last executing test programs: 2.328905093s ago: executing program 0 (id=609): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.304842235s ago: executing program 0 (id=610): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101900, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r2}, 0x9) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0000) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000002540)=0x1) 2.23996969s ago: executing program 0 (id=612): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000215c0000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b8010000180090001006c617374000000001000018009000100"], 0xe0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.169876036s ago: executing program 0 (id=615): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) syz_io_uring_setup(0x4a3d, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, 0x0, 0x0) epoll_create(0xaf2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 1.592775531s ago: executing program 1 (id=636): ioperm(0x0, 0x44, 0x7) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(r1, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r0, r3, 0xfffffffffffffc01, 0x0) tee(r0, r3, 0x60000000000, 0x0) 1.36305853s ago: executing program 0 (id=640): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000400)={0xa}) epoll_pwait(r0, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) 723.553751ms ago: executing program 1 (id=652): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) syz_io_uring_setup(0x3c0c, &(0x7f0000000400)={0x0, 0xc890, 0x4000}, 0x0, 0x0) 549.782295ms ago: executing program 2 (id=663): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r2}, &(0x7f0000000380), &(0x7f00000003c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 541.994746ms ago: executing program 1 (id=673): r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 521.273648ms ago: executing program 0 (id=665): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000640)="5c5eafd3ae55a73702d6befaee97f47f4be65587e1fca708cee084691e4587d887a5eaab43ac5edc4886496910cd7a153cd84b93208c7b1a625b3ea990092389b19dab4f61e30ee60a4d7e51ffc9a5accbe20844356dd0ce192542d5e58d80657b3b5fb7a3d39337dfe5af64aaf38a0a2a57d54450e144eb17d7c96fccc09969631792fa5b33a39166c3df873d88513ae92b949075fa3162cb340980192f8f8b280fad677470571cfb012f48cf62cee3ede300e7c32309a4bc895bca066caa478f206421e348ef789acb21995c5abad1b4b3591bb1bd3f7036eec7d4", 0xdc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000e80)="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", 0x1b4}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 498.436549ms ago: executing program 2 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x401}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000340)={0x430, 0xe, 0x3, 0x0, 0x0, [{{r0}, 0x5b}, {{r3}, 0x4}, {{r1}, 0x101}]}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1) 481.322961ms ago: executing program 1 (id=668): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 479.065751ms ago: executing program 3 (id=669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f000000abc0)=@delchain={0x2c, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 444.805534ms ago: executing program 4 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000280)='kfree\x00', r2, 0x0, 0x2000000000}, 0x18) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) 428.324875ms ago: executing program 2 (id=672): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xf3a, 0x0) write$binfmt_script(r2, 0x0, 0xd9) write(0xffffffffffffffff, 0x0, 0x0) 405.441787ms ago: executing program 2 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000010000000be2e510f0000000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 383.165489ms ago: executing program 2 (id=675): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000380)=@mangle={'mangle\x00', 0x1f, 0x6, 0x440, 0xf0, 0x0, 0xf0, 0xf0, 0x278, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x1, 0x1, @rand_addr=0x64010101, 0x4e20}}}, {{@ip={@private=0xa010100, @remote, 0xffffffff, 0xffffff00, 'veth0_to_team\x00', 'veth1_to_batadv\x00', {}, {}, 0x6c, 0x2, 0x60}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}, {0x7}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7, 0xffff, @local, 0x4e20}}}, {{@ip={@remote, @broadcast, 0xff000000, 0xff, 'ip6tnl0\x00', 'veth0_to_bond\x00', {0xff}, {0xff}, 0x2f, 0x2, 0x1}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0xffffff00, 0xffffffff, 'veth0_virt_wifi\x00', 'vlan0\x00', {0xff}, {0xff}, 0x1d, 0x2, 0x62}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2, 0x9}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'xfrm0\x00', 'veth0_virt_wifi\x00', {}, {}, 0x21, 0x2, 0x13}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r1, @ANYBLOB="070000000000000000000500f500180001801400020073797a5f74756e000000000000000000cc00038004000380c40003801800"], 0xf8}}, 0x0) 382.992559ms ago: executing program 3 (id=676): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4cf68d79c8eac253, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r0}, &(0x7f0000001c00), &(0x7f0000001c40)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffc01}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r0}, &(0x7f00000001c0), &(0x7f0000000680)}, 0x20) 350.486822ms ago: executing program 4 (id=677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x15c, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in=@multicast2, {0x0, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x0, 0x1}, {}, 0x70bd2c, 0x3500, 0xa, 0x0, 0x0, 0x50}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}, @offload={0xc, 0x1c, {r3, 0x3}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 349.724292ms ago: executing program 3 (id=687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1600000000000000040000000500"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0), 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f0000001fc0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16=r8, @ANYRES64=r6, @ANYRES16=r5, @ANYRES16=r8, @ANYRESDEC=r7, @ANYRES16=r4, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32=r3], 0x5, 0x0, &(0x7f0000000000)) 311.327424ms ago: executing program 2 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 286.076547ms ago: executing program 4 (id=679): socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 234.845201ms ago: executing program 4 (id=680): r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) prlimit64(0x0, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0x0) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 229.941601ms ago: executing program 1 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x300}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800) 151.582887ms ago: executing program 4 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe90}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="3eed50d0125719a810f88e3f47186fe4dae74182dfd109a2587c4797410c9b8e39bd3d9aa144d5908647c30c8db69b5c17084c9b1bfbb8680737c4f88abcdbc7d294d72ab1b344270915df9ddf5635644c351c22b29d948ac4106bce7107570beed63077cfbc98ef71699eae65d37724d995b553e7a3ade619b522313ab382caf879feb48942878e605ee3ee2872794e3abe22a3f025068b628a5d92468092a5cc649bbbd978b5772e537939432a502122235ced312dafd108c9ffeb0b38cc16da9418ca01d485a6afb5827da4df6e1121ec307de14bb32b6a977608e4576a998182dd93d592ff43e55bfdbbce23ecd501e43b3e93ef8d9d01711dff54c301e299d3801a3cffe6c9883fbd0e47124dc02569f62d48b878fcb58ce99fcffcd2a5166eff3ad93cf1d137274993d86a3b3730d63ded759f6ca88fa449e5575b15321e5a58a1f888eed7466db4976ce35f6d2efb5ad05d99a66482dc607cb5acb24d326803bd337519cc98103f59c63b5962cd72e4497d1b00817d6e09de70270a09b493c2226617b1c9ef9d506be00d6e07f14633a966f04ecca90fb8d2b963ad6f3817935bd6534fa3da1c5dc468789cbf1192f3c0bff3777f1edd2ada5d35f88f12f29e952c44445ce623509d66811c80a9e0f13ad85aba37d86ff0da4dda601d9e8acb264233bc939fb056316612cff687d5c44157be05bcc88b333ff2a40041d98f1acfe6e2231a84e09bd7a54a0442cf87ce3ee8fd8da39da1862862ae40fc3cb3055c8b70e62f243850707341f51426bb3e71c7a4fffefab060db786000618b05eb087a424a2f30f6a232ff44b605f70ceec0a8f70e37907f6e0bbba21e9d5b7ecb6d287742b75c101ba79525918c3473eae38f3c177249dfa8816661c9921f0b0c858d53ab87c8407b97950c842111002edd1d1e80b801b495da28bcd5409bc971e55dab1857e188ac9728efc8f9a4543945f86ade13b445eacecbbf848a96410ac37c57e3e9e8bc8b8fadd559d225c7468639da2b5d1208558b51e94c14faa7947a7c60e81a96bb5d194cc7289adbc02ebb4b49be1f1efc429db2f9b79b5a22919dba0c35341042c5776942c52365367c4bfc95b42be383cca7107161ded7e851d0126da33d581f1e2b08d0c061e86d31e7a83f9b51c79b4034c7deda7697034e1404c6e8e459f76c2efe64350146c7437ef808e04ca14df5f6f500264fd977272bbf8fc096774e8eb61d0963430751ac1425a073f84346b0eba368cba7fa34adc420800d4f99927280eba199f9695cf88124fafc3a2b1226d2f2ab3ea27c69a127650cf5c725b54c02bd8729033cf699ce7f030f9a3442056244da3cfb61a8126dba11377624f39eb009242152fd7b8b88de7dd86057f29bfcb7b7df0e65e7e9ac9eeaa41afa62743698bff03d5b2d51fb6bca2d92294e8e177cfa3661b26f1c040e9bed983b7bc0aa154eb9c92e4ee25091318c53113a1c23ac62d2d71504cba99041f29a4f332133292cf20abec9222a2acca57cac48fa6c0668ee5eecb494741a64d33b011dcca74696d4614c5b45a5d20983b1708d365ed3ffa60f9161972a611c22642c3c259b41f943f6d7a8b60f284d325e38fe76f0645e069ff70cae38850ccf973193b6232c987df