last executing test programs: 2m36.808963037s ago: executing program 32 (id=425): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x5e, 0x54, 0x0, 0x3, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x10000, 0xfffffffffffffff9}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) write$UHID_DESTROY(r1, &(0x7f0000000080), 0x4) 2m11.322983008s ago: executing program 33 (id=1307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 2m7.487075887s ago: executing program 34 (id=1413): syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000001d000000080000000b"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f00000004c0), 0x0}, 0x20) 2m2.734607899s ago: executing program 35 (id=1579): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000240)={0x19, 0x3d24, 0x1575, 0x0, 0x0, 0xfffe}) 2m1.241491939s ago: executing program 36 (id=1629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 2m1.010249258s ago: executing program 37 (id=1641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003200000002cbd7000fcdbdf2502000900080000000a0000000000000005000600000000000a0000000000000000000000000000000000000000000001020000000000000002000100000000000400030c0000000005000500000000000a0000000000000000000000000000000000000000000001070000000000000010000800c0"], 0x100}, 0x1, 0x7}, 0x14) 1m1.338221028s ago: executing program 38 (id=4143): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth0_virt_wifi\x00', 0x2000000}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'wg1\x00', 0x2}, 0x18) 41.54183775s ago: executing program 8 (id=4971): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0xfd45}}, 0x8000014) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="600602188c23"], 0x6) 40.657946351s ago: executing program 8 (id=5005): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) 40.610263624s ago: executing program 8 (id=5007): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 40.54014772s ago: executing program 8 (id=5011): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 40.349306625s ago: executing program 8 (id=5015): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x400000}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={&(0x7f0000000300), 0xc, &(0x7f00000002c0)={&(0x7f0000001580)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x6011}, 0x80) 39.472965285s ago: executing program 8 (id=5045): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 39.403827401s ago: executing program 39 (id=5045): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r2 = fspick(r1, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) 31.90349043s ago: executing program 9 (id=5304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x38, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x8840}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 31.876932672s ago: executing program 9 (id=5306): r0 = semget$private(0x0, 0x4000000009, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) semtimedop(r0, &(0x7f0000000300)=[{0x0, 0x36, 0x1800}], 0x1, 0x0) 31.864633863s ago: executing program 9 (id=5307): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) 31.763695881s ago: executing program 9 (id=5310): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 31.735848333s ago: executing program 9 (id=5311): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={0x38, r2, 0x10ada85e65c25359, 0xfffffff9, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 31.476059745s ago: executing program 9 (id=5317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 31.475932904s ago: executing program 40 (id=5317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='br_fdb_add\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000001c000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="4000aa000a0002"], 0x28}}, 0x0) 31.418804849s ago: executing program 1 (id=5325): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 31.28354034s ago: executing program 1 (id=5332): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 31.226079954s ago: executing program 1 (id=5335): syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 31.178637929s ago: executing program 1 (id=5339): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008082, &(0x7f00000004c0)={[{@nodioread_nolock}, {@nolazytime}, {@dioread_lock}, {@errors_continue}, {@dioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nomblk_io_submit}, {@nobarrier}]}, 0x0, 0x5e9, &(0x7f00000005c0)="$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") sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000000c0)="26fe25", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r0, 0x0, 0x0) 31.068184657s ago: executing program 1 (id=5346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="dfbf00000000000000006700000008000300", @ANYRES32=r2, @ANYBLOB="0800c300741300000800c4"], 0x30}, 0x1, 0x0, 0x0, 0x240408c3}, 0x0) 30.462002635s ago: executing program 1 (id=5372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332cbd70000200000005000000080003"], 0x2c}}, 0x4c002) 30.40840785s ago: executing program 41 (id=5372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b332cbd70000200000005000000080003"], 0x2c}}, 0x4c002) 24.15334851s ago: executing program 2 (id=5559): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03c00e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000440)="addbecc8f7b208308a885c89ede411d6cb557c84", 0x14}], 0x2}, 0x4000000) 24.038444749s ago: executing program 2 (id=5564): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x200, &(0x7f0000000140)=0x0) r2 = open(&(0x7f0000000100)='./bus\x00', 0x1c123e, 0x39) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r0, 0x0}]) creat(&(0x7f00000000c0)='./bus\x00', 0x182) 23.229479904s ago: executing program 2 (id=5590): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x2c, 0x24, 0xf0b, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) 23.15671779s ago: executing program 2 (id=5591): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 23.128230822s ago: executing program 2 (id=5593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000000)) io_setup(0x2004, &(0x7f0000000680)) 22.638218991s ago: executing program 2 (id=5602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) 22.638119971s ago: executing program 42 (id=5602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000000)=@chain={'key_or_keyring:', r2}) 22.614926673s ago: executing program 7 (id=5604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) 22.410041829s ago: executing program 7 (id=5619): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) ioctl$TIOCL_BLANKSCREEN(r0, 0x560e, &(0x7f0000000000)) 22.346012684s ago: executing program 7 (id=5621): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffff54}, 0x18) r1 = socket$inet_smc(0x2b, 0x1, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x8) 22.314950247s ago: executing program 7 (id=5612): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x24) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000240)='./file0/file0\x00', 0x9) 22.228246723s ago: executing program 7 (id=5614): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0xff}, 0x18) lsm_set_self_attr(0x69, 0x0, 0x42, 0x0) 21.914256189s ago: executing program 7 (id=5617): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 21.914057149s ago: executing program 43 (id=5617): timer_settime(0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 1.640786999s ago: executing program 4 (id=6506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}}, 0x0) 1.618204501s ago: executing program 5 (id=6507): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x5}, 0x18) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000001fc0)=""/184, 0x20002078) 1.617651641s ago: executing program 5 (id=6508): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xfffffffffffffffd) 1.603176582s ago: executing program 4 (id=6509): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r1, 0x0, 0xf7}, 0x18) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0xb}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.526542048s ago: executing program 5 (id=6511): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x4000004}, 0x0) 1.467005293s ago: executing program 4 (id=6512): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8800) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x8c, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x5f, 0x0, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x6}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa0}}, 0x0) 1.405904558s ago: executing program 5 (id=6513): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 1.357257002s ago: executing program 4 (id=6516): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x26c, @remote, 0x10}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="020000000d800089", 0x8) 556.895456ms ago: executing program 0 (id=6532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) 490.657671ms ago: executing program 4 (id=6533): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x6a855000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r1) 486.182782ms ago: executing program 0 (id=6534): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) 474.620873ms ago: executing program 3 (id=6535): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a563301bf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d000140070100010260000000bc7a46e3988285dcdf12f21308f868fece01008000000000000014e6a065c806539ff5b1326f67958f0a947ee2b49e33", 0x89}], 0x1}, 0x0) 408.864638ms ago: executing program 3 (id=6536): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r2, 0x5) 407.845498ms ago: executing program 5 (id=6537): syz_emit_ethernet(0x32, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @random="1ae8d688b1f4", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x6}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 367.803721ms ago: executing program 3 (id=6539): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1", 0x2f}], 0x1}, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000140)=@canfd={{0x1}, 0xf8, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x88801) 345.238953ms ago: executing program 0 (id=6541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2111, 0x300, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 326.831465ms ago: executing program 6 (id=6542): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 306.481156ms ago: executing program 3 (id=6543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x74, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x80000}, 0x18) socket$packet(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 276.371238ms ago: executing program 0 (id=6544): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x0) 261.63736ms ago: executing program 6 (id=6545): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x50, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b80)=ANY=[@ANYBLOB="20000000170a0103"], 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 227.502913ms ago: executing program 0 (id=6546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fedbdf8801000000180001801400020076657468305f746f5f7465616d"], 0x2c}, 0x1, 0x0, 0x0, 0x141}, 0x0) 218.413703ms ago: executing program 6 (id=6547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x200001a, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 164.896497ms ago: executing program 0 (id=6548): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 164.208668ms ago: executing program 6 (id=6549): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001c00)=@base={0xb, 0x5, 0x7, 0x9, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) 92.526443ms ago: executing program 6 (id=6550): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) 65.133245ms ago: executing program 3 (id=6551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010000217fffff0080030c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r2, @ANYBLOB="080003"], 0x80}, 0x1, 0x0, 0x0, 0x20044081}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) 43.967717ms ago: executing program 6 (id=6552): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_type(r0, &(0x7f0000000340), 0x9) 9.37158ms ago: executing program 5 (id=6553): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 6.25436ms ago: executing program 3 (id=6554): r0 = io_uring_setup(0x5f45, &(0x7f00000001c0)={0x0, 0x0, 0x2}) r1 = socket$unix(0x1, 0x5, 0x0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept4$unix(r1, 0x0, 0x0, 0x80800) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=6555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) kernel console output (not intermixed with test programs): it: type=1400 audit(1756461488.397:5386): avc: denied { map } for pid=14554 comm="syz.1.4462" path="socket:[45083]" dev="sockfs" ino=45083 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 144.478392][T14560] loop0: detected capacity change from 0 to 8192 [ 144.485087][ T29] audit: type=1400 audit(1756461488.507:5387): avc: denied { create } for pid=14563 comm="syz.1.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 144.505067][ T29] audit: type=1400 audit(1756461488.507:5388): avc: denied { write } for pid=14563 comm="syz.1.4465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 144.573493][ T29] audit: type=1400 audit(1756461488.617:5389): avc: denied { kexec_image_load } for pid=14568 comm="syz.1.4471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 144.655472][ T29] audit: type=1326 audit(1756461488.697:5390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14573 comm="syz.2.