop1): 1 truncate cleaned up [ 64.080386][ T4410] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 64.212365][ T4410] loop4: detected capacity change from 0 to 512 [ 64.235304][ T4410] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.244574][ T4410] EXT4-fs: Ignoring removed i_version option [ 64.259697][ T4410] EXT4-fs (loop4): 1 orphan inode deleted [ 64.272759][ T4410] netlink: 'syz.4.316': attribute type 10 has an invalid length. [ 64.304705][ T4410] team0: Port device dummy0 removed [ 64.315817][ T4416] loop1: detected capacity change from 0 to 128 [ 64.345622][ T4410] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.363786][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.394961][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.424515][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.442060][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.461979][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.322'. [ 64.465128][ T4423] netlink: 24 bytes leftover after parsing attributes in process `syz.4.321'. [ 65.485003][ T4441] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.545271][ T4441] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.632489][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 65.632507][ T29] audit: type=1326 audit(1756535633.058:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.662204][ T29] audit: type=1326 audit(1756535633.058:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.685957][ T29] audit: type=1326 audit(1756535633.058:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.709433][ T29] audit: type=1326 audit(1756535633.058:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.732786][ T29] audit: type=1326 audit(1756535633.058:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.756228][ T29] audit: type=1326 audit(1756535633.058:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.779624][ T29] audit: type=1326 audit(1756535633.058:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.803011][ T29] audit: type=1326 audit(1756535633.058:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.826334][ T29] audit: type=1326 audit(1756535633.058:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.849646][ T29] audit: type=1326 audit(1756535633.058:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4438 comm="syz.0.326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 65.875246][ T4449] netlink: 'syz.1.329': attribute type 37 has an invalid length. [ 65.883215][ T4447] loop2: detected capacity change from 0 to 512 [ 65.890001][ T4447] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.897376][ T4447] EXT4-fs: Ignoring removed i_version option [ 65.907710][ T4441] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.912657][ T4447] EXT4-fs (loop2): 1 orphan inode deleted [ 65.927489][ T4446] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 65.990769][ T4456] netlink: 24 bytes leftover after parsing attributes in process `syz.2.331'. [ 66.002111][ T4441] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.064098][ T37] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.076930][ T4458] loop2: detected capacity change from 0 to 128 [ 66.090005][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.108828][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.127339][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.149193][ T4461] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.169356][ T4464] netlink: 24 bytes leftover after parsing attributes in process `syz.2.335'. [ 66.205361][ T4461] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.262587][ T4466] loop2: detected capacity change from 0 to 128 [ 66.285592][ T4461] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.307218][ T4466] loop2: detected capacity change from 0 to 2048 [ 66.396506][ T4461] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.611112][ T4474] loop2: detected capacity change from 0 to 128 [ 66.741064][ T4474] loop2: detected capacity change from 0 to 2048 [ 67.081325][ T4486] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 67.091855][ T4486] bond0: (slave dummy0): Releasing backup interface [ 67.108868][ T4486] team0: Port device dummy0 added [ 67.134464][ T4487] loop2: detected capacity change from 0 to 512 [ 67.143865][ T4487] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.150602][ T4487] EXT4-fs: Ignoring removed i_version option [ 67.178456][ T4487] EXT4-fs (loop2): 1 orphan inode deleted [ 67.184870][ T4491] loop0: detected capacity change from 0 to 512 [ 67.195765][ T4486] netlink: 'syz.2.342': attribute type 10 has an invalid length. [ 67.199509][ T4491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.234322][ T4491] EXT4-fs (loop0): 1 truncate cleaned up [ 67.248844][ T4486] team0: Port device dummy0 removed [ 67.261607][ T4486] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.312463][ T4496] netlink: 'syz.2.345': attribute type 37 has an invalid length. [ 67.620432][ T4502] loop4: detected capacity change from 0 to 512 [ 67.631131][ T4502] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 67.643438][ T4502] EXT4-fs (loop4): 1 truncate cleaned up [ 68.267921][ T4511] sd 0:0:1:0: device reset [ 69.110042][ T3302] EXT4-fs unmount: 34 callbacks suppressed [ 69.110062][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.132999][ T4515] loop4: detected capacity change from 0 to 128 [ 69.181600][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 69.232793][ T4523] loop2: detected capacity change from 0 to 128 [ 69.269044][ T4526] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.279215][ T4523] loop2: detected capacity change from 0 to 2048 [ 69.297312][ T4523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.325502][ T4526] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.375353][ T4526] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.388678][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.426122][ T4526] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.471350][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.482079][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.494136][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.505945][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.555891][ T4539] loop4: detected capacity change from 0 to 512 [ 69.562788][ T4539] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 69.575234][ T4539] EXT4-fs (loop4): 1 truncate cleaned up [ 69.581396][ T4539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.047926][ T2957] IPVS: starting estimator thread 0... [ 70.163579][ T4551] IPVS: using max 2400 ests per chain, 120000 per kthread [ 70.419683][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.437781][ T4553] loop4: detected capacity change from 0 to 128 [ 70.471485][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz.4.363'. [ 70.590056][ T4562] loop4: detected capacity change from 0 to 128 [ 70.615780][ T4562] loop4: detected capacity change from 0 to 2048 [ 70.636034][ T4562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.648435][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 70.648448][ T29] audit: type=1326 audit(1756535638.088:1721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fdacad550 code=0x7ffc0000 [ 70.706165][ T29] audit: type=1326 audit(1756535638.088:1722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f5fdacad937 code=0x7ffc0000 [ 70.729480][ T29] audit: type=1326 audit(1756535638.088:1723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5fdacad550 code=0x7ffc0000 [ 70.752999][ T29] audit: type=1326 audit(1756535638.088:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdacaebe9 code=0x7ffc0000 [ 70.776599][ T29] audit: type=1326 audit(1756535638.088:1725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdacaebe9 code=0x7ffc0000 [ 70.800108][ T29] audit: type=1326 audit(1756535638.088:1726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f5fdacaebe9 code=0x7ffc0000 [ 70.823417][ T29] audit: type=1326 audit(1756535638.088:1727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdacaebe9 code=0x7ffc0000 [ 70.846789][ T29] audit: type=1326 audit(1756535638.088:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5fdacaebe9 code=0x7ffc0000 [ 70.870367][ T29] audit: type=1326 audit(1756535638.088:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5fdacaebe9 code=0x7ffc0000 [ 70.893811][ T29] audit: type=1326 audit(1756535638.088:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4561 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f5fdacaebe9 code=0x7ffc0000 [ 70.918725][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.919164][ T4568] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.965493][ T4568] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.981512][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.993217][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.005505][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.018107][ T4568] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.030162][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.075815][ T4568] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.123063][ T4582] loop3: detected capacity change from 0 to 128 [ 71.159310][ T4586] netlink: 12 bytes leftover after parsing attributes in process `syz.3.376'. [ 71.183565][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.199226][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.264333][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.272957][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.326893][ T4598] netlink: 'syz.1.381': attribute type 37 has an invalid