last executing test programs: 1.5419798s ago: executing program 3 (id=442): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000f40)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x6, 0x28, 0x2, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0xffff}}}}}}, 0x0) 1.493715291s ago: executing program 3 (id=446): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006340)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() poll(&(0x7f0000000140), 0x0, 0xdc) 1.107061833s ago: executing program 3 (id=449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500"/19], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 1.106700493s ago: executing program 4 (id=450): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.074100413s ago: executing program 3 (id=451): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_PROBE_HOST(r2, 0x5385, &(0x7f0000001200)={0x1000, ""/4096}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x529ae000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002252e000180080001000000000008000200ac1e00010c000280050001000000000008000740000000014400108008000240000000070800034000000009080001"], 0xa8}}, 0x0) 910.082864ms ago: executing program 4 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x20, 0x0, 0x0) 842.881915ms ago: executing program 4 (id=453): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, 0x0, 0x4804) 842.484345ms ago: executing program 4 (id=454): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 798.066875ms ago: executing program 4 (id=456): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB, @ANYRESHEX=r1]) 794.300715ms ago: executing program 1 (id=458): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 710.906846ms ago: executing program 2 (id=459): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x45}}, 0x3f}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 576.979467ms ago: executing program 1 (id=460): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1], 0x30}}, 0x44) 481.447587ms ago: executing program 2 (id=461): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 457.315037ms ago: executing program 4 (id=462): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000001740), 0x2, r5}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x25dfdbfc, {{0x7e}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x1c}}, 0x4000054) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x4d0, 0x0, 0x4, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x40000) r9 = socket$netlink(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="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", 0xfb, 0xfffffffffffffffe) preadv(r8, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 421.608958ms ago: executing program 1 (id=463): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 368.068838ms ago: executing program 1 (id=464): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x20, 0x0, 0x0) 367.160048ms ago: executing program 2 (id=465): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r1, 0x20, 0x0, 0x0) 269.779519ms ago: executing program 1 (id=466): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0xac}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 268.282879ms ago: executing program 0 (id=467): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @dev, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210104, @local, {[@timestamp_addr={0x44, 0x4, 0xd9}, @generic={0x7, 0x3, '\t'}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') syncfs(0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) setfsuid(0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000300)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}], [{@dont_hash}, {@uid_gt}, {@dont_hash}, {@fowner_gt}, {@dont_appraise}, {@dont_measure}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '*\'@'}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) eventfd(0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) 246.279849ms ago: executing program 2 (id=468): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x24004000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 240.353349ms ago: executing program 2 (id=469): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000)="00c881d76049ac562e4e5094890b55e5ea113389145c57e7b3479bf3f2cf8ac5d94a71e37b8bc9f4e71c8b097042535f04d39b07b6e29be0a2734c7332f8", 0x3e, 0x0, 0x0, 0x0) recvfrom(r3, &(0x7f00000001c0)=""/62, 0x3e, 0x10120, 0x0, 0x0) 200.662549ms ago: executing program 0 (id=470): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, &(0x7f0000000180)) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 200.082409ms ago: executing program 1 (id=471): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000006340)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}}, 0x10, 0x0}], 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000000)) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) poll(&(0x7f0000000140), 0x0, 0xdc) 167.226189ms ago: executing program 0 (id=472): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r0, @ANYBLOB, @ANYRESHEX=r1]) 105.80106ms ago: executing program 2 (id=473): timer_gettime(0x0, &(0x7f0000000340)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000100)={[{@nolazytime}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) close(0x3) close(0x4) r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xa42, 0x0) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 105.26216ms ago: executing program 3 (id=474): socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newchain={0x2c, 0x64, 0x200, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x6, 0xa}, {0xe, 0x3}, {0x3, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0x100}]}, 0x2c}}, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[], 0xc4}}, 0x4008800) 73.83948ms ago: executing program 0 (id=475): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 60.18573ms ago: executing program 3 (id=476): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x300c056, &(0x7f0000000c00)={[{@noload}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_continue}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}, {@permit_directio}, {@dont_measure}, {@obj_role={'obj_role', 0x3d, 'max_dir_size_kb'}}, {@euid_gt}]}, 0x1, 0x55a, &(0x7f0000000480)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f9fdffffa64607f218a955b85c4496af0000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) open(&(0x7f0000000180)='./file2\x00', 0x80101, 0xa0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x2}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() getpgrp(r3) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x80000) write$P9_RATTACH(r4, &(0x7f0000000300)={0x14, 0x69, 0x2, {0x1, 0x4, 0x8}}, 0x14) mq_unlink(&(0x7f0000000000)='eth0\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x542, &(0x7f0000001a00)="$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") 6.960161ms ago: executing program 0 (id=477): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r2, 0x20, 0x0, 0x0) 0s ago: executing program 0 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4b2, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000001740), 0x2, r6}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x25dfdbfc, {{0x7e}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8}]}, 0x1c}}, 