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 145.745752][T14724] syzkaller0: entered promiscuous mode [ 145.751317][T14724] syzkaller0: entered allmulticast mode [ 146.071815][T14746] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 146.078388][T14746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 146.086033][T14746] vhci_hcd vhci_hcd.0: Device attached [ 146.097824][T14748] vhci_hcd: connection closed [ 146.099406][ T4824] vhci_hcd: stop threads [ 146.109278][ T4824] vhci_hcd: release socket [ 146.113796][ T4824] vhci_hcd: disconnect device [ 146.262973][T14769] __nla_validate_parse: 5 callbacks suppressed [ 146.262985][T14769] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4558'. [ 146.389826][T14777] SELinux: policydb version 0 does not match my version range 15-35 [ 146.398570][T14777] SELinux: failed to load policy [ 146.434497][T14779] loop8: detected capacity change from 0 to 1024 [ 146.441804][T14779] EXT4-fs: Ignoring removed nobh option [ 146.447531][T14779] EXT4-fs: Ignoring removed bh option [ 146.460406][T14779] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.490714][ T7294] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.978081][T14819] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 147.374420][T14848] dvmrp0: left allmulticast mode [ 147.829100][ T4824] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 147.845266][ T4824] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 147.856900][ T4824] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 147.865434][ T4824] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 147.900765][T14885] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4608'. [ 147.970009][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4617'. [ 147.979183][T14901] netlink: 64 bytes leftover after parsing attributes in process `syz.9.4617'. [ 147.988670][T14901] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4617'. [ 148.033604][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4618'. [ 148.042702][T14905] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4618'. [ 148.052571][T14905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4618'. [ 148.062366][T14905] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4618'. [ 148.072229][T14905] netlink: 84 bytes leftover after parsing attributes in process `syz.2.4618'. [ 148.114632][T14917] loop9: detected capacity change from 0 to 7 [ 148.129072][T14917] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.152835][T14917] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.161115][T14917] loop9: unable to read partition table [ 148.172181][T14917] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 148.172181][T14917] ) failed (rc=-5) [ 148.187406][ T9] hid_parser_main: 22 callbacks suppressed [ 148.187428][ T9] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 148.277442][ T9] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 148.300212][T14941] netlink: 'syz.2.4635': attribute type 1 has an invalid length. [ 148.684480][T14983] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 4096 [ 148.718452][T14985] vhci_hcd: invalid port number 255 [ 149.033035][T15046] can: request_module (can-proto-0) failed. [ 149.142304][T15061] serio: Serial port ptm0 [ 149.740866][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 149.740886][ T29] audit: type=1326 audit(1756461493.790:5796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.785893][ T29] audit: type=1326 audit(1756461493.790:5797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.810657][ T29] audit: type=1326 audit(1756461493.790:5798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.835261][ T29] audit: type=1326 audit(1756461493.790:5799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.860006][ T29] audit: type=1326 audit(1756461493.790:5800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.885193][ T29] audit: type=1326 audit(1756461493.790:5801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.909901][ T29] audit: type=1326 audit(1756461493.790:5802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.934794][ T29] audit: type=1326 audit(1756461493.790:5803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.958870][ T29] audit: type=1326 audit(1756461493.790:5804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 149.983692][ T29] audit: type=1326 audit(1756461493.790:5805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15065 comm="syz.8.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe350eeebe9 code=0x7ffc0000 [ 150.035264][T15081] lo speed is unknown, defaulting to 1000 [ 150.133341][T15091] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 150.141181][T15091] vhci_hcd: default hub control req: 6003 v00e2 i0002 l0 [ 150.257588][T15114] macvtap0: refused to change device tx_queue_len [ 150.289606][T15115] team0 (unregistering): Port device team_slave_0 removed [ 150.300966][T15115] team0 (unregistering): Port device team_slave_1 removed [ 150.329695][ T36] kernel write not supported for file [eventfd] (pid: 36 comm: kworker/1:1) [ 150.474449][T15145] loop0: detected capacity change from 0 to 4096 [ 150.487567][T15145] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.522110][ T36] kernel write not supported for file [eventfd] (pid: 36 comm: kworker/1:1) [ 150.592167][T15162] team0 (unregistering): Port device team_slave_0 removed [ 150.600505][ T7471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.612433][T15162] team0 (unregistering): Port device team_slave_1 removed [ 151.563239][T15233] __nla_validate_parse: 3 callbacks suppressed [ 151.563255][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4761'. [ 151.579067][T15233] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4761'. [ 151.594381][T15233] bridge0: port 3(vlan2) entered blocking state [ 151.601128][T15233] bridge0: port 3(vlan2) entered disabled state [ 151.608912][T15233] vlan2: entered allmulticast mode [ 151.614590][T15233] bridge0: entered allmulticast mode [ 151.625765][T15233] vlan2: left allmulticast mode [ 151.631303][T15233] bridge0: left allmulticast mode [ 151.657267][T15239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4763'. [ 151.877543][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4782'. [ 152.040020][T15297] SELinux: ebitmap: map size 4160 does not match my size 64 (high bit was 0) [ 152.049620][T15297] SELinux: failed to load policy [ 152.221556][T15310] macsec1: entered allmulticast mode [ 152.227313][T15310] bond0: entered allmulticast mode [ 152.232765][T15310] bond_slave_0: entered allmulticast mode [ 152.239144][T15310] bond_slave_1: entered allmulticast mode [ 152.246180][T15310] dummy0: entered allmulticast mode [ 152.253307][T15310] bond0: left allmulticast mode [ 152.258493][T15310] bond_slave_0: left allmulticast mode [ 152.264403][T15310] bond_slave_1: left allmulticast mode [ 152.270502][T15310] dummy0: left allmulticast mode [ 152.420872][T15319] random: crng reseeded on system resumption [ 152.527475][T15339] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4808'. [ 152.542036][T15341] vhci_hcd: invalid port number 67 [ 152.595788][T15347] netlink: '+}[@': attribute type 13 has an invalid length. [ 152.620354][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4814'. [ 152.633682][T15347] 0{X: left allmulticast mode [ 152.646062][T15347] 0{X: refused to change device tx_queue_len [ 152.667434][T15347] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 152.760048][T15365] loop0: detected capacity change from 0 to 2048 [ 152.852284][T15376] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 152.890691][T15365] loop0: p2 p3 p7 [ 153.004097][T15394] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4828'. [ 153.172968][T15415] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4842'. [ 153.316895][T15436] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4853'. [ 153.932402][T15476] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 153.932402][T15476] program syz.8.4869 not setting count and/or reply_len properly [ 153.939273][T15477] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4879'. [ 154.011004][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.019213][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.027412][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.035731][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.043670][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.051844][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.059808][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.068154][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.076102][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.084037][ T36] hid-generic 0008:0006:80000007.000A: unknown main item tag 0x0 [ 154.355993][T15490] SELinux: ebitmap: map size 4160 does not match my size 64 (high bit was 0) [ 154.372467][T15490] SELinux: failed to load policy [ 154.382516][ T36] hid-generic 0008:0006:80000007.000A: hidraw0: HID v0.0b Device [syz1] on syz1 [ 154.542872][T15530] netlink: 'syz.1.4892': attribute type 16 has an invalid length. [ 154.551064][T15530] netlink: 'syz.1.4892': attribute type 17 has an invalid length. [ 154.570333][T15518] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.580654][T15518] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.736090][T15530] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.743310][T15530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.756596][T15530] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.764526][T15530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.887626][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 154.887644][ T29] audit: type=1400 audit(1756461498.942:6110): avc: denied { validate_trans } for pid=15552 comm="syz.9.4905" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 154.934729][ T29] audit: type=1326 audit(1756461498.992:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 154.935236][T15558] siw: device registration error -23 [ 154.958747][ T29] audit: type=1326 audit(1756461498.992:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 154.992934][ T29] audit: type=1326 audit(1756461499.042:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 155.016918][ T29] audit: type=1326 audit(1756461499.042:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 155.041253][ T29] audit: type=1326 audit(1756461499.042:6115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 155.065798][ T29] audit: type=1326 audit(1756461499.042:6116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 155.089975][ T29] audit: type=1326 audit(1756461499.042:6117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 155.114091][ T29] audit: type=1326 audit(1756461499.042:6118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 155.185404][ T29] audit: type=1326 audit(1756461499.042:6119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15556 comm="syz.2.4904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f749808ebe9 code=0x7ffc0000 [ 155.316621][T15580] lo speed is unknown, defaulting to 1000 [ 155.723790][T15613] loop8: detected capacity change from 0 to 2048 [ 155.768676][T15625] atomic_op ffff888117a7e128 conn xmit_atomic 0000000000000000 [ 155.777376][T15613] loop8: p2 p3 p7 [ 155.973724][T15628] netlink: 'syz.2.4936': attribute type 6 has an invalid length. [ 156.060450][T15652] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=15652 comm=syz.9.4948 [ 156.347541][T15678] block device autoloading is deprecated and will be removed. [ 156.362683][T15678] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 156.374184][T15678] FAT-fs (loop1): unable to read boot sector [ 156.420552][T15686] atomic_op ffff8881278d1528 conn xmit_atomic 0000000000000000 [ 156.599620][T15711] __nla_validate_parse: 16 callbacks suppressed [ 156.599633][T15711] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4975'. [ 156.634261][T15716] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 156.661961][T15719] atomic_op ffff888117a7f528 conn xmit_atomic 0000000000000000 [ 156.671331][T15721] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 156.795869][T15736] syzkaller1: entered promiscuous mode [ 156.801493][T15736] syzkaller1: entered allmulticast mode [ 156.875297][T15738] SELinux: failed to load policy [ 156.897876][T15740] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.922888][T15744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4989'. [ 156.933781][T15744] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4989'. [ 156.960238][T15748] bridge: RTM_NEWNEIGH with invalid ether address [ 156.979770][T15752] atomic_op ffff8881278d1928 conn xmit_atomic 0000000000000000 [ 157.583180][T15789] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5010'. [ 157.587218][T15788] loop8: detected capacity change from 0 to 1024 [ 157.616241][T15788] EXT4-fs: Ignoring removed nomblk_io_submit option [ 157.651082][T15788] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.718708][T15796] pim6reg: entered allmulticast mode [ 157.735296][T15796] pim6reg: left allmulticast mode [ 157.758384][ T7294] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 157.810345][ T7294] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 157.979232][T15808] loop0: detected capacity change from 0 to 512 [ 157.997389][T15808] EXT4-fs (loop0): orphan cleanup on readonly fs [ 158.017211][T15808] EXT4-fs error (device loop0): ext4_quota_enable:7128: comm syz.0.5020: inode #218103808: comm syz.0.5020: iget: illegal inode # [ 158.033566][T15808] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.5020: Bad quota inode: 218103808, type: 2 [ 158.085906][T15808] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 158.114387][T15808] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 158.121530][T15808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 158.146211][T15808] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 158.173905][T15808] EXT4-fs error (device loop0): ext4_quota_enable:7128: comm syz.0.5020: inode #218103808: comm syz.0.5020: iget: illegal inode # [ 158.199749][ T4830] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.210123][ T4830] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.247987][T15808] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.5020: Bad quota inode: 218103808, type: 2 [ 158.283225][T15808] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 158.315620][ T4830] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.325813][ T4830] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.353635][T15835] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 158.424241][T15835] EXT4-fs error (device loop0): ext4_quota_enable:7128: comm syz.0.5020: inode #218103808: comm syz.0.5020: iget: