last executing test programs: 3.867654973s ago: executing program 2 (id=693): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x40c0080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8aba, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) r3 = gettid() syz_open_dev$mouse(&(0x7f0000000080), 0xec, 0x101002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900050044000000a80016000a0003400200000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.844564275s ago: executing program 2 (id=696): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x100}, 0x40000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.785863616s ago: executing program 4 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0) write$vga_arbiter(r1, 0x0, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) unshare(0x20040400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) clock_gettime(0x6, 0x0) r2 = syz_open_dev$sg(0x0, 0x7, 0x200) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5387, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 2.701667397s ago: executing program 2 (id=700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x301) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.547062209s ago: executing program 4 (id=702): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYRES8], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r5 = open(&(0x7f0000000340)='./file1\x00', 0x185102, 0x38) mmap(&(0x7f0000303000/0x2000)=nil, 0x2000, 0xa, 0x4000010, r5, 0xbe134000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x4c0, 0x210, 0x210, 0xffffffff, 0x210, 0x210, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@private1, @remote, [0x0, 0xffffffff, 0x0, 0xffffff00], [0xffffff00, 0xff, 0xff000000], 'ip6gre0\x00', 'batadv0\x00', {0xff}, {0xff}, 0x67, 0x28, 0x1, 0x2a}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @port=0x4e21, @port=0x4e22}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @port, @gre_key}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast1, [0xffffffff, 0x0, 0x0, 0xffffff00], [0xff000000], 'macvtap0\x00', 'macsec0\x00', {}, {}, 0x16, 0x44, 0x2, 0x9}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d4], 0x6, 0xb, 0x2}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) sync_file_range(r5, 0x6, 0x10000000000000, 0x2) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f00000006c0)={0x0, @remote, @remote}, &(0x7f0000000740)=0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001500)={0x11, 0x9, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000700000000000000081e0000850000007f00000063144000ffffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x3, 0xf, &(0x7f0000000680)=""/15, 0x100, 0x58, '\x00', r7, 0x0, r4, 0x8, &(0x7f00000013c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000001400)={0x2, 0xf, 0x9, 0x800}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001440)=[r6, r4, r4, r6, r6], &(0x7f0000001480)=[{0x2, 0x2, 0x8, 0x6}, {0x1, 0x5, 0xe, 0x1}, {0x1, 0x4, 0xe, 0x6}, {0x2, 0x1, 0xa, 0x4}, {0x4, 0x1, 0x6, 0xd}, {0x3, 0x3, 0xc, 0xc}, {0x5, 0x4, 0x4, 0x6}], 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21001000000000002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES64=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x48}}, 0x0) r13 = io_uring_setup(0x71b9, &(0x7f00000000c0)={0x0, 0xc63f}) io_uring_enter(r13, 0x0, 0x2, 0xf, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000f80)={'filter\x00', 0x7, 0x4, 0x3e8, 0x0, 0x0, 0x110, 0x300, 0x300, 0x300, 0x4, &(0x7f0000000540), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf, 0xffffffff}}}, {{@arp={@multicast1, @broadcast, 0xff, 0x0, 0xf, 0x5, {@mac, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x1fe, 0x0, 0x0, 0xff]}}, 0x3, 0x1, 0xf99a, 0x42cf, 0xe00, 0x1ff, 'bridge_slave_1\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x0, 0x24}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0xc76a, {0x3}}}}, {{@arp={@multicast2, @rand_addr=0x64010102, 0x0, 0xffffff00, 0x6, 0xd, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, {[0x0, 0xff, 0xff, 0x0, 0xff, 0xff]}}, 0xc000, 0x6, 0x9, 0x2, 0x9, 0xfe00, 'wlan0\x00', 'macsec0\x00', {}, {}, 0x0, 0x226}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xb4fb}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) io_uring_enter(r13, 0x7b5, 0x4598, 0x34, &(0x7f00000015c0)={[0x3]}, 0x8) shutdown(r2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x275, 0x0, 0x7, 0x4}]}) 2.507207289s ago: executing program 1 (id=703): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x457) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0x114dd, 0x10, 0x1, 0x1cf}, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x800000, 0x0) mkdir(&(0x7f00000000c0)='./control\x00', 0x10) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2002, 0x0) 2.397172251s ago: executing program 1 (id=704): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00"/14], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0c63b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200000000000000000074000000000000000000"], 0x50) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r3 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r2, 0x5) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 2.276280542s ago: executing program 4 (id=706): write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$hiddev(&(0x7f0000000040), 0x1ff, 0x102081) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100), 0x4) fsetxattr(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="2b412cc499860272280744479f801898255d6744ed0a13b418a9e0bc72e8f9b37864bd960a95a6c0593423e0652b62552ecaac3da23eb6714121460023fc9c2379ad7a8d08cfe876ff52ab5980faf5b95890060bfc84e305e961516b05aa96750f8e"], 0x0, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0), &(0x7f0000000300)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.077441884s ago: executing program 4 (id=708): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl0\x00', 0x0}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000380)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) 1.402954923s ago: executing program 2 (id=711): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r0 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000600)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x4840) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) syz_open_procfs(r0, &(0x7f00000000c0)='mountinfo\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00'}, 0x10) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) flock(r4, 0x5) 1.402109162s ago: executing program 1 (id=721): r0 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_emit_ethernet(0x8e, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/11], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) unshare(0x2040600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) ioctl$TUNGETVNETLE(r2, 0x4010744d, 0x0) unshare(0x22020600) flock(0xffffffffffffffff, 0x2) getitimer(0x1, &(0x7f0000000180)) mq_timedreceive(r0, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 1.306365034s ago: executing program 2 (id=712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000300)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8) 1.122146686s ago: executing program 1 (id=715): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)=ANY=[@ANYBLOB="b9af0000", @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf25280000000a0001007770616e300000"], 0x20}, 0x1, 0x0, 0x0, 0x24008880}, 0x600048d4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) setsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000280)="6adbb1e1e63235f4e219d59e157c7044f0839890f6f4e164cbfd5812e26e96289e9d82ab466a2c60839d4c7fc20d1467a3d518038b4fe5cd1809eef32cecd88ba3be6ba234ecd5985c4b9ed3bec1061a5c9a98995d4726d72bc16cdce864a2823d31a39b0a2636ad66f86a", 0x6b) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r6 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_PID={0x8, 0x1c, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.065452177s ago: executing program 0 (id=717): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5d9c}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="a60452b1b4b4e4a16a5cfd867f76420a82c93aadaed032cc7711cc3e56663758d922e2b413657506f81eef3444a232e12836a47aea66f72ca6ff9d90ea5f8590db2685bdb873b833d153357164db2a42356938dcf77c40d4afd3870b8c074f726024b548a2c7f34ffb109fe8fb4c84fa9b029e9777b8e719622368f8d6a45f9bea7cb074951ccf1e75ad2dbdb1837b9d39"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0xc, 0xe}, {0xe, 0xfff3}}}, 0x24}}, 0x24000040) r5 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b3}) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f0000000100)=""/77, 0x4d}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000800)=""/50, 0x32}], 0x6, &(0x7f0000001cc0)=[{&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000001ec0)=""/193, 0xc1}, {&(0x7f00000007c0)=""/43, 0x2b}, {&(0x7f0000001940)=""/89, 0x59}, {&(0x7f00000019c0)=""/127, 0x7f}, {&(0x7f0000001a40)=""/32, 0x20}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/149, 0x95}, {&(0x7f0000001d80)=""/103, 0x67}], 0xa, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) syz_clone3(&(0x7f0000000580)={0x120000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)=0x0, {0x16}, &(0x7f0000000380)=""/226, 0xe2, &(0x7f0000000480)=""/245, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) syz_open_procfs(r10, &(0x7f0000000240)='net/vlan/config\x00') sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0xffffffff, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) 1.019797187s ago: executing program 3 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 1.018729727s ago: executing program 1 (id=719): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x3938700}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0xd8}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f00000002c0)=0x10) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x5, 0x10, 0x5, 0x4, 0xff, 0x7, 0x5, 0x7, 0x4c, 0x5, 0x8, 0x6}, 0xe) 988.501688ms ago: executing program 3 (id=720): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x401, 0x10100) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r1}, 0x18) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000180)={0x3, {{0xa, 0x4e23, 0x0, @remote, 0x6}}, {{0xa, 0x4e22, 0x7f, @private1, 0x3}}}, 0x108) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000001a0000850000000e000000850000000e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='fib_table_lookup\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) 924.639249ms ago: executing program 0 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00000002c0)={0x0, 0x5, 0x2, 0x20005641, 0xfc, "ac4eb71f1100"}) r3 = syz_open_pts(r2, 0x0) dup(r3) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r6, 0x4b72, 0x0) socket$xdp(0x2c, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x18) semget$private(0x0, 0x4, 0xbc5b88bee845ef0e) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r4, 0x331, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x95}, 0x0) 861.622389ms ago: executing program 0 (id=723): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_pts(0xffffffffffffffff, 0x505180) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff000000d5aba100000000000007010000f8ffffffb702000808000000d00b00000000000085000000060000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x1, 0x0, 0x0, 0x2000000003, 0x0, 0x82c, 0x0, 0x81, 0x4}) r2 = socket(0x25, 0x1, 0x0) sendmsg$inet6(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000340)="c6", 0x1}], 0x1}, 0x800) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='comm\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000800)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nomblk_io_submit}, {@noquota}, {@abort}, {@noload}, {@bsdgroups}]}, 0x64, 0x50d, &(0x7f0000000200)="$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") openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000580), 0xe8182, 0x0) ioperm(0x9, 0x100000002, 0x4) r4 = timerfd_create(0x0, 0x800) timerfd_settime(r4, 0x0, &(0x7f0000000000)={{0x0, 0x3938700}}, &(0x7f0000000040)) 858.363439ms ago: executing program 3 (id=724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1, 0x0, 0x80000}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x19, r5, 0x1, 0x1, 0x6, @broadcast}, 0x14) close_range(r3, 0xffffffffffffffff, 0x0) 838.78687ms ago: executing program 0 (id=725): mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/137) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x1, 0x70bd26}, 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='host1x_cdma_push_wide\x00', 0xffffffffffffffff, 0x0, 0x4000000000000}, 0xfffffffffffffda0) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c00"], 0xfc}, 0x1, 0x0, 0x0, 0x20008101}, 0x20044010) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r5, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 817.09097ms ago: executing program 3 (id=726): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$rds(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@cswp={0x58, 0x114, 0x7, {{0x0, 0x2}, 0x0, 0x0, 0x80, 0x1000, 0x3, 0x101, 0x24, 0x100000000}}], 0x58, 0x4048814}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000214"], 0x64}}, 0x0) 761.574621ms ago: executing program 0 (id=727): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@deltaction={0x44, 0x18, 0x200, 0x70bd2d, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES8, @ANYRESHEX=r0], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(0x0, 0x100000000000600d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$kcm(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40000, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000340)='_', 0x1}, {&(0x7f00000007c0)}, {0x0}], 0x3}, 0x44864) setsockopt$sock_attach_bpf(r3, 0x84, 0x1e, &(0x7f0000000000), 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000380)) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 760.846191ms ago: executing program 3 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000600)={'gretap0\x00', 0x0, 0x7800, 0x3c11, 0x2, 0x8, {{0x10, 0x4, 0x1, 0x4, 0x40, 