last executing test programs: 18.058776567s ago: executing program 1 (id=45): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'veth1_to_bridge\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c00018008000100", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 18.031274976s ago: executing program 1 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x5, &(0x7f00000002c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="4200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 17.883816336s ago: executing program 1 (id=50): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}, 0x52f8}], 0x1, 0x1, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x4}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 17.692142756s ago: executing program 1 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = epoll_create1(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000140)) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x821c10, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x112dd10, 0x0) 17.647990195s ago: executing program 1 (id=60): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000002}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r6}]}}}]}, 0x40}}, 0x0) 16.269038501s ago: executing program 1 (id=100): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x49) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x18) write$cgroup_type(r2, &(0x7f0000000200), 0xf642e7e) fcntl$setstatus(r1, 0x4, 0x4c00) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a07, 0x20000}]) 16.268815931s ago: executing program 32 (id=100): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") r0 = creat(&(0x7f0000000300)='./bus\x00', 0x49) r1 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./bus\x00', 0x18) write$cgroup_type(r2, &(0x7f0000000200), 0xf642e7e) fcntl$setstatus(r1, 0x4, 0x4c00) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x8, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a07, 0x20000}]) 2.341588347s ago: executing program 0 (id=439): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x18, 0xc, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xfffffffffffffffb) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xfd, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1b, 0xc, &(0x7f0000001200)=ANY=[@ANYBLOB, @ANYBLOB="605fdd4fdc0805532d8735429e1c68193e16eac0ef282a3359e5e4d41a56088a5c29e0320b308af7c4f7e299c0e5ff6c60fdfdca98aa7669401ec89b1d8a6573f23845b2d46dd82f15feb7508604f3775f62dc9aa81b595992ef558d445527df3aa257fd5a02367d6a7cf4c9805293c8e3609df0c2aa456472bbda28eef04d579e69cee052b88d4c882f592e7a4e3ee824c2ea9b4ca673a75c67daaaa75580b15e0b9a1ac1626f3c31da5a3cd0296d0e9bee5d7dd3127a6792ab651507e47c89d2fb79d7b6ed0de6cee63bc0361d3c2456778c9b750a01aa06b44a8743c6265e6ef42354afab44afdbeae04e0de40cd697f84e0aaf33523481879fd2a7796cae9480bed39dbf65ecd5efd808a651cdb6abcd", @ANYRES64=r0, @ANYRESHEX, @ANYRES16=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0xc, &(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRESOCT, @ANYRESDEC=0x0], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4e, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000840)=[{&(0x7f0000000080)=""/45, 0x2d}], 0x1) 1.514225165s ago: executing program 4 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x10000, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x28011, r2, 0x0) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) 1.513603704s ago: executing program 0 (id=470): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0, &(0x7f00000001c0)=0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r0, 0x10c}, {0xffffffffffffffff, 0x4}, {r0, 0x200}], 0x3, 0x0, 0x0, 0x0) 1.216592423s ago: executing program 4 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = dup2(r1, r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 986.623403ms ago: executing program 4 (id=482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mq_open(0x0, 0x1, 0x102, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x808410, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x0) 930.833293ms ago: executing program 4 (id=483): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x11000) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 845.233162ms ago: executing program 2 (id=486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, 'v\x00', "07f217bd74511f465bbbd5de01000000f91800", "0000f600", "8ce63ecbc640735f"}, 0x38) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) close(r0) 821.826522ms ago: executing program 2 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c0000001000030427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000140012800b00010062617461647600000400028008000a00", @ANYRESHEX], 0x3c}}, 0x0) 775.955322ms ago: executing program 3 (id=488): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x10000, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xc, &(0x7f0000000000), &(0x7f0000000280)=0x4) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, 0x0, &(0x7f00000001c0)) 720.503062ms ago: executing program 3 (id=489): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x112, &(0x7f0000000680)={0x0, 0xcfb6, 0x10, 0x5, 0xfffffff9}, &(0x7f0000000000)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x7ff, 0x6000}) io_uring_enter(r2, 0x1c3e, 0x1aa5, 0x0, 0x0, 0x1a) 704.405822ms ago: executing program 3 (id=490): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x1c, 0x0, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@val={0x8, 0x12b, 0xffffffff}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r2, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000001f80)=ANY=[@ANYBLOB="f4120000", @ANYRES16=r3, @ANYBLOB="000229bd7000fddbdf257a00000008000300af3dcfb18cf077be58aaf8001a6699c94a75dba6110f3fc43794fee1d610aec5e6cd715a06fb002ced8f082ddbfb2e9ef426aeda6aee115da458ff38", @ANYRES32=r4, @ANYBLOB="0400f9005500fc006d5b134ec554083389c6aaf297747636fc92ddbd10489567642dbd3ef367827801b8861abcdb90424d88a3aaa5cb6128730fd2b4337cfb13b29b940619242717f5bc0fb584bd9f2ec9c56bc454d083cbdb0000000400f9001400f9008432c7b6dc1aa5575fcf2254e7e710c9b600fa0088df0ec1ed597289e7ba631eb94108b2fb77bb2e195add016eaaf6c4281bce32de5caadea049304b559940557e3feadbe3a76d6daf0c27733228d20b11de2499b6910ab9e523c6df9060117004fa7e904718cc93e4e3be16ee66851c068de6a7ebcb6a0fe9c5b25486863ca117deb5d15d425b8b914efd894fc399c0611111801421ce0fbc8db1ad3950ff712873a409f157d77c188c39c1b49626868e28e73467eef199c4ccba90e719d02e70cacaddde4d000065002a002d1a00801f02000000000000000500ad000e0000000100de0c0000108c10930bf80a2c6c5acf5bd33d20c1acadee2a01038225060007f8ffffff08021100000104000000050000000300000001050802110000000300000071070000ffff010c200000000500f900a80000000f00f900793afd6e8ede27ba95a71a000700f900a256a600f800fa00995eef76da8cafb8d5e1dc49171d3ff7f19fbb5115d0ba71e3736e69a3c929c6d6bf28c6f6b8581a9f8dabc9842c09f1e362412b8412853d4d7dc6ff217d3c3f0f0254c3438cf667443ae5d4c5e4543cbc16bb04ce320637e2ec0bf5f3f5aa145cd077a7af927f45b3e04f3c228773b7a2eb13372524612690acf4b96a467ca6508fcdab84a2b4f4da28d64f440ce7be7690ca876bad2798a2e89a20d6c2295d36aeaadfe2e827fd09e161008da154ff4f0456a7d55e86c0ce4d7c301c7d1c39ab8271810e2a9d9c2eddb98d32fde62ac119b97b39811a0ce964efc709bb7222091a16400614f14dca1618a4e4e9836d87f3999a0d00f900a1c07af6b82ceb72cb0000000e00f900de2e09111099a24f474d00000410fa0073709eac68df2507a942ae94862b735b8739d23af491b39e7562f0b192b834c26f0be481c4fdc7a8b8a594c4e0b7314c7738713693c00c4f2ef9f23d36a8690095b8a9872ea306f803f99423e230d559d88cdc0e59f38c5fcad20cf31989faec7a8d8c50191d3d2dd833bfc839202ea4ffe6d7a04c7e18bfa70657e0d4b586d6c4e7711379bddb2f33c837cabfd31410b4794ca1b15651fe62598257aeaef27fb7ab8e66256c2ecaace6a7064ba4bd1b625891c9f97f77f85248a9913d8ac3bea8bcaf6bc4f9d1c93889774601385f45edc84a23eeee8c5320c8b9ed88593163637aa44eace0875b8a7021e8e5d303434fad1b01de721cefe483871bc73d80256cc05e4c9a82fc0e3d7e7681f33d521b35df05c11f9354c20cb1cac656184a1ba3f3c8a55c30e9c653ef9ced2020965c7d04b2feed23a7074bc52c361a864561e560d565cff1b08229baa9aa131884b317b3f8a178cd5e580dd4b40506569e3efda2b6a3e5191c5356822b2692a635c471a6967d347c5e69b1eab8fc16b7e72ec67d2216af4ed3db0334fdbf240e9b5a9ba93badd09079e0fd65cf6eadacdf0903aa2361fd81cef9aef4d9c80a8efd2fa23e1f4609118066efd148cd96f8987686a8d53819884c237cf4fc9d6c65601203b4a36ee154c45835e6b00fe8ead27f1baff2a75a9c996c3608f0b7f669bb31f004cea49db1372f30e8f6e1b632503460ccc955ac60e39efe0e212449a5f70e5769a6890db33c7748bf99826b582c1a24f05227ca3aaa95c820a318916c30ee008d77362d4fca833494fa25e819fd381cf7fa6b2bd9957316fe8f418a1f65238fef71e6ff7141f7cf805fe59caaaef723b65f60819ed4089bbc693b3179b22678cfdcaa3599b792b54634bddec669a4d055285b7bfb24170f46ae99b348045e6637b3b5d7bc9d01d5f57233678e0f301345316950d6887dd99188b19e8206b796e0b97c558ae099cbbae8f252057b78bc2e8f3964463e5899ae9982eec59d985d5d4921b73248f429d4d5d152f23c25f975c81d2cbd83f7216cb170e3fcfa87f86851a3feab9bfbc6b9609e65e9e972dd7f6bf411cc7be316d8ee4286744eb28cf295c3d4245935e6a7a05eae0d649fca07d46a83de7d7401c0059abbcb9d19e36f144015578ecb5e820e2b71c2d09369a5db2417b5ab54f4557cdff8ec5c4ce538f9d9dd48c979f79e1a567f0a44d2e4ee3c0c68fb807f7646025322efc5e3d628777ff4d660e0ba6583c0537b95551a417538db1e5f0b81513454dd7522e6a98354157e230270dc3b7dc91ff9a9eabe3c9d82a7873ec7bc7e9f854cec4126e30ce6a937ae2e95518e968e083dc103594c849e9571de371cf7e07a9887caed1f53acc3b5c3b0f04252abb039d5f363158074f86f8a0e4b292793fae0ed4dd8cf352298ada59d805df0da5e1dc206fd321bca4f25cca549f09f816b2d63188bb1fcc6740591326bb55ea5853b1febd45b612aaf4b2147d52ae3440dc40f1f67546e76b6bf4737b25ab2cfed848e4ab9c9d5176eddafc3c5d44e3905952cf4c198384979d54ee4db3ceb3732124920bc19af8da53ac1e7c78819c263fc77199b3b8a784ac0a573c83e0fc96eab4e09ead3294f41ba9f6b28015d7e142d836a96e29177a288a5a2939f7c771d6ddbad3fdea4ee80ef1396196e6b7d07e8851d39d930229cf4e87f0e481b633c2ffae364dd436c68470bb7c951bac9c708ba6339d336f7b9384d03937e50b4bf41022c9a4247ae27bfdadabf37f0eb5ff83d34599ac8364bb50d8ce3409b5bfb88ef1e601d009e736f36227712e5a278e0237a9ddeec9820da06657003d892d470a9dbd5ba40352bbb44e9cc1a4fe0934ad8b74832a483e2e2941671a900b497ff013519dd1d8ca273423f581e0b22b3ea7f1643221a78151a78aa8a7e34ed9fee7f9fd140032c5a465132fab32b2ebda760fbacaeae7361ca93f7cd6e297770716016e4a310f5fb293d19748943aa84394968ec5ae86a6599496ac9ab1089f0d6fd17d33bbeb58e5733fa96e91c5c7009ca289377d77eccc9b88d8eb788c2fc112d570127163d8b977567f5544a6e862bf5ddba8d54c3613ea8ec712fd47b1d439e107d7b486ed3d7975885e5b2a5923464e8d51d975d2c4bc24ab7fbb4ba0b58a127f396384bddd2f4d54862e021a7e7c916026c04aad6229ecb7405a874aab5a226d4e9628b2e91b83d8267e4532b5b3a96fa296704ebee6b352c1ec5ff1a693e3bccc8a69df36cf0df3f983dfa95854dd9044f00b63a4811c39c48f96a3f76f17d495eed6a9de1bfc29b2a009f1a02070b50cd077731ec78bce75959b169dc9235560ed95ebf82116922b1b2363c8090c86b5319c6b44260f0742659312f13830332c1715647145d0e3e18e5151f1dcabeaf0b84378bdd3c0f3782204f6eb929864143047db88db07f16a779ecbf742bc9938ba060fd300a3ea5041db91ad435e0b1e3dc967d00aad1eeceaee8a8a0ad34f20ef2eaf679792af8015ccf136de2a4c6790b174d40e2dbb92278bba39175da0123b8d440c551031d63c61d50a1cb2ef346d96cf2e2d9681d2fcf707d6519dcf90ae11bc37b954bbbd21ca4942d87d4d942d78ec4c5c92b6c1d0a24f7579d98d695fef25201f8d420dbf3388285a3aef705ee7325706a88d582eb724b62f08e5b35f70d44a44730c573bcd410c4ddddc69103323376d545d6373aedfb4194da67fa91bb405398821222654a363eb5aaa588dfbb3af781b80f80490c1cae29c6254c3a8671c0bfe78d720584039fbc9cffb338df7ddc1036c362b0def6cfb5d635f0b666474b857eee3f1fe95d1f8a0f6ca4819b893a4a7fc7e9aea2f2633d213a994d422fc66a747cfe589ebfa5b8816fb0c481422a731013155dccd8dd95761b9ef7d7e105ce709242e575cdd0e976021761446bb52d475768d24c49467e85bb48093bab9acf4a98f2aaecb41b7596574278b4f35ad41a306d78aed9f9165df271a004da8610802620d7167c997e902e0ee1dbc546d6403601fc9a1f4c9ba61bfbb0c496c43cde8e7ef69628ed89c478bec1259efce1c998aac7e7304b5bd8