0x4000054) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x4d0, 0x0, 0x4, 0x8, 0x60005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xf802}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[], 0x4c}}, 0x40000) r10 = socket$netlink(0x10, 0x3, 0x0) add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x1}, &(0x7f0000000280)="fb426d6cf00e4d9b85ab3352ffc0e2646f6af535fd292dc34ba1bfeaf13b1a604636da83c52915c1e5d712a813a1e757b64945a90696a2009bd22eb90bbb7821e80dfe49cb58074c4f63f0128193fb1ddd33e8f92bc7012f057def9e4c973a207d99ab7edbca9c32eef06b66c3b67cce2c95330d67eb04935fda38ba007082ff6a9131c327abb0c9bc939433ff06a0c648df537aedd2928061e6b24f4756ad6c499c393809f99bc47ddd258365d667f5a495000ec07c1cfa6de60e073fec648f92019336b9f8a63b9a3a3103160be6a02768e53e3efd6c346903ea0dd7d06d032eefec10fa13561599eab4d0bf3f1139995de973a79f1f827e8ded", 0xfb, 0xfffffffffffffffe) preadv(r9, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/122, 0x6}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 22.779590][ T29] audit: type=1400 audit(1761754482.323:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.802537][ T29] audit: type=1400 audit(1761754482.353:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.803256][ T3301] cgroup: Unknown subsys name 'net' [ 22.830233][ T29] audit: type=1400 audit(1761754482.373:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.971001][ T3301] cgroup: Unknown subsys name 'cpuset' [ 22.977111][ T3301] cgroup: Unknown subsys name 'rlimit' [ 23.125803][ T29] audit: type=1400 audit(1761754482.673:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.149230][ T29] audit: type=1400 audit(1761754482.673:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.169712][ T29] audit: type=1400 audit(1761754482.673:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.190062][ T29] audit: type=1400 audit(1761754482.673:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.210459][ T29] audit: type=1400 audit(1761754482.703:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.235314][ T29] audit: type=1400 audit(1761754482.703:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.241940][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.267285][ T29] audit: type=1400 audit(1761754482.813:71): avc: denied { relabelto } for pid=3304 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.311048][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.449671][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 24.491830][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 24.504438][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 24.542009][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.558889][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.566041][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.573329][ T3311] bridge_slave_0: entered allmulticast mode [ 24.579572][ T3311] bridge_slave_0: entered promiscuous mode [ 24.601061][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.608093][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.615191][ T3311] bridge_slave_1: entered allmulticast mode [ 24.621485][ T3311] bridge_slave_1: entered promiscuous mode [ 24.655423][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.676460][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.691451][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.698500][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.705629][ T3322] bridge_slave_0: entered allmulticast mode [ 24.711896][ T3322] bridge_slave_0: entered promiscuous mode [ 24.726936][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.734000][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.741138][ T3315] bridge_slave_0: entered allmulticast mode [ 24.747460][ T3315] bridge_slave_0: entered promiscuous mode [ 24.757562][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.764639][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.771830][ T3322] bridge_slave_1: entered allmulticast mode [ 24.778155][ T3322] bridge_slave_1: entered promiscuous mode [ 24.793047][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.800128][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.807498][ T3315] bridge_slave_1: entered allmulticast mode [ 24.813966][ T3315] bridge_slave_1: entered promiscuous mode [ 24.828921][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.836013][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.843219][ T3319] bridge_slave_0: entered allmulticast mode [ 24.849501][ T3319] bridge_slave_0: entered promiscuous mode [ 24.856615][ T3311] team0: Port device team_slave_0 added [ 24.879574][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.886747][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.893908][ T3319] bridge_slave_1: entered allmulticast mode [ 24.900178][ T3319] bridge_slave_1: entered promiscuous mode [ 24.906967][ T3311] team0: Port device team_slave_1 added [ 24.917853][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.932375][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.953454][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.963690][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.973139][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.980068][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.006097][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.017670][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.027037][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 25.040559][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.050157][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.057113][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.083283][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.119754][ T3315] team0: Port device team_slave_0 added [ 25.135211][ T3322] team0: Port device team_slave_0 added [ 25.141374][ T3315] team0: Port device team_slave_1 added [ 25.147656][ T3319] team0: Port device team_slave_0 added [ 25.154367][ T3319] team0: Port device team_slave_1 added [ 25.166757][ T3322] team0: Port device team_slave_1 added [ 25.189405][ T3311] hsr_slave_0: entered promiscuous mode [ 25.195394][ T3311] hsr_slave_1: entered promiscuous mode [ 25.225656][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.232660][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.258635][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.269564][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.276526][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.302423][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.323053][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.330134][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.337291][ T3325] bridge_slave_0: entered allmulticast mode [ 25.343800][ T3325] bridge_slave_0: entered promiscuous mode [ 25.350519][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.358091][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.384022][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.394884][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.401940][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.427814][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.439119][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.446102][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.472001][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.487431][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.494513][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.501729][ T3325] bridge_slave_1: entered allmulticast mode [ 25.508115][ T3325] bridge_slave_1: entered promiscuous mode [ 25.514593][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.521638][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.547567][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.589945][ T3315] hsr_slave_0: entered promiscuous mode [ 25.596008][ T3315] hsr_slave_1: entered promiscuous mode [ 25.602032][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 25.607734][ T3315] Cannot create hsr debugfs directory [ 25.619983][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.655039][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.671803][ T3319] hsr_slave_0: entered promiscuous mode [ 25.677674][ T3319] hsr_slave_1: entered promiscuous mode [ 25.683485][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 25.689195][ T3319] Cannot create hsr debugfs directory [ 25.700923][ T3322] hsr_slave_0: entered promiscuous mode [ 25.706921][ T3322] hsr_slave_1: entered promiscuous mode [ 25.712749][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 25.718478][ T3322] Cannot create hsr debugfs directory [ 25.756792][ T3325] team0: Port device team_slave_0 added [ 25.783836][ T3325] team0: Port device team_slave_1 added [ 25.823643][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.830626][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.856661][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.880331][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.887314][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.913294][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.973404][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.987902][ T3325] hsr_slave_0: entered promiscuous mode [ 25.994134][ T3325] hsr_slave_1: entered promiscuous mode [ 25.999916][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 26.005647][ T3325] Cannot create hsr debugfs directory [ 26.011111][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.021884][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.035212][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.068911][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.079753][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.091666][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.104860][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.134928][ T3315] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.145829][ T3315] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.155743][ T3315] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.169723][ T3315] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.207831][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.216230][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.227325][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.241590][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.266793][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.278186][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.288639][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.297455][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.306309][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.338809][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.352051][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.361654][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.368686][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.377293][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.384413][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.409972][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.420960][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.435164][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.442217][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.458679][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.465804][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.478286][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.490159][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.497216][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.513341][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.520431][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.546174][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.568860][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.582367][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.589435][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.603210][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.610300][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.619911][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.635336][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.663283][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.670527][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.678982][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.686031][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.696917][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.723919][ T3319] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.734369][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.766096][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.789238][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.847759][ T3311] veth0_vlan: entered promiscuous mode [ 26.872846][ T3311] veth1_vlan: entered promiscuous mode [ 26.895682][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.909172][ T3315] veth0_vlan: entered promiscuous mode [ 26.921887][ T3311] veth0_macvtap: entered promiscuous mode [ 26.929608][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.939929][ T3311] veth1_macvtap: entered promiscuous mode [ 26.955837][ T3315] veth1_vlan: entered promiscuous mode [ 26.970952][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.989773][ T3315] veth0_macvtap: entered promiscuous mode [ 26.999262][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.011708][ T3315] veth1_macvtap: entered promiscuous mode [ 27.039583][ T1009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.059175][ T1009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.068959][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.087505][ T1009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.097857][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.117492][ T3322] veth0_vlan: entered promiscuous mode [ 27.127812][ T1009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.142133][ T3325] veth0_vlan: entered promiscuous mode [ 27.153157][ T559] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.163852][ T3325] veth1_vlan: entered promiscuous mode [ 27.172509][ T3311] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.172977][ T3322] veth1_vlan: entered promiscuous mode [ 27.201668][ T559] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.215892][ T559] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.244023][ T3322] veth0_macvtap: entered promiscuous mode [ 27.255124][ T3322] veth1_macvtap: entered promiscuous mode [ 