0x64, 0x0, 0x9f, 0x29, 0x0, @private=0xa010100, @private=0xa010102, {[@timestamp_prespec={0x44, 0x4, 0x67, 0x3, 0xc}, @cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}, @ssrr={0x89, 0x13, 0x67, [@empty, @dev={0xac, 0x14, 0x14, 0xc}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0xc, 0xf5, 0x0, 0x8, [0x9, 0xff]}]}}}}}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0xfff3, 0x4}, {0x2, 0x4}, {0xb, 0x6}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xff, 0x80}}, @TCA_RATE={0x6, 0x5, {0x0, 0xe2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000812}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) syz_emit_ethernet(0x20, &(0x7f0000000500)={@remote, @multicast, @void, {@x25={0x805, {0x2, 0x8, 0xff, "cc11b9bd856ab781d506755fc03af8"}}}}, &(0x7f0000000680)={0x0, 0x7fffffff, [0x774, 0xd05, 0xaf9, 0x47f]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000500000000000000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PUBL_GET(r7, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10810}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @private2}, &(0x7f00000004c0)=0x20) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, '\x00', "a14748a65151e96d6d6a0100000000000000000000000000402edd243100", "6d40e581", "066580001e00"}, 0x38) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {0x5, 0xe}, {0xd}, {0xfff3}}}, 0x24}}, 0x40) 760.420911ms ago: executing program 0 (id=729): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x30}}, 0x24008880) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x40200) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="9b150100000000002c0012800e00010069703665727370616e00000018000280040012"], 0x4c}}, 0x0) 668.456622ms ago: executing program 3 (id=730): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000380003803400008028000180230001"], 0xf0}}, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000004200)='t', 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a310000000009000100"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 620.245562ms ago: executing program 4 (id=731): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x5c8, &(0x7f0000000600)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x400000008000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x4040024}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioprio_set$uid(0x3, 0x0, 0x0) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x2000) removexattr(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') 166.142208ms ago: executing program 2 (id=732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x5d9c}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x20008844) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="a60452b1b4b4e4a16a5cfd867f76420a82c93aadaed032cc7711cc3e56663758d922e2b413657506f81eef3444a232e12836a47aea66f72ca6ff9d90ea5f8590db2685bdb873b833d153357164db2a42356938dcf77c40d4afd3870b8c074f726024b548a2c7f34ffb109fe8fb4c84fa9b029e9777b8e719622368f8d6a45f9bea7cb074951ccf1e75ad2dbdb1837b9d39"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x9}, {0xc, 0xe}, {0xe, 0xfff3}}}, 0x24}}, 0x24000040) r5 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2b3}) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000000) process_vm_writev(0x0, &(0x7f00000005c0)=[{&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000000400)=""/167, 0xa7}, {&(0x7f0000000100)=""/77, 0x4d}, {&(0x7f00000004c0)=""/249, 0xf9}, {&(0x7f0000000240)=""/29, 0x1d}, {&(0x7f0000000800)=""/50, 0x32}], 0x6, &(0x7f0000001cc0)=[{&(0x7f0000000640)=""/172, 0xac}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f0000001ec0)=""/193, 0xc1}, {&(0x7f00000007c0)=""/43, 0x2b}, {&(0x7f0000001940)=""/89, 0x59}, {&(0x7f00000019c0)=""/127, 0x7f}, {&(0x7f0000001a40)=""/32, 0x20}, {&(0x7f0000001a80)=""/225, 0xe1}, {&(0x7f0000001b80)=""/149, 0x95}, {&(0x7f0000001d80)=""/103, 0x67}], 0xa, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) syz_clone3(&(0x7f0000000580)={0x120000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f00000001c0)=0x0, {0x16}, &(0x7f0000000380)=""/226, 0xe2, &(0x7f0000000480)=""/245, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) syz_open_procfs(r10, &(0x7f0000000240)='net/vlan/config\x00') sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0xffffffff, 0x25dfdbfc, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4}, 0x2d}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r2}, 0x18) syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) 110.019389ms ago: executing program 1 (id=733): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, &(0x7f0000000000)="bf2ce2fdc625088bc57ff169eec9", &(0x7f0000000300)=""/209}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x2, 0x80805, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rpc\x00') preadv(r3, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r7}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) 0s ago: executing program 4 (id=734): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x3) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1c, 0xc, &(0x7f0000000740)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRESOCT=r2, @ANYRESDEC, @ANYBLOB="f0c24595475b7989a97e820915e4bb66e2b11e763694e286930d0921c4a4b4b2dedd1325910619bb98", @ANYRESHEX=r1, @ANYRES8=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r4}, 0x10) r5 = creat(&(0x7f0000000080)='./bus\x00', 0x14f) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000001"], 0xfe44, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x30}}, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x600}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. [ 27.593239][ T29] audit: type=1400 audit(1748276903.060:65): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.594393][ T3301] cgroup: Unknown subsys name 'net' [ 27.615984][ T29] audit: type=1400 audit(1748276903.060:66): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.643514][ T29] audit: type=1400 audit(1748276903.100:67): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.840435][ T3301] cgroup: Unknown subsys name 'cpuset' [ 27.846748][ T3301] cgroup: Unknown subsys name 'rlimit' [ 27.998123][ T29] audit: type=1400 audit(1748276903.460:68): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.021435][ T29] audit: type=1400 audit(1748276903.460:69): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.041948][ T29] audit: type=1400 audit(1748276903.460:70): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.059875][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.062320][ T29] audit: type=1400 audit(1748276903.460:71): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.091353][ T29] audit: type=1400 audit(1748276903.500:72): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.102651][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.116427][ T29] audit: type=1400 audit(1748276903.500:73): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.148419][ T29] audit: type=1400 audit(1748276903.550:74): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.062265][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 30.106994][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 30.116232][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 30.153014][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 30.203618][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.210805][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.218022][ T3321] bridge_slave_0: entered allmulticast mode [ 30.224713][ T3321] bridge_slave_0: entered promiscuous mode [ 30.243320][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 30.252234][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.259410][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.266548][ T3321] bridge_slave_1: entered allmulticast mode [ 30.273008][ T3321] bridge_slave_1: entered promiscuous mode [ 30.299255][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.306547][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.313952][ T3322] bridge_slave_0: entered allmulticast mode [ 30.320386][ T3322] bridge_slave_0: entered promiscuous mode [ 30.346577][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.353708][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.361139][ T3322] bridge_slave_1: entered allmulticast mode [ 30.367485][ T3322] bridge_slave_1: entered promiscuous mode [ 30.389406][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.403156][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.410290][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.417456][ T3316] bridge_slave_0: entered allmulticast mode [ 30.423973][ T3316] bridge_slave_0: entered promiscuous mode [ 30.433077][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.440224][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.447395][ T3313] bridge_slave_0: entered allmulticast mode [ 30.453951][ T3313] bridge_slave_0: entered promiscuous mode [ 30.461305][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.470483][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.477613][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.484816][ T3313] bridge_slave_1: entered allmulticast mode [ 30.491389][ T3313] bridge_slave_1: entered promiscuous mode [ 30.502919][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.510031][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.517232][ T3316] bridge_slave_1: entered allmulticast mode [ 30.523783][ T3316] bridge_slave_1: entered promiscuous mode [ 30.544182][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.570771][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.590680][ T3321] team0: Port device team_slave_0 added [ 30.597483][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.613128][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.627439][ T3321] team0: Port device team_slave_1 added [ 30.639552][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.654702][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.664457][ T3322] team0: Port device team_slave_0 added [ 30.670212][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.677329][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.684781][ T3312] bridge_slave_0: entered allmulticast mode [ 30.691246][ T3312] bridge_slave_0: entered promiscuous mode [ 30.712534][ T3322] team0: Port device team_slave_1 added [ 30.722951][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.730074][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.737228][ T3312] bridge_slave_1: entered allmulticast mode [ 30.743756][ T3312] bridge_slave_1: entered promiscuous mode [ 30.750420][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.757418][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.783517][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.805030][ T3316] team0: Port device team_slave_0 added [ 30.811684][ T3316] team0: Port device team_slave_1 added [ 30.828226][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.835251][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.861446][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.872963][ T3313] team0: Port device team_slave_0 added [ 30.898732][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.908542][ T3313] team0: Port device team_slave_1 added [ 30.914780][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.921781][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.947724][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.958888][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.965917][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.991867][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.003566][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.010616][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.036650][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.048425][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.072290][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.079268][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.105310][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.137087][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.144118][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.170095][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.181478][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.188461][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.214442][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.228596][ T3321] hsr_slave_0: entered promiscuous mode [ 31.234930][ T3321] hsr_slave_1: entered promiscuous mode [ 31.249042][ T3312] team0: Port device team_slave_0 added [ 31.264661][ T3312] team0: Port device team_slave_1 added [ 31.288941][ T3316] hsr_slave_0: entered promiscuous mode [ 31.295123][ T3316] hsr_slave_1: entered promiscuous mode [ 31.301053][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.308637][ T3316] Cannot create hsr debugfs directory [ 31.346497][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.353521][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.379516][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.390830][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.397788][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.423768][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.437179][ T3322] hsr_slave_0: entered promiscuous mode [ 31.443251][ T3322] hsr_slave_1: entered promiscuous mode [ 31.449032][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.456844][ T3322] Cannot create hsr debugfs directory [ 31.473152][ T3313] hsr_slave_0: entered promiscuous mode [ 31.479231][ T3313] hsr_slave_1: entered promiscuous mode [ 31.485155][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.492772][ T3313] Cannot create hsr debugfs directory [ 31.555808][ T3312] hsr_slave_0: entered promiscuous mode [ 31.561914][ T3312] hsr_slave_1: entered promiscuous mode [ 31.567744][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.575375][ T3312] Cannot create hsr debugfs directory [ 