062d96ee219eab01649c365457397d61a20d9785273133d81b501cfbcf8317bafaa53e19034bbb1d0108ea88820d2b732513b7d86830825b118d1220860baa0c6a062b69cbf699f8901c1419bb89040be40e4e75e858b5a72fa1765c6aeee8f662856a35ddea2bbea5201adeb576666fe3abf095578cd5a98c611478bb8a63688df4e84f5e7e3aaa923464cc850264d6b9201bb0659185e4170b2fa4e9f8997c02a3785e7576f3d34c7521ec217e26306998de863b556cbd1946db528d624f68a54a2d6f2e6c85cd1c8c3d8b1bbb9ddcd7fd89ed45bc61c9a39fdb7aa7f2747fb4e7e222a11749f4a4fc1f4d3cea7a8fecf468a3a6702c5a0d5def74fb41c983ce5ad984a034479c9cb44f5c14b71f351adebc5ab4eaca171e6ec02dabf4d154f6a100ea86200554b30e889f8073310ec0e81964896ed4919fed7a35eb729c87a81c20fb7cb06148cecd6222e463e8719d6d395edfa13b702fcb0a0f5b50636b0676ca8fc981dbc8ca95ebac9a1f998d7e4141a52d5fa33a3eef2c368cdf3d8cbc1e3261551774621c91e517177726631cc5d4662b6fb5fd0d42135b9b3ad89ac6708662fceb0f732437f58dc474070620833e0299bff5babcfb1714505e9f60c9b7da0d4da6c9e8bc72e49bf745e3bf1969cb6f99a17c99e27a591669b031b97bcfd56af2132cf40c8914a84b90687797152b4ed7cf5ea15d77496893ba7035d7f62f143d75bac44cb84aa38f71d820c5460fcddf754f780a146228552a1512a6bae296e0c46bf038f5843cc62a850062d87cc5315d613b56b0a9a8eb1c194c0a70acaf29c64d630f9683a223753714456a41bff75e79f9f395b4926d3f3cee9e335c5afd8aa29f0c65206149d8b106799efbf2c0fc59f618e790ba30b1da9333bd5b45f1e87da4422978af44b852639f73f69a92d87285ef2eb16b22c2849069472f9f5cc567461a215ccfe4a046bda915e56fbbb1933e149b935f7cac6a6a8c8bb91cecc47d9bdad6d9cd8ab7cd830bb94c319a224f554ad0ea9f255bae71b401b92aeed44c0fce4746df18ce87ebda967f3bfb78f844ff3b2efea1e40d6b1a0f74a1c5cba2aa177e646ae6b9ead9cdb57c6b69aa33d40a270ad706dfda7d6bf3b63d3a65426b0548a07de3f307ec102fa72852428e0f8f13702c2f3ba93ae745fa1edc7a51063875fde59365ab06417313531f55205bc1ff0b7fe4ecf9056f1fefe2f33ffa16ad42f1c94a8d7456cc5b8e1145c7a2c10ecc93cb561b2ca7a779898212c5500d05a187102d62c09a7b4d22e5b4c6791c92bd5e6421e03ffb80c06e734af3204053525196cf0b3322fea2a60f41983596112531b71f480b4d3373a4aff097795dd300482d7f153ae9acce31e67b8ffebc8a070d65acc84489a13e1aa2490e846be730e801174cbeca378868e499a3d15951e2a3e219f1684e5b61f97b260bec1d7bf5c9f273a9eb2eee58110e60bb865ea52e93b4c8851ab490a8c3ca113292f047efc3011dea9ff3e7366350deb7fe25e55e5e0a2e15ad82bbe5999a3b7f369a99a4bcbbbc97b241501394d2ed3a1cae7d81dd90a0039b82fc718751c9da1a6d130ba39af1bc0dbe4c7eecce5742b7052b0f6a47f45fa01a11aff16ed5b1b8dab792095af6db1c8f80243ebadf7400a6bdae49722d47afcb0b28fd4bab022989b3155f82d958f58465c27f65d1c4ec13d608e4bfd50cf9d2555bfda39ae33841fb31867b90d04e85ec2f6565ab4a8e914564ba78df59a96ea6071322cff83441e503b6511eff2be4fc97d8ac7abb94749a999c0bc49cdd28116628c5a900e9ec7badb1888260ae116341d0b52dba4901b80f54459fdd1377baa874fed2de5760347efc1d6c9509266eddd95dec6188ddc0318fe85dcb5b53f5a06151242bc6cd6d2c3d77d8b60087193a21951234c436d6c7a35ea0ca02cc50c4b4599e8fe5332de2ebc34a8bdd683879dcf1fbfcaf25941de3a97acb3a78b202bb26339aaebd4dcc8d4d3bfb4bb04ab9d744b164c048ee27be3895a01603d47b421b34307b391cba94dcd8d84df03e1f7c1da0cc5deb89be94446ed25e64a454a473a5ccdb9955c8d12f4d4a62c62de46c426b3ca5470e8efddd97bd78f6fe75b1782afc579333cc75e8db9ff425bbc8ecc8e84815c6fe4467d8325dfaaba46a0b239f9afce7c6eb2f6b16f7bedbcbb875695edf96fb11ad65d1d08eade28508f0c14ca7171d01003cd45ad9c6c045eb8ef08dd19be26842e4a9e5b01faa64887f236b71cd700da933a6351b9692dc5e85fbf5f58517af100e576841045be812b648a0ff51402b9fba16078bf9f12462d2151424ee8a62c096b44965406e10fb44ee248eecf614581f00931abf21af15529add32bf941cacd6bc62e87e0796e45413c4e8ff5aedabe37bd047e16617684e305551dff8baf94b34e0735b4a62c67145f7bb3971f72d5986007c91aae39023fcb65dd106a9bf10c58fed6574761f5242f324175cda17e8f3b8b34cf91a3d2f90ed2ba214427c3fa22f8a6aff4db81498ca12d2c9db5ec6403128e25f6d24d0dce78cadd3efabab057810ca1437c85b0f4d9620922c9728f5a21e139a11eb6d9b0bda395d81bb791b2e04476dc7590e5ee8c11281e51e9302a810941b423d35f9deffe56709a9b5f7431244a8f904232ffbdfe100c5619891b81753679c0600fb0009000000"], 0x12f4}, 0x1, 0x0, 0x0, 0x81}, 0x20000854) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f00000007c0)={0x84, r3, 0x800, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x2, 0x2, 0x0, 0x0, {0x4, 0x9, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1}, 0x300, 0xccf, 0x5}}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x3, 0x1, 0x0, {0xffffffffffffffff, 0x6, 0x0, 0x1fb, 0x0, 0x1, 0x1, 0x2}, 0x401, 0x101, 0xf0}}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x9a3}]}, 0x84}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0xf, &(0x7f0000000180)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xa5) 662.832542ms ago: executing program 2 (id=493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0xd4) r2 = dup2(r1, r1) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x280000a, 0x1, 0x8}) ioctl$BLKTRACESETUP(r2, 0x1276, 0x0) 659.884332ms ago: executing program 3 (id=494): r0 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047ee, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400adfd8a987e40da2e6a262b", 0x11}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r2, &(0x7f0000000280), 0xff36) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 613.939552ms ago: executing program 3 (id=506): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB='\v\x00\x00\x00\b'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa80, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x12020, 0x0, 0x0) pipe2(0x0, 0x800) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) 606.604361ms ago: executing program 0 (id=497): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x80100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcbf5, r0}, 0x38) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) 585.484931ms ago: executing program 3 (id=498): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x10000002, 0x4}], 0x10, 0x0, @void, @value}, 0x90) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x12002) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x14130}], 0x1}, 0x0) close(r0) 491.408041ms ago: executing program 0 (id=499): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 469.804631ms ago: executing program 0 (id=500): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000300)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, 0x0) 414.473021ms ago: executing program 5 (id=501): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x80}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) 400.904081ms ago: executing program 5 (id=502): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000040)=r0}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 368.101241ms ago: executing program 2 (id=503): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/\x00et/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44\x8cm\xa0\x8dN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000c80), 0x10000005, r1}, 0x38) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) fchdir(r0) 353.235571ms ago: executing program 2 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002280)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x7}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000002000208500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = memfd_create(&(0x7f0000000b40)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82`\xea\x16\xc6\xce\x83\xab\x05[\x86\x91\x164\xd3/]\xe6O\x17@d`+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x82Xa2fo\x7f\x92G\x0e.\xce\x01\x00\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xcf\xe5\x03D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6/`\xab>\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x92\x03\v\xf4@\x84\x1d\xc8&^Q\xcf&\xf2\x9f\xf4\x83\xac]S\xce\xa55\x98\xa5\x97\xb3\xa6\r:L\x10\xb3;\x18G\r\xd8\xee4\xa3\xacI\xfc\xf6a\xde\rL\xcb\xbbE\xfe&&xL\xc49\x02\xe8A\x91\xfd\x15\xaeY:^E^>a\xd8\xdcJu\x16B!\x0et\xf0c\xc3W\x9c\xb8\xc2c\xbc\x99\xcb\x91xA2^\xe3\xfeq\xac2X\xd1\x1cG\x1b\xe0\x8d\x1a\x11\xddX\x16H\xae\x00#\x92\nW9C\v\xbf\xe7Q\xe7\x06\x81v\x15Y\x1bY\x0f+b\xb5\xa63\xc4\x1bx\xfd< \a\x01\x00\x00\x00^f\x11]&\"\xd5\x84/\xab\xac\xeaB\xa2V3\xdd.\x8c\xe0\xb8\xf8\x8c\xf4\r\t\xcd9\xacNW:\xcauJ\x1b\xf3\xefj\xac\xf3\a\xdc\x9a\x05\x14\xa6\xc1\xe9\xe1\xab\xb7\xe0\x95\xa0U\xa1\x1e\xb5\xc5gw\x9cpk4\'en\xc28\xd2\x00\x00\x00\x00&\x82\xe9:;\xa9(xf\x9b\xd3a\x15\xb4W\"Y\x8f5Q\x13R\x84\x83H\xb2n\xbc\\\x11\xd4\xb4}O*\xab6\xf5Ym\xe3\xdf\x17\xcc\xb0o9\xff\xe7G\x0e\x1d\xfcH\xe9J\xeefu\x04\xfb\x9b\xc1\xfa\xff\x03\x00\x00\\\xfd\x00NX\x1e\x97\x911m\xa3\x15\x8e_\xda\x8f\x06\x8fA^\xc2\x05\xf4\x8b\x02[\xa4jR\x96%&\xdf\xf9c\x8a4\x00\xa4tA\n\xfb\x7f\xf1S\xfd<\v\x18\xeb\xfb\xd6\xcb:\xbb\x04\x00\x00\x00\vcU\x00\x1e\xa0\x8b\xae\xe3M\xa6l\x15\x9c\x96\xf6\xbeXU\x17,\x94\x97\f\xfbl\xfc5\xaf\x91\x9cH\'\x95g\xb9P\xb8\"R\xcc\x1e\x02\x96\x83\xf87\xfb\x8dG@\x12\"\xb8\xeb\xa2\x1fN~\xd6\tr\xf5*\x18\x9b\x92VF9,$\xf1\xcb2@\xdc\xafLP-\xc4W\xc0\ro\xfc\xff\n\xac\xecyq.\xd0)\x8f\xb1\x8ef\x9a\x15\x94\xe8\xac\xd41i\xd9\xa7\xcc\x90DK\x98\xdcBo\x01\x8f\xdf\n\x1a\vT\x05}\xf4\x9b\x83\xa9u\x84\xa7`bW\b\x8c\xc82\a\n:\x9a$\x19\xaa\v\xe6\f1\xf8\x1ed\x15\xf6t\x1c\xf2\x95+u\xb5\x1c\x95\x8d\xdd\xf3\x9c={\t*\x0e\xa7k\xbb\xc3\xf4!\n/\xb7\xed\x80\x18\xc4\x04\xa9_[\x14\x13C\xd3\xd9i\xc0\xdc\xb3\xecJ\xf7/\"\xfb\xe8\xb6\xb7\x1f(\xe5O\x9f\xae}(xG\xe4m\x15\x14`\x0e\xba\x02\x00\x00\x00\x055\x96F\x833!:\xc0wg\x1e\x89\xd2o\xad-\xde\a\x91\x19\x02`\x9c.Pm\x12\xc41e=CF\'\n(\xd7\x9a\x0f\xfdD\xbb\xc8\x0f\xf9\xac\\\xf9\xf9\xd2H\x1bg\xbfH\xbb>\xa5\x18\xd3T\xa4\xcc(\x1662\b\xc3?\x1al\xc9%\x87kp\xef\xda\\[\xb7:D\xefV\xea-\x14zQ\xa1\x00\xbd\xb8\xdd5\x109\x94\xa5\x1f$\x05\x8bb3(\xf4J1\x91\x16T\xf7\x03Eu\x18C\xf09\v.\xac\x8eZ\xaar%\x9d\x00\xa0\xa9T)\xa9\xd2\xe2\x01AJ\xc7\xd6i\xbe\f\x02\x00\xb6:\xe3;\'P\"\xab\xec\r\x86\xfa7>\x9dIP\xa0i\xc4\xf8`\xf1\x06\x8e_c\xb0\x96\fA\x8c\xa3\xa6\xbdz\xee.\x86\xaf\xda(\x8a\x9d\x87\x1e(D\x85\xc6\xa9\x16\xd72]`T\xa0\x8ec\xb3i\x9e\a<\xbfO\x11/\xe3\xd6/\x98zf0\xa2\b\xd3\xfd\xe4\r\xde\xf3\x99f\'\xea\xe0\xbc\xe5\xd7\xf4\x95\xd2X\xf6f\x94)\x85\xc0\xaf\x06\xda\xf4', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000002, 0x12, r2, 0x0) 334.866131ms ago: executing program 2 (id=505): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@nombcache}, {@resgid}, {@norecovery}, {@commit={'commit', 0x3d, 0x5}}, {@nombcache}]}, 0x8, 0x5fb, &(0x7f00000004c0)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_generic(0x10, 0x3, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 292.74906ms ago: executing program 5 (id=507): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 95.09091ms ago: executing program 4 (id=508): r0 = socket$kcm(0x10, 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) close(r2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) 91.66631ms ago: executing program 5 (id=518): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000004000000000000000201801000020786c3500000000002020207b1af8ff00000000bfa10000000000000701000094ffffffb702000008000000b703000000000020850000002d000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create(0x1) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x60000008}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 70.75957ms ago: executing program 4 (id=509): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x42800, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$RTC_PIE_ON(r0, 0x7005) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)) ppoll(&(0x7f0000000000)=[{r0, 0x10c}, {0xffffffffffffffff, 0x4}, {r0, 0x200}], 0x3, 0x0, 0x0, 0x0) 69.64617ms ago: executing program 5 (id=510): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001800010004000000fedbdf251d010000080011"], 0x34}, 0x1, 0x0, 0x0, 0x40040d4}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000040), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000000180)=""/5, 0x5}, {&(0x7f0000000200)=""/9, 