illegal inode # [ 158.440369][ T4830] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.450532][ T4830] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.462322][T15835] EXT4-fs error (device loop0): ext4_quota_enable:7131: comm syz.0.5020: Bad quota inode: 218103808, type: 2 [ 158.477165][T15835] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 158.508963][ T7471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.519884][ T4830] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.529870][ T4830] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 158.584789][T15795] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.640953][ T4830] bridge_slave_1: left allmulticast mode [ 158.647076][ T4830] bridge_slave_1: left promiscuous mode [ 158.649252][T15865] loop0: detected capacity change from 0 to 1024 [ 158.652881][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.665563][T15865] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.694916][ T4830] bridge_slave_0: left allmulticast mode [ 158.700700][ T4830] bridge_slave_0: left promiscuous mode [ 158.706674][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.734930][T15865] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 158.879754][ T7471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.904646][T15887] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 158.931061][T15887] SELinux: failed to load policy [ 158.986455][T15893] loop9: detected capacity change from 0 to 1024 [ 158.993631][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.015525][T15893] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.032908][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.061113][ T4830] bond0 (unregistering): Released all slaves [ 159.093501][ T7442] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.103157][T15879] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 159.149354][ T4830] hsr_slave_0: left promiscuous mode [ 159.167796][T15909] loop1: detected capacity change from 0 to 512 [ 159.174465][ T4830] hsr_slave_1: left promiscuous mode [ 159.180687][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.188934][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.200694][T15909] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.5063: Parent and EA inode have the same ino 15 [ 159.214833][T15907] netlink: 260 bytes leftover after parsing attributes in process `syz.9.5061'. [ 159.224242][T15907] netlink: 260 bytes leftover after parsing attributes in process `syz.9.5061'. [ 159.267617][T15909] EXT4-fs (loop1): 1 orphan inode deleted [ 159.283036][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.291063][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.328458][ T4830] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 159.335663][ T4830] batman_adv: batadv0: Removing interface: ipvlan2 [ 159.353232][T15909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.395728][ T4830] veth1_macvtap: left promiscuous mode [ 159.411784][ T4830] veth0_macvtap: left promiscuous mode [ 159.431589][T13801] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 159.440936][ T4830] veth1_vlan: left promiscuous mode [ 159.463853][ T4830] veth0_vlan: left promiscuous mode [ 159.579820][ T1035] lo speed is unknown, defaulting to 1000 [ 159.585930][ T1035] syz0: Port: 1 Link DOWN [ 159.707455][T15882] chnl_net:caif_netlink_parms(): no params data found [ 159.775816][T15882] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.775909][T15882] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.775989][T15882] bridge_slave_0: entered allmulticast mode [ 159.776538][T15882] bridge_slave_0: entered promiscuous mode [ 159.804678][T15882] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.804783][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.804989][T15882] bridge_slave_1: entered allmulticast mode [ 159.805508][T15882] bridge_slave_1: entered promiscuous mode [ 159.836645][T15882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.838085][T15882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.869514][T15882] team0: Port device team_slave_0 added [ 159.870637][T15882] team0: Port device team_slave_1 added [ 159.893864][T15882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.893879][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.928220][T15882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.930159][T15882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.946240][T15882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.972535][T15882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.984710][ T4830] IPVS: stop unused estimator thread 0... [ 160.009646][T15882] hsr_slave_0: entered promiscuous mode [ 160.060969][T15882] hsr_slave_1: entered promiscuous mode [ 160.061614][T15882] debugfs: 'hsr0' already exists in 'hsr' [ 160.061631][T15882] Cannot create hsr debugfs directory [ 160.106726][ T4830] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 160.417786][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 160.417807][ T29] audit: type=1400 audit(1756461504.465:6449): avc: granted { setsecparam } for pid=15970 comm="syz.0.5084" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 160.445468][T15973] 9pnet_fd: Insufficient options for proto=fd [ 160.492033][ T29] audit: type=1326 audit(1756461504.545:6450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.0.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 160.492161][ T29] audit: type=1326 audit(1756461504.545:6451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.0.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 160.492432][ T29] audit: type=1326 audit(1756461504.545:6452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.0.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 160.492525][ T29] audit: type=1326 audit(1756461504.545:6453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.0.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 160.542350][ T29] audit: type=1326 audit(1756461504.595:6454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15976 comm="syz.0.5087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 160.635295][ T29] audit: type=1400 audit(1756461504.685:6455): avc: denied { mount } for pid=15981 comm="syz.0.5089" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 160.678927][T15982] futex_wake_op: syz.1.5090 tries to shift op by 144; fix this program [ 160.730037][ T29] audit: type=1400 audit(1756461504.775:6456): avc: denied { relabelfrom } for pid=15994 comm="syz.9.5096" name="NETLINK" dev="sockfs" ino=49685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 160.755735][ T29] audit: type=1400 audit(1756461504.775:6457): avc: denied { relabelto } for pid=15994 comm="syz.9.5096" name="NETLINK" dev="sockfs" ino=49685 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_route_socket permissive=1 [ 160.799084][ T29] audit: type=1400 audit(1756461504.845:6458): avc: denied { execute } for pid=15996 comm="syz.9.5097" path=2F6D656D66643A01FDAE2E2BA68CB63F32193994532C7C783F55655BBDE1210333BC2723FF179B25F35B64202097F5479741C2D8F05571E62BA56C940BB607175CFB0421E4C4B1A21CFF433B94510DB67D9CEC430BCFEBE49A52E52C8203202864656C6574656429 dev="hugetlbfs" ino=50331 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 160.881261][T15882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.898417][T15882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.910418][T16004] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5100'. [ 160.932747][T15882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.956271][T15882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.045444][T16025] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5107'. [ 161.080458][T15882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.129622][T15882] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.151547][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.158889][ T4826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.180657][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.188112][ T4826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.238389][T16052] atomic_op ffff8881002a7928 conn xmit_atomic 0000000000000000 [ 161.288469][T15882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.445571][T15882] veth0_vlan: entered promiscuous mode [ 161.454558][T15882] veth1_vlan: entered promiscuous mode [ 161.476422][T15882] veth0_macvtap: entered promiscuous mode [ 161.489257][T15882] veth1_macvtap: entered promiscuous mode [ 161.502687][T15882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.515588][T15882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.528277][ T4810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.538209][ T4810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.552558][T16099] netlink: 8 bytes leftover after parsing attributes in process `'. [ 161.563670][ T4810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.577474][ T4826] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.630623][T16108] netlink: 'syz.0.5138': attribute type 5 has an invalid length. [ 161.651918][T16111] netlink: 'syz.4.5139': attribute type 27 has an invalid length. [ 161.674611][T16111] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.681832][T16111] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.716766][T16111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.726636][T16111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.764399][T16118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.781570][T16118] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.804208][T16118] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 161.827367][ T4845] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.839843][T16119] syzkaller1: entered promiscuous mode [ 161.845910][T16119] syzkaller1: entered allmulticast mode [ 161.872666][ T4845] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.893700][ T4845] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.903168][ T4845] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.154813][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5168'. [ 162.193394][T16177] 9pnet_fd: Insufficient options for proto=fd [ 162.249050][T16183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16183 comm=syz.1.5172 [ 162.368216][T16195] SELinux: failed to load policy [ 162.404550][T16205] netlink: 268 bytes leftover after parsing attributes in process `syz.4.5183'. [ 162.432121][T16210] netlink: 'syz.4.5185': attribute type 2 has an invalid length. [ 162.612407][T16227] loop9: detected capacity change from 0 to 512 [ 162.645994][T16229] netlink: 'syz.9.5193': attribute type 13 has an invalid length. [ 162.664262][T16229] gretap0: refused to change device tx_queue_len [ 162.673083][T16229] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 162.851981][T16243] bridge0: port 1(veth0_to_team) entered blocking state [ 162.859455][T16243] bridge0: port 1(veth0_to_team) entered disabled state [ 162.877233][T16243] veth0_to_team: entered allmulticast mode [ 162.884188][T16243] veth0_to_team: entered promiscuous mode [ 162.902490][T16243] veth0_to_team: left allmulticast mode [ 162.908088][T16243] veth0_to_team: left promiscuous mode [ 162.913952][T16243] bridge0: port 1(veth0_to_team) entered disabled state [ 163.070048][T16254] sctp: [Deprecated]: syz.9.5205 (pid 16254) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.070048][T16254] Use struct sctp_sack_info instead [ 163.630597][T16274] netlink: 96 bytes leftover after parsing attributes in process `syz.4.5214'. [ 163.722937][T16287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.731947][T16287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.816370][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5228'. [ 163.827055][T16303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5228'. [ 163.926873][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5235'. [ 163.978443][T16321] $H: renamed from bond0 [ 163.992287][T16305] loop1: detected capacity change from 0 to 32768 [ 163.995093][T16321] $H: entered promiscuous mode [ 164.004316][T16321] bond_slave_0: entered promiscuous mode [ 164.010242][T16321] bond_slave_1: entered promiscuous mode [ 164.016500][T16321] dummy0: entered promiscuous mode [ 164.022043][T16323] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5237'. [ 164.029748][T16305] loop1: p1 p3 < > [ 164.205489][T16352] loop1: detected capacity change from 0 to 512 [ 164.215942][T16352] $H: renamed from bond0 (while UP) [ 164.226921][T16352] $H: entered promiscuous mode [ 164.232156][T16352] bond_slave_0: entered promiscuous mode [ 164.238378][T16352] bond_slave_1: entered promiscuous mode [ 164.270791][T16362] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 164.277993][T16362] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 164.286114][T16362] vhci_hcd vhci_hcd.0: Device attached [ 164.299885][T16362] loop1: detected capacity change from 0 to 512 [ 164.311638][T16362] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 164.329721][T16362] EXT4-fs (loop1): mount failed [ 164.343820][T16363] vhci_hcd: connection closed [ 164.344012][ T4825] vhci_hcd: stop threads [ 164.353793][ T4825] vhci_hcd: release socket [ 164.358222][ T4825] vhci_hcd: disconnect device [ 164.431980][T16354] loop0: detected capacity change from 0 to 32768 [ 164.479522][T16354] loop0: p1 p3 < > [ 164.508331][T16384] netlink: 'syz.4.5261': attribute type 4 has an invalid length. [ 164.526701][T16384] netlink: 'syz.4.5261': attribute type 4 has an invalid length. [ 164.590182][T16390] wireguard0: entered promiscuous mode [ 164.595809][T16390] wireguard0: entered allmulticast mode [ 164.638625][T16398] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5267'. [ 164.649810][T16398] bridge_slave_1: left allmulticast mode [ 164.656109][T16398] bridge_slave_1: left promiscuous mode [ 164.662384][T16398] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.672391][T16398] bridge_slave_0: left allmulticast mode [ 164.678473][T16398] bridge_slave_0: left promiscuous mode [ 164.685188][T16398] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.755801][T16449] SELinux: policydb version 133 does not match my version range 15-35 [ 165.764408][T16449] SELinux: failed to load policy [ 165.795621][ T29] kauditd_printk_skb: 222 callbacks suppressed [ 165.795637][ T29] audit: type=1400 audit(1756461509.848:6680): avc: denied { create } for pid=16453 comm="syz.2.5289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 165.832768][ T29] audit: type=1400 audit(1756461509.888:6681): avc: denied { mount } for pid=16457 comm="syz.2.5291" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 165.927462][ T29] audit: type=1400 audit(1756461509.978:6682): avc: denied { ioctl } for pid=16465 comm="syz.2.5295" path="socket:[51532]" dev="sockfs" ino=51532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 165.973350][T16468] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 165.980036][T16468] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 165.987990][T16468] vhci_hcd vhci_hcd.0: Device attached [ 165.995195][T16471] vhci_hcd: connection closed [ 165.995307][ T4826] vhci_hcd: stop threads [ 166.004820][ T4826] vhci_hcd: release socket [ 166.009524][ T4826] vhci_hcd: disconnect device [ 166.022310][T16470] sch_fq: defrate 4294967295 ignored. [ 166.105827][ T29] audit: type=1400 audit(1756461510.158:6683): avc: denied { write } for pid=16481 comm="syz.9.5300" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 166.109646][T16482] hub 9-0:1.0: USB hub found [ 166.134284][T16482] hub 9-0:1.0: 8 ports detected [ 166.210338][T16492] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5305'. [ 166.245406][ T29] audit: type=1326 audit(1756461510.298:6684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.4.