31.728328][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.737592][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.746417][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.757904][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.780839][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.791213][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.802406][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.815721][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.832602][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.842021][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.860671][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.874929][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.902566][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.924744][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.934051][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.942762][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.972567][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.993841][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.002922][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.012226][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.027548][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.034955][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.051870][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.059001][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.073746][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.080842][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.096911][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.128599][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.137318][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.151795][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.158934][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.168171][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.175233][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.196610][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.218361][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.228294][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.249473][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.256587][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.266477][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.273568][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.290119][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.297215][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.307755][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.314909][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.350535][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.370138][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.383853][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.404037][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.418227][ T3322] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.428746][ T3322] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.458775][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.465889][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.491429][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.498532][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.523589][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.562581][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.595538][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.684832][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.728125][ T3313] veth0_vlan: entered promiscuous mode [ 32.758129][ T3321] veth0_vlan: entered promiscuous mode [ 32.765146][ T3316] veth0_vlan: entered promiscuous mode [ 32.772296][ T3313] veth1_vlan: entered promiscuous mode [ 32.787808][ T3321] veth1_vlan: entered promiscuous mode [ 32.810291][ T3316] veth1_vlan: entered promiscuous mode [ 32.825307][ T3313] veth0_macvtap: entered promiscuous mode [ 32.835931][ T3313] veth1_macvtap: entered promiscuous mode [ 32.860741][ T3316] veth0_macvtap: entered promiscuous mode [ 32.871329][ T3322] veth0_vlan: entered promiscuous mode [ 32.877563][ T3321] veth0_macvtap: entered promiscuous mode [ 32.886135][ T3316] veth1_macvtap: entered promiscuous mode [ 32.894979][ T3321] veth1_macvtap: entered promiscuous mode [ 32.904682][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.918730][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.927846][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.939271][ T3322] veth1_vlan: entered promiscuous mode [ 32.949457][ T3313] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.958274][ T3313] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.967133][ T3313] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.976018][ T3313] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.990690][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.006912][ T3322] veth0_macvtap: entered promiscuous mode [ 33.019910][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.029040][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.037141][ T3322] veth1_macvtap: entered promiscuous mode [ 33.049265][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.058111][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.066854][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.075598][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.089186][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.098049][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.106918][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.115740][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.134302][ T3312] veth0_vlan: entered promiscuous mode [ 33.144806][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 33.144818][ T29] audit: type=1400 audit(1748276908.610:84): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.KIfW8h/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 33.176280][ T29] audit: type=1400 audit(1748276908.610:85): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.192335][ T3312] veth1_vlan: entered promiscuous mode [ 33.198435][ T29] audit: type=1400 audit(1748276908.610:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.KIfW8h/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 33.223138][ T3312] veth0_macvtap: entered promiscuous mode [ 33.229031][ T29] audit: type=1400 audit(1748276908.610:87): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 33.237294][ T3312] veth1_macvtap: entered promiscuous mode [ 33.256656][ T29] audit: type=1400 audit(1748276908.620:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.KIfW8h/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 33.269768][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.288900][ T29] audit: type=1400 audit(1748276908.620:89): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.KIfW8h/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 33.288937][ T29] audit: type=1400 audit(1748276908.620:90): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.347400][ T29] audit: type=1400 audit(1748276908.810:91): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 33.349668][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.370275][ T29] audit: type=1400 audit(1748276908.810:92): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3713 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 33.391408][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.411257][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.431220][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.440027][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.448737][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.457489][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.482242][ T29] audit: type=1400 audit(1748276908.940:93): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.515287][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.523838][ T3312] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.532744][ T3312] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.541549][ T3312] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.550495][ T3312] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.563255][ T3456] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 33.672201][ T3466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.683269][ T3466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 33.736471][ T3468] loop0: detected capacity change from 0 to 1024 [ 33.757280][ T3468] ======================================================= [ 33.757280][ T3468] WARNING: The mand mount option has been deprecated and [ 33.757280][ T3468] and is ignored by this kernel. Remove the mand [ 33.757280][ T3468] option from the mount to silence this warning. [ 33.757280][ T3468] ======================================================= [ 33.833352][ T3486] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.8'. [ 33.834318][ T3468] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.873580][ T3489] loop1: detected capacity change from 0 to 512 [ 33.887717][ T3482] bond0: entered promiscuous mode [ 33.892940][ T3482] bond_slave_0: entered promiscuous mode [ 33.898912][ T3482] bond_slave_1: entered promiscuous mode [ 33.905884][ T3490] netlink: 'syz.2.11': attribute type 4 has an invalid length. [ 33.925331][ T3482] batadv0: entered promiscuous mode [ 33.936558][ T3482] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 33.938196][ T3489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.957519][ T3489] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.995573][ T3468] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4113: comm syz.0.1: Allocating blocks 449-513 which overlap fs metadata [ 34.014911][ T3482] bond0: left promiscuous mode [ 34.019824][ T3482] bond_slave_0: left promiscuous mode [ 34.025289][ T3482] bond_slave_1: left promiscuous mode [ 34.059739][ T3482] batadv0: left promiscuous mode [ 34.079267][ T3467] EXT4-fs (loop0): pa ffff8881071ff070: logic 48, phys. 177, len 21 [ 34.087682][ T3467] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 34.133071][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.205247][ T3498] loop4: detected capacity change from 0 to 1024 [ 34.224515][ T3498] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.227158][ T3489] syz.1.13 (3489) used greatest stack depth: 10840 bytes left [ 34.271762][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.287492][ T3498] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 15 with error 28 [ 34.300156][ T3498] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.300156][ T3498] [ 34.310009][ T3498] EXT4-fs (loop4): Total free blocks count 0 [ 34.316089][ T3498] EXT4-fs (loop4): Free/Dirty block details [ 34.322034][ T3498] EXT4-fs (loop4): free_blocks=0 [ 34.327051][ T3498] EXT4-fs (loop4): dirty_blocks=0 [ 34.332144][ T3498] EXT4-fs (loop4): Block reservation details [ 34.338168][ T3498] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 34.357455][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.367590][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.378622][ T3514] syz.0.18 (3514) used greatest stack depth: 10264 bytes left [ 34.387139][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.396207][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 34.396956][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.451875][ T3522] pim6reg1: entered promiscuous mode [ 34.457284][ T3522] pim6reg1: entered allmulticast mode [ 34.575374][ T3539] Zero length message leads to an empty skb [ 34.641125][ T3545] loop0: detected capacity change from 0 to 512 [ 34.669770][ T3545] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.678878][ T3545] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 34.733890][ T3551] loop1: detected capacity change from 0 to 128 [ 34.747597][ T3545] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 34.757253][ T3545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 34.769508][ T3545] System zones: 0-2, 18-18, 34-34 [ 34.785238][ T3545] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 34.832063][ T3545] EXT4-fs (loop0): 1 truncate cleaned up [ 34.838290][ T3545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.909539][ T3312] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.932405][ T3558] loop3: detected capacity change from 0 to 512 [ 34.950793][ T3558] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.971549][ T3558] EXT4-fs (loop3): invalid journal inode [ 34.977273][ T3558] EXT4-fs (loop3): can't get journal size [ 34.990394][ T3390] Process accounting resumed [ 34.995965][ T3558] EXT4-fs (loop3): 1 truncate cleaned up [ 35.003602][ T3551] syz.1.27: attempt to access beyond end of device [ 35.003602][ T3551] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 35.027647][ T3558] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.063473][ T3563] tipc: Started in network mode [ 35.068408][ T3563] tipc: Node identity ac14140f, cluster identity 4711 [ 35.083541][ T3537] syz.1.27: attempt to access beyond end of device [ 35.083541][ T3537] loop1: rw=524288, sector=145, nr_sectors = 224 limit=128 [ 35.088623][ T3563] tipc: New replicast peer: 255.255.255.255 [ 35.097600][ T3537] syz.1.27: attempt to access beyond end of device [ 35.097600][ T3537] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.103363][ T3563] tipc: Enabled bearer , priority 10 [ 35.116836][ T3537] syz.1.27: attempt to access beyond end of device [ 35.116836][ T3537] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.136304][ T3537] syz.1.27: attempt to access beyond end of device [ 35.136304][ T3537] loop1: rw=0, sector=145, nr_sectors = 8 limit=128 [ 35.159971][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.241234][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.248670][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.256856][ T3569] bridge0: entered allmulticast mode [ 35.285574][ T3569] bridge_slave_1: left allmulticast mode [ 35.291470][ T3569] bridge_slave_1: left promiscuous mode [ 35.297305][ T3569] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.310310][ T3569] bridge_slave_0: left allmulticast mode [ 