0x9}, {&(0x7f0000001340)=""/231, 0xe7}, {&(0x7f0000001440)=""/229, 0xe5}, {&(0x7f0000000240)=""/141, 0x8d}, {&(0x7f0000001540)=""/48, 0x30}], 0x7, &(0x7f0000001600)=[@cred={{0x1c}}], 0x20}, 0x101) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 0s ago: executing program 5 (id=511): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x80100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcbf5, r0}, 0x38) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) kernel console output (not intermixed with test programs): [ 20.144489][ T29] audit: type=1400 audit(1738206226.197:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.191' (ED25519) to the list of known hosts. [ 23.863869][ T29] audit: type=1400 audit(1738206229.917:82): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.864710][ T3285] cgroup: Unknown subsys name 'net' [ 23.886578][ T29] audit: type=1400 audit(1738206229.917:83): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.915434][ T29] audit: type=1400 audit(1738206229.957:84): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.055815][ T3285] cgroup: Unknown subsys name 'cpuset' [ 24.061875][ T3285] cgroup: Unknown subsys name 'rlimit' [ 24.170471][ T29] audit: type=1400 audit(1738206230.227:85): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.193886][ T29] audit: type=1400 audit(1738206230.227:86): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.214323][ T29] audit: type=1400 audit(1738206230.227:87): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.234645][ T29] audit: type=1400 audit(1738206230.227:88): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.254996][ T29] audit: type=1400 audit(1738206230.237:89): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.260453][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.279835][ T29] audit: type=1400 audit(1738206230.237:90): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.311820][ T29] audit: type=1400 audit(1738206230.357:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.380493][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.530359][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 25.544817][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 25.650430][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 25.659014][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 25.678736][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.685883][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.693000][ T3297] bridge_slave_0: entered allmulticast mode [ 25.699804][ T3297] bridge_slave_0: entered promiscuous mode [ 25.708790][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.715951][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.723269][ T3297] bridge_slave_1: entered allmulticast mode [ 25.729622][ T3297] bridge_slave_1: entered promiscuous mode [ 25.738199][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.745295][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.752432][ T3301] bridge_slave_0: entered allmulticast mode [ 25.758935][ T3301] bridge_slave_0: entered promiscuous mode [ 25.765477][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.772603][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.779742][ T3301] bridge_slave_1: entered allmulticast mode [ 25.786013][ T3301] bridge_slave_1: entered promiscuous mode [ 25.815869][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.829444][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.846897][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.856035][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 25.869502][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.904278][ T3297] team0: Port device team_slave_0 added [ 25.926444][ T3297] team0: Port device team_slave_1 added [ 25.932695][ T3301] team0: Port device team_slave_0 added [ 25.939179][ T3301] team0: Port device team_slave_1 added [ 25.958939][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.966428][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.973634][ T3299] bridge_slave_0: entered allmulticast mode [ 25.980076][ T3299] bridge_slave_0: entered promiscuous mode [ 25.994887][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.001968][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.009157][ T3296] bridge_slave_0: entered allmulticast mode [ 26.015693][ T3296] bridge_slave_0: entered promiscuous mode [ 26.026355][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.033306][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.059282][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.069983][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.077071][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.084155][ T3299] bridge_slave_1: entered allmulticast mode [ 26.090534][ T3299] bridge_slave_1: entered promiscuous mode [ 26.096750][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.103770][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.129721][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.140447][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.147577][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.154751][ T3296] bridge_slave_1: entered allmulticast mode [ 26.160956][ T3296] bridge_slave_1: entered promiscuous mode [ 26.175058][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.182111][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.208258][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.223486][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.230467][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.256767][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.285021][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.295452][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.302544][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.309687][ T3298] bridge_slave_0: entered allmulticast mode [ 26.316098][ T3298] bridge_slave_0: entered promiscuous mode [ 26.323019][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.330250][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.337579][ T3298] bridge_slave_1: entered allmulticast mode [ 26.343893][ T3298] bridge_slave_1: entered promiscuous mode [ 26.350933][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.361150][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.371121][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.414276][ T3296] team0: Port device team_slave_0 added [ 26.420560][ T3296] team0: Port device team_slave_1 added [ 26.435741][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.445558][ T3299] team0: Port device team_slave_0 added [ 26.461571][ T3301] hsr_slave_0: entered promiscuous mode [ 26.467634][ T3301] hsr_slave_1: entered promiscuous mode [ 26.475951][ T3297] hsr_slave_0: entered promiscuous mode [ 26.481867][ T3297] hsr_slave_1: entered promiscuous mode [ 26.487757][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.495373][ T3297] Cannot create hsr debugfs directory [ 26.501832][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.511627][ T3299] team0: Port device team_slave_1 added [ 26.522202][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.529184][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.555169][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.586342][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.593347][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.619245][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.643471][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.650508][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.676762][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.694336][ T3298] team0: Port device team_slave_0 added [ 26.700328][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.707302][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.733201][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.760331][ T3298] team0: Port device team_slave_1 added [ 26.793643][ T3296] hsr_slave_0: entered promiscuous mode [ 26.799747][ T3296] hsr_slave_1: entered promiscuous mode [ 26.805529][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.813080][ T3296] Cannot create hsr debugfs directory [ 26.838375][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.845484][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.871419][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.884395][ T3299] hsr_slave_0: entered promiscuous mode [ 26.890499][ T3299] hsr_slave_1: entered promiscuous mode [ 26.896311][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.903844][ T3299] Cannot create hsr debugfs directory [ 26.923662][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.930658][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.956617][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.010970][ T3298] hsr_slave_0: entered promiscuous mode [ 27.016959][ T3298] hsr_slave_1: entered promiscuous mode [ 27.022721][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.030370][ T3298] Cannot create hsr debugfs directory [ 27.081195][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.089704][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.111175][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.130692][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.167384][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.179060][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.195818][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.211224][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.220099][ T3296] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.229440][ T3296] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.240107][ T3296] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.248622][ T3296] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.270762][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.281262][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.290139][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.300429][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.337622][ T3298] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.350619][ T3298] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.359151][ T3298] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.368380][ T3298] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.427222][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.446021][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.462723][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.471654][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.479389][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.501034][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.508214][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.517597][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.525203][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.542418][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.552084][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.560274][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.572549][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.584364][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.591506][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.600456][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.607507][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.616650][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.626748][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.640271][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.649907][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.657107][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.666296][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.673353][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.696474][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.703552][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.714873][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.721942][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.740441][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.747557][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.807232][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.866178][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.881434][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.896329][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.921252][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.939878][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.997125][ T3297] veth0_vlan: entered promiscuous mode [ 28.016516][ T3297] veth1_vlan: entered promiscuous mode [ 28.051051][ T3296] veth0_vlan: entered promiscuous mode [ 28.079165][ T3301] veth0_vlan: entered promiscuous mode [ 28.085550][ T3299] veth0_vlan: entered promiscuous mode [ 28.093675][ T3297] veth0_macvtap: entered promiscuous mode [ 28.103600][ T3299] veth1_vlan: entered promiscuous mode [ 28.111508][ T3296] veth1_vlan: entered promiscuous mode [ 28.122294][ T3301] veth1_vlan: entered promiscuous mode [ 28.129290][ T3297] veth1_macvtap: entered promiscuous mode [ 28.145101][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.161851][ T3296] veth0_macvtap: entered promiscuous mode [ 28.169180][ T3296] veth1_macvtap: entered promiscuous mode [ 28.179000][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.193138][ T3299] veth0_macvtap: entered promiscuous mode [ 28.203581][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.214395][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.224826][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.236657][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.245577][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.254300][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.263014][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.273510][ T3299] veth1_macvtap: entered promiscuous mode [ 28.283165][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.293834][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.304671][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.313467][ T3296] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.322306][ T3296] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.331080][ T3296] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.339971][ T3296] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.350131][ T3301] veth0_macvtap: entered promiscuous mode [ 28.357328][ T3301] veth1_macvtap: entered promiscuous mode [ 28.367450][ T3298] veth0_vlan: entered promiscuous mode [ 28.378225][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.388763][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.398747][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.409248][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.419782][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.432723][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.443510][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.453328][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.463793][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.474146][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.482697][ T3298] veth1_vlan: entered promiscuous mode [ 28.492353][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.502918][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.512735][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.523171][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.533078][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.543708][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.554479][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.572850][ T3298] veth0_macvtap: entered promiscuous mode [ 28.581887][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.590948][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.599650][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.608516][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.619015][ T3298] veth1_macvtap: entered promiscuous mode [ 28.633027][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.643693][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.653840][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.664390][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.674311][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.684826][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.695571][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.706461][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.724653][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.735271][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.745743][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.756283][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.766690][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.777132][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.787051][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.797531][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.808269][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.820403][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.830966][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.841114][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.851812][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.861786][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.872382][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.882340][ T3298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 28.892802][ T3298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.897797][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 28.897811][ T29] audit: type=1400 audit(1738206234.957:123): avc: denied { map_create } for pid=3439 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.905926][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.908715][ T29] audit: type=1400 audit(1738206234.957:124): avc: denied { perfmon } for pid=3439 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.930485][ T3301] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.934670][ T29] audit: type=1400 audit(1738206234.957:125): avc: denied { map_read map_write } for pid=3439 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.956799][ T3301] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.993750][ T3301] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.002523][ T3301] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.012430][ T29] audit: type=1400 audit(1738206235.077:126): avc: denied { prog_load } for pid=3439 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.031206][ T29] audit: type=1400 audit(1738206235.077:127): avc: denied { bpf } for pid=3439 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.053228][ T29] audit: type=1400 audit(1738206235.077:128): avc: denied { prog_run } for pid=3439 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.077525][ T29] audit: type=1400 audit(1738206235.137:129): avc: denied { name_bind } for pid=3439 comm="syz.0.1" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 29.098937][ T29] audit: type=1400 audit(1738206235.137:130): avc: denied { node_bind } for pid=3439 comm="syz.0.1" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.127436][ T3298] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.136344][ T3298] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.145086][ T3298] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.154069][ T3298] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.190302][ T29] audit: type=1400 audit(1738206235.247:131): avc: denied { create } for pid=3444 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.208584][ T3447] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 29.209799][ T29] audit: type=1400 audit(1738206235.247:132): avc: denied { setopt } for pid=3444 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.256534][ T3447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6'. [ 29.297537][ T3447] vlan2: entered promiscuous mode [ 29.302604][ T3447] gretap0: entered promiscuous mode [ 29.322742][ T3447] gretap0: left promiscuous mode [ 29.369230][ T3459] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 29.384071][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 29.433349][ T3459] loop0: detected capacity change from 0 to 512 [ 29.474944][ T3459] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.512983][ T3471] netlink: 'syz.4.15': attribute type 27 has an invalid length. [ 29.529588][ T3473] loop3: detected capacity change from 0 to 512 [ 29.538774][ T3473] ======================================================= [ 29.538774][ T3473] WARNING: The mand mount option has been deprecated and [ 29.538774][ T3473] and is ignored by this kernel. Remove the mand [ 29.538774][ T3473] option from the mount to silence this warning. [ 29.538774][ T3473] ======================================================= [ 29.560872][ T3477] loop1: detected capacity change from 0 to 2048 [ 29.601886][ T3459] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.617833][ T3473] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.627929][ T3459] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.642700][ T3471] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.649766][ T3473] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.649993][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.666033][ T3477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.716540][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.731477][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.747107][ T3471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.775574][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.785721][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.816168][ T3496] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 29.824472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 29.833797][ T3471] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.842968][ T3471] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.851985][ T3471] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.861026][ T3471] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.902443][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 29.915270][ T3502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.25'. [ 29.929346][ T40] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 29.986738][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.28'. [ 30.005720][ T3436] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 30.064673][ T3523] netlink: 96 bytes leftover after parsing attributes in process `syz.4.34'. [ 30.080349][ T3525] ebtables: ebtables: counters copy to user failed while replacing table [ 30.115039][ T3532] Illegal XDP return value 15294139 on prog (id 39) dev N/A, expect packet loss! [ 30.127093][ T3513] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 30.157851][ T3513] syz.1.28 (3513) used greatest stack depth: 10280 bytes left [ 30.220226][ T3541] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 30.250742][ T3544] loop0: detected capacity change from 0 to 512 [ 30.287884][ T3544] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.43: corrupted in-inode xattr: invalid ea_ino [ 30.310280][ T3544] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.43: couldn't read orphan inode 15 (err -117) [ 30.326578][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.450843][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.581561][ T3561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'. [ 30.615391][ T3561] netlink: 16 bytes leftover after parsing attributes in process `syz.2.49'. [ 30.670010][ T3589] loop4: detected capacity change from 0 to 128 [ 30.683123][ T3589] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 30.710102][ T3589] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 30.718144][ T3589] FAT-fs (loop4): Filesystem has been set read-only [ 30.725645][ T3589] syz.4.58: attempt to access beyond end of device [ 30.725645][ T3589] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 30.739441][ T3589] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 30.747349][ T3589] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 30.755938][ T3589] syz.4.58: attempt to access beyond end of device [ 30.755938][ T3589] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.779703][ T3589] syz.4.58: attempt to access beyond end of device [ 30.779703][ T3589] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 30.792420][ T3594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 30.801121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 30.809502][ T3594] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 30.872951][ T3605] loop2: detected capacity change from 0 to 1024 [ 30.892184][ T3605] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.67: Failed to acquire dquot type 0 [ 30.919379][ T3605] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 30.936278][ T3605] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.67: corrupted inode contents [ 30.961084][ T3605] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #13: comm syz.2.67: mark_inode_dirty error [ 30.977818][ T3605] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.67: corrupted inode contents [ 30.977864][ T3618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3618 comm=syz.3.73 [ 31.019895][ T3605] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.67: mark_inode_dirty error [ 31.054138][ T3605] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.67: corrupted inode contents [ 31.067054][ T3618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.73'. [ 31.104478][ T3605] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 31.124146][ T3605] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #13: comm syz.2.67: corrupted inode contents [ 31.139632][ T3605] EXT4-fs error (device loop2): ext4_truncate:4240: inode #13: comm syz.2.67: mark_inode_dirty error [ 31.171669][ T3605] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 31.192070][ T3605] EXT4-fs (loop2): 1 truncate cleaned up [ 31.208637][ T3605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.279386][ T3638] loop3: detected capacity change from 0 to 512 [ 31.287360][ T3636] loop4: detected capacity change from 0 to 256 [ 31.293892][ T3636] msdos: Unknown parameter '"' [ 31.303126][ T3638] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 31.310582][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.328072][ T3636] loop4: detected capacity change from 0 to 1024 [ 31.335039][ T3636] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 31.345978][ T3636] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 31.357114][ T3638] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.370064][ T3638] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.380574][ T3636] JBD2: no valid journal superblock found [ 31.386340][ T3636] EXT4-fs (loop4): Could not load journal inode [ 31.494141][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 31.527719][ T3644] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 31.533243][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.631506][ T3654] loop3: detected capacity change from 0 to 512 [ 31.677071][ T3656] netlink: 32 bytes leftover after parsing attributes in process `syz.2.89'. [ 31.678198][ T3654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 31.699840][ T3654] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.797882][ T3664] loop4: detected capacity change from 0 to 128 [ 31.833507][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 31.892190][ T3664] syz.4.93: attempt to access beyond end of device [ 31.892190][ T3664] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 31.905549][ T3664] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 31.919572][ T3664] syz.4.93: attempt to access beyond end of device [ 31.919572][ T3664] loop4: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 31.948727][ T3676] process 'syz.3.94' launched '/dev/fd/6' with NULL argv: empty string added [ 32.028390][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.091576][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.180783][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.185107][ T3696] loop4: detected capacity change from 0 to 128 [ 32.237919][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.326239][ T11] bridge_slave_1: left allmulticast mode [ 32.332202][ T11] bridge_slave_1: left promiscuous mode [ 32.333044][ T3696] syz.4.107: attempt to access beyond end of device [ 32.333044][ T3696] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 32.337971][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.358367][ T3696] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 32.367783][ T11] bridge_slave_0: left allmulticast mode [ 32.373544][ T11] bridge_slave_0: left promiscuous mode [ 32.379434][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.395528][ T3696] syz.4.107: attempt to access beyond end of device [ 32.395528][ T3696] loop4: rw=2049, sector=129, nr_sectors = 912 limit=128 [ 32.501543][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 32.525015][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 32.545699][ T11] bond0 (unregistering): Released all slaves [ 32.607652][ T3711] syzkaller0: entered promiscuous mode [ 32.613155][ T3711] syzkaller0: entered allmulticast mode [ 32.654771][ T11] hsr_slave_0: left promiscuous mode [ 32.661943][ T11] hsr_slave_1: left promiscuous mode [ 32.668809][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.676281][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.687714][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.695188][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.706880][ T11] veth1_macvtap: left promiscuous mode [ 32.713156][ T11] veth0_macvtap: left promiscuous mode [ 32.721223][ T11] veth1_vlan: left promiscuous mode [ 32.727515][ T11] veth0_vlan: left promiscuous mode [ 32.827797][ T11] team0 (unregistering): Port device team_slave_1 removed [ 32.858651][ T11] team0 (unregistering): Port device team_slave_0 removed [ 32.971118][ T3730] loop4: detected capacity change from 0 to 1024 [ 33.007268][ T3690] chnl_net:caif_netlink_parms(): no params data found [ 33.024557][ T3730] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.050538][ T3730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.176573][ T3753] loop3: detected capacity change from 0 to 2048 [ 33.193365][ T3730] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 128 with max blocks 4 with error 28 [ 33.206154][ T3730] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.206154][ T3730] [ 33.215893][ T3730] EXT4-fs (loop4): Total free blocks count 0 [ 33.221943][ T3730] EXT4-fs (loop4): Free/Dirty block details [ 33.228135][ T3730] EXT4-fs (loop4): free_blocks=0 [ 33.233263][ T3730] EXT4-fs (loop4): dirty_blocks=0 [ 33.238393][ T3730] EXT4-fs (loop4): Block reservation details [ 33.244489][ T3730] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 33.258202][ T3753] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.276521][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.277042][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.283695][ T3690] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.300463][ T3690] bridge_slave_0: entered allmulticast mode [ 33.307078][ T3690] bridge_slave_0: entered promiscuous mode [ 33.324016][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.331192][ T3690] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.338592][ T3690] bridge_slave_1: entered allmulticast mode [ 33.345295][ T3690] bridge_slave_1: entered promiscuous mode [ 33.353427][ T3753] EXT4-fs: Ignoring removed orlov option [ 33.376577][ T3690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.387852][ T3753] EXT4-fs (loop3): can't enable nombcache during remount [ 33.401205][ T3690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.427138][ T3690] team0: Port device team_slave_0 added [ 33.434034][ T3690] team0: Port device team_slave_1 added [ 33.441217][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.456292][ T3690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.463311][ T3690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.489316][ T3690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.500683][ T3690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.507864][ T3690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.533856][ T3690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.583241][ T3774] loop0: detected capacity change from 0 to 2048 [ 33.598604][ T3774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.611173][ T3774] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.626145][ T3690] hsr_slave_0: entered promiscuous mode [ 33.632394][ T3690] hsr_slave_1: entered promiscuous mode [ 33.639739][ T3774] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.121: bg 0: block 345: padding at end of block bitmap is not set [ 33.676743][ T3774] syz.0.121 (3774) used greatest stack depth: 9976 bytes left [ 33.708690][ T3417] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 1 with error 28 [ 33.721335][ T3417] EXT4-fs (loop0): This should not happen!! Data will be lost [ 33.721335][ T3417] [ 33.731227][ T3417] EXT4-fs (loop0): Total free blocks count 0 [ 33.737425][ T3417] EXT4-fs (loop0): Free/Dirty block details [ 33.743375][ T3417] EXT4-fs (loop0): free_blocks=0 [ 33.748380][ T3417] EXT4-fs (loop0): dirty_blocks=16 [ 33.753835][ T3417] EXT4-fs (loop0): Block reservation details [ 33.760043][ T3417] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 33.773468][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.817685][ T3690] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.838384][ T3690] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.849576][ T3690] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 33.860064][ T3690] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 33.881855][ T3690] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.888987][ T3690] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.896356][ T3690] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.903434][ T3690] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.921942][ T29] kauditd_printk_skb: 3742 callbacks suppressed [ 33.921955][ T29] audit: type=1400 audit(1738206239.977:3873): avc: denied { write } for pid=3794 comm="syz.4.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 33.935057][ T3690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.965748][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.975495][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.005731][ T29] audit: type=1400 audit(1738206240.077:3874): avc: denied { create } for pid=3804 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.037190][ T29] audit: type=1400 audit(1738206240.097:3875): avc: denied { bind } for pid=3802 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.038047][ T3803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.077268][ T29] audit: type=1400 audit(1738206240.137:3876): avc: denied { setopt } for pid=3802 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.077406][ T3797] pim6reg1: entered promiscuous mode [ 34.098115][ T29] audit: type=1400 audit(1738206240.167:3877): avc: denied { setopt } for pid=3804 comm="syz.4.