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 166.298618][ T29] audit: type=1326 audit(1756461510.298:6685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.4.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 166.322944][ T29] audit: type=1326 audit(1756461510.298:6686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.4.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 166.347221][ T29] audit: type=1326 audit(1756461510.298:6687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.4.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 166.371483][ T29] audit: type=1326 audit(1756461510.298:6688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.4.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 166.395617][ T29] audit: type=1326 audit(1756461510.298:6689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16497 comm="syz.4.5308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 166.449267][T16504] bond_slave_1: entered promiscuous mode [ 166.455899][T16504] bond_slave_1: left promiscuous mode [ 166.519501][T16506] netlink: 'syz.2.5313': attribute type 21 has an invalid length. [ 166.527595][T16506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5313'. [ 166.563973][T16511] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16511 comm=syz.2.5314 [ 166.732073][ T4847] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.751519][ T4847] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.767438][ T4847] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.777312][ T4847] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 166.936123][T16566] loop1: detected capacity change from 0 to 1024 [ 166.956166][T16566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.985604][T16566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.020735][T16528] chnl_net:caif_netlink_parms(): no params data found [ 167.066844][T13801] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 167.106780][T13801] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 167.139581][T16528] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.146852][T16528] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.166113][T16528] bridge_slave_0: entered allmulticast mode [ 167.175325][T16528] bridge_slave_0: entered promiscuous mode [ 167.186900][T16528] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.194358][T16528] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.259723][T16611] __nla_validate_parse: 6 callbacks suppressed [ 167.259741][T16611] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5358'. [ 167.276494][T16528] bridge_slave_1: entered allmulticast mode [ 167.297723][T16528] bridge_slave_1: entered promiscuous mode [ 167.347270][T16528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.380645][T16528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.410705][T16629] loop0: detected capacity change from 0 to 2048 [ 167.424330][T16528] team0: Port device team_slave_0 added [ 167.433023][T16528] team0: Port device team_slave_1 added [ 167.451377][T16528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.458478][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.484881][T16528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.523481][T16528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.530613][T16528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.557653][T16528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.574364][ T4847] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.586784][T16580] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.597760][T16629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.648800][ T7471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.670883][ T4847] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.700238][T16528] hsr_slave_0: entered promiscuous mode [ 167.706571][T16528] hsr_slave_1: entered promiscuous mode [ 167.718136][T16528] debugfs: 'hsr0' already exists in 'hsr' [ 167.724080][T16528] Cannot create hsr debugfs directory [ 167.731520][T16647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5374'. [ 167.748741][ T4847] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.828874][ T4847] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.920502][ T4847] bridge_slave_1: left allmulticast mode [ 167.928510][ T4847] bridge_slave_1: left promiscuous mode [ 167.934473][ T4847] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.953723][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5385'. [ 167.963277][T16678] netlink: 'syz.0.5385': attribute type 18 has an invalid length. [ 167.999142][ T4847] bridge_slave_0: left allmulticast mode [ 168.005028][ T4847] bridge_slave_0: left promiscuous mode [ 168.010908][ T4847] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.109967][ T4847] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.119981][ T4847] bond_slave_0: left promiscuous mode [ 168.127406][ T4847] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.137382][ T4847] bond_slave_1: left promiscuous mode [ 168.144913][ T4847] $H (unregistering): Released all slaves [ 168.159614][T16678] vxlan1: entered promiscuous mode [ 168.192434][ T4847] hsr_slave_0: left promiscuous mode [ 168.198901][ T4847] hsr_slave_1: left promiscuous mode [ 168.204545][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.212223][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.221782][ T4847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.229494][ T4847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.241061][ T4847] veth1_macvtap: left promiscuous mode [ 168.246757][ T4847] veth0_macvtap: left promiscuous mode [ 168.253814][ T4847] veth1_vlan: left promiscuous mode [ 168.259938][ T4847] veth0_vlan: left promiscuous mode [ 168.330403][ T4847] team0 (unregistering): Port device team_slave_1 removed [ 168.341181][ T4847] team0 (unregistering): Port device team_slave_0 removed [ 168.420144][T16660] chnl_net:caif_netlink_parms(): no params data found [ 168.456590][T16660] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.464199][T16660] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.471939][T16660] bridge_slave_0: entered allmulticast mode [ 168.478591][T16660] bridge_slave_0: entered promiscuous mode [ 168.485422][T16660] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.492777][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.500239][T16660] bridge_slave_1: entered allmulticast mode [ 168.507275][T16660] bridge_slave_1: entered promiscuous mode [ 168.523249][T16660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.533717][T16660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.554281][T16660] team0: Port device team_slave_0 added [ 168.561516][T16660] team0: Port device team_slave_1 added [ 168.579670][T16660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.587224][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.614291][T16660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.630118][T16660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.637197][T16660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.665099][T16660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.714731][T16660] hsr_slave_0: entered promiscuous mode [ 168.730739][T16660] hsr_slave_1: entered promiscuous mode [ 168.739771][T16528] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 168.751182][T16694] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 168.767484][T16528] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 168.798249][T16528] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 168.816404][T16528] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 168.859609][ T4847] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.869760][ T4847] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.886253][T16707] loop4: detected capacity change from 0 to 1024 [ 168.896443][T16707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.925174][T16712] SELinux: policydb version 0 does not match my version range 15-35 [ 168.936478][T16707] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.950159][T16712] SELinux: failed to load policy [ 168.954270][T16528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.975743][ T4847] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.986053][ T4847] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.002023][T15882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.015350][T16528] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.039305][ T4798] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.046943][ T4798] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.080451][ T4847] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.091139][ T4847] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.111444][ T4845] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.118651][ T4845] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.220027][ T4847] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.230286][ T4847] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.306136][T16528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.343286][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5407'. [ 169.406922][T16751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5407'. [ 169.418236][ T4847] bond1 (unregistering): (slave geneve2): Releasing active interface [ 169.431839][T16755] netlink: 256 bytes leftover after parsing attributes in process `syz.0.5412'. [ 169.469819][ T4847] bond0 (unregistering): Released all slaves [ 169.478869][ T4847] bond1 (unregistering): Released all slaves [ 169.526800][T16660] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.539572][T16660] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.549603][T16660] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.559695][T16660] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.577992][ T4847] hsr_slave_0: left promiscuous mode [ 169.584318][ T4847] hsr_slave_1: left promiscuous mode [ 169.593133][ T4847] veth1_macvtap: left promiscuous mode [ 169.599274][ T4847] veth0_macvtap: left promiscuous mode [ 169.606767][ T4847] veth1_vlan: left promiscuous mode [ 169.612482][ T4847] veth0_vlan: left promiscuous mode [ 169.770527][T16660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.778399][ T4830] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 169.783006][T16660] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.802675][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.810600][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.819547][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.826786][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.851820][T16660] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.873016][T16528] veth0_vlan: entered promiscuous mode [ 169.883169][T16528] veth1_vlan: entered promiscuous mode [ 169.899665][T16528] veth0_macvtap: entered promiscuous mode [ 169.907812][T16528] veth1_macvtap: entered promiscuous mode [ 169.919399][T16528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.931743][T16660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.936304][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 169.950778][T16528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.967193][ T52] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.978205][ T52] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.994201][ T52] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.005553][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.037222][T16814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.045952][T16814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.120346][T16660] veth0_vlan: entered promiscuous mode [ 170.129753][T16660] veth1_vlan: entered promiscuous mode [ 170.145517][T16660] veth0_macvtap: entered promiscuous mode [ 170.154101][T16660] veth1_macvtap: entered promiscuous mode [ 170.165966][T16660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.176367][T16826] netlink: 100 bytes leftover after parsing attributes in process `syz.7.5425'. [ 170.181206][T16660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.197575][ T4826] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.212157][ T4826] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.226470][ T4826] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.242876][ T4826] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.337205][T16841] loop5: detected capacity change from 0 to 1024 [ 170.344498][T16841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 