35.311175][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.316014][ T3569] bridge_slave_0: left promiscuous mode [ 35.324204][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.329938][ T3569] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.337934][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.363207][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.371458][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.379763][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.387976][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.396270][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.404463][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.412623][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.420821][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.428927][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.437382][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.439015][ T3581] process 'syz.3.46' launched '/dev/fd/4' with NULL argv: empty string added [ 35.445527][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.466346][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.474499][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.482833][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.491110][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.499406][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.507511][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.515785][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.515817][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.525808][ T3583] IPv4: Oversized IP packet from 127.202.26.0 [ 35.532192][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.546444][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.554650][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.554683][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.554714][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.579008][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.587166][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: unknown main item tag 0x0 [ 35.596900][ T3392] hid-generic FFFF:FFFFFFFC:20000001.0001: hidraw0: HID va0.69 Device [syz0] on syz1 [ 35.681601][ T3589] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.975942][ T3616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 36.012586][ T3620] loop4: detected capacity change from 0 to 512 [ 36.019889][ T3620] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 36.028633][ T3620] EXT4-fs (loop4): invalid journal inode [ 36.034455][ T3620] EXT4-fs (loop4): can't get journal size [ 36.046064][ T3620] EXT4-fs (loop4): 1 truncate cleaned up [ 36.057621][ T3616] syz.1.63 (3616) used greatest stack depth: 10096 bytes left [ 36.065828][ T3620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.136277][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.189145][ T3635] loop4: detected capacity change from 0 to 512 [ 36.202449][ T3624] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 36.228542][ T23] tipc: Node number set to 2886997007 [ 36.262208][ T3635] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.275163][ T3635] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.381482][ T3639] syz.1.70 uses obsolete (PF_INET,SOCK_PACKET) [ 36.395575][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.415736][ T3641] netlink: 8 bytes leftover after parsing attributes in process `syz.4.71'. [ 36.684916][ T3663] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.699191][ T3665] pim6reg1: entered promiscuous mode [ 36.704674][ T3665] pim6reg1: entered allmulticast mode [ 36.913918][ T3686] loop1: detected capacity change from 0 to 256 [ 36.997717][ T3686] syz.1.86: attempt to access beyond end of device [ 36.997717][ T3686] loop1: rw=2049, sector=256, nr_sectors = 288 limit=256 [ 37.016095][ T3686] syz.1.86: attempt to access beyond end of device [ 37.016095][ T3686] loop1: rw=2049, sector=608, nr_sectors = 320 limit=256 [ 37.030619][ T3686] syz.1.86: attempt to access beyond end of device [ 37.030619][ T3686] loop1: rw=2049, sector=960, nr_sectors = 64 limit=256 [ 37.047324][ T3686] syz.1.86: attempt to access beyond end of device [ 37.047324][ T3686] loop1: rw=2049, sector=1056, nr_sectors = 1380 limit=256 [ 37.294237][ T3706] syzkaller0: entered promiscuous mode [ 37.717012][ T3729] loop4: detected capacity change from 0 to 2048 [ 37.742325][ T3729] EXT4-fs: Ignoring removed bh option [ 37.775148][ T3742] IPv6: Can't replace route, no match found [ 37.787304][ T3729] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.882150][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.200232][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 38.200288][ T29] audit: type=1326 audit(1748276913.670:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3775 comm="syz.0.117" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa141f4e969 code=0x0 [ 38.239187][ T29] audit: type=1400 audit(1748276913.700:243): avc: denied { create } for pid=3777 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 38.258559][ T29] audit: type=1400 audit(1748276913.700:244): avc: denied { create } for pid=3777 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.277815][ T29] audit: type=1400 audit(1748276913.700:245): avc: denied { connect } for pid=3777 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.297168][ T29] audit: type=1400 audit(1748276913.700:246): avc: denied { ioctl } for pid=3777 comm="syz.1.118" path="socket:[4987]" dev="sockfs" ino=4987 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.321486][ T29] audit: type=1400 audit(1748276913.700:247): avc: denied { write } for pid=3777 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 38.355854][ T29] audit: type=1400 audit(1748276913.820:248): avc: denied { create } for pid=3780 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.375303][ T29] audit: type=1400 audit(1748276913.820:249): avc: denied { bind } for pid=3780 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 38.394687][ T29] audit: type=1400 audit(1748276913.820:250): avc: denied { name_bind } for pid=3780 comm="syz.1.119" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 38.415968][ T29] audit: type=1400 audit(1748276913.820:251): avc: denied { node_bind } for pid=3780 comm="syz.1.119" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 38.475463][ T3786] IPv4: Oversized IP packet from 127.202.26.0 [ 38.569101][ T3799] syz.4.125: attempt to access beyond end of device [ 38.569101][ T3799] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 38.570040][ T3797] loop3: detected capacity change from 0 to 2048 [ 38.589147][ T3797] EXT4-fs: Ignoring removed bh option [ 38.623344][ T3803] veth1_to_bond: entered allmulticast mode [ 38.630851][ T3803] veth1_to_bond: entered promiscuous mode [ 38.637578][ T3803] veth1_to_bond: left promiscuous mode [ 38.643392][ T3803] veth1_to_bond: left allmulticast mode [ 38.651428][ T3797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.736703][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.836943][ T3817] __nla_validate_parse: 15 callbacks suppressed [ 38.836966][ T3817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 38.908746][ T3823] loop4: detected capacity change from 0 to 4096 [ 38.917641][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.942245][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.978538][ T3832] loop4: detected capacity change from 0 to 2048 [ 39.019733][ T3832] loop4: p1 < > p4 < > [ 39.089644][ T3842] loop3: detected capacity change from 0 to 256 [ 39.154749][ T3849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.140'. [ 39.186267][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 39.195300][ T3851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 39.271898][ T3862] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.313307][ T3862] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.335722][ C0] hrtimer: interrupt took 28058 ns [ 39.423046][ T3862] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.473038][ T3862] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.527441][ T3862] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.538802][ T3862] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.551021][ T3862] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.562641][ T3862] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.585637][ T3877] loop2: detected capacity change from 0 to 256 [ 39.665011][ T3878] infiniband syz!: set active [ 39.669852][ T3878] infiniband syz!: added team_slave_0 [ 39.691474][ T3878] RDS/IB: syz!: added [ 39.695552][ T3878] smc: adding ib device syz! with port count 1 [ 39.713246][ T3878] smc: ib device syz! port 1 has pnetid [ 39.816813][ T3894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 40.005488][ T3905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.162'. [ 40.014567][ T3905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.162'. [ 40.051443][ T3903] bridge0: entered promiscuous mode [ 40.069849][ T3903] macvlan2: entered promiscuous mode [ 40.118455][ T3903] bridge0: port 3(macvlan2) entered blocking state [ 40.128335][ T3903] bridge0: port 3(macvlan2) entered disabled state [ 40.150588][ T3903] macvlan2: entered allmulticast mode [ 40.156887][ T3903] bridge0: entered allmulticast mode [ 40.183563][ T3910] loop3: detected capacity change from 0 to 2048 [ 40.205083][ T3903] macvlan2: left allmulticast mode [ 40.211716][ T3903] bridge0: left allmulticast mode [ 40.229462][ T3903] bridge0: left promiscuous mode [ 40.253584][ T3910] EXT4-fs: Ignoring removed bh option [ 40.277759][ T3910] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.357322][ T3926] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 40.385693][ T3926] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.397988][ T3926] EXT4-fs (loop3): This should not happen!! Data will be lost [ 40.397988][ T3926] [ 40.407732][ T3926] EXT4-fs (loop3): Total free blocks count 0 [ 40.413785][ T3926] EXT4-fs (loop3): Free/Dirty block details [ 40.419748][ T3926] EXT4-fs (loop3): free_blocks=2415919104 [ 40.425729][ T3926] EXT4-fs (loop3): dirty_blocks=1664 [ 40.431142][ T3926] EXT4-fs (loop3): Block reservation details [ 40.437147][ T3926] EXT4-fs (loop3): i_reserved_data_blocks=104 [ 40.510946][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.164'. [ 40.552962][ T3941] capability: warning: `syz.2.174' uses deprecated v2 capabilities in a way that may be insecure [ 40.603347][ T3945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 40.633812][ T3947] IPv4: Oversized IP packet from 127.202.26.0 [ 40.748330][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 40.766517][ T3955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.181'. [ 40.856281][ T3957] loop4: detected capacity change from 0 to 2048 [ 40.863583][ T3957] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.923274][ T3957] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.937903][ T3965] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 41.063806][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.078328][ T3978] loop3: detected capacity change from 0 to 512 [ 41.094234][ T3978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.105345][ T3982] loop1: detected capacity change from 0 to 2048 [ 41.112231][ T3982] EXT4-fs: Ignoring removed bh option [ 41.126477][ T3978] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.190: invalid block [ 41.138717][ T3978] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.190: invalid indirect mapped block 4294967295 (level 1) [ 41.162627][ T3982] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.169567][ T3978] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.190: invalid indirect mapped block 4294967295 (level 1) [ 41.231575][ T3993] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.231771][ T3978] EXT4-fs (loop3): 2 truncates cleaned up [ 41.253164][ T3978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.267664][ T3993] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 41.280032][ T3993] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.280032][ T3993] [ 41.289748][ T3993] EXT4-fs (loop1): Total free blocks count 0 [ 41.292526][ T3978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.295893][ T3993] EXT4-fs (loop1): Free/Dirty block details [ 41.295910][ T3993] EXT4-fs (loop1): free_blocks=2415919104 [ 41.316639][ T3993] EXT4-fs (loop1): dirty_blocks=1456 [ 41.321972][ T3993] EXT4-fs (loop1): Block reservation details [ 41.327965][ T3993] EXT4-fs (loop1): i_reserved_data_blocks=97 [ 41.668268][ T4013] ipvlan2: entered promiscuous mode [ 41.743910][ T1659] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 41.932480][ T4036] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 42.077790][ T4044] 8021q: adding VLAN 0 to HW filter on device team1 [ 42.246405][ T4075] netlink: 'syz.4.227': attribute type 3 has an invalid length. [ 42.264210][ T4075] loop4: detected capacity change from 0 to 512 [ 42.287116][ T4075] EXT4-fs (loop4): unsupported inode size: 0 [ 42.293211][ T4075] EXT4-fs (loop4): blocksize: 2048 [ 42.379953][ T4088] vcan0: entered allmulticast mode [ 42.407916][ T4088] vcan0: left allmulticast mode [ 42.492361][ T4094] bridge0: entered promiscuous mode [ 42.501240][ T4094] macvlan2: entered promiscuous mode [ 42.512431][ T4094] bridge0: port 3(macvlan2) entered blocking state [ 42.519269][ T4094] bridge0: port 3(macvlan2) entered disabled state [ 42.526484][ T4094] macvlan2: entered allmulticast mode [ 42.533210][ T4094] bridge0: entered allmulticast mode [ 42.546974][ T4094] macvlan2: left allmulticast mode [ 42.553970][ T4094] bridge0: left allmulticast mode [ 42.562607][ T4094] bridge0: left promiscuous mode [ 42.579273][ T4101] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 42.655082][ T4109] loop9: detected capacity change from 0 to 7 [ 42.662625][ T4109] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.671783][ T4109] Buffer I/O error on dev loop9, logical block 0, async page read [ 42.679755][ T4109] loop9: unable to read partition table [ 42.686680][ T4109] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 42.686680][ T4109] U) failed (rc=-5) [ 42.742057][ T4111] loop3: detected capacity change from 0 to 2048 [ 42.763326][ T4111] EXT4-fs: Ignoring removed bh option [ 42.797020][ T4111] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.858199][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.893436][ T4126] loop3: detected capacity change from 0 to 2048 [ 42.939819][ T4126] loop3: p1 < > p4 < > [ 43.155707][ T4152] veth1_macvtap: left promiscuous mode [ 43.161312][ T4152] macsec0: entered promiscuous mode [ 43.170793][ T4152] veth1_macvtap: entered promiscuous mode [ 43.176712][ T4152] macsec0: left promiscuous mode [ 43.224469][ T4155] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4155 comm=syz.4.256 [ 43.384164][ T4170] loop3: detected capacity change from 0 to 128 [ 43.544577][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 43.544591][ T29] audit: type=1400 audit(2000000004.570:403): avc: denied { lock } for pid=4174 comm="syz.3.262" path="socket:[6669]" dev="sockfs" ino=6669 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 43.718727][ T29] audit: type=1400 audit(2000000004.740:404): avc: denied { create } for pid=4186 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 43.721708][ T4187] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 43.751201][ T29] audit: type=1400 audit(2000000004.740:405): avc: denied { write } for pid=4186 comm="syz.1.