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.103012][ T3797] pim6reg1: entered allmulticast mode [ 34.141955][ T29] audit: type=1400 audit(1738206240.197:3878): avc: denied { create } for pid=3807 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 34.156760][ T3690] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.161610][ T29] audit: type=1400 audit(1738206240.197:3879): avc: denied { connect } for pid=3807 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 34.180906][ T3690] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.187883][ T29] audit: type=1400 audit(1738206240.197:3880): avc: denied { write } for pid=3807 comm="syz.3.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 34.198337][ T3690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.267652][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.274815][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.283984][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.291268][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.316855][ T3803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.340253][ T3815] ip6gre1: entered allmulticast mode [ 34.345407][ T29] audit: type=1400 audit(1738206240.397:3881): avc: denied { read append } for pid=3820 comm="syz.3.139" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 34.369876][ T29] audit: type=1400 audit(1738206240.397:3882): avc: denied { open } for pid=3820 comm="syz.3.139" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 34.415507][ T3690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.434946][ T3828] __nla_validate_parse: 3 callbacks suppressed [ 34.434961][ T3828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.141'. [ 34.470677][ T3803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.472642][ T3835] loop2: detected capacity change from 0 to 512 [ 34.511701][ T3835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.530866][ T3803] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.534175][ T3835] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 34.604731][ T3803] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.619399][ T3803] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.633778][ T3803] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.662348][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.689964][ T3803] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.698173][ T3855] loop2: detected capacity change from 0 to 512 [ 34.706806][ T3853] pim6reg1: entered promiscuous mode [ 34.712154][ T3853] pim6reg1: entered allmulticast mode [ 34.721330][ T3855] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.723597][ T3690] veth0_vlan: entered promiscuous mode [ 34.734471][ T3855] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.756825][ T3855] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.771471][ T3855] EXT4-fs (loop2): 1 truncate cleaned up [ 34.773019][ T3690] veth1_vlan: entered promiscuous mode [ 34.784878][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.834312][ T3690] veth0_macvtap: entered promiscuous mode [ 34.851618][ T3860] Zero length message leads to an empty skb [ 34.852590][ T3690] veth1_macvtap: entered promiscuous mode [ 34.878039][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.888750][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.898949][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.909998][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.919920][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 34.930566][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.944130][ T3690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.956111][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.966647][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.976552][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 34.987002][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 34.996981][ T3690] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 35.007457][ T3690] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 35.019660][ T3690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.030533][ T3690] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.039373][ T3690] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.048141][ T3690] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.056957][ T3690] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.070472][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.080010][ T3866] netlink: 300 bytes leftover after parsing attributes in process `syz.4.152'. [ 35.112345][ T3868] netlink: 8 bytes leftover after parsing attributes in process `syz.2.153'. [ 35.195352][ T35] net_ratelimit: 20 callbacks suppressed [ 35.195368][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 35.275262][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 35.458912][ T3914] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 35.467875][ T3914] SELinux: failed to load policy [ 35.472456][ T3919] loop3: detected capacity change from 0 to 512 [ 35.479609][ T3919] EXT4-fs: Ignoring removed i_version option [ 35.485697][ T3919] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.499190][ T3919] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.528114][ T3919] EXT4-fs (loop3): 1 truncate cleaned up [ 35.575199][ T3919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.645260][ T3919] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 35.669464][ T3943] loop2: detected capacity change from 0 to 1024 [ 35.676351][ T3943] EXT4-fs: Ignoring removed orlov option [ 35.690979][ T3943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.714461][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.743055][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.833601][ T3952] netlink: 'syz.0.172': attribute type 39 has an invalid length. [ 35.850701][ T3954] loop2: detected capacity change from 0 to 512 [ 35.879361][ T3954] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.881445][ T3956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.174'. [ 35.976131][ T3954] EXT4-fs (loop2): 1 orphan inode deleted [ 35.981961][ T3954] EXT4-fs (loop2): 1 truncate cleaned up [ 35.995375][ T3358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 35.995525][ T3954] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.047308][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.153328][ T3964] loop2: detected capacity change from 0 to 2048 [ 36.187203][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.235331][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 36.246075][ T3964] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 36.258359][ T3964] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.258359][ T3964] [ 36.268132][ T3964] EXT4-fs (loop2): Total free blocks count 0 [ 36.274222][ T3964] EXT4-fs (loop2): Free/Dirty block details [ 36.280183][ T3964] EXT4-fs (loop2): free_blocks=0 [ 36.285264][ T3964] EXT4-fs (loop2): dirty_blocks=0 [ 36.290287][ T3964] EXT4-fs (loop2): Block reservation details [ 36.296327][ T3964] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 36.328577][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.476420][ T3985] loop4: detected capacity change from 0 to 2048 [ 36.487451][ T3985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.554850][ T3990] bond1: entered promiscuous mode [ 36.560534][ T3990] bond1: entered allmulticast mode [ 36.567500][ T3990] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.581847][ T3990] bond1 (unregistering): Released all slaves [ 36.610711][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.633505][ T3995] loop4: detected capacity change from 0 to 1024 [ 36.643167][ T3995] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.665464][ T3995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.697054][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.985057][ T4016] loop3: detected capacity change from 0 to 128 [ 36.993973][ T4016] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 37.009797][ T4016] ext4 filesystem being mounted at /45/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 37.070696][ T3296] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 37.286147][ T3373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 37.455605][ T4064] capability: warning: `syz.5.211' uses deprecated v2 capabilities in a way that may be insecure [ 37.633049][ T4077] loop5: detected capacity change from 0 to 8192 [ 37.643865][ T4081] mmap: syz.3.218 (4081) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.713788][ T3358] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 37.721355][ T3358] hid-generic 0000:0003:0000.0001: unknown main item tag 0x0 [ 37.734441][ T3358] hid-generic 0000:0003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 37.981569][ T4104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.227'. [ 37.990728][ T4104] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (2072) [ 38.316158][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 38.619013][ T4119] netlink: 140 bytes leftover after parsing attributes in process `syz.3.234'. [ 38.689429][ T4136] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 38.689835][ T4134] loop2: detected capacity change from 0 to 2048 [ 38.702062][ T4136] bond1: entered promiscuous mode [ 38.708768][ T4136] bond1: entered allmulticast mode [ 38.735889][ T4136] bond1: (slave ip6erspan0): making interface the new active one [ 38.736986][ T4134] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.743654][ T4136] ip6erspan0: entered promiscuous mode [ 38.761973][ T4136] ip6erspan0: entered allmulticast mode [ 38.772390][ T4136] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 38.790942][ T4144] loop5: detected capacity change from 0 to 164 [ 38.812912][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.838806][ T4144] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 38.849237][ T4148] loop0: detected capacity change from 0 to 2048 [ 38.868086][ T4148] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.883460][ T4148] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.903981][ T4153] netlink: 'syz.2.242': attribute type 13 has an invalid length. [ 38.929565][ T29] kauditd_printk_skb: 131 callbacks suppressed [ 38.929580][ T29] audit: type=1400 audit(1738206244.987:4014): avc: denied { create } for pid=4157 comm="syz.5.