27.264872][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.274007][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.302232][ T3319] veth0_vlan: entered promiscuous mode [ 27.316030][ T559] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.326270][ T559] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.343455][ T559] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.352771][ T559] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.361782][ T3319] veth1_vlan: entered promiscuous mode [ 27.376336][ T3487] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.393962][ T3487] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1'. [ 27.513527][ T23] IPVS: starting estimator thread 0... [ 27.513731][ T559] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.396869][ T3319] veth0_macvtap: entered promiscuous mode [ 28.402672][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 28.402683][ T29] audit: type=1400 audit(1761754487.573:103): avc: denied { create } for pid=3491 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 28.427846][ T29] audit: type=1400 audit(1761754487.693:104): avc: denied { create } for pid=3491 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.447139][ T29] audit: type=1400 audit(1761754487.803:105): avc: denied { connect } for pid=3491 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.466469][ T29] audit: type=1400 audit(1761754487.923:106): avc: denied { listen } for pid=3491 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 28.489055][ T3325] veth0_macvtap: entered promiscuous mode [ 28.497711][ T3325] veth1_macvtap: entered promiscuous mode [ 28.509932][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.540659][ T3488] IPVS: using max 2688 ests per chain, 134400 per kthread [ 28.562147][ T3319] veth1_macvtap: entered promiscuous mode [ 28.576867][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.681537][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.693107][ T559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.703155][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.713471][ T29] audit: type=1400 audit(1761754488.153:107): avc: denied { allowed } for pid=3504 comm="syz.1.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 28.732481][ T29] audit: type=1400 audit(1761754488.163:108): avc: denied { create } for pid=3504 comm="syz.1.9" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.753753][ T29] audit: type=1400 audit(1761754488.163:109): avc: denied { map } for pid=3504 comm="syz.1.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.777801][ T29] audit: type=1400 audit(1761754488.163:110): avc: denied { read write } for pid=3504 comm="syz.1.9" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.802309][ T29] audit: type=1400 audit(1761754488.203:111): avc: denied { create } for pid=3507 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.821685][ T29] audit: type=1400 audit(1761754488.203:112): avc: denied { connect } for pid=3506 comm="syz.1.10" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 28.850710][ T559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.850823][ T559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.850849][ T559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.851307][ T559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.851335][ T559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.851590][ T559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.851936][ T559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.939383][ T3527] Zero length message leads to an empty skb [ 29.330162][ T3551] lo speed is unknown, defaulting to 1000 [ 29.368946][ T3551] lo speed is unknown, defaulting to 1000 [ 29.408913][ T3551] lo speed is unknown, defaulting to 1000 [ 29.445471][ T3551] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 29.469023][ T3551] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 29.494272][ T3551] lo speed is unknown, defaulting to 1000 [ 29.511771][ T3551] lo speed is unknown, defaulting to 1000 [ 29.540880][ T3551] lo speed is unknown, defaulting to 1000 [ 29.583567][ T3551] lo speed is unknown, defaulting to 1000 [ 29.602205][ T3551] lo speed is unknown, defaulting to 1000 [ 29.622506][ T3551] syz.4.26 (3551) used greatest stack depth: 10544 bytes left [ 30.070170][ T3571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.090500][ T3571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.142462][ T3571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.166937][ T3571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.936276][ T3604] netlink: 28 bytes leftover after parsing attributes in process `syz.4.50'. [ 30.981235][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 30.989984][ T3609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.48'. [ 31.295193][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 31.303985][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 31.404477][ T3628] syz.3.59 uses obsolete (PF_INET,SOCK_PACKET) [ 31.426325][ T3628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.59'. [ 31.451707][ T3628] netlink: 60 bytes leftover after parsing attributes in process `syz.3.59'. [ 31.575880][ T3630] vhci_hcd: default hub control req: 040b v007f i0001 l2 [ 31.625326][ T3634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.62'. [ 31.703025][ T3640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.712040][ T3640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.323588][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.339034][ T3661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.72'. [ 32.342192][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.422233][ T3673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.501298][ T3677] __nla_validate_parse: 1 callbacks suppressed [ 32.501313][ T3677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 32.516631][ T3677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.76'. [ 32.576075][ T3679] netlink: 'syz.3.77': attribute type 10 has an invalid length. [ 32.585721][ T3679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.593890][ T3679] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 32.604002][ T3679] netlink: 'syz.3.77': attribute type 10 has an invalid length. [ 32.611659][ T3679] netlink: 40 bytes leftover after parsing attributes in process `syz.3.77'. [ 32.620610][ T3679] batadv0: entered promiscuous mode [ 32.625814][ T3679] batadv0: entered allmulticast mode [ 32.632183][ T3679] bond0: (slave batadv0): Releasing backup interface [ 32.640347][ T3679] bridge0: port 3(batadv0) entered blocking state [ 32.646873][ T3679] bridge0: port 3(batadv0) entered disabled state [ 32.801377][ T3693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.84'. [ 32.810600][ T1009] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 32.819911][ T1009] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 32.822499][ T3693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 33.129891][ T3721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.96'. [ 33.164937][ T3721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.96'. [ 33.430547][ T3734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.439273][ T3734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.469397][ T3735] mmap: syz.4.101 (3735) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 33.505764][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 33.505775][ T29] audit: type=1400 audit(1761754492.973:173): avc: denied { kexec_image_load } for pid=3733 comm="syz.1.