170.376777][T16841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.404007][T16660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.427172][T16849] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 170.433900][T16849] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.442199][T16849] vhci_hcd vhci_hcd.0: Device attached [ 170.449527][T16850] vhci_hcd: connection closed [ 170.449789][ T4847] vhci_hcd: stop threads [ 170.459471][ T4847] vhci_hcd: release socket [ 170.464177][ T4847] vhci_hcd: disconnect device [ 170.727571][T16871] netlink: 'syz.4.5444': attribute type 5 has an invalid length. [ 170.828740][T16880] loop0: detected capacity change from 0 to 512 [ 170.840561][T16880] EXT4-fs error (device loop0): ext4_xattr_inode_iget:442: comm syz.0.5449: error while reading EA inode 32 err=-116 [ 170.853893][T16880] EXT4-fs (loop0): Remounting filesystem read-only [ 170.860727][T16880] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 170.871702][T16880] EXT4-fs (loop0): 1 orphan inode deleted [ 170.876992][T16885] netlink: 'syz.2.5450': attribute type 27 has an invalid length. [ 170.878857][T16880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.901564][T16880] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.905930][ T36] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 170.920278][T16885] $H: left promiscuous mode [ 170.925166][T16885] bond_slave_0: left promiscuous mode [ 170.931018][T16885] bond_slave_1: left promiscuous mode [ 170.936867][T16885] dummy0: left promiscuous mode [ 170.949935][ T52] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20003 - 0 [ 170.959643][ T52] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20003 - 0 [ 170.990390][T16888] bridge0: port 3(syz_tun) entered blocking state [ 170.997340][T16888] bridge0: port 3(syz_tun) entered forwarding state [ 171.007517][ T29] kauditd_printk_skb: 171 callbacks suppressed [ 171.007532][ T29] audit: type=1400 audit(1756461515.070:6861): avc: denied { getopt } for pid=16891 comm="syz.5.5454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 171.008027][T16888] 8021q: adding VLAN 0 to HW filter on device $H [ 171.042706][T16888] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.053545][T16888] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 171.070679][ T52] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20003 - 0 [ 171.080527][ T52] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20003 - 0 [ 171.098184][T16898] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5456'. [ 171.189735][T16902] syzkaller1: entered promiscuous mode [ 171.195880][T16902] syzkaller1: entered allmulticast mode [ 171.280035][ T29] audit: type=1326 audit(1756461515.341:6862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.320826][ T29] audit: type=1326 audit(1756461515.341:6863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.347513][ T29] audit: type=1326 audit(1756461515.361:6864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.373328][ T29] audit: type=1326 audit(1756461515.371:6865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.398381][ T29] audit: type=1326 audit(1756461515.371:6866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.423117][ T29] audit: type=1326 audit(1756461515.371:6867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.447726][ T29] audit: type=1326 audit(1756461515.371:6868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.471857][ T29] audit: type=1326 audit(1756461515.371:6869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.496097][ T29] audit: type=1326 audit(1756461515.371:6870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16907 comm="syz.7.5460" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe483d6ebe9 code=0x7ffc0000 [ 171.575980][T16918] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5464'. [ 171.585270][T16918] syz_tun: left allmulticast mode [ 171.591360][T16918] syz_tun: left promiscuous mode [ 171.596793][T16918] bridge0: port 3(syz_tun) entered disabled state [ 171.633562][T16924] 9pnet_fd: Insufficient options for proto=fd [ 171.651169][T16918] bridge_slave_1: left allmulticast mode [ 171.657001][T16918] bridge_slave_1: left promiscuous mode [ 171.662944][T16918] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.680231][T16932] serio: Serial port ptm0 [ 171.686414][T16918] bridge_slave_0: left promiscuous mode [ 171.692287][T16918] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.855339][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 171.889430][T16955] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 171.896324][T16955] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 171.904640][T16955] vhci_hcd vhci_hcd.0: Device attached [ 171.925151][T16955] loop5: detected capacity change from 0 to 512 [ 171.956706][T16955] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.982231][T16955] EXT4-fs (loop5): mount failed [ 171.993692][T16956] vhci_hcd: connection closed [ 171.993961][ T4830] vhci_hcd: stop threads [ 172.003987][ T4830] vhci_hcd: release socket [ 172.008824][ T4830] vhci_hcd: disconnect device [ 172.026089][T16963] netlink: 268 bytes leftover after parsing attributes in process `syz.2.5478'. [ 172.218144][T16991] netlink: 'syz.0.5492': attribute type 10 has an invalid length. [ 172.227298][T16991] dummy0: left allmulticast mode [ 172.232504][T16991] bridge0: port 3(dummy0) entered disabled state [ 172.242383][T16991] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 172.518919][T17027] netlink: 'syz.5.5508': attribute type 10 has an invalid length. [ 172.560173][T17027] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.632595][T17037] loop7: detected capacity change from 0 to 512 [ 172.651632][T17037] EXT4-fs error (device loop7): ext4_xattr_inode_iget:442: comm syz.7.5514: error while reading EA inode 32 err=-116 [ 172.675487][T17037] EXT4-fs (loop7): Remounting filesystem read-only [ 172.682520][T17037] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 172.719972][T17037] EXT4-fs (loop7): 1 orphan inode deleted [ 172.743619][T17037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.799829][T17037] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.947131][T17064] loop7: detected capacity change from 0 to 164 [ 172.950149][T17066] loop0: detected capacity change from 0 to 512 [ 172.990123][T17066] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.024208][T17075] __nla_validate_parse: 1 callbacks suppressed [ 173.024227][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5529'. [ 173.061183][T17075] bridge_slave_1: left allmulticast mode [ 173.067292][T17075] bridge_slave_1: left promiscuous mode [ 173.073272][T17075] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.082905][T17066] ext4 filesystem being mounted at /679/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.112444][T17075] bridge_slave_0: left allmulticast mode [ 173.118554][T17075] bridge_slave_0: left promiscuous mode [ 173.124454][T17075] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.157031][ T7471] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.290308][T17093] loop4: detected capacity change from 0 to 512 [ 173.327067][T17093] EXT4-fs error (device loop4): ext4_xattr_inode_iget:442: comm syz.4.5535: error while reading EA inode 32 err=-116 [ 173.341642][T17093] EXT4-fs (loop4): Remounting filesystem read-only [ 173.348292][T17093] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 173.359829][T17093] EXT4-fs (loop4): 1 orphan inode deleted [ 173.366042][T17093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.432548][T17093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.468121][T17108] netlink: 'syz.0.5542': attribute type 4 has an invalid length. [ 173.481332][T17108] netlink: 'syz.0.5542': attribute type 4 has an invalid length. [ 173.551291][T17089] netlink: 'syz.2.5544': attribute type 10 has an invalid length. [ 173.625829][T17120] netlink: 'syz.0.5558': attribute type 27 has an invalid length. [ 173.733027][T17120] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.733191][T17120] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.746365][T17120] dummy0: left promiscuous mode [ 173.790379][T17120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.792355][T17120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.825650][T17138] SELinux: security policydb version 17 (MLS) not backwards compatible [ 173.825752][T17138] SELinux: failed to load policy [ 173.839446][T17120] vxlan1: left promiscuous mode [ 173.869600][T17128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.889434][T17128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 173.889689][ T52] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.889736][ T52] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.889776][ T52] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.889845][ T52] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.889876][ T52] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.889904][ T52] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.889942][ T52] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 173.890038][ T52] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.931092][T17144] loop5: detected capacity change from 0 to 512 [ 173.938746][T17144] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.5557: error while reading EA inode 32 err=-116 [ 173.938872][T17144] EXT4-fs (loop5): Remounting filesystem read-only [ 173.938889][T17144] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 173.938916][T17144] EXT4-fs (loop5): 1 orphan inode deleted [ 173.939343][T17144] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.940141][T17144] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.876979][T17228] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5590'. [ 174.986110][T17220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.008503][T17220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.291141][T17272] SELinux: failed to load policy [ 175.516538][T17299] pim6reg: entered allmulticast mode [ 175.529269][T17299] pim6reg: left allmulticast mode [ 175.631486][T17319] loop4: detected capacity change from 0 to 512 [ 175.672686][T17319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.694140][T17319] ext4 filesystem being mounted at /111/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.767693][T15882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.897092][ T4830] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.906670][ T4830] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.926697][ T4830] $H (unregistering): (slave dummy0): Releasing backup interface [ 175.939524][ T4830] $H (unregistering): Released all slaves [ 175.951267][ T4830] bond1 (unregistering): Released all slaves [ 175.960604][ T4830] bond2 (unregistering): Released all slaves [ 176.009757][ T4830] IPVS: stopping backup sync thread 12907 ... [ 176.026519][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.034411][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.052549][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 176.052567][ T29] audit: type=1400 audit(1756461520.120:7140): avc: denied { write } for pid=17372 comm="syz.5.5615" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 176.106384][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 176.120660][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 176.128967][T17387] netlink: 'syz.5.5616': attribute type 4 has an invalid length. [ 176.222113][T17307] chnl_net:caif_netlink_parms(): no params data found [ 176.261044][ T29] audit: type=1326 audit(1756461520.330:7141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17406 comm="syz.5.5620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00208cebe9 code=0x7ffc0000 [ 176.285865][ T29] audit: type=1326 audit(1756461520.330:7142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17406 comm="syz.5.5620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00208cebe9 code=0x7ffc0000 [ 176.317073][ T29] audit: type=1326 audit(1756461520.330:7143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17406 comm="syz.5.5620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f00208cebe9 code=0x7ffc0000 [ 176.341797][ T29] audit: type=1326 audit(1756461520.330:7144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17406 comm="syz.5.5620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00208cebe9 code=0x7ffc0000 [ 176.366394][ T29] audit: type=1326 audit(1756461520.330:7145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17406 comm="syz.5.5620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00208cebe9 code=0x7ffc0000 [ 176.410123][T17307] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.417458][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.429043][T17307] bridge_slave_0: entered allmulticast mode [ 176.442453][T17307] bridge_slave_0: entered promiscuous mode [ 176.451775][T17307] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.459445][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.467786][T17307] bridge_slave_1: entered allmulticast mode [ 176.474952][T17307] bridge_slave_1: entered promiscuous mode [ 176.487427][ T4830] IPVS: stop unused estimator thread 0... [ 176.501848][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.512996][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.540511][T17307] team0: Port device team_slave_0 added [ 176.552655][T17307] team0: Port device team_slave_1 added [ 176.578192][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.585513][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.613206][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.634695][ T4830] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.654686][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.662302][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.671201][ T29] audit: type=1400 audit(1756461520.740:7146): avc: denied { mount } for pid=17442 comm="syz.5.5629" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 176.688870][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.723257][ T29] audit: type=1400 audit(1756461520.740:7147): avc: denied { search } for