length. [ 71.556600][ T4605] sd 0:0:1:0: device reset [ 72.188350][ T4615] loop0: detected capacity change from 0 to 128 [ 72.325869][ T4620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 72.416052][ T4629] netlink: 'syz.3.393': attribute type 37 has an invalid length. [ 72.507193][ T4639] loop2: detected capacity change from 0 to 128 [ 72.521968][ T4641] netlink: 24 bytes leftover after parsing attributes in process `syz.0.399'. [ 72.543471][ T4639] loop2: detected capacity change from 0 to 2048 [ 72.557229][ T4639] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.642563][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.537826][ T4674] loop3: detected capacity change from 0 to 128 [ 73.603001][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 73.697323][ T4681] loop2: detected capacity change from 0 to 2048 [ 73.726597][ T4681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.778134][ T4694] loop3: detected capacity change from 0 to 512 [ 73.817607][ T4694] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 73.836587][ T4694] EXT4-fs (loop3): 1 truncate cleaned up [ 73.842982][ T4694] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.857397][ T4692] loop0: detected capacity change from 0 to 512 [ 73.866770][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.876130][ T4692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.885541][ T4692] EXT4-fs: Ignoring removed i_version option [ 73.911931][ T4692] EXT4-fs (loop0): 1 orphan inode deleted [ 73.923432][ T4692] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.951136][ T4692] netlink: 'syz.0.417': attribute type 10 has an invalid length. [ 73.996667][ T4704] loop4: detected capacity change from 0 to 512 [ 74.009940][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.020604][ T4704] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 74.038178][ T4704] EXT4-fs (loop4): 1 truncate cleaned up [ 74.051905][ T4704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.098604][ T4710] loop2: detected capacity change from 0 to 128 [ 74.703415][ T4721] netlink: 'syz.1.425': attribute type 37 has an invalid length. [ 74.731996][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.738703][ T4723] netlink: 24 bytes leftover after parsing attributes in process `syz.2.427'. [ 74.865418][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.876900][ T4731] loop3: detected capacity change from 0 to 2048 [ 74.914825][ T4731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.022507][ T4743] netlink: 'syz.2.435': attribute type 10 has an invalid length. [ 75.078980][ T4737] loop0: detected capacity change from 0 to 512 [ 75.107338][ T4737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.120673][ T4743] bond0: (slave dummy0): Releasing backup interface [ 75.129470][ T4746] loop2: detected capacity change from 0 to 512 [ 75.136211][ T4746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.159631][ T4737] EXT4-fs: Ignoring removed i_version option [ 75.166496][ T4746] EXT4-fs: Ignoring removed i_version option [ 75.200979][ T4743] team0: Port device dummy0 added [ 75.227675][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.254069][ T4746] EXT4-fs (loop2): 1 orphan inode deleted [ 75.261678][ T4737] EXT4-fs (loop0): 1 orphan inode deleted [ 75.270037][ T4746] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.289650][ T4751] sd 0:0:1:0: device reset [ 75.313902][ T4737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.349611][ T4737] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 75.400394][ T4753] netlink: 'syz.3.437': attribute type 37 has an invalid length. [ 75.488101][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.502095][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.689748][ T4761] loop2: detected capacity change from 0 to 512 [ 75.698634][ T4760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.440'. [ 75.708702][ T4761] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.724241][ T4761] EXT4-fs (loop2): 1 truncate cleaned up [ 75.730734][ T4761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.756109][ T4766] loop0: detected capacity change from 0 to 512 [ 75.774975][ T4766] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 75.782944][ T4766] EXT4-fs (loop0): orphan cleanup on readonly fs [ 75.794779][ T4766] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.442: corrupted inode contents [ 75.814064][ T4766] EXT4-fs (loop0): Remounting filesystem read-only [ 75.825837][ T4771] loop1: detected capacity change from 0 to 128 [ 75.841136][ T4766] EXT4-fs (loop0): 1 truncate cleaned up [ 75.847118][ T3507] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.857890][ T3507] __quota_error: 223 callbacks suppressed [ 75.857907][ T3507] Quota error (device loop0): write_blk: dquota write failed [ 75.871145][ T3507] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 75.881239][ T3507] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 75.891878][ T3507] Quota error (device loop0): write_blk: dquota write failed [ 75.899323][ T3507] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 75.909288][ T3507] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 75.919482][ T3507] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 75.928492][ T3507] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 75.939195][ T4766] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.010194][ T4776] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.032619][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.065480][ T4776] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.125494][ T4776] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.175964][ T4776] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.191019][ T4780] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.254680][ T4783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.448'. [ 76.278624][ T4780] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.318844][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.336815][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.385551][ T4780] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.400798][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.427232][ T4785] loop3: detected capacity change from 0 to 512 [ 76.436290][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.446275][ T4787] netlink: 'syz.1.450': attribute type 10 has an invalid length. [ 76.456646][ T4780] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.471109][ T4785] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.510649][ T4787] bond0: (slave dummy0): Releasing backup interface [ 76.519056][ T4788] loop1: detected capacity change from 0 to 512 [ 76.521782][ T4785] EXT4-fs: Ignoring removed i_version option [ 76.539608][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.567190][ T4788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.585538][ T4787] team0: Port device dummy0 added [ 76.609151][ T3507] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.617570][ T4788] EXT4-fs: Ignoring removed i_version option [ 76.625240][ T3443] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.637007][ T4785] EXT4-fs (loop3): 1 orphan inode deleted [ 76.640837][ T3443] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.643309][ T4791] netlink: 'syz.2.451': attribute type 37 has an invalid length. [ 76.651622][ T3443] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.676816][ T4785] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.694071][ T4788] EXT4-fs (loop1): 1 orphan inode deleted [ 76.702279][ T4788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.718875][ T4785] netlink: 'syz.3.449': attribute type 10 has an invalid length. [ 76.744370][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.777806][ T4785] team0: Port device dummy0 removed [ 76.828017][ T4785] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 76.845164][ T4797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.453'. [ 76.878884][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.949449][ T4811] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.026160][ T29] audit: type=1326 audit(1756535644.458:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 77.049690][ T29] audit: type=1326 audit(1756535644.458:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 77.073373][ T29] audit: type=1326 audit(1756535644.458:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 77.080877][ T4815] netlink: 'syz.3.459': attribute type 37 has an invalid length. [ 77.096636][ T29] audit: type=1326 audit(1756535644.458:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4802 comm="syz.0.455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effc7a8ebe9 code=0x7ffc0000 [ 77.129158][ T4811] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.175554][ T4811] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.235645][ T4811] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.456740][ T4818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.460'. [ 77.490316][ T4820] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.535727][ T4820] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.585559][ T4820] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.654824][ T4820] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.715747][ T3507] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.731577][ T3507] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.745572][ T4824] netlink: 'syz.0.463': attribute type 10 has an invalid length. [ 77.745843][ T3507] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.766387][ T4824] bond0: (slave dummy0): Releasing backup interface [ 77.801963][ T4827] loop0: detected capacity change from 0 to 512 [ 77.812621][ T4824] team0: Port device dummy0 added [ 77.826110][ T3507] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.833847][ T4827] EXT4-fs: Ignoring removed nomblk_io_submit option [ 77.842625][ T4827] EXT4-fs: Ignoring removed i_version option [ 77.852238][ T4827] EXT4-fs (loop0): 1 orphan inode deleted [ 77.860647][ T4827] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.881539][ T4832] loop2: detected capacity change from 0 to 128 [ 77.899819][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.916535][ T4832] loop2: detected capacity change from 0 to 2048 [ 77.936251][ T4834] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 77.954791][ T4832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.969085][ T4837] netlink: 'syz.0.467': attribute type 21 has an invalid length. [ 77.978757][ T4837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 78.056549][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.130627][ T4843] netlink: 'syz.4.471': attribute type 37 has an invalid length. [ 78.150287][ T4846] loop2: detected capacity change from 0 to 512 [ 78.161237][ T4846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.177483][ T4846] EXT4-fs (loop2): 1 truncate cleaned up [ 78.183879][ T4846] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.240474][ T4851] loop0: detected capacity change from 0 to 512 [ 78.252048][ T4851] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 78.301137][ T4851] EXT4-fs (loop0): 1 truncate cleaned up [ 78.333829][ T4851] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.818893][ T4855] ================================================================== [ 78.827074][ T4855] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 78.835361][ T4855] [ 78.837745][ T4855] write to 0xffff8881004b028c of 4 bytes by task 4853 on cpu 1: [ 78.845393][ T4855] xas_set_mark+0x12b/0x140 [ 78.849935][ T4855] __folio_start_writeback+0x1dd/0x440 [ 78.855433][ T4855] ext4_bio_write_folio+0x5ad/0x9f0 [ 78.860664][ T4855] mpage_process_page_bufs+0x4a1/0x620 [ 78.866152][ T4855] mpage_prepare_extent_to_map+0x786/0xc00 [ 78.871975][ T4855] ext4_do_writepages+0xa05/0x2750 [ 78.877131][ T4855] ext4_writepages+0x176/0x300 [ 78.881925][ T4855] do_writepages+0x1c3/0x310 [ 78.886556][ T4855] file_write_and_wait_range+0x156/0x2c0 [ 78.892233][ T4855] generic_buffers_fsync_noflush+0x45/0x120 [ 78.898186][ T4855] ext4_sync_file+0x1ab/0x690 [ 78.902909][ T4855] vfs_fsync_range+0x10d/0x130 [ 78.907710][ T4855] ext4_buffered_write_iter+0x34f/0x3c0 [ 78.913287][ T4855] ext4_file_write_iter+0xdbf/0xf00 [ 78.918528][ T4855] iter_file_splice_write+0x663/0xa60 [ 78.923932][ T4855] direct_splice_actor+0x153/0x2a0 [ 78.929081][ T4855] splice_direct_to_actor+0x30f/0x680 [ 78.934475][ T4855] do_splice_direct+0xda/0x150 [ 78.939336][ T4855] do_sendfile+0x380/0x650 [ 78.943787][ T4855] __x64_sys_sendfile64+0x105/0x150 [ 78.949007][ T4855] x64_sys_call+0x2bb0/0x2ff0 [ 78.953708][ T4855] do_syscall_64+0xd2/0x200 [ 78.958233][ T4855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.964225][ T4855] [ 78.966561][ T4855] read to 0xffff8881004b028c of 4 bytes by task 4855 on cpu 0: [ 78.974110][ T4855] filemap_write_and_wait_range+0xfc/0x340 [ 78.979936][ T4855] filemap_invalidate_pages+0xa4/0x1a0 [ 78.985489][ T4855] kiocb_invalidate_pages+0x6e/0x80 [ 78.990691][ T4855] __iomap_dio_rw+0x5d4/0x1250 [ 78.995462][ T4855] iomap_dio_rw+0x40/0x90 [ 78.999797][ T4855] ext4_file_write_iter+0xad9/0xf00 [ 79.005109][ T4855] iter_file_splice_write+0x663/0xa60 [ 79.010493][ T4855] direct_splice_actor+0x153/0x2a0 [ 79.015697][ T4855] splice_direct_to_actor+0x30f/0x680 [ 79.021076][ T4855] do_splice_direct+0xda/0x150 [ 79.025852][ T4855] do_sendfile+0x380/0x650 [ 79.030285][ T4855] __x64_sys_sendfile64+0x105/0x150 [ 79.035497][ T4855] x64_sys_call+0x2bb0/0x2ff0 [ 79.040184][ T4855] do_syscall_64+0xd2/0x200 [ 79.044705][ T4855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.050607][ T4855] [ 79.052931][ T4855] value changed: 0x0a000021 -> 0x04000021 [ 79.058651][ T4855] [ 79.060987][ T4855] Reported by Kernel Concurrency Sanitizer on: [ 79.067152][ T4855] CPU: 0 UID: 0 PID: 4855 Comm: syz.2.470 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.076800][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.086871][ T4855] ================================================================== [ 79.300959][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.312503][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.559004][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.570297][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.581291][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.593056][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0