26239a574691f7f07fffa6deae1eb0324fe546573c36f2a2c31cd442517a9b036ae6a2a491e7343864693c107a5dc2585820863c146c1ba6caa4fea9b87d567716f4c8ca1a9d2848055cd750512d3b7415d090019dc8a04a1a1d28931093cd8f00e94c407ca1fa2a5ce903d9df26e008c07cd13afa783220e1bd5e6b60645f3dbb6ecb4156fedafa2dd25498c6a99d94f0b38125ea7741b75109dcac9f80635f79f5c8a0483bb9f05a3a5bf721c7541edb252449f8b13e63c370a6146332f03ca1f1b6fe0bed984f13744bb7fa0fe322e83ddf9ffb2083e94f33604a0a199220c450dad94bf154805e7f9e4350ca2d81adf2978c87dcc8a8a7d56297ec124bfef0d28f35777205e973272c87e01070f14f5b14daa3b5104d9ff6b296c4f16ed49eb42d35e7ba3bccb7a26c33a263df88aadd596e9d9de0abbd4d449df11081f2cd62e1d8962b9b9feb25a3b8e03537d61a61c11ac22b7211d12c84e60a6abcc219e558b2513d8c530b3c7a57cdc47de545aafbb2a13c0e6c75b1b92fa241c713c83a09c92b2b61d565120372a9143415583c9596f27a663d4967cd653b08cebd6cb96c1f0dc80d57267ac9a8281d7149bde880828ee27d69a6818db58320db29d1b044eaf6ab8a5108bc522de406990b5393b1f7e7bab71bf6cf8eed1cd59c7607d662e8b313f5c4fce0f59b1027371381011b63dd5b2b09739082c0d62ffad96e30153a395234937d377c32fe7af82aca3a19d0ebc4a5c5fb5ff190f14d5695c703b571fb4bf03756635cafc6cf6267eab836c347a9d07e8089fc105346934cf3364e5be370b3c42b94bc5ae3d17a817398566a2953251eb91697d67278145df9a4b917bcca1bf211780b22f4caacfcb7604c84f943d05f6fdf8edbd258d7d8dbf84f9d99e57472c5b1c2337d749a1f345e662e2536d23c7a63bbbbf00f8b5b0a2106a0342ab27b9a10b82e82668cd49e0cbb09d7be0217645f1dda3be59c8232fa290d34791cda52aa5b5cec6339ab96a2eb3f5328cc7c0e6717c2824344547a2ed518f6b2b4e4fe5b684596aa6a9d3988fc5d5ff4cb46cec99d951b8386b10949a163af974b7543df97b4882a4ed60e927a1deb67c5f814235bef65fea79a2c712815be7403c93a3707fb90d4604ec3a6a3b0928f253f6ab6bd56c958e026c8c58172c4ac2a3efe2ecd5cea70c8313f9ac2d638bc296ba99e2ca86d2fd06b5402cdcddc3f3c9845d5ae77f6f36963b91e8f6cdccd17abe8d40ed02463af4bb0e496344f350097f1cc13313fa1e172b63556ed2b8a8121c01a5fb343ff7767821626fc49b0d6bd522e1c9bf137d5a5bccb4bc8dbb64c83a82ef6c2894f3896c9f6bf0c3764011d53eeb6db9ea9dae22d3ebcca4942d5828c0bca0d9ea37701d5a06c066ac4fe318e11e9c0d6c658ac810fb5d7836cfffe4ccbb0934e5567d74695980a156d4bf1c18861c5a29ccd349999dc20562d00e1f6c1851ae563541086438d60b975c8ceb466414ff60efa0b2dee790fd0659ffa98b92414c13d5a6825368f56c4984412205041cd8e006c7127d4395ecdffb5addf80ef938ce54a367154c4fc286d5f969325c12b13655a9a956dd3b98281f537e837669fc55d8930676e807aa8cd046e0f4583d59f86cb99f3f7a7ddde1fb39111fdec7677d2fee4b8f4814a5def5ebcc67c653384ce80eaffd880405f7edf8fd3ea049f040595df4a75e2f892e7a85e0ba351fb8d263bfff7168bb85017b360fcd2ba89346682a6ea7ccc46afbdb5ab444e3f477238b2ab503bde914d3cf1789539cde9c0621152cd97bff9f235d88a1ef4ea4309db3a05d401af7fb82784b050ef529dab4f1f003eb29710a962f7538c521e617e2f0efac36182d09985e1d725cc38c3833a53742a02f76fb2854a9e45f0febacf3bda83f11183ef5b9fef02ebcdf56d4104b175bad937d8f61964f97d673577cdcbbb48d8eb62b063ee6563b9ff053719baff871bcd83822d865b2f7ef023076425ac5cd71b1f2309de0c6f14cc9c4d3e8fad945f756a7c8a084ea1bfdf5ac6e740043e7f7bdaca06774b084ae314c2636529d4fdcd965c7f8c07156572620b827d694efdc9d2bfc5aa9391220a83765f2c71fcd48d4acaed60afb53d1013fa3b15e948ec4159f7d130ef85b594018346e99034c18738285223ea53a6b1d5cf11a607de2e19608ba03ec970a915b773824261f3fc931dd6d3b934d89f07baf14776314c3eeb8cd0537ef5736f565fbd14e520d4ab2f77ed9597b76ff91f8d1f99ebd6e473efda7accb273975a06944d1037032129992b994ca791a09b4d83980a1e494b0f97098df5f6fb6bbb02722adb11dc319c565c2c363cbd19d9fb3efb4613b62d6584cd53f7bd80e3e89304f444ce9dd1835661e3bb4de02ccf568a2a5daaf0d56898d4286c3fb62e22af62d7ac318685834467f337561dde2e0c1e2827cdffcf42c17728ee64b3ff4ccc0227590badd0bd7e448b8cca0892d6a5e0130d2ac665f47c6b28daa101c1b319869bdd39fa924d6d9ba7d72feda5f21ac78641c7d4801d41c7879721b3be4dab40d9c4a78552440101f373489cc5240b0144a9ce32691a784b6dfe971a21bb5980ff67da2d1bb90b223c9e192a39c1aeadd1f5c790811079c0b51a97105c99b6f95d71bb3ea47c33d9dcb0a53c929c44499e184a3cd722c908d3b0d157e28ffdeb2ed7192e780d96a7a2f0fd5a87bdc973e049da0caf931f26f5a21813e2e602ceb2259997e0205ce48fd9424bd6d4d75dd4301f429ee30745cd839a40dbeab4c3db2f0f10bbaea071ca41d1392385681730a3678a5f60f604dbe19cb9d7dd234337e327451b8cc65394af399432ef7fc3765d055874ebdca14e5999292d6f72f31e92bacf25db5ef8f5212952c1910de06ddbe1687a0e1837922f2228289916ed3aeb7b9cc24da3ae47139e371930afa6d3573df6732c26c0c7ae06d9cedfa77160711bcb06e6553338deae4c5731cf53cc154113096d02f3036d7d9edfcdc331e4bb860c5208489212e904eab70e7f860b0379895cbdecbf7a0b7a25e5b853c7dbe08a4e296a30afec8cf5a9f6ea4aef32a508655d539a770b21e660c9ee1d7688c56abeb7cf1afccc8d59780cf26312589e0c8e1bc00ad7b1325cd9a5dd69246e0b33407c381ea09265154aec297e4ccdf9785a1042a83e77c13d4ce4360782f2428f9916b5cd123b089eb683d30c1e895b9944aa905a1a5b52301d8cc5e4741834ead6ebdb5dc05c9c49c5e883e99d40b9838037beaf876534d747856103e59caf6266fbbe760b6ef83d004634b74f14f8eb4aef93c4cc9cbbd78d83d532c70feef51ea3f170b25d81a6a9b074bfca7e9b3771bf83517e0dd9d0600f70b86b20f61fe36076f8bada334b2390fa954973bc901619a3cfd039349cb328625f495ab288dbdd6dbfd022c2a83f59e0b998619a12e35891b5ae9e83a71765507b4a571cd2241e5885c705244c1022688bef7c5065fbcf219fc01753adb611b3fbc09403dcb10a4f99d788667eff75fa27074ca8481a633530e26163ccf7dada049d23e717e067b6fa5b2f652bc50abda9e7ccdc5f2f3c35ecc2c4431c819c9691be4422e379750774e9f39dae06f26423c8a4278789c9f3111b43f6dd25b0ad47c4cc5fda3f3ed82079c9366e0adced883488f429c1d7e1b351fd0bb204dd7977ef224c4df6d7a5f7697bc6500a7d03a8a914154779fa7092bf1be6bad4092367ce5d295a5d5d0e7c469f372ca2011d612637025e89f178ae9ada0c5b73bcb7d7c034ff595263cd4216e3c76ba5f3d81932a088a90bf8043e877e299c670ef1622a098d5519d9adc4ee7d4cd00e5934a4375fa83fdb81214b892482b31bdde59a70aaf25cb7f417c3a2a91c4e54b48149f6c41d9d396ee6ff13e3028c64a7c9b1f2e7c6e67184a3d52d6f570db3d225c947423c4c6533f22df57d15c5e5a3183422bd378b06fe4732a9401dcb19840fb8fa5c50a0ff497fef362c507753e46b8881d3e767f3b1d893a3805941c94f2efa05ce34b9ea81d716984af6834230d4707a87089d40779503ee6a9bb245d7d997f14acb80e89731c042bbbbe3dcd05177b0ee0eec23455830ef5b65aca357f2b0b887e0b9821c0", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x20044001) 121.56743ms ago: executing program 3 (id=683): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a000000030000000800000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001f) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000001f) close_range(r3, 0xffffffffffffffff, 0x0) 68.596544ms ago: executing program 4 (id=684): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03feffe0ff64000200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) 52.309755ms ago: executing program 3 (id=685): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r0) 2.60694ms ago: executing program 1 (id=686): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0xf}}}, 0x24}}, 0x90) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) 0s ago: executing program 3 (id=697): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x20008000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 31.765818][ T29] audit: type=1400 audit(1755326535.842:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.766611][ T3293] cgroup: Unknown subsys name 'net' [ 31.788593][ T29] audit: type=1400 audit(1755326535.842:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.815958][ T29] audit: type=1400 audit(1755326535.882:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.969751][ T3293] cgroup: Unknown subsys name 'cpuset' [ 31.975941][ T3293] cgroup: Unknown subsys name 'rlimit' [ 32.106135][ T29] audit: type=1400 audit(1755326536.182:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.129601][ T29] audit: type=1400 audit(1755326536.182:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.150077][ T29] audit: type=1400 audit(1755326536.182:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.165372][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.170641][ T29] audit: type=1400 audit(1755326536.182:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 32.197678][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.199468][ T29] audit: type=1400 audit(1755326536.192:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.232916][ T29] audit: type=1400 audit(1755326536.192:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.256323][ T29] audit: type=1400 audit(1755326536.262:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.297892][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 33.318165][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 33.384802][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.391951][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.399688][ T3303] bridge_slave_0: entered allmulticast mode [ 33.406039][ T3303] bridge_slave_0: entered promiscuous mode [ 33.421562][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 33.438427][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.445672][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.452874][ T3303] bridge_slave_1: entered allmulticast mode [ 33.459324][ T3303] bridge_slave_1: entered promiscuous mode [ 33.472014][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.479205][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.486295][ T3305] bridge_slave_0: entered allmulticast mode [ 33.492810][ T3305] bridge_slave_0: entered promiscuous mode [ 33.513797][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.521007][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.528101][ T3305] bridge_slave_1: entered allmulticast mode [ 33.534709][ T3305] bridge_slave_1: entered promiscuous mode [ 33.573180][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.580338][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.587471][ T3310] bridge_slave_0: entered allmulticast mode [ 33.594073][ T3310] bridge_slave_0: entered promiscuous mode [ 33.601593][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.610739][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.617785][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.625034][ T3310] bridge_slave_1: entered allmulticast mode [ 33.631534][ T3310] bridge_slave_1: entered promiscuous mode [ 33.642196][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.654361][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.664398][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.681709][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 33.720770][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.735680][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.745446][ T3305] team0: Port device team_slave_0 added [ 33.752534][ T3303] team0: Port device team_slave_0 added [ 33.769429][ T3305] team0: Port device team_slave_1 added [ 33.775636][ T3303] team0: Port device team_slave_1 added [ 33.798014][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 33.813950][ T3310] team0: Port device team_slave_0 added [ 33.820499][ T3310] team0: Port device team_slave_1 added [ 33.832939][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.839937][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.865854][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.877267][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.884362][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.910458][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.930718][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.937693][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.963629][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.976994][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.984007][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.010561][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.027624][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.034766][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.042093][ T3311] bridge_slave_0: entered allmulticast mode [ 34.048420][ T3311] bridge_slave_0: entered promiscuous mode [ 34.068957][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.076091][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.083214][ T3311] bridge_slave_1: entered allmulticast mode [ 34.089647][ T3311] bridge_slave_1: entered promiscuous mode [ 34.095786][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.102772][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.128725][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.139935][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.146954][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.172879][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.199937][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.227318][ T3303] hsr_slave_0: entered promiscuous mode [ 34.233195][ T3303] hsr_slave_1: entered promiscuous mode [ 34.240115][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.263319][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.270465][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.277666][ T3313] bridge_slave_0: entered allmulticast mode [ 34.284156][ T3313] bridge_slave_0: entered promiscuous mode [ 34.297000][ T3305] hsr_slave_0: entered promiscuous mode [ 34.303064][ T3305] hsr_slave_1: entered promiscuous mode [ 34.308857][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.314620][ T3305] Cannot create hsr debugfs directory [ 34.329199][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.336286][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.343414][ T3313] bridge_slave_1: entered allmulticast mode [ 34.349844][ T3313] bridge_slave_1: entered promiscuous mode [ 34.367622][ T3311] team0: Port device team_slave_0 added [ 34.380473][ T3310] hsr_slave_0: entered promiscuous mode [ 34.386680][ T3310] hsr_slave_1: entered promiscuous mode [ 34.392668][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 34.398391][ T3310] Cannot create hsr debugfs directory [ 34.409877][ T3311] team0: Port device team_slave_1 added [ 34.432300][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.446875][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.488114][ T3313] team0: Port device team_slave_0 added [ 34.501259][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.508260][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.534217][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.547668][ T3313] team0: Port device team_slave_1 added [ 34.562274][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.569245][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.595147][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.634022][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.641023][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.667058][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.687707][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.694712][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.720667][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.764895][ T3311] hsr_slave_0: entered promiscuous mode [ 34.770830][ T3311] hsr_slave_1: entered promiscuous mode [ 34.776627][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 34.782385][ T3311] Cannot create hsr debugfs directory [ 34.822735][ T3313] hsr_slave_0: entered promiscuous mode [ 34.828855][ T3313] hsr_slave_1: entered promiscuous mode [ 34.834836][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 34.840639][ T3313] Cannot create hsr debugfs directory [ 34.868773][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.886819][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.904272][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.922205][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.964183][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.980444][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.991124][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.001495][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.022545][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.034065][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.045040][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.053955][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.095231][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.104383][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.116354][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.125567][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.163762][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.173457][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.182690][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.192660][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.212721][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.222517][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.249727][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.268305][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.283080][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.298641][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.305765][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.315073][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.322130][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.331278][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.346892][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.354049][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.362914][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.370033][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.388401][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.396661][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.403814][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.413259][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.420412][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.436897][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.468543][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.475631][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.484497][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.491549][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.531134][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.564720][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.593015][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.605584][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.635904][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.655181][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.662432][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.677228][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.684358][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.728565][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.737658][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.747385][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.830487][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.854531][ T3303] veth0_vlan: entered promiscuous mode [ 35.889826][ T3303] veth1_vlan: entered promiscuous mode [ 35.914811][ T3303] veth0_macvtap: entered promiscuous mode [ 35.922708][ T3303] veth1_macvtap: entered promiscuous mode [ 35.943824][ T3311] veth0_vlan: entered promiscuous mode [ 35.952535][ T3310] veth0_vlan: entered promiscuous mode [ 35.965175][ T3311] veth1_vlan: entered promiscuous mode [ 35.973319][ T3310] veth1_vlan: entered promiscuous mode [ 35.989035][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.006766][ T3310] veth0_macvtap: entered promiscuous mode [ 36.015432][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.033954][ T3310] veth1_macvtap: entered promiscuous mode [ 36.044206][ T3313] veth0_vlan: entered promiscuous mode [ 36.058302][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.069100][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.078161][ T3313] veth1_vlan: entered promiscuous mode [ 36.084818][ T3311] veth0_macvtap: entered promiscuous mode [ 36.093188][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.102037][ T2110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.115133][ T3311] veth1_macvtap: entered promiscuous mode [ 36.123878][ T3305] veth0_vlan: entered promiscuous mode [ 36.136777][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.145079][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.152739][ T3305] veth1_vlan: entered promiscuous mode [ 36.165367][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.174572][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.187814][ T2287] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.201628][ T3313] veth0_macvtap: entered promiscuous mode [ 36.211196][ T2287] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.220585][ T3313] veth1_macvtap: entered promiscuous mode [ 36.228948][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.252336][ T2287] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.283611][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.291108][ T1456] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.306766][ T3305] veth0_macvtap: entered promiscuous mode [ 36.327094][ T1456] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.337496][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.345236][ T3305] veth1_macvtap: entered promiscuous mode [ 36.382888][ T1456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.434905][ T1456] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.456763][ T1456] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.476753][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.504285][ T3476] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 36.520762][ T1456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.536598][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.561817][ T1456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.585939][ T3484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 36.615771][ T1456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.645897][ T1456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.655287][ T1456] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.693940][ T1456] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.709532][ T1456] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.730056][ T1456] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.823889][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 36.823905][ T29] audit: type=1400 audit(1755326540.902:116): avc: denied { create } for pid=3478 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.859757][ T29] audit: type=1400 audit(1755326540.902:117): avc: denied { connect } for pid=3478 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.879088][ T29] audit: type=1400 audit(1755326540.902:118): avc: denied { write } for pid=3478 comm="syz.3.4" laddr=fe80::a8aa:aaff:feaa:aaaa lport=1 faddr=ff04::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 36.906029][ T29] audit: type=1326 audit(1755326540.992:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3503 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 36.962508][ T29] audit: type=1326 audit(1755326541.042:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3503 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 36.986761][ T29] audit: type=1400 audit(1755326541.072:121): avc: denied { create } for pid=3507 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.009027][ T29] audit: type=1326 audit(1755326541.092:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3503 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 37.032357][ T29] audit: type=1326 audit(1755326541.092:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3503 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 37.072056][ T29] audit: type=1400 audit(1755326541.152:124): avc: denied { allowed } for pid=3507 comm="syz.4.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.091194][ T29] audit: type=1400 audit(1755326541.152:125): avc: denied { create } for pid=3507 comm="syz.4.12" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.169673][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14'. [ 37.192104][ T3511] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.192457][ T2993] udevd[2993]: worker [3296] terminated by signal 33 (Unknown signal 33) [ 37.258027][ T3519] loop2: detected capacity change from 0 to 1024 [ 37.273817][ T2993] udevd[2993]: worker [3296] failed while handling '/devices/virtual/block/loop1' [ 37.310128][ T3519] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 37.334324][ T3527] loop4: detected capacity change from 0 to 1024 [ 37.336729][ T3519] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 37.351757][ T3519] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 37.370263][ T3527] ======================================================= [ 37.370263][ T3527] WARNING: The mand mount option has been deprecated and [ 37.370263][ T3527] and is ignored by this kernel. Remove the mand [ 37.370263][ T3527] option from the mount to silence this warning. [ 37.370263][ T3527] ======================================================= [ 37.408247][ T3519] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 37.424302][ T3519] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #17: comm syz.2.17: iget: bad i_size value: 4398046511204 [ 37.439373][ T3524] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 37.455532][ T3527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 37.467724][ T3524] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 37.486796][ T3536] netlink: 'syz.0.22': attribute type 21 has an invalid length. [ 37.519320][ T3519] EXT4-fs (loop2): no journal found [ 37.536374][ T3536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22'. [ 37.545329][ T3536] netlink: 'syz.0.22': attribute type 1 has an invalid length. [ 37.592251][ T3527] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.664862][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.997005][ T3573] loop0: detected capacity change from 0 to 512 [ 38.039276][ T3573] EXT4-fs (loop0): orphan cleanup on readonly fs [ 38.072291][ T3573] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.38: bad orphan inode 13 [ 38.084228][ T3573] ext4_test_bit(bit=12, block=18) = 1 [ 38.089791][ T3573] is_bad_inode(inode)=0 [ 38.093953][ T3573] NEXT_ORPHAN(inode)=2130706432 [ 38.098942][ T3573] max_ino=32 [ 38.102278][ T3573] i_nlink=1 [ 38.107322][ T3573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.131298][ T3573] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 38.165652][ T3590] Driver unsupported XDP return value 0 on prog (id 39) dev N/A, expect packet loss! [ 38.182092][ T3573] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 38.240386][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.345354][ T3606] netlink: 'syz.4.50': attribute type 4 has an invalid length. [ 38.357817][ T3608] netlink: 'syz.2.51': attribute type 10 has an invalid length. [ 38.373871][ T3608] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.383885][ T3599] loop3: detected capacity change from 0 to 8192 [ 38.402290][ T3599] msdos: Unknown parameter 'A' [ 38.419911][ T3612] syz.4.53 (3612) used greatest stack depth: 9120 bytes left [ 38.491794][ T3618] loop2: detected capacity change from 0 to 512 [ 38.519535][ T3618] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.537569][ T3622] capability: warning: `syz.3.58' uses deprecated v2 capabilities in a way that may be insecure [ 38.567440][ T3618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.601268][ T3618] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.655411][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.674291][ T3637] netlink: 44 bytes leftover after parsing attributes in process `syz.3.60'. [ 38.686890][ T3636] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 38.718622][ T3637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'. [ 38.727518][ T3637] netlink: 32 bytes