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 43.790898][ T4189] 8021q: adding VLAN 0 to HW filter on device bond2 [ 43.798954][ T4189] bond1: (slave bond2): making interface the new active one [ 43.806748][ T4189] bond1: (slave bond2): Enslaving as an active interface with an up link [ 43.819174][ T4196] netlink: 'syz.3.269': attribute type 3 has an invalid length. [ 43.835660][ T4196] loop3: detected capacity change from 0 to 512 [ 43.847303][ T4187] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 43.873920][ T4196] EXT4-fs (loop3): unsupported inode size: 0 [ 43.880117][ T4196] EXT4-fs (loop3): blocksize: 2048 [ 43.932482][ T4207] loop4: detected capacity change from 0 to 512 [ 43.954053][ T4207] EXT4-fs: Ignoring removed orlov option [ 43.963658][ T4203] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.991441][ T4215] __nla_validate_parse: 17 callbacks suppressed [ 43.991461][ T4215] netlink: 188 bytes leftover after parsing attributes in process `syz.3.276'. [ 44.015676][ T4207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.030150][ T4207] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.030203][ T4216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 44.056775][ T4203] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.056894][ T29] audit: type=1400 audit(2000000005.080:406): avc: denied { append } for pid=4206 comm="syz.4.273" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.134276][ T4203] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.156409][ T4230] pim6reg1: entered promiscuous mode [ 44.161817][ T4230] pim6reg1: entered allmulticast mode [ 44.180619][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.244469][ T4203] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.307190][ T4239] pim6reg1: entered promiscuous mode [ 44.312706][ T4239] pim6reg1: entered allmulticast mode [ 44.342423][ T4203] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.349763][ T4242] loop4: detected capacity change from 0 to 2048 [ 44.356686][ T4203] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.357243][ T4242] EXT4-fs: Ignoring removed bh option [ 44.370463][ T4203] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.384050][ T4203] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.424345][ T4242] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.513255][ T29] audit: type=1400 audit(2000000005.520:407): avc: denied { write } for pid=4248 comm="syz.0.287" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.533940][ T29] audit: type=1400 audit(2000000005.520:408): avc: denied { open } for pid=4248 comm="syz.0.287" path="/46/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.568404][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.620080][ T4258] loop9: detected capacity change from 0 to 7 [ 44.626475][ T4258] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.634464][ T4258] Buffer I/O error on dev loop9, logical block 0, async page read [ 44.642353][ T4258] loop9: unable to read partition table [ 44.649276][ T4258] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 44.649276][ T4258] U) failed (rc=-5) [ 44.668684][ T4255] loop2: detected capacity change from 0 to 2048 [ 44.684567][ T4255] EXT4-fs (loop2): failed to initialize system zone (-117) [ 44.692207][ T4255] EXT4-fs (loop2): mount failed [ 44.695146][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.291'. [ 44.706079][ T4263] netlink: 4 bytes leftover after parsing attributes in process `syz.0.291'. [ 44.751758][ T4265] veth1_macvtap: left promiscuous mode [ 44.763481][ T4265] macsec0: entered promiscuous mode [ 44.799255][ T4270] pim6reg1: entered promiscuous mode [ 44.804981][ T4270] pim6reg1: entered allmulticast mode [ 44.918490][ T29] audit: type=1400 audit(2000000005.940:409): avc: denied { bind } for pid=4278 comm="syz.0.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 44.921625][ T4267] smc: removing ib device syz! [ 44.947482][ T29] audit: type=1400 audit(2000000005.970:410): avc: denied { ioctl } for pid=4278 comm="syz.0.298" path="socket:[7007]" dev="sockfs" ino=7007 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.972970][ T4279] syzkaller0: entered promiscuous mode [ 44.978567][ T4279] syzkaller0: entered allmulticast mode [ 45.165312][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 45.174278][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 45.279994][ T4295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 45.288836][ T4295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.304'. [ 45.401256][ T4308] loop3: detected capacity change from 0 to 2048 [ 45.408658][ T4308] EXT4-fs: Ignoring removed bh option [ 45.442735][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 45.451632][ T4315] netlink: 8 bytes leftover after parsing attributes in process `syz.4.308'. [ 45.454943][ T4308] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.486293][ T4315] bond1: entered promiscuous mode [ 45.491535][ T4315] bond1: entered allmulticast mode [ 45.497140][ T4315] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.527058][ T4323] pimreg: entered allmulticast mode [ 45.538654][ T4326] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.553887][ T4326] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.566169][ T4326] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.566169][ T4326] [ 45.575898][ T4326] EXT4-fs (loop3): Total free blocks count 0 [ 45.581943][ T4326] EXT4-fs (loop3): Free/Dirty block details [ 45.587933][ T4326] EXT4-fs (loop3): free_blocks=2415919104 [ 45.593765][ T4326] EXT4-fs (loop3): dirty_blocks=1744 [ 45.599065][ T4326] EXT4-fs (loop3): Block reservation details [ 45.605180][ T4326] EXT4-fs (loop3): i_reserved_data_blocks=124 [ 45.614106][ T4313] pimreg: left allmulticast mode [ 45.701479][ T29] audit: type=1326 audit(2000000006.720:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23548ae969 code=0x7ffc0000 [ 45.724965][ T29] audit: type=1326 audit(2000000006.720:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4332 comm="syz.4.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f23548ae969 code=0x7ffc0000 [ 45.752447][ T4325] loop2: detected capacity change from 0 to 128 [ 45.759501][ T4325] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 45.781220][ T4325] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 45.820328][ T3322] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.860393][ T4343] program syz.2.318 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.915352][ T1659] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 45.944031][ T4349] pim6reg1: entered promiscuous mode [ 45.949525][ T4349] pim6reg1: entered allmulticast mode [ 46.044397][ T4360] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 46.063740][ T4360] netlink: 'syz.3.320': attribute type 4 has an invalid length. [ 46.227310][ T4375] syzkaller0: entered promiscuous mode [ 46.233086][ T4375] syzkaller0: entered allmulticast mode [ 46.369228][ T4385] pim6reg1: entered promiscuous mode [ 46.374771][ T4385] pim6reg1: entered allmulticast mode [ 46.577523][ T4416] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 46.615650][ T4416] netlink: 'syz.4.342': attribute type 4 has an invalid length. [ 46.670759][ T4429] netlink: 'syz.2.345': attribute type 1 has an invalid length. [ 46.725748][ T4429] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.743111][ T4427] loop1: detected capacity change from 0 to 2048 [ 46.763001][ T4436] bond1 (unregistering): Released all slaves [ 46.769697][ T4427] EXT4-fs (loop1): failed to initialize system zone (-117) [ 46.789925][ T4427] EXT4-fs (loop1): mount failed [ 46.852039][ T4441] pim6reg1: entered promiscuous mode [ 46.857558][ T4441] pim6reg1: entered allmulticast mode [ 46.877934][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x4 [ 46.885782][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x2 [ 46.931450][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.939626][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.947319][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.955204][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.962948][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.970689][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.978431][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.986186][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 46.993934][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.001614][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.009299][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.015415][ T4448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4448 comm=syz.4.351 [ 47.016994][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.037076][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.044762][ T10] hid-generic 0000:3000000:0000.0002: unknown main item tag 0x0 [ 47.131050][ T4449] infiniband syz0: set active [ 47.135968][ T4449] infiniband syz0: added veth0_virt_wifi [ 47.145366][ T10] hid-generic 0000:3000000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 47.217144][ T4449] RDS/IB: syz0: added [ 47.229596][ T4449] smc: adding ib device syz0 with port count 1 [ 47.235843][ T4449] smc: ib device syz0 port 1 has pnetid [ 47.462723][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.470446][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.485836][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.493678][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.612611][ T4488] loop1: detected capacity change from 0 to 2048 [ 47.619721][ T4488] EXT4-fs: Ignoring removed bh option [ 47.656346][ T4492] loop3: detected capacity change from 0 to 764 [ 47.663594][ T4488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.771402][ T4501] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 47.792765][ T4501] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 47.805128][ T4501] EXT4-fs (loop1): This should not happen!! Data will be lost [ 47.805128][ T4501] [ 47.814930][ T4501] EXT4-fs (loop1): Total free blocks count 0 [ 47.821884][ T4501] EXT4-fs (loop1): Free/Dirty block details [ 47.827804][ T4501] EXT4-fs (loop1): free_blocks=2415919104 [ 47.833648][ T4501] EXT4-fs (loop1): dirty_blocks=576 [ 47.838883][ T4501] EXT4-fs (loop1): Block reservation details [ 47.845008][ T4501] EXT4-fs (loop1): i_reserved_data_blocks=49 [ 47.995563][ T4520] loop2: detected capacity change from 0 to 512 [ 48.004085][ T4520] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 48.017891][ T4520] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 48.029707][ T4520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 48.037778][ T4520] System zones: 1-12 [ 48.043895][ T4520] EXT4-fs (loop2): 1 truncate cleaned up [ 48.050571][ T4520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.226687][ T4523] bond1: entered promiscuous mode [ 48.231840][ T4523] bond1: entered allmulticast mode [ 48.243726][ T4523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.264892][ T4525] pimreg: entered allmulticast mode [ 48.346952][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.358315][ T4521] pimreg: left allmulticast mode [ 48.407612][ T174] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 48.437761][ T4529] pim6reg1: entered promiscuous mode [ 48.443173][ T4529] pim6reg1: entered allmulticast mode [ 48.472396][ T4531] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 48.583298][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 48.583314][ T29] audit: type=1400 audit(2000000009.610:430): avc: denied { read } for pid=4538 comm="syz.1.375" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.613204][ T29] audit: type=1400 audit(2000000009.610:431): avc: denied { open } for pid=4538 comm="syz.1.375" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.659458][ T29] audit: type=1400 audit(2000000009.610:432): avc: denied { ioctl } for pid=4538 comm="syz.1.375" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 48.685332][ T29] audit: type=1400 audit(2000000009.610:433): avc: denied { setopt } for pid=4538 comm="syz.1.