pid=17442 comm="syz.5.5629" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.746023][ T29] audit: type=1400 audit(1756461520.740:7148): avc: denied { search } for pid=17442 comm="syz.5.5629" name="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.769248][ T29] audit: type=1400 audit(1756461520.740:7149): avc: denied { read open } for pid=17442 comm="syz.5.5629" path="/" dev="configfs" ino=992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 176.817541][T17307] hsr_slave_0: entered promiscuous mode [ 176.828057][T17307] hsr_slave_1: entered promiscuous mode [ 176.836362][T17307] debugfs: 'hsr0' already exists in 'hsr' [ 176.842146][T17307] Cannot create hsr debugfs directory [ 176.850355][ T4830] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.918437][ T4830] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.938835][T17401] chnl_net:caif_netlink_parms(): no params data found [ 176.962677][ T4830] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.070432][T17475] pim6reg1: entered promiscuous mode [ 177.075914][T17475] pim6reg1: entered allmulticast mode [ 177.111769][T17483] netlink: 'syz.4.5645': attribute type 2 has an invalid length. [ 177.119625][T17483] netlink: 'syz.4.5645': attribute type 1 has an invalid length. [ 177.127636][T17483] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.5645'. [ 177.142327][ T4830] bridge_slave_1: left allmulticast mode [ 177.148253][ T4830] bridge_slave_1: left promiscuous mode [ 177.154143][ T4830] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.165038][ T4830] bridge_slave_0: left allmulticast mode [ 177.170914][ T4830] bridge_slave_0: left promiscuous mode [ 177.177135][ T4830] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.267528][ T4830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.279262][ T4830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.294598][ T4830] bond0 (unregistering): Released all slaves [ 177.308621][T17401] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.315932][T17401] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.324639][T17401] bridge_slave_0: entered allmulticast mode [ 177.331499][T17401] bridge_slave_0: entered promiscuous mode [ 177.338739][T17487] netlink: 'syz.4.5647': attribute type 2 has an invalid length. [ 177.353151][T17401] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.360495][T17401] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.389505][T17401] bridge_slave_1: entered allmulticast mode [ 177.405524][T17401] bridge_slave_1: entered promiscuous mode [ 177.422747][ T4830] hsr_slave_0: left promiscuous mode [ 177.435780][ T4830] hsr_slave_1: left promiscuous mode [ 177.442199][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.449962][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.459675][ T4830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.467599][ T4830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.502360][ T4830] veth1_macvtap: left promiscuous mode [ 177.514648][ T4830] veth0_macvtap: left promiscuous mode [ 177.529583][ T4830] veth1_vlan: left promiscuous mode [ 177.537527][ T4830] veth0_vlan: left promiscuous mode [ 177.635302][ T4830] team0 (unregistering): Port device team_slave_1 removed [ 177.645289][ T4830] team0 (unregistering): Port device team_slave_0 removed [ 177.730543][T17401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.741471][T17401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.770625][T17401] team0: Port device team_slave_0 added [ 177.782201][T17401] team0: Port device team_slave_1 added [ 177.836272][T17401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.843259][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.869968][T17401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.889534][T17401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.896683][T17401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.923900][T17401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.937078][T17534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5669'. [ 177.946107][T17534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5669'. [ 177.957707][T17307] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 178.011257][T17307] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 178.034751][T17307] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 178.051436][T17307] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 178.069262][T17401] hsr_slave_0: entered promiscuous mode [ 178.078765][T17552] SELinux: failed to load policy [ 178.084868][T17401] hsr_slave_1: entered promiscuous mode [ 178.097836][T17401] debugfs: 'hsr0' already exists in 'hsr' [ 178.103770][T17401] Cannot create hsr debugfs directory [ 178.173199][T17307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.207951][T17307] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.236683][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.243923][ T4826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.281127][ T4826] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.288431][ T4826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.302217][T17575] tipc: Started in network mode [ 178.307303][T17575] tipc: Node identity ac14140f, cluster identity 4711 [ 178.315563][T17575] tipc: New replicast peer: 255.255.255.83 [ 178.321645][T17575] tipc: Enabled bearer , priority 10 [ 178.465636][T17307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.499224][T17597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.535895][T17597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.682286][T17401] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 178.698040][T17401] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 178.707908][T17401] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 178.717528][T17401] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 178.743292][T17307] veth0_vlan: entered promiscuous mode [ 178.772181][T17307] veth1_vlan: entered promiscuous mode [ 178.806576][T17307] veth0_macvtap: entered promiscuous mode [ 178.823926][T17401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.833142][T17307] veth1_macvtap: entered promiscuous mode [ 178.851464][T17307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.862157][T17307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.901668][ T4810] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.927952][T17401] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.951276][ T4810] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.964564][ T4830] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.972346][ T4830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.995591][ T4810] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.010837][ T4810] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.033757][ T4830] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.040970][ T4830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.217455][T17644] SELinux: failed to load policy [ 179.223928][T17652] pim6reg1: entered promiscuous mode [ 179.229779][T17652] pim6reg1: entered allmulticast mode [ 179.273766][T17401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.315205][ T10] tipc: Node number set to 2886997007 [ 179.350536][T17661] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5708'. [ 179.530864][T17401] veth0_vlan: entered promiscuous mode [ 179.558497][T17401] veth1_vlan: entered promiscuous mode [ 179.568257][T17678] netlink: 268 bytes leftover after parsing attributes in process `+}[@'. [ 179.603084][T17401] veth0_macvtap: entered promiscuous mode [ 179.637205][T17401] veth1_macvtap: entered promiscuous mode [ 179.708361][T17401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.750540][T17401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.805153][ T4798] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.839374][ T4798] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.866438][ T4830] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.902293][ T4830] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.922134][T17702] IPv6: Can't replace route, no match found [ 179.957160][ T7649] IPVS: starting estimator thread 0... [ 180.045431][T17708] IPVS: using max 2976 ests per chain, 148800 per kthread [ 180.100756][T17738] loop4: detected capacity change from 0 to 512 [ 180.108874][T17738] EXT4-fs: Ignoring removed mblk_io_submit option [ 180.116490][ T4810] IPVS: stop unused estimator thread 0... [ 180.117257][T17738] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 180.142571][T17738] EXT4-fs (loop4): 1 truncate cleaned up [ 180.151184][T17738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 180.182584][T17740] loop3: detected capacity change from 0 to 512 [ 180.194617][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5744'. [ 180.195842][T17749] FAT-fs (loop1): bogus number of reserved sectors [ 180.210589][T17749] FAT-fs (loop1): Can't find a valid FAT filesystem [ 180.226038][T17740] EXT4-fs (loop3): too many log groups per flexible block group [ 180.233914][T17740] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 180.252859][T15882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 180.263130][T17740] EXT4-fs (loop3): mount failed [ 180.393404][T17778] I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 180.404376][T17778] FAT-fs (loop13): unable to read boot sector [ 180.449566][T17789] sd 0:0:1:0: device reset [ 180.808412][T17843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5786'. [ 180.822768][T17843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.842216][T17829] loop5: detected capacity change from 0 to 8192 [ 180.843953][T17845] 9pnet: Could not find request transport: Z( [ 180.858109][T17843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.902933][T17852] wireguard0: entered promiscuous mode [ 180.908569][T17852] wireguard0: entered allmulticast mode [ 181.086495][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 181.086513][ T29] audit: type=1400 audit(1756461525.160:7305): avc: denied { bind } for pid=17870 comm="syz.0.5798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 181.478570][ T29] audit: type=1326 audit(1756461525.550:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 181.503070][ T29] audit: type=1326 audit(1756461525.550:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 181.527617][ T29] audit: type=1326 audit(1756461525.550:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8e3782d550 code=0x7ffc0000 [ 181.552427][ T29] audit: type=1326 audit(1756461525.550:7309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 181.576655][ T29] audit: type=1326 audit(1756461525.550:7310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 181.600632][ T29] audit: type=1326 audit(1756461525.550:7311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 181.624316][ T29] audit: type=1326 audit(1756461525.550:7312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 181.648340][ T29] audit: type=1326 audit(1756461525.550:7313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17892 comm="syz.0.5809" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e3782ebe9 code=0x7ffc0000 [ 181.710847][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5814'. [ 181.735393][ T29] audit: type=1326 audit(1756461525.670:7314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17895 comm="syz.3.5810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5ff0ebe9 code=0x7ffc0000 [ 181.796373][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5822'. [ 181.806379][T17920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5822'. [ 181.830745][ T10] IPVS: starting estimator thread 0... [ 181.844831][T17925] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5823'. [ 181.859330][T17928] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5825'. [ 181.912713][T17938] syz.0.5830: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 181.927557][T17938] CPU: 1 UID: 0 PID: 17938 Comm: syz.0.5830 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 181.927602][T17938] Tainted: [W]=WARN [ 181.927610][T17938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.927625][T17938] Call Trace: [ 181.927635][T17938] [ 181.927643][T17938] __dump_stack+0x1d/0x30 [ 181.927744][T17938] dump_stack_lvl+0xe8/0x140 [ 181.927766][T17938] dump_stack+0x15/0x1b [ 181.927782][T17938] warn_alloc+0x12b/0x1a0 [ 181.927818][T17938] __vmalloc_node_range_noprof+0x9c/0xe00 [ 181.927904][T17938] ? __futex_wait+0x1ff/0x260 [ 181.927934][T17938] ? __pfx_futex_wake_mark+0x10/0x10 [ 181.927968][T17938] ? __rcu_read_unlock+0x4f/0x70 [ 181.927994][T17938] ? avc_has_perm_noaudit+0x1b1/0x200 [ 181.928022][T17938] ? should_fail_ex+0x30/0x280 [ 181.928042][T17938] ? xskq_create+0x36/0xe0 [ 181.928144][T17938] vmalloc_user_noprof+0x7d/0xb0 [ 181.928188][T17938] ? xskq_create+0x80/0xe0 [ 181.928227][T17938] xskq_create+0x80/0xe0 [ 181.928288][T17938] xsk_init_queue+0x95/0xf0 [ 181.928354][T17938] xsk_setsockopt+0x477/0x640 [ 181.928395][T17938] ? __pfx_xsk_setsockopt+0x10/0x10 [ 181.928420][T17938] __sys_setsockopt+0x184/0x200 [ 181.928443][T17938] __x64_sys_setsockopt+0x64/0x80 [ 181.928461][T17938] x64_sys_call+0x20ec/0x2ff0 [ 181.928483][T17938] do_syscall_64+0xd2/0x200 [ 181.928550][T17938] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.928644][T17938] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.928665][T17938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.928684][T17938] RIP: 0033:0x7f8e3782ebe9 [ 181.928709][T17938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.928728][T17938] RSP: 002b:00007f8e3628f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.928756][T17938] RAX: ffffffffffffffda RBX: 00007f8e37a55fa0 RCX: 00007f8e3782ebe9 [ 181.928769][T17938] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 181.928780][T17938] RBP: 00007f8e378b1e19 R08: 0000000000000004 R09: 0000000000000000 [ 181.928790][T17938] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 181.928810][T17938] R13: 00007f8e37a56038 R14: 00007f8e37a55fa0 R15: 00007ffc4c875908 [ 181.928830][T17938] [ 181.928910][T17938] Mem-Info: [ 181.941769][T17926] IPVS: using max 2880 ests per chain, 144000 