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.985162][ T4158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.245'. [ 38.989728][ T4153] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.994307][ T4158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.245'. [ 39.001376][ T4153] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.037483][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.048627][ T4158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.245'. [ 39.068826][ T4158] netlink: 20 bytes leftover after parsing attributes in process `syz.5.245'. [ 39.113124][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.124890][ T4153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.211189][ T4153] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.220149][ T4153] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.229125][ T4153] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.238166][ T4153] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.301547][ T29] audit: type=1400 audit(1738206245.357:4015): avc: denied { ioctl } for pid=4176 comm="syz.5.250" path="socket:[6780]" dev="sockfs" ino=6780 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 39.373607][ T29] audit: type=1326 audit(1738206245.427:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25483ccda9 code=0x7ffc0000 [ 39.397358][ T29] audit: type=1326 audit(1738206245.427:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25483ccda9 code=0x7ffc0000 [ 39.421391][ T29] audit: type=1326 audit(1738206245.427:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f25483ccda9 code=0x7ffc0000 [ 39.444944][ T29] audit: type=1326 audit(1738206245.427:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25483ccda9 code=0x7ffc0000 [ 39.468364][ T29] audit: type=1326 audit(1738206245.427:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4179 comm="syz.0.251" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25483ccda9 code=0x7ffc0000 [ 39.496638][ T29] audit: type=1400 audit(1738206245.557:4021): avc: denied { create } for pid=4183 comm="syz.2.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 39.520802][ T4184] loop2: detected capacity change from 0 to 512 [ 39.536329][ T4184] EXT4-fs (loop2): orphan cleanup on readonly fs [ 39.580342][ T4184] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 39.618647][ T4195] __nla_validate_parse: 2 callbacks suppressed [ 39.618710][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.258'. [ 39.637726][ T4195] netlink: 4 bytes leftover after parsing attributes in process `syz.5.258'. [ 39.665601][ T4184] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 39.684119][ T4184] EXT4-fs error (device loop2): ext4_ext_check_inode:524: inode #13: comm syz.2.253: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 39.702900][ T4184] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.253: couldn't read orphan inode 13 (err -117) [ 39.709280][ T4199] loop5: detected capacity change from 0 to 1024 [ 39.715139][ T29] audit: type=1400 audit(1738206245.767:4022): avc: denied { name_bind } for pid=4196 comm="syz.0.259" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 39.742765][ T4184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 39.747087][ T4199] EXT4-fs: Ignoring removed orlov option [ 39.760949][ T4199] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.776152][ T4184] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 39.786350][ T4184] EXT4-fs warning (device loop2): read_mmp_block:115: Error -117 while reading MMP block 2 [ 39.806523][ T4199] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.841921][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.852610][ T4208] netlink: 24 bytes leftover after parsing attributes in process `syz.0.264'. [ 39.905310][ T29] audit: type=1400 audit(1738206245.957:4023): avc: denied { write } for pid=4212 comm="syz.2.265" path="socket:[6841]" dev="sockfs" ino=6841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 39.931445][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.952098][ T4220] team0: Device ipvlan2 failed to register rx_handler [ 40.012486][ T4231] netlink: 64 bytes leftover after parsing attributes in process `syz.3.271'. [ 40.138029][ T4248] loop4: detected capacity change from 0 to 128 [ 40.194580][ T4255] loop4: detected capacity change from 0 to 128 [ 40.289974][ T4264] loop4: detected capacity change from 0 to 512 [ 40.308079][ T4264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.330638][ T4264] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.363330][ T4264] EXT4-fs error (device loop4): ext4_readdir:261: inode #2: block 12: comm syz.4.289: path /67/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 40.386440][ T4264] EXT4-fs (loop4): Remounting filesystem read-only [ 40.602333][ T4285] loop5: detected capacity change from 0 to 512 [ 40.609016][ T4285] EXT4-fs: Ignoring removed i_version option [ 40.626496][ T4285] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.639678][ T4285] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.653568][ T4285] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #4: comm syz.5.297: corrupted inode contents [ 40.666156][ T4285] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #4: comm syz.5.297: mark_inode_dirty error [ 40.678208][ T4285] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #4: comm syz.5.297: corrupted inode contents [ 40.691248][ T4285] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #4: comm syz.5.297: mark_inode_dirty error [ 40.702679][ T4285] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.297: Failed to acquire dquot type 1 [ 40.715744][ T4288] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #4: comm syz.5.297: corrupted inode contents [ 40.728891][ T4288] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #4: comm syz.5.297: mark_inode_dirty error [ 40.741365][ T4288] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #4: comm syz.5.297: corrupted inode contents [ 40.764525][ T4288] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #4: comm syz.5.297: mark_inode_dirty error [ 40.802189][ T4290] syzkaller0: entered promiscuous mode [ 40.807754][ T4290] syzkaller0: entered allmulticast mode [ 40.816390][ T4288] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.297: Failed to acquire dquot type 1 [ 40.838032][ T4288] syz.5.297 (4288) used greatest stack depth: 9816 bytes left [ 40.847135][ T4285] syz.5.297 (4285) used greatest stack depth: 9688 bytes left [ 40.896770][ T3690] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.991336][ T4296] vlan2: entered promiscuous mode [ 41.006306][ T4296] bond0: (slave vlan2): Opening slave failed [ 41.104442][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 41.113435][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 41.122442][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 41.146906][ T4307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.162131][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 41.164138][ T4307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.171070][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 41.187655][ T4306] netlink: 16 bytes leftover after parsing attributes in process `syz.2.305'. [ 41.275001][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.375074][ T4318] loop0: detected capacity change from 0 to 256 [ 41.413166][ T4322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.428337][ T4322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.438703][ T4322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.447753][ T4322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.531246][ T4334] loop2: detected capacity change from 0 to 1024 [ 41.542892][ T4334] EXT4-fs error (device loop2): ext4_quota_enable:7097: comm syz.2.317: Bad quota inum: 9, type: 2 [ 41.554727][ T4334] EXT4-fs warning (device loop2): ext4_enable_quotas:7145: Failed to enable quota tracking (type=2, err=-117, ino=9). Please run e2fsck to fix. [ 41.569968][ T4334] EXT4-fs (loop2): mount failed [ 41.604547][ T4339] ref_ctr increment failed for inode: 0x182 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff8881070fea00 [ 41.616694][ T4338] uprobe: syz.2.319:4338 failed to unregister, leaking uprobe [ 42.003476][ T4362] loop4: detected capacity change from 0 to 512 [ 42.012812][ T4362] EXT4-fs: Ignoring removed i_version option [ 42.042198][ T4362] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.058099][ T4362] ext4 filesystem being mounted at /70/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.072060][ T4362] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #4: comm syz.4.328: corrupted inode contents [ 42.084750][ T4362] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #4: comm syz.4.328: mark_inode_dirty error [ 42.105269][ T4362] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #4: comm syz.4.328: corrupted inode contents [ 42.119398][ T4362] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.328: mark_inode_dirty error [ 42.134744][ T4362] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.328: Failed to acquire dquot type 1 [ 42.136309][ T4381] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #4: comm syz.4.328: corrupted inode contents [ 42.163788][ T4381] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #4: comm syz.4.328: mark_inode_dirty error [ 42.173079][ T4370] vlan3: entered promiscuous mode [ 42.175472][ T4381] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #4: comm syz.4.328: corrupted inode contents [ 42.181281][ T4370] bond0: entered promiscuous mode [ 42.194184][ T4381] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #4: comm syz.4.328: mark_inode_dirty error [ 42.197311][ T4370] bond_slave_0: entered promiscuous mode [ 42.211538][ T4381] EXT4-fs error (device loop4): ext4_acquire_dquot:6927: comm syz.4.328: Failed to acquire dquot type 1 [ 42.214510][ T4370] bond_slave_1: entered promiscuous mode [ 42.236295][ T4370] bond0: left promiscuous mode [ 42.241312][ T4370] bond_slave_0: left promiscuous mode [ 42.246884][ T4370] bond_slave_1: left promiscuous mode [ 42.272305][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.294992][ T4388] loop4: detected capacity change from 0 to 512 [ 42.301845][ T4388] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.318706][ T4388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.332179][ T4391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.341187][ T4388] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.341820][ T4391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.472883][ T3298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.549667][ T4407] loop0: detected capacity change from 0 to 128 [ 42.596386][ T4409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4409 comm=syz.0.344 [ 42.612080][ T4409] netlink: 'syz.0.344': attribute type 1 has an invalid length. [ 42.633998][ T4409] bond2: entered promiscuous mode [ 42.639153][ T4409] bond2: entered allmulticast mode [ 42.660712][ T4409] batadv1: entered allmulticast mode [ 42.666534][ T4409] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 42.674810][ T4409] bond2: (slave batadv1): making interface the new active one [ 42.682376][ T4409] batadv1: entered promiscuous mode [ 42.691780][ T4409] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 42.820783][ T4433] loop2: detected capacity change from 0 to 128 [ 42.860120][ T4439] loop2: detected capacity change from 0 to 128 [ 42.911830][ T4439] syz.2.358: attempt to access beyond end of device [ 42.911830][ T4439] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 42.916203][ T4444] loop0: detected capacity change from 0 to 2048 [ 42.932331][ T4444] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.938911][ T4444] EXT4-fs: Ignoring removed i_version option [ 42.956727][ T4444] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.998712][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.050247][ T4454] loop3: detected capacity change from 0 to 512 [ 43.060044][ T4454] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 43.079927][ T4454] EXT4-fs (loop3): 1 truncate cleaned up [ 43.088873][ T4454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.109238][ T4454] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.620509][ T4494] netlink: 'syz.0.378': attribute type 8 has an invalid length. [ 43.765048][ T4502] loop0: detected capacity change from 0 to 1024 [ 43.803270][ T4502] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.382: Failed to acquire dquot type 0 [ 43.830681][ T4502] EXT4-fs error (device loop0): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 43.845576][ T4504] syzkaller0: entered promiscuous mode [ 43.851076][ T4504] syzkaller0: entered allmulticast mode [ 43.857095][ T4502] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #13: comm syz.0.382: corrupted inode contents [ 43.872765][ T4502] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #13: comm syz.0.382: mark_inode_dirty error [ 43.873824][ T4506] team0: Device ipvlan2 failed to register rx_handler [ 43.893639][ T4502] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #13: comm syz.0.382: corrupted inode contents [ 43.909745][ T4502] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #13: comm syz.0.382: mark_inode_dirty error [ 43.921197][ T4502] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #13: comm syz.0.382: corrupted inode contents [ 43.933598][ T4502] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 43.942849][ T4502] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #13: comm syz.0.382: corrupted inode contents [ 43.955504][ T4502] EXT4-fs error (device loop0): ext4_truncate:4240: inode #13: comm syz.0.382: mark_inode_dirty error [ 43.966772][ T4502] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 43.976405][ T4502] EXT4-fs (loop0): 1 truncate cleaned up [ 43.979047][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 43.979059][ T29] audit: type=1400 audit(1738206506.037:4364): avc: denied { setopt } for pid=4511 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.982495][ T4502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.005462][ T29] audit: type=1400 audit(1738206506.057:4365): avc: denied { create } for pid=4513 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.061532][ T29] audit: type=1326 audit(1738206506.097:4366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25483cb710 code=0x7ffc0000 [ 44.085158][ T29] audit: type=1326 audit(1738206506.097:4367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f25483cbaf7 code=0x7ffc0000 [ 44.108405][ T29] audit: type=1326 audit(1738206506.097:4368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f25483cb710 code=0x7ffc0000 [ 44.131952][ T29] audit: type=1326 audit(1738206506.097:4369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25483ccda9 code=0x7ffc0000 [ 44.155299][ T29] audit: type=1326 audit(1738206506.097:4370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4501 comm="syz.0.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25483ccda9 code=0x7ffc0000 [ 44.179254][ T29] audit: type=1400 audit(1738206506.117:4371): avc: denied { connect } for pid=4513 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.179280][ T29] audit: type=1400 audit(1738206506.117:4372): avc: denied { ioctl } for pid=4513 comm="syz.4.387" path="socket:[8344]" dev="sockfs" ino=8344 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.179309][ T29] audit: type=1400 audit(1738206506.117:4373): avc: denied { write } for pid=4513 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 44.278895][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.539607][ T4544] netlink: 'syz.2.399': attribute type 1 has an invalid length. [ 44.697731][ T4554] loop3: detected capacity change from 0 to 1024 [ 44.729274][ T4554] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.401: Failed to acquire dquot type 0 [ 44.770025][ T4554] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 44.837301][ T4554] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.401: corrupted inode contents [ 44.853289][ T4565] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.884164][ T4554] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #13: comm syz.3.401: mark_inode_dirty error [ 44.904163][ T4554] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.401: corrupted inode contents [ 44.923316][ T4554] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #13: comm syz.3.401: mark_inode_dirty error [ 44.937411][ T4554] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.401: corrupted inode contents [ 44.949872][ T4554] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 44.960394][ T4554] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #13: comm syz.3.401: corrupted inode contents [ 44.972848][ T4554] EXT4-fs error (device loop3): ext4_truncate:4240: inode #13: comm syz.3.401: mark_inode_dirty error [ 44.986393][ T4554] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 44.996355][ T4554] EXT4-fs (loop3): 1 truncate cleaned up [ 45.002348][ T4554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.033192][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.194830][ T4588] : renamed from ipvlan1 [ 45.471387][ T4608] team0: Device ipvlan2 failed to register rx_handler [ 45.506339][ T4611] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 45.514017][ T4611] __nla_validate_parse: 7 callbacks suppressed [ 45.514026][ T4611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.424'. [ 45.638954][ T4627] loop4: detected capacity change from 0 to 512 [ 45.666183][ T4627] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.711466][ T4627] EXT4-fs (loop4): 1 truncate cleaned up [ 45.732524][ T4627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.748347][ T4627] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.957003][ T4652] netlink: 'syz.5.438': attribute type 1 has an invalid length. [ 45.964695][ T4652] netlink: 16 bytes leftover after parsing attributes in process `syz.5.438'. [ 46.058770][ T4664] loop2: detected capacity change from 0 to 512 [ 46.078363][ T4664] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.094760][ T4664] EXT4-fs (loop2): 1 truncate cleaned up [ 46.100980][ T4664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.107253][ T4666] syzkaller0: entered promiscuous mode [ 46.118579][ T4666] syzkaller0: entered allmulticast mode [ 46.120567][ T4664] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.254917][ T4674] wg2: entered promiscuous mode [ 46.260569][ T4674] wg2: entered allmulticast mode [ 46.292597][ T4684] netlink: 'syz.2.452': attribute type 13 has an invalid length. [ 46.514107][ T4704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.523391][ T4704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.536380][ T4706] IPv6: Can't replace route, no match found [ 46.571250][ T4710] netlink: 'syz.3.462': attribute type 4 has an invalid length. [ 47.130433][ T4733] loop3: detected capacity change from 0 to 2048 [ 47.164283][ T4733] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.171004][ T4733] EXT4-fs: Ignoring removed i_version option [ 47.191109][ T4733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.272362][ T4747] syzkaller0: entered promiscuous mode [ 47.277912][ T4747] syzkaller0: entered allmulticast mode [ 47.299184][ T3296] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.314770][ T4749] pim6reg1: entered promiscuous mode [ 47.320231][ T4749] pim6reg1: entered allmulticast mode [ 47.399068][ T4758] syz.2.484: attempt to access beyond end of device [ 47.399068][ T4758] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 47.413374][ T8] IPVS: starting estimator thread 0... [ 47.426530][ T4754] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 47.493550][ T4766] loop5: detected capacity change from 0 to 1764 [ 47.501043][ T4766] iso9660: Bad value for 'sbsector' [ 47.511209][ T4771] batadv1: entered promiscuous mode [ 47.516776][ T4760] IPVS: using max 2640 ests per chain, 132000 per kthread [ 47.529127][ T4771] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 47.541323][ T4766] loop5: detected capacity change from 0 to 764 [ 47.560129][ T4766] Symlink component flag not implemented [ 47.566648][ T4766] Symlink component flag not implemented (129) [ 47.573656][ T4766] rock: directory entry would overflow storage [ 47.580125][ T4766] rock: sig=0x4f50, size=4, remaining=3 [ 47.586738][ T4766] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 47.683341][ T4788] IPv6: Can't replace route, no match found [ 47.771962][ T4792] syzkaller0: entered promiscuous mode [ 47.777779][ T4792] syzkaller0: entered allmulticast mode [ 47.925555][ T4808] pim6reg1: entered promiscuous mode [ 47.931004][ T4808] pim6reg1: entered allmulticast mode [ 47.994356][ T4815] loop2: detected capacity change from 0 to 1024 [ 48.001806][ T4815] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 48.012853][ T4815] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 48.023727][ T4815] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.032723][ T4817] netlink: 24 bytes leftover after parsing attributes in process `syz.5.507'. [ 48.035879][ T4815] EXT4-fs (loop2): invalid journal inode [ 48.048973][ T4815] EXT4-fs (loop2): can't get journal size [ 48.055447][ T4815] EXT4-fs error (device loop2): ext4_protect_reserved_inode:182: inode #3: comm syz.2.505: blocks 2-2 from inode overlap system zone [ 48.069597][ T4815] EXT4-fs (loop2): failed to initialize system zone (-117) [ 48.077137][ T4815] EXT4-fs (loop2): mount failed [ 48.264146][ T4826] ================================================================== [ 48.272269][ T4826] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 48.279715][ T4826] [ 48.282035][ T4826] read-write to 0xffff88810303db80 of 8 bytes by interrupt on cpu 1: [ 48.290095][ T4826] rtc_pie_update_irq+0x95/0xf0 [ 48.294951][ T4826] __hrtimer_run_queues+0x20d/0x5e0 [ 48.300177][ T4826] hrtimer_interrupt+0x235/0x4a0 [ 48.305106][ T4826] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 48.311015][ T4826] sysvec_apic_timer_interrupt+0x6e/0x80 [ 48.316645][ T4826] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 48.322632][ T4826] __tsan_read8+0x2c/0x180 [ 48.327041][ T4826] unmap_page_range+0x1044/0x26c0 [ 48.332058][ T4826] unmap_single_vma+0x142/0x1d0 [ 48.336906][ T4826] unmap_vmas+0x18d/0x2b0 [ 48.341247][ T4826] exit_mmap+0x1ae/0x6d0 [ 48.345526][ T4826] __mmput+0x28/0x1d0 [ 48.349509][ T4826] mmput+0x4c/0x60 [ 48.353225][ T4826] exit_mm+0xe4/0x190 [ 48.357203][ T4826] do_exit+0x559/0x17f0 [ 48.361362][ T4826] do_group_exit+0x102/0x150 [ 48.365992][ T4826] get_signal+0xeb9/0x1000 [ 48.370399][ T4826] arch_do_signal_or_restart+0x95/0x4b0 [ 48.375939][ T4826] syscall_exit_to_user_mode+0x62/0x120 [ 48.381485][ T4826] do_syscall_64+0xd6/0x1c0 [ 48.385998][ T4826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.391979][ T4826] [ 48.394289][ T4826] read to 0xffff88810303db80 of 8 bytes by task 4826 on cpu 0: [ 48.401833][ T4826] rtc_dev_poll+0x77/0xb0 [ 48.406184][ T4826] __io_arm_poll_handler+0x1e5/0xd50 [ 48.411553][ T4826] io_arm_poll_handler+0x3e1/0x5b0 [ 48.416681][ T4826] io_queue_async+0x89/0x320 [ 48.421749][ T4826] io_req_task_submit+0xb9/0xc0 [ 48.426599][ T4826] io_poll_task_func+0x5fa/0x7c0 [ 48.431538][ T4826] io_handle_tw_list+0xe3/0x200 [ 48.436547][ T4826] tctx_task_work_run+0x6e/0x1c0 [ 48.441472][ T4826] tctx_task_work+0x40/0x80 [ 48.445962][ T4826] task_work_run+0x13a/0x1a0 [ 48.450549][ T4826] get_signal+0xe78/0x1000 [ 48.454956][ T4826] arch_do_signal_or_restart+0x95/0x4b0 [ 48.460580][ T4826] syscall_exit_to_user_mode+0x62/0x120 [ 48.466120][ T4826] do_syscall_64+0xd6/0x1c0 [ 48.470665][ T4826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.476644][ T4826] [ 48.478955][ T4826] value changed: 0x0000000000000000 -> 0x00000000000001c0 [ 48.486048][ T4826] [ 48.488361][ T4826] Reported by Kernel Concurrency Sanitizer on: [ 48.494524][ T4826] CPU: 0 UID: 0 PID: 4826 Comm: syz.4.509 Not tainted 6.13.0-syzkaller-09383-gebbb8be421ee #0 [ 48.504755][ T4826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 48.514976][ T4826] ==================================================================