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.896432][ T29] audit: type=1400 audit(2000000009.920:434): avc: denied { write } for pid=4561 comm="syz.3.386" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.920341][ T29] audit: type=1400 audit(2000000009.920:435): avc: denied { open } for pid=4561 comm="syz.3.386" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 48.944342][ T29] audit: type=1400 audit(2000000009.920:436): avc: denied { ioctl } for pid=4561 comm="syz.3.386" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.002077][ T29] audit: type=1326 audit(2000000010.030:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691e6fe969 code=0x7ffc0000 [ 49.026150][ T29] audit: type=1326 audit(2000000010.030:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4569 comm="syz.3.389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f691e6fe969 code=0x7ffc0000 [ 49.029595][ T4568] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 49.050623][ T29] audit: type=1400 audit(2000000010.060:439): avc: denied { load_policy } for pid=4567 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.078191][ T4568] SELinux: failed to load policy [ 49.130671][ T4574] __nla_validate_parse: 30 callbacks suppressed [ 49.130699][ T4574] netlink: 96 bytes leftover after parsing attributes in process `syz.1.391'. [ 49.173364][ T4576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 49.182471][ T4576] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 49.266961][ T4585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.396'. [ 49.275859][ T4585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.396'. [ 49.377445][ T4593] mmap: syz.1.400 (4593) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.424399][ T4597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.401'. [ 49.488086][ T4602] loop1: detected capacity change from 0 to 164 [ 49.498753][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.402'. [ 49.592447][ T4604] syzkaller0: entered promiscuous mode [ 49.598003][ T4604] syzkaller0: entered allmulticast mode [ 49.700500][ T4613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.407'. [ 49.709582][ T4613] netlink: 4 bytes leftover after parsing attributes in process `syz.4.407'. [ 49.951500][ T4621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 50.085822][ T4636] syzkaller0: entered promiscuous mode [ 50.091633][ T4636] syzkaller0: entered allmulticast mode [ 50.108486][ T4638] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 50.134982][ T4638] loop1: detected capacity change from 0 to 1024 [ 50.143512][ T4638] EXT4-fs: Ignoring removed nobh option [ 50.149139][ T4638] EXT4-fs: Ignoring removed bh option [ 50.176790][ T4638] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.193743][ T4638] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.415: Allocating blocks 481-513 which overlap fs metadata [ 50.211270][ T4638] EXT4-fs (loop1): Remounting filesystem read-only [ 50.254930][ T4637] EXT4-fs (loop1): pa ffff8881071070e0: logic 256, phys. 369, len 9 [ 50.274073][ T4654] loop4: detected capacity change from 0 to 256 [ 50.280840][ T4654] vfat: Unknown parameter 'shortname' [ 50.287775][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.579006][ T4677] netlink: 'syz.2.428': attribute type 4 has an invalid length. [ 50.620315][ T4684] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 50.637783][ T4683] netlink: 'syz.1.430': attribute type 4 has an invalid length. [ 50.655204][ T4684] loop3: detected capacity change from 0 to 1024 [ 50.663117][ T4684] EXT4-fs: Ignoring removed nobh option [ 50.667307][ T4683] netlink: 'syz.1.430': attribute type 4 has an invalid length. [ 50.668700][ T4684] EXT4-fs: Ignoring removed bh option [ 50.711467][ T4684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.299303][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.706124][ T4729] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 51.715905][ T4729] SELinux: failed to load policy [ 51.861293][ T4734] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 51.872741][ T4734] syzkaller0: entered promiscuous mode [ 51.878269][ T4734] syzkaller0: entered allmulticast mode [ 51.952673][ T4736] syzkaller0: entered promiscuous mode [ 51.958272][ T4736] syzkaller0: entered allmulticast mode [ 52.003755][ T4743] bridge: RTM_NEWNEIGH with invalid ether address [ 52.804910][ T4772] loop3: detected capacity change from 0 to 512 [ 52.905320][ T4772] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.949872][ T4772] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.011014][ T3313] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 53.063023][ T4780] netlink: 'syz.1.458': attribute type 5 has an invalid length. [ 53.095668][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.153005][ T4780] : renamed from bond0 (while UP) [ 53.204693][ T4787] loop4: detected capacity change from 0 to 2048 [ 53.221843][ T4787] EXT4-fs: Ignoring removed bh option [ 53.291319][ T4787] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.334289][ T4792] syzkaller0: entered promiscuous mode [ 53.339962][ T4792] syzkaller0: entered allmulticast mode [ 53.345675][ T4801] loop1: detected capacity change from 0 to 128 [ 53.381135][ T4801] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 53.414099][ T4801] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.466500][ T31] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 53.515730][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.585012][ T4824] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 53.597130][ T4826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4826 comm=syz.1.467 [ 53.613506][ T4824] netlink: 'syz.3.470': attribute type 4 has an invalid length. [ 53.756412][ T4834] loop3: detected capacity change from 0 to 512 [ 53.793078][ T4834] EXT4-fs: Ignoring removed mblk_io_submit option [ 53.811406][ T4834] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 53.845661][ T4834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.867287][ T4834] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.930790][ T4834] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 53.943001][ T4834] team0: Port device dummy0 added [ 54.025932][ T4845] loop2: detected capacity change from 0 to 2048 [ 54.043987][ T4845] EXT4-fs: Ignoring removed bh option [ 54.078496][ T4847] SELinux: ebitmap: truncated map [ 54.083201][ T4845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.084115][ T4847] SELinux: failed to load policy [ 54.101461][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 54.101476][ T29] audit: type=1400 audit(2000000015.130:536): avc: denied { create } for pid=4844 comm="syz.2.476" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.190764][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.216841][ T4855] __nla_validate_parse: 26 callbacks suppressed [ 54.216879][ T4855] netlink: 36 bytes leftover after parsing attributes in process `syz.2.479'. [ 54.308521][ T4857] loop2: detected capacity change from 0 to 512 [ 54.321539][ T4857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.335036][ T4857] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.347751][ T29] audit: type=1400 audit(2000000015.370:537): avc: denied { read append open } for pid=4856 comm="syz.2.480" path="/80/file1/hugetlb.1GB.usage_in_bytes" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.381536][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.434301][ T29] audit: type=1326 audit(2000000015.460:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4864 comm="syz.0.483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa141f4e969 code=0x0 [ 54.485640][ T4867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 54.511328][ T4869] Timeout policy `syz1' can only be used by L3 protocol number 33024 [ 54.551460][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.577208][ T4871] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.486'. [ 54.591094][ T4871] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.486'. [ 54.666991][ T4875] syzkaller0: entered promiscuous mode [ 54.672549][ T4875] syzkaller0: entered allmulticast mode [ 54.685481][ T29] audit: type=1400 audit(2000000015.710:539): avc: denied { create } for pid=4876 comm="syz.3.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 54.722523][ T4879] loop2: detected capacity change from 0 to 2048 [ 54.729161][ T4879] EXT4-fs: Ignoring removed bh option [ 54.741895][ T4879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.760020][ T4879] netlink: 8 bytes leftover after parsing attributes in process `syz.2.489'. [ 54.807194][ T4888] loop3: detected capacity change from 0 to 512 [ 54.824317][ T4888] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 54.845645][ T4888] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.862283][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.876041][ T4888] EXT4-fs (loop3): mount failed [ 54.892731][ T4888] netlink: 20 bytes leftover after parsing attributes in process `syz.3.492'. [ 54.973719][ T4901] loop2: detected capacity change from 0 to 256 [ 54.996716][ T4901] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 55.115139][ T4904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.496'. [ 55.136989][ T4913] loop4: detected capacity change from 0 to 128 [ 55.183126][ T4921] netlink: 8 bytes leftover after parsing attributes in process `syz.4.500'. [ 55.192017][ T4921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 55.252326][ T4925] syzkaller0: entered promiscuous mode [ 55.257844][ T4925] syzkaller0: entered allmulticast mode [ 55.369112][ T4937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.507'. [ 55.371067][ T4933] usb usb8: usbfs: process 4933 (syz.0.505) did not claim interface 0 before use [ 55.847556][ T29] audit: type=1400 audit(2000000016.870:540): avc: denied { create } for pid=4953 comm="syz.3.511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 56.110464][ T4962] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 56.117022][ T4962] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 56.125207][ T4962] vhci_hcd vhci_hcd.0: Device attached [ 56.132933][ T4962] vhci_hcd vhci_hcd.0: port 0 already used [ 56.154618][ T29] audit: type=1400 audit(2000000017.180:541): avc: denied { create } for pid=4961 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 56.155454][ T4963] vhci_hcd: connection closed [ 56.179135][ T1659] vhci_hcd: stop threads [ 56.188176][ T1659] vhci_hcd: release socket [ 56.192706][ T1659] vhci_hcd: disconnect device [ 56.211621][ T29] audit: type=1400 audit(2000000017.240:542): avc: denied { mounton } for pid=4969 comm="syz.4.516" path="/syzcgroup/cpu/syz4/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 56.221056][ T4970] 9pnet: Could not find request transport: tcptch [ 56.287369][ T4977] SELinux: syz.4.518 (4977) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 56.462624][ T4985] loop4: detected capacity change from 0 to 512 [ 56.484308][ T4985] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.492349][ T4985] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.522040][ T4985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.536102][ T4985] ext4 filesystem being mounted at /122/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.569696][ T4985] netlink: 'syz.4.520': attribute type 10 has an invalid length. [ 56.598031][ T4985] team0: Port device dummy0 added [ 56.612221][ T4995] loop1: detected capacity change from 0 to 2048 [ 56.652171][ T4995] EXT4-fs (loop1): failed to initialize system zone (-117) [ 56.660258][ T4995] EXT4-fs (loop1): mount failed [ 56.924111][ T29] audit: type=1326 audit(2000000017.950:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5025 comm="syz.1.532" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7f089ee969 code=0x0 [ 57.334087][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.652161][ T5042] loop4: detected capacity change from 0 to 256 [ 57.713358][ T5044] loop2: detected capacity change from 0 to 2048 [ 57.720041][ T5044] EXT4-fs: Ignoring removed bh option [ 57.741620][ T5044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.763050][ T5048] netlink: 'syz.1.537': attribute type 1 has an invalid length. [ 57.777441][ T5048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.790603][ T5048] vlan0: entered promiscuous mode [ 57.795687][ T5048] bond0: entered promiscuous mode [ 57.800987][ T5048] vlan0: entered allmulticast mode [ 57.806232][ T5048] bond0: entered allmulticast mode [ 57.815410][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.842341][ T29] audit: type=1400 audit(2000000018.870:544): avc: denied { append } for pid=5052 comm="syz.1.539" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 57.937295][ T5066] loop2: detected capacity change from 0 to 164 [ 57.970955][ T5058] SELinux: ebitmap: truncated map [ 57.976473][ T5058] SELinux: failed to load policy [ 58.011011][ T5071] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 58.037650][ T5071] batman_adv: batadv0: Adding interface: team0 [ 58.044170][ T5071] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.069696][ T5071] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 58.091505][ T5079] netlink: 'syz.1.546': attribute type 10 has an invalid length. [ 58.099560][ T5079] team0: entered promiscuous mode [ 58.104626][ T5079] team_slave_0: entered promiscuous mode [ 58.110501][ T5079] team_slave_1: entered promiscuous mode [ 58.119090][ T5079] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.128797][ T5079] batman_adv: batadv0: Interface activated: team0 [ 58.135378][ T5079] batman_adv: batadv0: Interface deactivated: team0 [ 58.142046][ T5079] batman_adv: batadv0: Removing interface: team0 [ 58.158178][ T5079] bridge0: port 3(team0) entered blocking state [ 58.165340][ T5079] bridge0: port 3(team0) entered disabled state [ 58.171862][ T5079] team0: entered allmulticast mode [ 58.177026][ T5079] team_slave_0: entered allmulticast mode [ 58.177363][ T5081] loop4: detected capacity change from 0 to 2048 [ 58.182874][ T5079] team_slave_1: entered allmulticast mode [ 58.197419][ T5079] bridge0: port 3(team0) entered blocking state [ 58.203090][ T5081] EXT4-fs: Ignoring removed bh option [ 58.203782][ T5079] bridge0: port 3(team0) entered forwarding state [ 58.216982][ T5078] tipc: Enabling of bearer rejected, already enabled [ 58.232561][ T5081] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.361856][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.416895][ T5098] veth1_macvtap: left promiscuous mode [ 58.525153][ T5113] loop4: detected capacity change from 0 to 512 [ 58.536622][ T5106] SELinux: ebitmap: truncated map [ 58.542064][ T5113] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 58.552056][ T5106] SELinux: failed to load policy [ 58.558454][ T5113] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.558: invalid block [ 58.572246][ T5113] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.558: invalid indirect mapped block 4294967295 (level 1) [ 58.608984][ T5113] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.558: invalid indirect mapped block 4294967295 (level 1) [ 58.630724][ T5120] xt_hashlimit: size too large, truncated to 1048576 [ 58.637834][ T5113] EXT4-fs (loop4): 2 truncates cleaned up [ 58.642112][ T5111] syzkaller0: entered promiscuous mode [ 58.649092][ T5111] syzkaller0: entered allmulticast mode [ 58.649791][ T5113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.770688][ T5113] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1339: inode #12: block 7: comm syz.4.558: path /127/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 58.860520][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.943809][ T5131] loop1: detected capacity change from 0 to 2048 [ 58.950573][ T5131] EXT4-fs: Ignoring removed bh option [ 58.958720][ T5133] loop3: detected capacity change from 0 to 2048 [ 58.967198][ T5133] EXT4-fs: Ignoring removed bh option [ 58.980966][ T5131] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.982649][ T5133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.076291][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.098319][ T5145] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.113997][ T5145] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 59.126364][ T5145] EXT4-fs (loop3): This should not happen!! Data will be lost [ 59.126364][ T5145] [ 59.136195][ T5145] EXT4-fs (loop3): Total free blocks count 0 [ 59.142539][ T5145] EXT4-fs (loop3): Free/Dirty block details [ 59.149266][ T5145] EXT4-fs (loop3): free_blocks=2415919104 [ 59.155123][ T5145] EXT4-fs (loop3): dirty_blocks=1280 [ 59.160475][ T5145] EXT4-fs (loop3): Block reservation details [ 59.166536][ T5145] EXT4-fs (loop3): i_reserved_data_blocks=80 [ 59.255580][ T5145] __nla_validate_parse: 26 callbacks suppressed [ 59.255601][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.564'. [ 59.306957][ T5151] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 59.477411][ T5178] netlink: 'syz.4.574': attribute type 13 has an invalid length. [ 59.534554][ T5178] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.541853][ T5178] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.551991][ T5184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 59.561713][ T5184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.576'. [ 59.636818][ T5178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.648437][ T5178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.667837][ T1659] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2048 with error 28 [ 59.701058][ T5178] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.710905][ T5178] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.720108][ T5178] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.729197][ T5178] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.843479][ T5188] loop2: detected capacity change from 0 to 2048 [ 59.867275][ T5188] EXT4-fs: Ignoring removed bh option [ 59.893370][ T5188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.912606][ T5193] netlink: 44 bytes leftover after parsing attributes in process `syz.3.577'. [ 59.922741][ T5188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.578'. [ 59.931772][ T5190] netlink: 44 bytes leftover after parsing attributes in process `syz.3.577'. [ 60.012528][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.018868][ T5201] loop1: detected capacity change from 0 to 1024 [ 60.049806][ T5201] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.066232][ T5208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.078207][ T5203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.581'. [ 60.104132][ T5208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.115907][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 60.115920][ T29] audit: type=1326 audit(2000000021.140:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.162218][ T3375] IPVS: starting estimator thread 0... [ 60.178730][ T29] audit: type=1326 audit(2000000021.170:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.202905][ T29] audit: type=1326 audit(2000000021.170:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.226188][ T29] audit: type=1326 audit(2000000021.170:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.250220][ T29] audit: type=1326 audit(2000000021.170:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.273668][ T29] audit: type=1326 audit(2000000021.170:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.297176][ T29] audit: type=1326 audit(2000000021.170:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.321067][ T29] audit: type=1326 audit(2000000021.170:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.344318][ T29] audit: type=1326 audit(2000000021.170:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.368192][ T29] audit: type=1326 audit(2000000021.170:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5207 comm="syz.0.584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa141f4e969 code=0x7ffc0000 [ 60.369470][ T5209] IPVS: using max 2304 ests per chain, 115200 per kthread [ 60.413731][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.444310][ T5218] pimreg: entered allmulticast mode [ 60.465417][ T5218] pimreg: left allmulticast mode [ 60.484734][ T5226] ref_ctr_offset mismatch. inode: 0x293 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300000040 [ 60.511443][ T5228] loop2: detected capacity change from 0 to 2048 [ 60.518256][ T5228] EXT4-fs: Ignoring removed bh option [ 60.526231][ T5230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.591'. [ 60.537045][ T5228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.553304][ T5234] $H: renamed from  [ 60.560982][ T5234] $H: entered promiscuous mode [ 60.566041][ T5234] bond_slave_0: entered promiscuous mode [ 60.571930][ T5234] bond_slave_1: entered promiscuous mode [ 60.580421][ T5236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.595'. [ 60.670606][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.678601][ T5244] loop1: detected capacity change from 0 to 2048 [ 60.697764][ T5244] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.703117][ T5247] syzkaller1: entered promiscuous mode [ 60.715444][ T5247] syzkaller1: entered allmulticast mode [ 60.724453][ T5244] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.892839][ T5258] loop3: detected capacity change from 0 to 2048 [ 60.916352][ T5258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.039440][ T5266] netlink: 'syz.2.605': attribute type 5 has an invalid length. [ 61.097595][ T5266] : renamed from bond0 (while UP) [ 61.202586][ T5268] vhci_hcd: invalid port number 96 [ 61.207891][ T5268] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 61.295213][ T3410] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 61.347794][ T3410] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 318 with error 117 [ 61.360525][ T3410] EXT4-fs (loop1): This should not happen!! Data will be lost [ 61.360525][ T3410] [ 61.803598][ T5279] loop4: detected capacity change from 0 to 2048 [ 61.814795][ T5279] EXT4-fs: Ignoring removed bh option [ 61.832840][ T5282] ipt_REJECT: TCP_RESET invalid for non-tcp [ 61.865958][ T5282] loop3: detected capacity change from 0 to 128 [ 61.884628][ T5282] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.916038][ T5244] syz.1.598 (5244) used greatest stack depth: 6832 bytes left [ 62.297422][ T5294] pimreg: entered allmulticast mode [ 62.305800][ T5294] pimreg: left allmulticast mode [ 62.429722][ T5310] loop4: detected capacity change from 0 to 2048 [ 62.436327][ T5311] loop1: detected capacity change from 0 to 256 [ 62.471982][ T5310] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.487774][ T5310] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 62.500242][ T5310] EXT4-fs (loop4): This should not happen!! Data will be lost [ 62.500242][ T5310] [ 62.509932][ T5310] EXT4-fs (loop4): Total free blocks count 0 [ 62.515952][ T5310] EXT4-fs (loop4): Free/Dirty block details [ 62.521894][ T5310] EXT4-fs (loop4): free_blocks=2415919104 [ 62.527740][ T5310] EXT4-fs (loop4): dirty_blocks=48 [ 62.532999][ T5310] EXT4-fs (loop4): Block reservation details [ 62.539011][ T5310] EXT4-fs (loop4): i_reserved_data_blocks=3 [ 62.545394][ T5315]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.581673][ T5315]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.596524][ T5315]  (unregistering): Released all slaves [ 62.854499][ T5335] loop1: detected capacity change from 0 to 1024 [ 62.862077][ T5335] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 62.874247][ T5335] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 62.882469][ T5335] EXT4-fs (loop1): orphan cleanup on readonly fs [ 62.888988][ T5335] EXT4-fs error (device loop1): ext4_ext_check_inode:524: inode #3: comm syz.1.625: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 2(4), depth 0(0) [ 62.907487][ T5335] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.625: Bad quota inode: 3, type: 0 [ 62.918970][ T5335] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 62.925382][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.934529][ T5335] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 62.941099][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.941122][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.941162][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.970232][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.977611][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.985062][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.992486][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 62.999944][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.007338][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.014772][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.022327][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.029777][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.037221][ T5335] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.037293][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.052797][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.060392][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.067853][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.075250][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.082651][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.090116][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.097516][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.105072][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.112510][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.119943][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.127329][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.134927][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.142429][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.149872][ T36] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 63.159560][ T36] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 63.161421][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 63.181140][ T9] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 63.195395][ T5340] : renamed from vlan0 (while UP) [ 63.249262][ T5345] IPVS: stopping master sync thread 5350 ... [ 63.255999][ T5350] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 63.484291][ T5366] infiniband syz1: set active [ 63.489096][ T5366] infiniband syz1: added veth0_to_team [ 63.672799][ T5366] RDS/IB: syz1: added [ 63.698513][ T5366] smc: adding ib device syz1 with port count 1 [ 63.798675][ T5366] smc: ib device syz1 port 1 has pnetid [ 64.290026][ T5394] lo speed is unknown, defaulting to 1000 [ 64.296734][ T5394] lo speed is unknown, defaulting to 1000 [ 64.302777][ T5394] lo speed is unknown, defaulting to 1000 [ 64.315610][ T5394] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.337748][ T5409] xt_hashlimit: size too large, truncated to 1048576 [ 64.345363][ T5394] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 64.450969][ T5394] lo speed is unknown, defaulting to 1000 [ 64.467554][ T5394] lo speed is unknown, defaulting to 1000 [ 64.478839][ T5412] __nla_validate_parse: 11 callbacks suppressed [ 64.478858][ T5412] netlink: 4 bytes leftover after parsing attributes in process `syz.3.644'. [ 64.499875][ T5394] lo speed is unknown, defaulting to 1000 [ 64.529832][ T5394] lo speed is unknown, defaulting to 1000 [ 64.550264][ T5394] lo speed is unknown, defaulting to 1000 [ 64.557946][ T5422] futex_wake_op: syz.2.648 tries to shift op by -1; fix this program [ 64.627767][ T5425] loop3: detected capacity change from 0 to 2048 [ 64.634648][ T5425] msdos: Unknown parameter '184467440737095516150xffffffffffffffff' [ 64.641044][ T5428] syzkaller1: entered promiscuous mode [ 64.648885][ T5428] syzkaller1: entered allmulticast mode [ 64.695319][ T5432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 64.854730][ T5441] netlink: 4 bytes leftover after parsing attributes in process `syz.4.653'. [ 64.896785][ T5447] loop4: detected capacity change from 0 to 512 [ 64.904139][ T5447] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.920941][ T5447] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.933798][ T5447] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 95 vs 96 free clusters [ 64.945357][ T5452] netlink: 'syz.3.654': attribute type 13 has an invalid length. [ 64.950052][ T5447] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.655: Failed to acquire dquot type 1 [ 65.031460][ T5452] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.038690][ T5452] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.141001][ T5452] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.151155][ T5452] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.160350][ T5452] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.169245][ T5452] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.197967][ T29] kauditd_printk_skb: 543 callbacks suppressed [ 65.197984][ T29] audit: type=1400 audit(2000000026.220:1096): avc: denied { write } for pid=5470 comm="syz.1.656" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.230611][ T5471] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 65.230611][ T5471] program gtp not setting count and/or reply_len properly [ 65.248250][ T29] audit: type=1400 audit(2000000026.260:1097): avc: denied { open } for pid=5470 comm="syz.1.656" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.272344][ T29] audit: type=1400 audit(2000000026.260:1098): avc: denied { ioctl } for pid=5470 comm="gtp" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 65.502856][ T29] audit: type=1400 audit(2000000026.500:1099): avc: denied { create } for pid=5479 comm="syz.0.