per kthread [ 181.944419][T17938] active_anon:27366 inactive_anon:32 isolated_anon:0 [ 181.944419][T17938] active_file:17075 inactive_file:13075 isolated_file:0 [ 181.944419][T17938] unevictable:0 dirty:213 writeback:0 [ 181.944419][T17938] slab_reclaimable:3605 slab_unreclaimable:31467 [ 181.944419][T17938] mapped:28796 shmem:17243 pagetables:1171 [ 181.944419][T17938] sec_pagetables:0 bounce:0 [ 181.944419][T17938] kernel_misc_reclaimable:0 [ 181.944419][T17938] free:1818748 free_pcp:24009 free_cma:0 [ 182.220237][T17938] Node 0 active_anon:109464kB inactive_anon:128kB active_file:68300kB inactive_file:52300kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:115184kB dirty:852kB writeback:0kB shmem:68972kB kernel_stack:4304kB pagetables:4684kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 182.249328][T17938] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.278920][T17938] lowmem_reserve[]: 0 2883 7862 7862 [ 182.284451][T17938] Node 0 DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3532kB free_cma:0kB [ 182.315639][T17938] lowmem_reserve[]: 0 0 4978 4978 [ 182.320843][T17938] Node 0 Normal free:4310436kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:109464kB inactive_anon:128kB active_file:68300kB inactive_file:52300kB unevictable:0kB writepending:852kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:92356kB local_pcp:19196kB free_cma:0kB [ 182.354282][T17938] lowmem_reserve[]: 0 0 0 0 [ 182.358936][T17938] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.371942][T17938] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 182.388382][T17938] Node 0 Normal: 778*4kB (UM) 254*8kB (UME) 380*16kB (UME) 133*32kB (UME) 57*64kB (UME) 16*128kB (UM) 5*256kB (UE) 89*512kB (UE) 89*1024kB (UM) 33*2048kB (UM) 997*4096kB (UM) = 4310456kB [ 182.407374][T17938] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 182.417384][T17938] 47410 total pagecache pages [ 182.422233][T17938] 35 pages in swap cache [ 182.426574][T17938] Free swap = 124856kB [ 182.431100][T17938] Total swap = 124996kB [ 182.435550][T17938] 2097051 pages RAM [ 182.439554][T17938] 0 pages HighMem/MovableOnly [ 182.444390][T17938] 80444 pages reserved [ 182.471663][T17942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17942 comm=syz.4.5832 [ 182.527520][T17948] wireguard0: entered promiscuous mode [ 182.533349][T17948] wireguard0: entered allmulticast mode [ 182.551850][T17950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5836'. [ 182.620390][T17961] loop5: detected capacity change from 0 to 512 [ 182.638291][T17961] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.5841: iget: bad extended attribute block 1 [ 182.672269][T17961] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.5841: couldn't read orphan inode 15 (err -117) [ 182.692502][T17961] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.738034][T16660] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.755488][T17976] tmpfs: Bad value for 'mpol' [ 182.887769][T17985] macsec0: entered promiscuous mode [ 183.058762][T18014] netlink: 'syz.5.5866': attribute type 13 has an invalid length. [ 183.076405][ T52] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.086315][T18014] netlink: 'syz.5.5866': attribute type 13 has an invalid length. [ 183.100016][ T52] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.109782][ T52] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.122153][ T52] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.218256][T18047] loop3: detected capacity change from 0 to 512 [ 183.228971][T18047] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 183.274636][T18047] EXT4-fs (loop3): 1 truncate cleaned up [ 183.287540][T18055] openvswitch: netlink: Message has 6 unknown bytes. [ 183.296839][T18047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.337028][T18062] netlink: 'syz.4.5888': attribute type 13 has an invalid length. [ 183.358514][T18062] netlink: 'syz.4.5888': attribute type 13 has an invalid length. [ 183.364195][ T4830] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.460987][ T4830] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.475544][ T4830] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.486451][ T4830] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.499434][T17401] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.690341][T18093] sd 0:0:1:0: device reset [ 183.764188][T18111] loop5: detected capacity change from 0 to 128 [ 183.788781][T18111] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002] [ 183.816475][T18105] veth1_macvtap: left promiscuous mode [ 183.822341][T18105] macsec0: entered promiscuous mode [ 183.828122][T18111] System zones: 1-3, 19-19, 35-36 [ 183.835668][T18111] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 183.859500][T18111] ext4 filesystem being mounted at /116/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 183.943615][T16660] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 184.150138][ T4798] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.160683][ T4798] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.199126][T18152] macsec0: entered promiscuous mode [ 184.238063][ T4798] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.248688][ T4798] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.298429][ T4798] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.309241][ T4798] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.370500][ T4798] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.381077][ T4798] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.491057][T18154] chnl_net:caif_netlink_parms(): no params data found [ 184.580583][T18196] netlink: 'syz.0.5944': attribute type 3 has an invalid length. [ 184.619400][ T4798] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.629986][ T4798] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.642125][ T4798] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 184.651898][ T4798] bond0 (unregistering): Released all slaves [ 184.678577][T18154] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.686098][T18154] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.695412][T18154] bridge_slave_0: entered allmulticast mode [ 184.702361][T18154] bridge_slave_0: entered promiscuous mode [ 184.709741][ T4798] tipc: Disabling bearer [ 184.714759][ T4798] tipc: Left network mode [ 184.719866][T18154] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.727332][T18154] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.735379][T18154] bridge_slave_1: entered allmulticast mode [ 184.742957][T18154] bridge_slave_1: entered promiscuous mode [ 184.752017][ T4798] hsr_slave_0: left promiscuous mode [ 184.758287][ T4798] hsr_slave_1: left promiscuous mode [ 184.764465][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.772398][ T4798] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.780660][ T4798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.788610][ T4798] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.798288][ T4798] veth1_macvtap: left promiscuous mode [ 184.803802][ T4798] veth0_macvtap: left promiscuous mode [ 184.809727][ T4798] veth1_vlan: left promiscuous mode [ 184.815261][ T4798] veth0_vlan: left promiscuous mode [ 184.900382][ T4798] team0 (unregistering): Port device team_slave_1 removed [ 184.910492][ T4798] team0 (unregistering): Port device team_slave_0 removed [ 184.971676][T18154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.992913][T18154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.020639][T18154] team0: Port device team_slave_0 added [ 185.027954][T18154] team0: Port device team_slave_1 added [ 185.049618][T18154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.057013][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.084267][T18154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.104114][T18154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.111203][T18154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.137356][T18154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.225766][T18231] bond1: entered promiscuous mode [ 185.230935][T18231] bond1: entered allmulticast mode [ 185.252272][T18231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 185.263021][T18231] bond1 (unregistering): Released all slaves [ 185.290775][T18154] hsr_slave_0: entered promiscuous mode [ 185.297029][T18154] hsr_slave_1: entered promiscuous mode [ 185.400316][T18253] __nla_validate_parse: 8 callbacks suppressed [ 185.400330][T18253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5969'. [ 185.558022][T18154] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.582838][T18154] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.593548][T18154] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.603486][T18154] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.691817][T18154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.718538][T18154] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.744311][ T4826] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.751619][ T4826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.769440][ T4798] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.776920][ T4798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.856512][T18328] vhci_hcd: invalid port number 236 [ 185.863079][T18328] vhci_hcd: default hub control req: 2317 v7fff i00ec l0 [ 185.875453][T18324] SELinux: ebitmap: truncated map [ 185.885848][T18154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.888389][T18324] SELinux: failed to load policy [ 185.989223][T18350] IPv6: Can't replace route, no match found [ 186.030610][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6011'. [ 186.118843][T18154] veth0_vlan: entered promiscuous mode [ 186.129517][T18154] veth1_vlan: entered promiscuous mode [ 186.142769][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 186.142786][ T29] audit: type=1400 audit(1756461530.210:7500): avc: denied { bind } for pid=18373 comm="syz.3.6018" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.150769][T18154] veth0_macvtap: entered promiscuous mode [ 186.187584][T18154] veth1_macvtap: entered promiscuous mode [ 186.203059][T18154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.220944][T18154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.234376][ T52] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.254525][ T52] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.272982][ T52] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.301773][ T52] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.329275][ T29] audit: type=1326 audit(1756461530.400:7501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.354422][ T29] audit: type=1326 audit(1756461530.400:7502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.381469][ T29] audit: type=1326 audit(1756461530.400:7503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.406057][ T29] audit: type=1326 audit(1756461530.400:7504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.430203][ T29] audit: type=1326 audit(1756461530.400:7505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.474800][ T29] audit: type=1326 audit(1756461530.480:7506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.499954][ T29] audit: type=1326 audit(1756461530.480:7507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.524226][ T29] audit: type=1326 audit(1756461530.480:7508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.548508][ T29] audit: type=1326 audit(1756461530.530:7509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18389 comm="syz.6.6026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f791517ebe9 code=0x7ffc0000 [ 186.578895][T18398] netlink: 'syz.5.5927': attribute type 1 has an invalid length. [ 186.587251][T18398] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5927'. [ 186.828493][T18428] loop4: detected capacity change from 0 to 2048 [ 186.855743][T18430] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6043'. [ 186.884377][T18428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 186.941632][T15882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.994590][T18448] loop5: detected capacity change from 0 to 4096 [ 187.006459][T18448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 187.033339][T18154] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.146192][T18480] loop3: detected capacity change from 0 to 128 [ 187.157634][T18480] syz.3.6064: attempt to access beyond end of device [ 187.157634][T18480] loop3: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 187.228550][T18494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6071'. [ 187.270592][T18501] SELinux: security policydb version 17 (MLS) not backwards compatible [ 187.280026][T18501] SELinux: failed to load policy [ 187.314656][T18508] netlink: 7 bytes leftover after parsing attributes in process `syz.5.6078'. [ 187.328135][T18508] netlink: 7 bytes leftover after parsing attributes in process `syz.5.6078'. [ 187.381715][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 187.390900][T18520] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6084'. [ 187.400326][T18520] netlink: 'syz.3.6084': attribute type 20 has an invalid length. [ 187.412522][ T4826] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.421946][T18520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6084'. [ 187.431078][T18520] netlink: 'syz.3.6084': attribute type 20 has an invalid length. [ 187.440494][ T4830] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.455522][ T52] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.464431][ T52] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.784070][T18593] IPv6: Can't replace route, no match found [ 187.931856][T18622] netlink: 'syz.4.6130': attribute type 1 has an invalid length. [ 188.109422][ T3390] hid_parser_main: 43 callbacks suppressed [ 188.109442][ T3390] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 188.131907][ T3390] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 189.292456][T18760] loop5: detected capacity change from 0 to 256 [ 189.309078][T18760] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 