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 33.671233][ T3737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.679758][ T3737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.130442][ T29] audit: type=1400 audit(1761754493.653:174): avc: denied { bind } for pid=3740 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.149590][ T29] audit: type=1400 audit(1761754493.663:175): avc: denied { write } for pid=3740 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 34.194498][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.203265][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.224423][ T29] audit: type=1400 audit(1761754493.773:176): avc: denied { append } for pid=3749 comm="syz.4.108" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 34.247516][ T3751] No control pipe specified [ 34.291402][ T3759] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.299935][ T3759] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.399444][ T3761] IPv6: NLM_F_CREATE should be specified when creating new route [ 34.407291][ T3761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 34.414500][ T3761] IPv6: NLM_F_CREATE should be set when creating new route [ 34.553460][ T29] audit: type=1400 audit(1761754494.103:177): avc: denied { connect } for pid=3764 comm="syz.3.115" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.789316][ T3769] netlink: 8 bytes leftover after parsing attributes in process `syz.1.116'. [ 34.798518][ T3769] netlink: 44 bytes leftover after parsing attributes in process `syz.1.116'. [ 34.933032][ T3779] 9pnet_fd: Insufficient options for proto=fd [ 34.983645][ T3785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.004836][ T3785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.065309][ T29] audit: type=1400 audit(1761754494.613:178): avc: denied { read } for pid=3788 comm="syz.1.125" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.087783][ T29] audit: type=1400 audit(1761754494.613:179): avc: denied { open } for pid=3788 comm="syz.1.125" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 35.347018][ T3794] netlink: 20 bytes leftover after parsing attributes in process `syz.3.127'. [ 35.386021][ T3796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.395595][ T3796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.541831][ T29] audit: type=1400 audit(1761754495.093:180): avc: denied { create } for pid=3797 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.561702][ T29] audit: type=1400 audit(1761754495.113:181): avc: denied { bind } for pid=3797 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.581012][ T29] audit: type=1400 audit(1761754495.113:182): avc: denied { connect } for pid=3797 comm="syz.4.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 35.792916][ T3808] No control pipe specified [ 36.373548][ T3834] process 'syz.3.144' launched './file2' with NULL argv: empty string added [ 36.829569][ T3853] tipc: Started in network mode [ 36.834572][ T3853] tipc: Node identity 7f000001, cluster identity 4711 [ 36.843606][ T3853] tipc: Enabled bearer , priority 10 [ 37.031961][ T3871] No control pipe specified [ 37.960520][ T3498] tipc: Node number set to 2130706433 [ 37.979805][ T3893] __nla_validate_parse: 9 callbacks suppressed [ 37.979818][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 38.046896][ T3904] capability: warning: `syz.0.169' uses 32-bit capabilities (legacy support in use) [ 38.065973][ T3906] netlink: 'syz.2.171': attribute type 10 has an invalid length. [ 38.076713][ T3906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.088246][ T3906] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 38.100093][ T3906] netlink: 'syz.2.171': attribute type 10 has an invalid length. [ 38.107869][ T3906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.171'. [ 38.117063][ T3906] batadv0: entered promiscuous mode [ 38.122394][ T3906] batadv0: entered allmulticast mode [ 38.137475][ T3906] bond0: (slave batadv0): Releasing backup interface [ 38.150126][ T3906] bridge0: port 3(batadv0) entered blocking state [ 38.156705][ T3906] bridge0: port 3(batadv0) entered disabled state [ 38.340009][ T3924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 38.535456][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 38.535527][ T29] audit: type=1400 audit(1761754498.043:197): avc: denied { firmware_load } for pid=3919 comm="syz.3.177" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 38.986328][ T3452] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 38.995624][ T3452] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 39.024937][ T3934] tls_set_device_offload_rx: netdev not found [ 39.153471][ T3929] syz.3.177 (3929) used greatest stack depth: 10160 bytes left [ 39.159563][ T3932] lo speed is unknown, defaulting to 1000 [ 39.176487][ T29] audit: type=1400 audit(1761754498.123:198): avc: denied { open } for pid=3919 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.195560][ T29] audit: type=1400 audit(1761754498.123:199): avc: denied { kernel } for pid=3919 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.214803][ T29] audit: type=1400 audit(1761754498.123:200): avc: denied { tracepoint } for pid=3919 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 39.234457][ T29] audit: type=1400 audit(1761754498.583:201): avc: denied { bind } for pid=3927 comm="syz.4.180" laddr=::1 lport=255 faddr=::1 fport=20128 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.257327][ T29] audit: type=1400 audit(1761754498.583:202): avc: denied { name_bind } for pid=3927 comm="syz.4.180" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 39.278066][ T29] audit: type=1400 audit(1761754498.583:203): avc: denied { node_bind } for pid=3927 comm="syz.4.180" saddr=fc02:: src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 40.141608][ T29] audit: type=1400 audit(1761754499.673:204): avc: denied { read } for pid=3936 comm="syz.0.181" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.164577][ T29] audit: type=1400 audit(1761754499.673:205): avc: denied { open } for pid=3936 comm="syz.0.181" path="/dev/ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 40.192198][ T3955] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 40.210017][ T3937] lo speed is unknown, defaulting to 1000 [ 40.247447][ T3955] batadv0: left allmulticast mode [ 40.252557][ T3955] batadv0: left promiscuous mode [ 40.257582][ T3955] bridge0: port 3(batadv0) entered disabled state [ 40.287157][ T3965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 40.297484][ T3955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.301446][ T3968] netlink: 'syz.3.186': attribute type 10 has an invalid length. [ 40.312023][ T3968] netlink: 40 bytes leftover after parsing attributes in process `syz.3.186'. [ 40.319829][ T3955] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 40.340451][ T3966] lo speed is unknown, defaulting to 1000 [ 40.412197][ T3968] batadv0: entered promiscuous mode [ 40.416749][ T3976] 9pnet_fd: Insufficient options for proto=fd [ 40.417430][ T3968] batadv0: entered