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.553128][ T5478] bond3: entered promiscuous mode [ 65.558277][ T5478] bond3: entered allmulticast mode [ 65.564655][ T5478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 65.587352][ T5478] bond3 (unregistering): Released all slaves [ 65.612495][ T5484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.658'. [ 65.767482][ T29] audit: type=1400 audit(2000000026.790:1100): avc: denied { ioctl } for pid=5486 comm="syz.0.662" path="socket:[9850]" dev="sockfs" ino=9850 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.372485][ T5489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.391789][ T29] audit: type=1400 audit(2000000027.400:1101): avc: denied { ioctl } for pid=5488 comm="syz.2.663" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.436102][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.444503][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.452066][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.463572][ T5489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.483540][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.488220][ T29] audit: type=1400 audit(2000000027.510:1102): avc: denied { execute } for pid=5488 comm="syz.2.663" path="/116/cpu.stat" dev="tmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.491017][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.491048][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.491073][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.491094][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.545033][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.552546][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.559982][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.567477][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.575689][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.584508][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.592077][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.600235][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.607642][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.615151][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.622584][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.630797][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.638359][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.645804][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.653260][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.661689][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.669237][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.676690][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.682793][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 66.684168][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.701080][ T5462] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 66.709119][ T5462] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz0] on syz1 [ 66.761535][ T5505] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 66.770523][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.669'. [ 66.789516][ T5503] block device autoloading is deprecated and will be removed. [ 66.797102][ T5503] bio_check_eod: 8 callbacks suppressed [ 66.797118][ T5503] syz.0.668: attempt to access beyond end of device [ 66.797118][ T5503] md33: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 66.816046][ T29] audit: type=1400 audit(2000000027.830:1103): avc: denied { create } for pid=5507 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.836058][ T29] audit: type=1400 audit(2000000027.830:1104): avc: denied { write } for pid=5507 comm="syz.1.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 66.855962][ T29] audit: type=1400 audit(2000000027.830:1105): avc: denied { append } for pid=5507 comm="syz.1.670" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 66.879756][ T5508] random: crng reseeded on system resumption [ 66.978238][ T5516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.988596][ T5516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.038439][ T5521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'. [ 67.143047][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 67.151970][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.673'. [ 67.481727][ T5544] netlink: 'syz.2.675': attribute type 13 has an invalid length. [ 67.871859][ T5544] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.879226][ T5544] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.087329][ T5544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.148561][ T5544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.302342][ T5544] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.310893][ T5544] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.319258][ T5544] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.327643][ T5544] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.349076][ T5553] smc: net device bond0 applied user defined pnetid SYZ2 [ 68.357479][ T5560] 0X: renamed from caif0 [ 68.371778][ T5560] 0X: entered allmulticast mode [ 68.377043][ T5560] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 68.392932][ T3390] syz0: Port: 1 Link DOWN [ 68.420245][ T5579] loop4: detected capacity change from 0 to 512 [ 68.435034][ T5579] EXT4-fs: Ignoring removed i_version option [ 68.487307][ T5579] EXT4-fs mount: 12 callbacks suppressed [ 68.487324][ T5579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.541671][ T5590] macvtap1: entered promiscuous mode [ 68.547063][ T5590] bridge0: entered promiscuous mode [ 68.552523][ T5590] macvtap1: entered allmulticast mode [ 68.557905][ T5590] bridge0: entered allmulticast mode [ 68.583675][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.600185][ T5592] bridge0: left allmulticast mode [ 68.605294][ T5592] bridge0: left promiscuous mode [ 69.508196][ T5681] __nla_validate_parse: 2 callbacks suppressed [ 69.508212][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 69.801514][ T5677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 70.038013][ T5703] lo speed is unknown, defaulting to 1000 [ 70.791117][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 70.791136][ T29] audit: type=1400 audit(2000000031.150:1131): avc: denied { getopt } for pid=5676 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.066376][ T29] audit: type=1326 audit(2000000032.090:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.091475][ T29] audit: type=1326 audit(2000000032.120:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.114988][ T29] audit: type=1326 audit(2000000032.120:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.138991][ T29] audit: type=1326 audit(2000000032.120:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.163076][ T29] audit: type=1326 audit(2000000032.120:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.186465][ T29] audit: type=1326 audit(2000000032.120:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.689198][ T29] audit: type=1400 audit(2000000032.600:1138): avc: denied { block_suspend } for pid=5714 comm="syz.1.690" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 71.717225][ T5715] loop3: detected capacity change from 0 to 8192 [ 71.725164][ T29] audit: type=1326 audit(2000000032.740:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.748606][ T29] audit: type=1326 audit(2000000032.740:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5722 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e07f7e969 code=0x7ffc0000 [ 71.828131][ T5724] netlink: 'syz.2.693': attribute type 5 has an invalid length. [ 71.836688][ T5724] netlink: 152 bytes leftover after parsing attributes in process `syz.2.693'. [ 71.917910][ T5715] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.112919][ T5740] syzkaller0: entered promiscuous mode [ 72.118528][ T5740] syzkaller0: entered allmulticast mode [ 72.212928][ T5751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.697'. [ 72.337434][ T5756] loop4: detected capacity change from 0 to 2048 [ 72.378875][ T5756] EXT4-fs: Ignoring removed bh option [ 72.413137][ T5756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.492911][ T5765] loop3: detected capacity change from 0 to 1024 [ 72.502818][ T5766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.702'. [ 72.532541][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.551599][ T5765] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.565980][ T5765] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.581101][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.706'. [ 72.583390][ T5765] EXT4-fs error (device loop3): ext4_map_blocks:709: inode #15: block 3: comm syz.3.705: lblock 3 mapped to illegal pblock 3 (length 1) [ 72.590076][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.706'. [ 72.605139][ T5765] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 72.625291][ T5765] EXT4-fs (loop3): This should not happen!! Data will be lost [ 72.625291][ T5765] [ 72.626405][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.706'. [ 72.656076][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.706'. [ 72.665079][ T5770] netlink: 36 bytes leftover after parsing attributes in process `syz.4.706'. [ 72.676612][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.701913][ T5776] loop3: detected capacity change from 0 to 1024 [ 72.708801][ T5776] EXT4-fs: Ignoring removed orlov option [ 72.799475][ T9] IPVS: starting estimator thread 0... [ 72.879049][ T5783] serio: Serial port ptm0 [ 72.899755][ T5779] IPVS: using max 2256 ests per chain, 112800 per kthread [ 73.460066][ T5800] rdma_rxe: rxe_newlink: failed to add veth0_to_team [ 73.634965][ T5806] bond0: (slave bond_slave_1): Releasing backup interface [ 73.757666][ T5812] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 74.152725][ T5848] loop3: detected capacity change from 0 to 1024 [ 74.160637][ T5848] EXT4-fs: Ignoring removed orlov option [ 74.179126][ T5848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.249071][ T5853] ip6erspan0: entered promiscuous mode [ 74.372045][ T5852] loop4: detected capacity change from 0 to 2048 [ 74.489107][ T5852] Alternate GPT is invalid, using primary GPT. [ 74.495530][ T5852] loop4: p1 p2 p3 [ 74.672308][ T5858] __nla_validate_parse: 13 callbacks suppressed [ 74.672329][ T5858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.732'. [ 74.688165][ T5858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.732'. [ 74.740813][ T5862] netlink: 240 bytes leftover after parsing attributes in process `syz.4.731'. [ 74.813565][ T5854] ================================================================== [ 74.821715][ T5854] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / inode_cgwb_move_to_attached [ 74.831377][ T5854] [ 74.833719][ T5854] write to 0xffff88811a88c1b8 of 4 bytes by task 5848 on cpu 0: [ 74.841368][ T5854] inode_cgwb_move_to_attached+0x9b/0x310 [ 74.847100][ T5854] writeback_single_inode+0x2af/0x3e0 [ 74.852494][ T5854] sync_inode_metadata+0x5b/0x90 [ 74.857476][ T5854] generic_buffers_fsync_noflush+0xd9/0x120 [ 74.863396][ T5854] ext4_sync_file+0x1ab/0x690 [ 74.868102][ T5854] vfs_fsync_range+0x10a/0x130 [ 74.872885][ T5854] ext4_buffered_write_iter+0x34f/0x3c0 [ 74.878484][ T5854] ext4_file_write_iter+0x383/0xf00 [ 74.883707][ T5854] iter_file_splice_write+0x5f2/0x970 [ 74.889098][ T5854] direct_splice_actor+0x153/0x2a0 [ 74.894231][ T5854] splice_direct_to_actor+0x30f/0x680 [ 74.899620][ T5854] do_splice_direct+0xda/0x150 [ 74.904407][ T5854] do_sendfile+0x380/0x640 [ 74.908832][ T5854] __x64_sys_sendfile64+0x105/0x150 [ 74.914069][ T5854] x64_sys_call+0xb39/0x2fb0 [ 74.918675][ T5854] do_syscall_64+0xd0/0x1a0 [ 74.923195][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.929110][ T5854] [ 74.931546][ T5854] read to 0xffff88811a88c1b8 of 4 bytes by task 5854 on cpu 1: [ 74.939092][ T5854] generic_buffers_fsync_noflush+0x80/0x120 [ 74.945085][ T5854] ext4_sync_file+0x1ab/0x690 [ 74.949792][ T5854] vfs_fsync_range+0x10a/0x130 [ 74.954585][ T5854] ext4_buffered_write_iter+0x34f/0x3c0 [ 74.960156][ T5854] ext4_file_write_iter+0x383/0xf00 [ 74.965391][ T5854] iter_file_splice_write+0x5f2/0x970 [ 74.970779][ T5854] direct_splice_actor+0x153/0x2a0 [ 74.975924][ T5854] splice_direct_to_actor+0x30f/0x680 [ 74.981310][ T5854] do_splice_direct+0xda/0x150 [ 74.986082][ T5854] do_sendfile+0x380/0x640 [ 74.990514][ T5854] __x64_sys_sendfile64+0x105/0x150 [ 74.995833][ T5854] x64_sys_call+0xb39/0x2fb0 [ 75.000445][ T5854] do_syscall_64+0xd0/0x1a0 [ 75.005062][ T5854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.010965][ T5854] [ 75.013464][ T5854] value changed: 0x00000002 -> 0x00000020 [ 75.019197][ T5854] [ 75.021525][ T5854] Reported by Kernel Concurrency Sanitizer on: [ 75.027691][ T5854] CPU: 1 UID: 0 PID: 5854 Comm: syz.3.730 Not tainted 6.15.0-syzkaller #0 PREEMPT(voluntary) [ 75.037943][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 75.048006][ T5854] ================================================================== [ 75.151304][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.342106][ T5866] lo speed is unknown, defaulting to 1000