190.200708][T18847] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 190.208127][ T3390] IPVS: starting estimator thread 0... [ 190.318442][T18855] IPVS: using max 2928 ests per chain, 146400 per kthread [ 190.340402][T18873] atomic_op ffff888122586928 conn xmit_atomic 0000000000000000 [ 190.384690][T18875] 0: renamed from hsr0 [ 190.396299][T18875] 0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 190.406913][T18875] 0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 190.485209][T18875] 0: entered allmulticast mode [ 190.490252][T18875] hsr_slave_0: entered allmulticast mode [ 190.496056][T18875] hsr_slave_1: entered allmulticast mode [ 190.511015][T18875] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 190.601692][T18899] loop5: detected capacity change from 0 to 128 [ 190.609308][T18899] msdos: Unknown parameter 'dot' [ 190.616816][T18901] __nla_validate_parse: 7 callbacks suppressed [ 190.616899][T18901] netlink: 96 bytes leftover after parsing attributes in process `syz.4.6200'. [ 190.691152][T18911] netlink: 'syz.3.6205': attribute type 1 has an invalid length. [ 190.742233][T18915] netlink: 536 bytes leftover after parsing attributes in process `syz.5.6207'. [ 190.771715][T18915] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6207'. [ 190.872777][T18939] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6220'. [ 190.945530][ T4826] nci: nci_rsp_packet: unsupported rsp opcode 0xf03 [ 191.059668][T18972] IPv6: Can't replace route, no match found [ 191.121236][T18982] atomic_op ffff888122587d28 conn xmit_atomic 0000000000000000 [ 191.153974][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 191.153991][ T29] audit: type=1400 audit(1756461535.220:7897): avc: denied { mounton } for pid=18987 comm="syz.5.6241" path="/51/file0" dev="tmpfs" ino=278 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 191.154724][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/0:2 [ 191.199601][T18988] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 191.224561][ T29] audit: type=1326 audit(1756461535.290:7898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 191.250560][ T29] audit: type=1326 audit(1756461535.290:7899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 191.275338][ T29] audit: type=1326 audit(1756461535.290:7900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18991 comm="syz.4.6243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 191.303238][T18995] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6245'. [ 191.313199][T18995] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 191.316509][ T29] audit: type=1400 audit(1756461535.380:7901): avc: denied { create } for pid=18997 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.344888][ T29] audit: type=1400 audit(1756461535.390:7902): avc: denied { shutdown } for pid=18997 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.367783][ T29] audit: type=1400 audit(1756461535.440:7903): avc: denied { getopt } for pid=18997 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.387482][ T29] audit: type=1400 audit(1756461535.440:7904): avc: denied { connect } for pid=18997 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 191.404172][T19002] netlink: 'syz.5.6248': attribute type 22 has an invalid length. [ 191.407118][ T29] audit: type=1400 audit(1756461535.440:7905): avc: denied { name_connect } for pid=18997 comm="+}[@" dest=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 191.415329][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6248'. [ 191.421934][ T52] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.447984][T19002] netlink: 'syz.5.6248': attribute type 22 has an invalid length. [ 191.464782][T19002] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6248'. [ 191.476509][ T52] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.485918][ T52] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.496293][ T52] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.553817][ T29] audit: type=1400 audit(1756461535.620:7906): avc: denied { watch watch_reads } for pid=19009 comm="syz.5.6252" path="/55" dev="tmpfs" ino=294 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 191.611798][T19017] 9pnet_fd: Insufficient options for proto=fd [ 191.653542][ T3390] IPVS: starting estimator thread 0... [ 191.679874][T19020] loop5: detected capacity change from 0 to 128 [ 191.693994][T19020] syz.5.6256: attempt to access beyond end of device [ 191.693994][T19020] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 191.712180][T19019] syz.5.6256: attempt to access beyond end of device [ 191.712180][T19019] loop5: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 191.726289][T19019] Buffer I/O error on dev loop5, logical block 69, lost async page write [ 191.765365][T19018] IPVS: using max 2880 ests per chain, 144000 per kthread [ 191.800367][T19034] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 191.811621][T19034] FAT-fs (loop7): unable to read boot sector [ 191.901537][T19055] netlink: 204 bytes leftover after parsing attributes in process `syz.0.6273'. [ 192.048755][T19084] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6285'. [ 192.071121][T19084] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 192.116626][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.124436][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.132253][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.140549][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.148194][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.156327][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.164109][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.171693][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.179761][ T10] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 192.192957][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v8.00 Device [syz0] on syz0 [ 192.200899][T19095] SELinux: policydb version -25284851 does not match my version range 15-35 [ 192.213545][T19095] SELinux: failed to load policy [ 192.452506][T19121] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 192.767073][T19173] 9pnet: Could not find request transport: tc [ 192.809635][T19180] loop5: detected capacity change from 0 to 512 [ 192.818005][T19180] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 192.829883][T19180] EXT4-fs (loop5): 1 truncate cleaned up [ 192.836262][T19180] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.852528][T19180] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.082226][T19214] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 193.083270][T19218] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 193.099595][T19218] vhci_hcd: invalid port number 253 [ 193.105192][T19218] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 193.170119][T19231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6357'. [ 193.377743][T19258] SELinux: ebitmap: truncated map [ 193.397372][T19258] SELinux: failed to load policy [ 193.448898][T19281] sd 0:0:1:0: device reset [ 193.494316][T19289] tipc: Started in network mode [ 193.499570][T19289] tipc: Node identity 0000000000005f120000000000000001, cluster identity 4711 [ 193.508617][T19289] tipc: Enabling of bearer rejected, failed to enable media [ 193.580760][T19299] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 193.631436][T19302] loop3: detected capacity change from 0 to 512 [ 193.638712][T19302] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 193.667224][T19302] EXT4-fs (loop3): 1 truncate cleaned up [ 193.675007][T19302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 193.698546][T19302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.019360][ T3391] IPVS: starting estimator thread 0... [ 194.115174][T19353] IPVS: using max 4320 ests per chain, 216000 per kthread [ 194.191532][T19368] loop9: detected capacity change from 0 to 7 [ 194.198235][T19368] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.206987][T19368] Buffer I/O error on dev loop9, logical block 0, async page read [ 194.215329][T19368] loop9: unable to read partition table [ 194.220997][T19368] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 194.220997][T19368] ) failed (rc=-5) [ 195.023236][T19388] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 195.031095][T19388] vhci_hcd: invalid port number 253 [ 195.036733][T19388] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 195.206246][T19415] veth0: entered promiscuous mode [ 195.331784][T19440] atomic_op ffff8881023f0d28 conn xmit_atomic 0000000000000000 [ 195.367713][T19443] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=19443 comm=syz.3.6454 [ 195.402586][T19446] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 195.426290][T19451] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 195.450379][T19452] loop3: detected capacity change from 0 to 512 [ 195.476687][T19452] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.506979][T19452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.520163][T19452] ext4 filesystem being mounted at /124/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.546678][T17401] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.632920][T19478] team0 (unregistering): Port device team_slave_0 removed [ 195.661816][T19478] team0 (unregistering): Port device team_slave_1 removed [ 195.684547][T19488] openvswitch: netlink: Message has 6 unknown bytes. [ 195.717157][T19492] loop4: detected capacity change from 0 to 1024 [ 195.724418][T19492] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.740913][T19492] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.6478: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.764340][T19492] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.6478: Failed to acquire dquot type 0 [ 195.781289][T19492] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.6478: Freeing blocks not in datazone - block = 0, count = 4096 [ 195.795993][T19492] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.6478: Invalid inode bitmap blk 0 in block_group 0 [ 195.811483][T19492] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 195.823454][T19497] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 195.834648][T19492] EXT4-fs (loop4): 1 orphan inode deleted [ 195.834757][ T4798] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:17: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.840908][T19492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.869366][ T4798] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:17: Failed to release dquot type 0 [ 196.018794][T15882] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.128160][T19526] netlink: 'syz.4.6494': attribute type 10 has an invalid length. [ 196.136251][T19526] __nla_validate_parse: 20 callbacks suppressed [ 196.136272][T19526] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6494'. [ 196.155528][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 196.155545][ T29] audit: type=1326 audit(1756461540.230:8189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.5.6495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2623ebe9 code=0x7ffc0000 [ 196.197612][ T29] audit: type=1326 audit(1756461540.260:8190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.5.6495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2623ebe9 code=0x7ffc0000 [ 196.222024][ T29] audit: type=1326 audit(1756461540.260:8191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.5.6495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ffb2623ebe9 code=0x7ffc0000 [ 196.242914][T19526] dummy0: entered promiscuous mode [ 196.246030][ T29] audit: type=1326 audit(1756461540.260:8192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.5.6495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2623ebe9 code=0x7ffc0000 [ 196.274753][ T29] audit: type=1326 audit(1756461540.260:8193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19527 comm="syz.5.6495" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb2623ebe9 code=0x7ffc0000 [ 196.300123][T19526] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 196.339885][ T29] audit: type=1400 audit(1756461540.410:8194): avc: denied { create } for pid=19536 comm="syz.6.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 196.342227][ T29] audit: type=1400 audit(1756461540.410:8195): avc: denied { ioctl } for pid=19536 comm="syz.6.6500" path="socket:[63099]" dev="sockfs" ino=63099 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 196.343019][ T29] audit: type=1400 audit(1756461540.410:8196): avc: denied { bind } for pid=19536 comm="syz.6.6500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 196.432060][ T29] audit: type=1326 audit(1756461540.480:8197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19544 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 196.432091][ T29] audit: type=1326 audit(1756461540.480:8198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19544 comm="syz.4.6503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d08f6ebe9 code=0x7ffc0000 [ 196.479088][T19553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19553 comm=syz.4.6506 [ 196.479126][T19553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19553 comm=syz.4.6506 [ 196.560958][T19555] netlink: 'syz.4.6509': attribute type 10 has an invalid length. [ 196.562022][T19555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.564109][T19555] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 196.716875][T19567] loop5: detected capacity change from 0 to 512 [ 196.725877][T19567] EXT4-fs: Ignoring removed mblk_io_submit option [ 196.736263][T19567] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 196.748434][T19569] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 196.748434][T19569] Q&|xXX 0x0000000000026d50 [ 198.232477][T19650] [ 198.234884][T19650] Reported by Kernel Concurrency Sanitizer on: [ 198.241380][T19650] CPU: 0 UID: 0 PID: 19650 Comm: syz.0.6548 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 198.253189][T19650] Tainted: [W]=WARN [ 198.256979][T19650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 198.267368][T19650] ==================================================================