leftover after parsing attributes in process `syz.3.60'. [ 38.755927][ T3645] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3645 comm=syz.4.68 [ 38.794228][ T3661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.64'. [ 39.022486][ T3720] loop3: detected capacity change from 0 to 128 [ 39.054172][ T3720] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.106915][ T3720] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 39.130992][ T3728] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 39.167133][ T3728] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 39.238973][ T3736] udevd[3736]: failed to send result of seq 7649 to main daemon: Connection refused [ 39.302585][ T3740] mmap: syz.4.83 (3740) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.321884][ T3738] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.329082][ T3738] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.363406][ T3741] netlink: 'syz.0.82': attribute type 10 has an invalid length. [ 39.397428][ T3743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 39.443656][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.483199][ T3738] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.622979][ T3741] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 39.688783][ T2110] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.711587][ T2110] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.724011][ T2110] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.739331][ T2110] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.763295][ T3765] loop1: detected capacity change from 0 to 512 [ 39.782666][ T3765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.803300][ T3765] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.847104][ T3765] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 39.858636][ T3775] netlink: 'syz.4.90': attribute type 1 has an invalid length. [ 39.871514][ T3775] macvlan2: entered promiscuous mode [ 39.876866][ T3775] macvlan2: entered allmulticast mode [ 39.956728][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.967126][ T3783] loop2: detected capacity change from 0 to 4096 [ 39.985894][ T3783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.053985][ T3794] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 40.068412][ T3794] lo speed is unknown, defaulting to 1000 [ 40.074442][ T3794] lo speed is unknown, defaulting to 1000 [ 40.080503][ T3794] lo speed is unknown, defaulting to 1000 [ 40.087136][ T3794] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 40.097291][ T3794] lo speed is unknown, defaulting to 1000 [ 40.103952][ T3794] lo speed is unknown, defaulting to 1000 [ 40.110246][ T3794] lo speed is unknown, defaulting to 1000 [ 40.116356][ T3794] lo speed is unknown, defaulting to 1000 [ 40.122511][ T3794] lo speed is unknown, defaulting to 1000 [ 40.198100][ C1] hrtimer: interrupt took 30113 ns [ 40.283316][ T3805] netlink: 'syz.1.102': attribute type 39 has an invalid length. [ 40.350552][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 40.379917][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 40.520351][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.721252][ T3863] ip6gre1: entered allmulticast mode [ 41.019830][ T3874] loop0: detected capacity change from 0 to 2048 [ 41.050841][ T3874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.141728][ T3884] EXT4-fs (loop0): shut down requested (1) [ 41.256593][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.294018][ T3890] syz.1.137 uses obsolete (PF_INET,SOCK_PACKET) [ 41.294357][ T3895] process 'syz.0.138' launched './file0' with NULL argv: empty string added [ 41.413384][ T3903] netlink: 'syz.1.143': attribute type 4 has an invalid length. [ 41.722515][ T3918] loop4: detected capacity change from 0 to 128 [ 41.752808][ T3920] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.821176][ T3920] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.863375][ T3918] syz.4.150: attempt to access beyond end of device [ 41.863375][ T3918] loop4: rw=0, sector=121, nr_sectors = 920 limit=128 [ 41.882856][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 41.882928][ T29] audit: type=1400 audit(1755326545.962:367): avc: denied { bind } for pid=3923 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.924261][ T3920] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.939062][ T29] audit: type=1400 audit(1755326546.012:368): avc: denied { bind } for pid=3925 comm="syz.0.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 42.013850][ T3920] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.103102][ T3697] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.137992][ T29] audit: type=1400 audit(1755326546.212:369): avc: denied { setopt } for pid=3944 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.161053][ T3943] loop1: detected capacity change from 0 to 2048 [ 42.167955][ T3697] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.187286][ T3697] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.197774][ T3697] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.208445][ T3943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.233852][ T29] audit: type=1326 audit(1755326546.312:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 42.236454][ T3945] syzkaller0: entered promiscuous mode [ 42.257147][ T29] audit: type=1326 audit(1755326546.312:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 42.262730][ T3945] syzkaller0: entered allmulticast mode [ 42.291973][ T29] audit: type=1326 audit(1755326546.312:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 42.315323][ T29] audit: type=1326 audit(1755326546.312:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 42.338842][ T29] audit: type=1326 audit(1755326546.312:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 42.362111][ T29] audit: type=1326 audit(1755326546.312:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 42.385359][ T29] audit: type=1326 audit(1755326546.312:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3951 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 42.566761][ T3970] vhci_hcd: invalid port number 96 [ 42.571964][ T3970] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 42.703589][ T3983] __nla_validate_parse: 1 callbacks suppressed [ 42.703605][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.172'. [ 42.754263][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.217382][ T4028] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 43.329827][ T4039] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.401117][ T4045] netem: incorrect gi model size [ 43.406189][ T4045] netem: change failed [ 43.712767][ T4057] lo speed is unknown, defaulting to 1000 [ 43.728988][ T4057] lo speed is unknown, defaulting to 1000 [ 43.735270][ T4057] lo speed is unknown, defaulting to 1000 [ 43.742333][ T4057] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.760390][ T4057] lo speed is unknown, defaulting to 1000 [ 43.776161][ T4057] lo speed is unknown, defaulting to 1000 [ 43.786814][ T4057] lo speed is unknown, defaulting to 1000 [ 43.796409][ T4057] lo speed is unknown, defaulting to 1000 [ 43.820423][ T4057] lo speed is unknown, defaulting to 1000 [ 43.997996][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.215'. [ 44.006905][ T4081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.215'. [ 44.041641][ T4081] Zero length message leads to an empty skb [ 44.091573][ T4092] syzkaller1: entered promiscuous mode [ 44.097117][ T4092] syzkaller1: entered allmulticast mode [ 44.203246][ T4099] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 44.244028][ T4087] netlink: 212424 bytes leftover after parsing attributes in process `syz.4.218'. [ 44.345311][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 44.354284][ T4107] netlink: 12 bytes leftover after parsing attributes in process `syz.4.226'. [ 44.459603][ T4101] bridge0: entered promiscuous mode [ 44.465190][ T4101] macvtap1: entered allmulticast mode [ 44.470670][ T4101] bridge0: entered allmulticast mode [ 44.478864][ T4101] bridge0: port 3(macvtap1) entered blocking state [ 44.485541][ T4101] bridge0: port 3(macvtap1) entered disabled state [ 44.495532][ T4101] bridge0: left allmulticast mode [ 44.500650][ T4101] bridge0: left promiscuous mode [ 44.565871][ T4129] tipc: Started in network mode [ 44.570842][ T4129] tipc: Node identity ac14140f, cluster identity 4711 [ 44.579127][ T4129] tipc: New replicast peer: 255.255.255.255 [ 44.585207][ T4129] tipc: Enabled bearer , priority 10 [ 44.680581][ T4139] pim6reg1: entered promiscuous mode [ 44.685983][ T4139] pim6reg1: entered allmulticast mode [ 44.952093][ T4167] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 44.960320][ T4167] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 45.062263][ T4180] loop0: detected capacity change from 0 to 512 [ 45.081199][ T4180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.127312][ T4180] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.179420][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.201950][ T4201] loop0: detected capacity change from 0 to 128 [ 45.202018][ T4198] loop2: detected capacity change from 0 to 512 [ 45.231425][ T4198] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 45.247691][ T4198] EXT4-fs (loop2): mount failed [ 45.308487][ T4205] lo speed is unknown, defaulting to 1000 [ 45.315833][ T4205] lo speed is unknown, defaulting to 1000 [ 45.410541][ T4211] netlink: 2 bytes leftover after parsing attributes in process `syz.0.269'. [ 45.698659][ T4231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 45.707729][ T2956] tipc: Node number set to 2886997007 [ 45.891763][ T4240] loop3: detected capacity change from 0 to 2048 [ 45.921510][ T4240] Alternate GPT is invalid, using primary GPT. [ 45.927905][ T4240] loop3: p2 p3 p7 [ 45.981864][ T4245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.999519][ T4245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.455919][ T4277] loop4: detected capacity change from 0 to 128 [ 46.465882][ T4277] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 46.478883][ T4277] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.527935][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.708612][ T4307] netlink: 'syz.3.311': attribute type 1 has an invalid length. [ 46.734177][ T4311] syz_tun: entered promiscuous mode [ 46.741257][ T4311] macvtap1: entered promiscuous mode [ 46.752508][ T4311] syz_tun: left promiscuous mode [ 46.767178][ T4313] random: crng reseeded on system resumption [ 46.783122][ T4313] ÿÿÿÿÿÿ: renamed from vlan1 [ 47.132487][ T4350] netlink: 96 bytes leftover after parsing attributes in process `syz.0.332'. [ 47.178721][ T29] kauditd_printk_skb: 836 callbacks suppressed [ 47.178739][ T29] audit: type=1400 audit(1755326551.252:1212): avc: denied { ioctl } for pid=4356 comm="syz.3.335" path="socket:[7405]" dev="sockfs" ino=7405 ioctlcmd=0x48d4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.245120][ T29] audit: type=1326 audit(1755326551.322:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.268538][ T29] audit: type=1326 audit(1755326551.322:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.293577][ T29] audit: type=1326 audit(1755326551.382:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.301607][ T4365] loop2: detected capacity change from 0 to 512 [ 47.317049][ T29] audit: type=1326 audit(1755326551.382:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.347188][ T29] audit: type=1326 audit(1755326551.382:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.347401][ T4365] EXT4-fs: Ignoring removed nobh option [ 47.382151][ T29] audit: type=1326 audit(1755326551.382:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.405708][ T29] audit: type=1326 audit(1755326551.382:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.429055][ T29] audit: type=1326 audit(1755326551.382:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.452669][ T29] audit: type=1326 audit(1755326551.382:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4358 comm="syz.4.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fedeaf7ebe9 code=0x7ffc0000 [ 47.497065][ T4365] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.339: iget: bad i_size value: 38620345925642 [ 47.525398][ T4365] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.339: couldn't read orphan inode 15 (err -117) [ 47.550282][ T4378] netlink: 'syz.4.344': attribute type 1 has an invalid length. [ 47.565128][ T4365] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.616433][ T4378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.636273][ T4381] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 47.651064][ T4381] bond1: (slave batadv1): making interface the new active one [ 47.651264][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.666397][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.673916][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.682767][ T4381] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 47.697444][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.704955][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.712544][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.719984][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.727411][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.734882][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.742553][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 47.751292][ T3385] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 47.785324][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.895063][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 47.913317][ T4393] loop2: detected capacity change from 0 to 8192 [ 47.931569][ T4403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 48.024514][ T4415] syzkaller0: entered promiscuous mode [ 48.182755][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.368'. [ 48.200678][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.368'. [ 48.294671][ T4446] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 48.308481][ T4450] tipc: Started in network mode [ 48.313501][ T4450] tipc: Node identity , cluster identity 4711 [ 48.319664][ T4450] tipc: Failed to obtain node identity [ 48.325170][ T4450] tipc: Enabling of bearer rejected, failed to enable media [ 48.340495][ T4446] bond0: (slave dummy0): Releasing backup interface [ 48.358806][ T4446] team0: Port device dummy0 added [ 48.362562][ T4453] netlink: 'syz.2.372': attribute type 10 has an invalid length. [ 48.392506][ T4453] team0: Port device dummy0 removed [ 48.408986][ T4453] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.444806][ T4459] netlink: 'syz.3.378': attribute type 7 has an invalid length. [ 48.452645][ T4459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'. [ 48.490645][ T4462] loop2: detected capacity change from 0 to 512 [ 48.501608][ T4462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.514796][ T4462] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.532659][ T4472] netlink: 96 bytes leftover after parsing attributes in process `syz.3.382'. [ 48.606893][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.633627][ T4482] netlink: 8 bytes leftover after parsing attributes in process `syz.2.387'. [ 48.724946][ T4494] loop0: detected capacity change from 0 to 1024 [ 48.746563][ T4494] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.856724][ T4507] netlink: 'syz.3.398': attribute type 12 has an invalid length. [ 48.928268][ T4514] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4514 comm=syz.3.401 [ 48.973061][ T4514] netlink: 12 bytes leftover after parsing attributes in process `syz.3.401'. [ 48.998480][ T4494] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 49.040086][ T4523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 49.086900][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.326136][ T4556] loop1: detected capacity change from 0 to 1764 [ 49.335821][ T4556] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 49.533300][ T4573] netlink: 'syz.1.425': attribute type 13 has an invalid length. [ 49.541170][ T4573] netlink: 'syz.1.425': attribute type 17 has an invalid length. [ 49.586782][ T4573] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.656860][ T4576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.667560][ T4576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.787557][ T4578] loop4: detected capacity change from 0 to 1024 [ 49.815385][ T4578] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.937384][ T4578] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.427: Allocating blocks 449-513 which overlap fs metadata [ 49.961521][ T4577] EXT4-fs (loop4): pa ffff888106ddf0e0: logic 48, phys. 177, len 21 [ 49.969651][ T4577] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 49.990742][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.047373][ T4590] loop0: detected capacity change from 0 to 512 [ 50.055296][ T4590] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.431: Invalid inode bitmap blk 4 in block_group 0 [ 50.068505][ T4590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.094690][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.117591][ T4594] loop4: detected capacity change from 0 to 128 [ 50.126244][ T4594] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.138319][ T4594] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 50.509530][ T4618] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.559138][ T4618] SELinux: failed to load policy [ 50.778754][ T4640] : renamed from bond0 (while UP) [ 50.865682][ T4646] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4646 comm=syz.1.454 [ 50.999128][ T4657] loop0: detected capacity change from 0 to 128 [ 51.005782][ T4658] ipvlan2: entered promiscuous mode [ 51.014304][ T4658] bridge0: port 3(ipvlan2) entered blocking state [ 51.020990][ T4658] bridge0: port 3(ipvlan2) entered disabled state [ 51.028087][ T4658] ipvlan2: entered allmulticast mode [ 51.033551][ T4658] bridge0: entered allmulticast mode [ 51.039795][ T4658] ipvlan2: left allmulticast mode [ 51.043620][ T4656] Process accounting resumed [ 51.044845][ T4658] bridge0: left allmulticast mode [ 51.055289][ T4656] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 51.062845][ T4656] FAT-fs (loop0): Filesystem has been set read-only [ 51.072560][ T10] FAT-fs (loop0): error, corrupted file size (i_pos 548, 512) [ 51.306724][ T4673] loop1: detected capacity change from 0 to 1024 [ 51.401336][ T4673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.640048][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.746263][ T4694] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 51.767866][ T4696] loop4: detected capacity change from 0 to 128 [ 51.792428][ T4694] bond0: (slave bridge1): making interface the new active one [ 51.801427][ T4694] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 51.882050][ T4703] lo speed is unknown, defaulting to 1000 [ 51.896620][ T4703] lo speed is unknown, defaulting to 1000 [ 51.921782][ T4705] netlink: 'syz.1.479': attribute type 39 has an invalid length. [ 51.975240][ T3721] kworker/u8:66: attempt to access beyond end of device [ 51.975240][ T3721] loop4: rw=1, sector=145, nr_sectors = 16 limit=128 [ 52.001779][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.001779][ T3721] loop4: rw=1, sector=169, nr_sectors = 8 limit=128 [ 52.032825][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.032825][ T3721] loop4: rw=1, sector=185, nr_sectors = 8 limit=128 [ 52.067558][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.067558][ T3721] loop4: rw=1, sector=201, nr_sectors = 8 limit=128 [ 52.096358][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.096358][ T3721] loop4: rw=1, sector=217, nr_sectors = 8 limit=128 [ 52.135372][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.135372][ T3721] loop4: rw=1, sector=233, nr_sectors = 8 limit=128 [ 52.169110][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.169110][ T3721] loop4: rw=1, sector=249, nr_sectors = 8 limit=128 [ 52.193832][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.193832][ T3721] loop4: rw=1, sector=265, nr_sectors = 8 limit=128 [ 52.231744][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.231744][ T3721] loop4: rw=1, sector=281, nr_sectors = 8 limit=128 [ 52.246465][ T3721] kworker/u8:66: attempt to access beyond end of device [ 52.246465][ T3721] loop4: rw=1, sector=297, nr_sectors = 8 limit=128 [ 52.285276][ T4725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.482'. [ 52.317163][ T4725] ip6gre2: entered allmulticast mode [ 52.411135][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 52.411155][ T29] audit: type=1326 audit(1755326556.492:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3094655ba7 code=0x7ffc0000 [ 52.420663][ T4731] loop1: detected capacity change from 0 to 128 [ 52.478131][ T29] audit: type=1326 audit(1755326556.492:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30945fadd9 code=0x7ffc0000 [ 52.498757][ T4734] loop4: detected capacity change from 0 to 1024 [ 52.501533][ T29] audit: type=1326 audit(1755326556.492:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3094655ba7 code=0x7ffc0000 [ 52.531056][ T29] audit: type=1326 audit(1755326556.492:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30945fadd9 code=0x7ffc0000 [ 52.554609][ T29] audit: type=1326 audit(1755326556.492:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309465ebe9 code=0x7ffc0000 [ 52.577933][ T29] audit: type=1326 audit(1755326556.492:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f309465ebe9 code=0x7ffc0000 [ 52.585498][ T4734] EXT4-fs: Ignoring removed nobh option [ 52.601275][ T29] audit: type=1326 audit(1755326556.492:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f309465ebe9 code=0x7ffc0000 [ 52.606862][ T4734] EXT4-fs: Ignoring removed bh option [ 52.630143][ T29] audit: type=1326 audit(1755326556.492:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3094655ba7 code=0x7ffc0000 [ 52.630223][ T29] audit: type=1326 audit(1755326556.492:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f30945fadd9 code=0x7ffc0000 [ 52.682349][ T29] audit: type=1326 audit(1755326556.492:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4730 comm="syz.1.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3094655ba7 code=0x7ffc0000 [ 52.743786][ T4744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4744 comm=syz.0.496 [ 52.793521][ T4734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.000944][ T4757] netlink: zone id is out of range [ 53.020393][ T4757] netlink: zone id is out of range [ 53.025552][ T4757] netlink: zone id is out of range [ 53.160220][ T4762] netlink: 5 bytes leftover after parsing attributes in process `syz.1.503'. [ 53.169073][ T4762] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 53.214462][ T4762] 0ªî{X¹¦: entered allmulticast mode [ 53.241010][ T4762] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 53.276641][ T4766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.342539][ T4766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.442947][ T4766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.493352][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.541416][ T4766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.626340][ T4771] loop1: detected capacity change from 0 to 32768 [ 53.649865][ T4771] loop1: p1 p2 p3 < p5 p6 > [ 53.659988][ T3659] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.674083][ T3687] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.682492][ T4771] loop1: p2 size 16775168 extends beyond EOD, truncated [ 53.700070][ T3687] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.712715][ T3687] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.712731][ T4771] loop1: p5 start 4294970168 is beyond EOD, truncated [ 53.795484][ T4788] pim6reg1: entered promiscuous mode [ 53.800988][ T4788] pim6reg1: entered allmulticast mode [ 54.084340][ T4807] loop1: detected capacity change from 0 to 512 [ 54.095690][ T4807] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 54.110510][ T4807] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 54.125271][ T4807] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.522: corrupted in-inode xattr: e_value size too large [ 54.152587][ T4807] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.522: couldn't read orphan inode 15 (err -117) [ 54.156760][ T4797] program syz.0.518 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.182820][ T4807] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.209463][ T4807] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.294875][ T4816] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.330706][ T4816] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.371049][ T4816] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.431357][ T4816] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.464179][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 54.487615][ T4833] loop4: detected capacity change from 0 to 512 [ 54.503133][ T4833] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.516266][ T4833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 54.526422][ T4833] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 54.545758][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 54.570391][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 54.584406][ T4833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.534'. [ 54.661108][ T4845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.541'. [ 54.680299][ T4849] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4849 comm=syz.0.540 [ 54.831237][ T4860] netlink: 'syz.1.548': attribute type 10 has an invalid length. [ 54.843193][ T4860] team0: Port device dummy0 added [ 54.856251][ T4860] netlink: 'syz.1.548': attribute type 10 has an invalid length. [ 54.865276][ T4860] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 54.878585][ T4860] team0: Failed to send options change via netlink (err -105) [ 54.886258][ T4860] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 54.895508][ T4860] team0: Port device dummy0 removed [ 54.903314][ T4860] : (slave dummy0): Enslaving as an active interface with an up link [ 55.166758][ T4884] loop3: detected capacity change from 0 to 1024 [ 55.202057][ T4884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.237423][ T4884] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.558: Allocating blocks 449-513 which overlap fs metadata [ 55.260462][ T4883] EXT4-fs (loop3): pa ffff888106e7a150: logic 48, phys. 177, len 21 [ 55.268508][ T4883] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 55.293273][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.551632][ T4921] loop3: detected capacity change from 0 to 512 [ 55.575047][ T4921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.594298][ T4927] loop0: detected capacity change from 0 to 512 [ 55.601784][ T4921] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.612462][ T4927] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.675209][ T4927] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.574: Failed to acquire dquot type 1 [ 55.691807][ T4927] EXT4-fs (loop0): 1 truncate cleaned up [ 55.698129][ T4927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.752677][ T4927] netlink: 9 bytes leftover after parsing attributes in process `syz.0.574'. [ 55.779238][ T4927] 0·: renamed from hsr0 [ 55.799807][ T4927] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.810035][ T4927] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.827020][ T4927] 0·: entered allmulticast mode [ 55.832049][ T4927] hsr_slave_0: entered allmulticast mode [ 55.837702][ T4927] hsr_slave_1: entered allmulticast mode [ 55.846039][ T4927] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 55.878050][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.035717][ T4951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.583'. [ 56.188065][ T4971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.592'. [ 56.240440][ T4976] loop0: detected capacity change from 0 to 2048 [ 56.267345][ T4976] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.300962][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.394422][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.418456][ T4984] loop0: detected capacity change from 0 to 512 [ 56.425182][ T4984] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.439604][ T4984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.453649][ T4984] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.482316][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.581351][ T5001] loop0: detected capacity change from 0 to 512 [ 56.588099][ T5001] EXT4-fs: Ignoring removed oldalloc option [ 56.594631][ T5001] ext4: Unknown parameter 'smackfsfloor' [ 56.771992][ T5013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.609'. [ 56.859562][ T5017] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 56.920884][ T5026] loop4: detected capacity change from 0 to 2048 [ 56.955493][ T5026] loop4: p2 p3 p7 [ 56.990411][ T5030] loop4: detected capacity change from 0 to 164 [ 56.997515][ T5030] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.007904][ T5030] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.033425][ T5032] loop4: detected capacity change from 0 to 512 [ 57.047543][ T5032] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 57.055696][ T5032] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.063489][ T5032] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.617: corrupted inode contents [ 57.075657][ T5032] EXT4-fs (loop4): Remounting filesystem read-only [ 57.082259][ T5032] EXT4-fs (loop4): 1 truncate cleaned up [ 57.088014][ T3694] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.098657][ T3694] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 57.109206][ T3694] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 57.119955][ T5032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.145079][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.250676][ T5045] loop4: detected capacity change from 0 to 256 [ 57.280596][ T5047] ALSA: seq fatal error: cannot create timer (-22) [ 57.328100][ T5053] ip6gre3: entered allmulticast mode [ 57.385127][ T5063] loop1: detected capacity change from 0 to 512 [ 57.392321][ T5063] EXT4-fs: Ignoring removed oldalloc option [ 57.411009][ T5063] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.423800][ T5063] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.452683][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 57.452699][ T29] audit: type=1400 audit(1755327329.591:1794): avc: denied { create } for pid=5062 comm="syz.1.631" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.493551][ T5072] loop4: detected capacity change from 0 to 512 [ 57.503589][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.513532][ T29] audit: type=1400 audit(1755327329.654:1795): avc: denied { firmware_load } for pid=5073 comm="syz.3.635" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 57.548258][ T5072] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 57.558787][ T5072] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.575465][ T5072] EXT4-fs (loop4): mount failed [ 57.609402][ T5083] loop4: detected capacity change from 0 to 512 [ 57.616201][ T5083] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 57.627671][ T5083] EXT4-fs (loop4): 1 truncate cleaned up [ 57.634030][ T5083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.649929][ T29] audit: type=1400 audit(1755327329.801:1796): avc: denied { map } for pid=5082 comm="syz.4.638" path="/138/file2/memory.swap.current" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 57.687784][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.834311][ T3672] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.876551][ T3672] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.885496][ T3687] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.911596][ T3687] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.936596][ T29] audit: type=1326 audit(1755327330.106:1797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 57.960202][ T29] audit: type=1326 audit(1755327330.106:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 57.983879][ T29] audit: type=1326 audit(1755327330.106:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 58.007560][ T29] audit: type=1326 audit(1755327330.106:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 58.030991][ T29] audit: type=1326 audit(1755327330.106:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 58.054334][ T29] audit: type=1326 audit(1755327330.106:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5100 comm="syz.2.646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920eb7ebe9 code=0x7ffc0000 [ 58.391791][ T5116] lo speed is unknown, defaulting to 1000 [ 58.397893][ T5116] lo speed is unknown, defaulting to 1000 [ 58.749586][ T5171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5171 comm=syz.4.677 [ 58.765934][ T5171] __nla_validate_parse: 5 callbacks suppressed [ 58.765952][ T5171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.677'. [ 58.830749][ T5172] loop3: detected capacity change from 0 to 512 [ 58.889206][ T5172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.913825][ T5172] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.921058][ T5185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.681'. [ 58.947147][ T5172] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 58.972779][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.049302][ T5193] loop4: detected capacity change from 0 to 2048 [ 59.078960][ T5193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.148828][ T5199] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.156182][ T5199] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.172097][ T5202] netlink: 'syz.1.686': attribute type 10 has an invalid length. [ 59.215750][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.265237][ T5199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.289419][ T5193] ================================================================== [ 59.297537][ T5193] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 59.304949][ T5193] [ 59.307285][ T5193] read-write to 0xffff88811a183fd8 of 8 bytes by task 3659 on cpu 0: [ 59.315365][ T5193] __xa_clear_mark+0xf5/0x1e0 [ 59.320074][ T5193] __folio_end_writeback+0x177/0x470 [ 59.325393][ T5193] folio_end_writeback+0x71/0x3d0 [ 59.330453][ T5193] ext4_finish_bio+0x459/0x8c0 [ 59.335247][ T5193] ext4_release_io_end+0x9f/0x1f0 [ 59.340296][ T5193] ext4_end_io_end+0x18d/0x240 [ 59.345111][ T5193] ext4_end_io_rsv_work+0x151/0x1e0 [ 59.350318][ T5193] process_scheduled_works+0x4cb/0x9d0 [ 59.355787][ T5193] worker_thread+0x582/0x770 [ 59.360397][ T5193] kthread+0x489/0x510 [ 59.364480][ T5193] ret_from_fork+0xda/0x150 [ 59.368991][ T5193] ret_from_fork_asm+0x1a/0x30 [ 59.373758][ T5193] [ 59.376079][ T5193] read to 0xffff88811a183fd8 of 8 bytes by task 5193 on cpu 1: [ 59.383621][ T5193] xas_find_marked+0x218/0x620 [ 59.388399][ T5193] find_get_entry+0x5d/0x380 [ 59.393006][ T5193] filemap_get_folios_tag+0x13b/0x210 [ 59.398378][ T5193] file_write_and_wait_range+0x1ea/0x2c0 [ 59.404041][ T5193] generic_buffers_fsync_noflush+0x45/0x120 [ 59.409939][ T5193] ext4_sync_file+0x1ab/0x690 [ 59.414629][ T5193] vfs_fsync_range+0x10a/0x130 [ 59.419401][ T5193] ext4_buffered_write_iter+0x34f/0x3c0 [ 59.424958][ T5193] ext4_file_write_iter+0xdbf/0xf00 [ 59.430164][ T5193] do_iter_readv_writev+0x49c/0x540 [ 59.435485][ T5193] vfs_writev+0x2df/0x8b0 [ 59.439820][ T5193] __se_sys_pwritev2+0xfc/0x1c0 [ 59.444676][ T5193] __x64_sys_pwritev2+0x67/0x80 [ 59.449532][ T5193] x64_sys_call+0x2c55/0x2ff0 [ 59.454226][ T5193] do_syscall_64+0xd2/0x200 [ 59.458838][ T5193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.464742][ T5193] [ 59.467078][ T5193] value changed: 0xfffffffe00000000 -> 0xffffff8000000000 [ 59.474296][ T5193] [ 59.476629][ T5193] Reported by Kernel Concurrency Sanitizer on: [ 59.482878][ T5193] CPU: 1 UID: 0 PID: 5193 Comm: syz.4.684 Not tainted 6.17.0-rc1-syzkaller-00199-gdfd4b508c8c6 #0 PREEMPT(voluntary) [ 59.495220][ T5193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 59.505285][ T5193] ================================================================== [ 59.544701][ T5202] : (slave bridge0): Enslaving as an active interface with an up link [ 59.578381][ T3659] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.602765][ T3659] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.613395][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.618965][ T3659] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.631567][ T3659] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0