allmulticast mode [ 40.429253][ T3968] bond0: (slave batadv0): Releasing backup interface [ 40.444357][ T3968] bridge0: port 3(batadv0) entered blocking state [ 40.450999][ T3968] bridge0: port 3(batadv0) entered disabled state [ 40.514454][ T29] audit: type=1400 audit(1761754500.063:206): avc: denied { write } for pid=3980 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 40.604633][ T3986] loop0: detected capacity change from 0 to 1024 [ 40.619318][ T3986] ======================================================= [ 40.619318][ T3986] WARNING: The mand mount option has been deprecated and [ 40.619318][ T3986] and is ignored by this kernel. Remove the mand [ 40.619318][ T3986] option from the mount to silence this warning. [ 40.619318][ T3986] ======================================================= [ 40.799593][ T3986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.849093][ T3986] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.197: Allocating blocks 449-513 which overlap fs metadata [ 40.948947][ T4007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.203'. [ 41.005748][ T4012] 9pnet_fd: Insufficient options for proto=fd [ 41.033643][ T4014] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 41.042016][ T4014] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 41.085327][ T4017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.208'. [ 41.097198][ T4019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.207'. [ 41.121402][ T3985] EXT4-fs (loop0): pa ffff8881071db5b0: logic 48, phys. 177, len 21 [ 41.129438][ T3985] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 41.152046][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.629541][ T4040] 9pnet_fd: Insufficient options for proto=fd [ 41.730058][ T4049] siw: device registration error -23 [ 41.823366][ T4055] netlink: 32 bytes leftover after parsing attributes in process `syz.3.221'. [ 41.841192][ T3498] IPVS: starting estimator thread 0... [ 41.990513][ T4058] IPVS: using max 2832 ests per chain, 141600 per kthread [ 42.531076][ T4068] lo speed is unknown, defaulting to 1000 [ 42.597018][ T4068] tls_set_device_offload_rx: netdev not found [ 42.660238][ T4071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.226'. [ 42.699224][ T4073] loop0: detected capacity change from 0 to 512 [ 42.788723][ T4073] EXT4-fs: Ignoring removed bh option [ 42.827358][ T4073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.847173][ T4073] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.902763][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.940199][ T4088] siw: device registration error -23 [ 43.121965][ T4104] loop3: detected capacity change from 0 to 1024 [ 43.296088][ T4104] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.319222][ T4115] loop1: detected capacity change from 0 to 512 [ 43.330770][ T4104] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.238: Allocating blocks 449-513 which overlap fs metadata [ 43.346975][ T4115] EXT4-fs: Ignoring removed bh option [ 43.416582][ T4119] loop2: detected capacity change from 0 to 512 [ 43.424474][ T4119] EXT4-fs: Ignoring removed bh option [ 43.424977][ T4115] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.457812][ T4119] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.473794][ T4115] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.510623][ T4119] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.531966][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.552717][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.564270][ T4127] __nla_validate_parse: 5 callbacks suppressed [ 43.564283][ T4127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 43.584684][ T4130] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 43.588609][ T4127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 43.620709][ T4103] EXT4-fs (loop3): pa ffff8881072ae070: logic 48, phys. 177, len 21 [ 43.624075][ T4134] siw: device registration error -23 [ 43.628749][ T4103] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 43.644178][ T4127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.243'. [ 43.674180][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.695577][ T4139] netlink: 32 bytes leftover after parsing attributes in process `syz.2.249'. [ 43.723879][ T36] IPVS: starting estimator thread 0... [ 43.792770][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 43.801633][ T4152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 43.840430][ T4145] IPVS: using max 2736 ests per chain, 136800 per kthread [ 43.849963][ T4155] loop3: detected capacity change from 0 to 512 [ 43.851184][ T4159] loop4: detected capacity change from 0 to 512 [ 43.857074][ T4155] EXT4-fs: Ignoring removed bh option [ 43.871652][ T4159] EXT4-fs: Ignoring removed bh option [ 43.953081][ T4161] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 43.961276][ T4161] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 44.058200][ T4155] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.084414][ T4159] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.121195][ T4155] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.144723][ T4159] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.182286][ T4168] loop0: detected capacity change from 0 to 1024 [ 44.254896][ T4168] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.282845][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.292861][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.297943][ T4168] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.258: Allocating blocks 449-513 which overlap fs metadata [ 44.337087][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 44.384841][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 44.432421][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.259'. [ 44.701515][ T4167] EXT4-fs (loop0): pa ffff8881071db620: logic 48, phys. 177, len 21 [ 44.709596][ T4167] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 44.846318][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.883392][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 44.883404][ T29] audit: type=1400 audit(1761754504.433:230): avc: denied { validate_trans } for pid=4199 comm="syz.3.268" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 44.932148][ T4202] loop2: detected capacity change from 0 to 512 [ 44.964779][ T4204] siw: device registration error -23 [ 44.981739][ T4202] EXT4-fs: Ignoring removed bh option [ 45.003005][ T4202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.031623][ T4202] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.097515][ T29] audit: type=1400 audit(1761754504.643:231): avc: denied { create } for pid=4221 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.116766][ T29] audit: type=1400 audit(1761754504.643:232): avc: denied { ioctl } for pid=4221 comm="syz.3.276" path="socket:[7221]" dev="sockfs" ino=7221 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 45.148431][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.170351][ T29] audit: type=1326 audit(1761754504.713:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171880efc9 code=0x7ffc0000 [ 45.196163][ T29] audit: type=1326 audit(1761754504.723:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f171880efc9 code=0x7ffc0000 [ 45.196191][ T29] audit: type=1326 audit(1761754504.723:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171880efc9 code=0x7ffc0000 [ 45.196270][ T29] audit: type=1326 audit(1761754504.723:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171880efc9 code=0x7ffc0000 [ 45.196345][ T29] audit: type=1326 audit(1761754504.723:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171880efc9 code=0x7ffc0000 [ 45.196366][ T29] audit: type=1326 audit(1761754504.723:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f171880efc9 code=0x7ffc0000 [ 45.196398][ T29] audit: type=1326 audit(1761754504.723:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4221 comm="syz.3.276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f171880efc9 code=0x7ffc0000 [ 45.507053][ T4242] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 45.519605][ T4232] loop0: detected capacity change from 0 to 2048 [ 45.577641][ T4245] netlink: 'syz.1.285': attribute type 10 has an invalid length. [ 45.633314][ T4232] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.653516][ T4242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.705033][ T4242] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 45.775860][ T4245] batadv0: entered promiscuous mode [ 45.781256][ T4245] batadv0: entered allmulticast mode [ 45.823412][ T4245] bond0: (slave batadv0): Releasing backup interface [ 45.836293][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.867074][ T4245] bridge0: port 3(batadv0) entered blocking state [ 45.873585][ T4245] bridge0: port 3(batadv0) entered disabled state [ 45.976798][ T4266] loop1: detected capacity change from 0 to 512 [ 46.028639][ T4266] EXT4-fs: Ignoring removed bh option [ 46.120579][ T4266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.259614][ T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 46.269078][ T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 46.289992][ T4266] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.346821][ T4283] loop0: detected capacity change from 0 to 2048 [ 46.368173][ T4286] loop4: detected capacity change from 0 to 1024 [ 46.455230][ T4286] EXT4-fs: Ignoring removed nobh option [ 46.460846][ T4286] EXT4-fs: Ignoring removed bh option [ 46.510842][ T4283] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.519044][ T4286] ext4: Unknown parameter 'mask' [ 46.557076][ T4286] loop4: detected capacity change from 0 to 512 [ 46.567529][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.578769][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.589746][ T4286] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 46.605389][ T4286] EXT4-fs (loop4): mount failed [ 46.675861][ T4305] lo speed is unknown, defaulting to 1000 [ 46.732860][ T4310] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 46.741115][ T4310] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 47.322612][ T4324] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 47.330852][ T4324] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 47.677616][ T4334] loop4: detected capacity change from 0 to 1024 [ 47.678208][ T4334] EXT4-fs: Ignoring removed nobh option [ 47.689820][ T4334] EXT4-fs: Ignoring removed bh option [ 47.708831][ T4334] ext4: Unknown parameter 'mask' [ 47.723618][ T4334] loop4: detected capacity change from 0 to 512 [ 47.743586][ T4334] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 47.764733][ T4334] EXT4-fs (loop4): mount failed [ 47.836198][ T4346] loop4: detected capacity change from 0 to 1024 [ 47.869126][ T4346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.913025][ T4359] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 47.929700][ T4346] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.322: Allocating blocks 449-513 which overlap fs metadata [ 47.950547][ T4359] batadv0: left allmulticast mode [ 47.955653][ T4359] batadv0: left promiscuous mode [ 47.960684][ T4359] bridge0: port 3(batadv0) entered disabled state [ 47.970469][ T4359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.008416][ T4359] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 48.028360][ T4359] netlink: 'syz.1.328': attribute type 10 has an invalid length. [ 48.036261][ T4359] batadv0: entered promiscuous mode [ 48.041798][ T4359] batadv0: entered allmulticast mode [ 48.048501][ T4359] bond0: (slave batadv0): Releasing backup interface [ 48.060014][ T4359] bridge0: port 3(batadv0) entered blocking state [ 48.066619][ T4359] bridge0: port 3(batadv0) entered disabled state [ 48.087718][ T4368] loop3: detected capacity change from 0 to 1024 [ 48.094648][ T4368] EXT4-fs: Ignoring removed nobh option [ 48.100498][ T4368] EXT4-fs: dax option not supported [ 48.202180][ T4383] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 48.210450][ T4383] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 48.210754][ T4343] EXT4-fs (loop4): pa ffff8881071db690: logic 48, phys. 177, len 21 [ 48.226944][ T4343] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 48.248831][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.367694][ T4392] team1: entered promiscuous mode [ 48.372811][ T4392] team1: entered allmulticast mode [ 48.381038][ T4392] 8021q: adding VLAN 0 to HW filter on device team1 [ 48.571659][ T4408] __nla_validate_parse: 14 callbacks suppressed [ 48.571684][ T4408] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 48.598748][ T4401] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 48.607078][ T4401] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 48.632839][ T4415] loop3: detected capacity change from 0 to 1024 [ 48.671773][ T4415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.784455][ T4424] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 48.812674][ T4415] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.346: Allocating blocks 449-513 which overlap fs metadata [ 48.860671][ T4424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.874498][ T4424] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 48.884632][ T4424] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 48.892401][ T4424] netlink: 40 bytes leftover after parsing attributes in process `syz.0.349'. [ 48.901444][ T4424] batadv0: entered promiscuous mode [ 48.907004][ T4424] batadv0: entered allmulticast mode [ 48.920252][ T4424] bond0: (slave batadv0): Releasing backup interface [ 48.935583][ T4424] bridge0: port 3(batadv0) entered blocking state [ 48.942149][ T4424] bridge0: port 3(batadv0) entered disabled state [ 48.981381][ T4414] EXT4-fs (loop3): pa ffff8881071db700: logic 48, phys. 177, len 21 [ 48.989485][ T4414] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 49.031059][ T4442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.357'. [ 49.042268][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.175036][ T4459] No control pipe specified [ 49.189716][ T4461] netlink: 'syz.2.366': attribute type 10 has an invalid length. [ 49.198141][ T4461] batadv0: left allmulticast mode [ 49.203223][ T4461] batadv0: left promiscuous mode [ 49.208241][ T4461] bridge0: port 3(batadv0) entered disabled state [ 49.216806][ T4461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.225345][ T4461] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 49.235821][ T4461] netlink: 'syz.2.366': attribute type 10 has an invalid length. [ 49.243573][ T4461] netlink: 40 bytes leftover after parsing attributes in process `syz.2.366'. [ 49.259202][ T4461] batadv0: entered promiscuous mode [ 49.264454][ T4461] batadv0: entered allmulticast mode [ 49.279031][ T4461] bond0: (slave batadv0): Releasing backup interface [ 49.294905][ T4461] bridge0: port 3(batadv0) entered blocking state [ 49.301424][ T4461] bridge0: port 3(batadv0) entered disabled state [ 49.342083][ T4472] loop2: detected capacity change from 0 to 1024 [ 49.349053][ T4471] loop1: detected capacity change from 0 to 1024 [ 49.355574][ T1009] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 49.364795][ T1009] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 49.366734][ T4471] EXT4-fs: Ignoring removed orlov option [ 49.379893][ T4471] ext4: Unknown parameter 'dont_hash' [ 49.387930][ T4472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.401774][ T4465] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 49.409962][ T4465] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 49.442897][ T4472] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.370: Allocating blocks 449-513 which overlap fs metadata [ 49.452817][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 49.465448][ T4481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.372'. [ 49.551339][ T4488] loop1: detected capacity change from 0 to 512 [ 49.566685][ T4488] EXT4-fs: Ignoring removed bh option [ 49.583336][ T4488] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.600723][ T4488] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.642597][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.653463][ T4470] EXT4-fs (loop2): pa ffff8881072ae000: logic 48, phys. 177, len 21 [ 49.661539][ T4470] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 49.685790][ T4492] loop1: detected capacity change from 0 to 1024 [ 49.701938][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.702622][ T4492] EXT4-fs: Ignoring removed nobh option [ 49.716704][ T4492] EXT4-fs: Ignoring removed bh option [ 49.733510][ T4492] ext4: Unknown parameter 'mask' [ 49.768659][ T4492] loop1: detected capacity change from 0 to 512 [ 49.801705][ T4492] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 49.816807][ T4492] EXT4-fs (loop1): mount failed [ 49.880758][ T4508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.382'. [ 49.957238][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 50.002822][ T4516] team1: entered promiscuous mode [ 50.007890][ T4516] team1: entered allmulticast mode [ 50.018687][ T4516] 8021q: adding VLAN 0 to HW filter on device team1 [ 50.026222][ T4523] loop0: detected capacity change from 0 to 1024 [ 50.065909][ T4523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.217874][ T4523] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.389: Allocating blocks 449-513 which overlap fs metadata [ 50.341252][ T4550] No control pipe specified [ 50.443660][ T4552] loop3: detected capacity change from 0 to 1024 [ 50.451227][ T4552] EXT4-fs: Ignoring removed nobh option [ 50.459768][ T4552] EXT4-fs: dax option not supported [ 50.501164][ T4522] EXT4-fs (loop0): pa ffff8881071db770: logic 48, phys. 177, len 21 [ 50.509266][ T4522] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 50.531656][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.575996][ T4558] netlink: 872 bytes leftover after parsing attributes in process `syz.3.399'. [ 50.585113][ T4558] netlink: 872 bytes leftover after parsing attributes in process `syz.3.399'. [ 50.597008][ T29] kauditd_printk_skb: 174 callbacks suppressed [ 50.597020][ T29] audit: type=1326 audit(1761754510.143:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4603415e67 code=0x7ffc0000 [ 50.626777][ T29] audit: type=1326 audit(1761754510.143:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46033bb099 code=0x7ffc0000 [ 50.649971][ T29] audit: type=1326 audit(1761754510.143:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f460341efc9 code=0x7ffc0000 [ 50.673332][ T29] audit: type=1326 audit(1761754510.143:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4603415e67 code=0x7ffc0000 [ 50.696604][ T29] audit: type=1326 audit(1761754510.143:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46033bb099 code=0x7ffc0000 [ 50.719804][ T29] audit: type=1326 audit(1761754510.143:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4603415e67 code=0x7ffc0000 [ 50.742935][ T29] audit: type=1326 audit(1761754510.143:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46033bb099 code=0x7ffc0000 [ 50.766300][ T29] audit: type=1326 audit(1761754510.143:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4603415e67 code=0x7ffc0000 [ 50.789549][ T29] audit: type=1326 audit(1761754510.143:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f46033bb099 code=0x7ffc0000 [ 50.812763][ T29] audit: type=1326 audit(1761754510.143:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4555 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4603415e67 code=0x7ffc0000 [ 50.990655][ T31] af_packet: tpacket_rcv: packet too big, clamped from 52 to 4294967272. macoff=96 [ 51.938539][ T4642] loop0: detected capacity change from 0 to 128 [ 52.063933][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.063933][ T559] loop0: rw=1, sector=145, nr_sectors = 8 limit=128 [ 52.077372][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.077372][ T559] loop0: rw=1, sector=161, nr_sectors = 8 limit=128 [ 52.090834][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.090834][ T559] loop0: rw=1, sector=177, nr_sectors = 8 limit=128 [ 52.104271][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.104271][ T559] loop0: rw=1, sector=193, nr_sectors = 8 limit=128 [ 52.117749][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.117749][ T559] loop0: rw=1, sector=209, nr_sectors = 8 limit=128 [ 52.131751][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.131751][ T559] loop0: rw=1, sector=225, nr_sectors = 8 limit=128 [ 52.153017][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.153017][ T559] loop0: rw=1, sector=241, nr_sectors = 8 limit=128 [ 52.166514][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.166514][ T559] loop0: rw=1, sector=257, nr_sectors = 8 limit=128 [ 52.179879][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.179879][ T559] loop0: rw=1, sector=273, nr_sectors = 8 limit=128 [ 52.196042][ T559] kworker/u8:5: attempt to access beyond end of device [ 52.196042][ T559] loop0: rw=1, sector=289, nr_sectors = 8 limit=128 [ 52.215480][ T4647] team1: entered promiscuous mode [ 52.220577][ T4647] team1: entered allmulticast mode [ 52.231019][ T4647] 8021q: adding VLAN 0 to HW filter on device team1 [ 52.294930][ T4653] 9pnet_fd: Insufficient options for proto=fd [ 52.732644][ T4683] team2: entered promiscuous mode [ 52.737718][ T4683] team2: entered allmulticast mode [ 52.806358][ T4683] 8021q: adding VLAN 0 to HW filter on device team2 [ 53.091719][ T4702] 9pnet_fd: Insufficient options for proto=fd [ 53.601974][ T4726] loop0: detected capacity change from 0 to 1024 [ 53.616027][ T4726] EXT4-fs: Ignoring removed orlov option [ 53.622153][ T4726] ext4: Unknown parameter 'dont_hash' [ 53.760103][ T4740] 9pnet_fd: Insufficient options for proto=fd [ 53.770103][ T4741] loop2: detected capacity change from 0 to 512 [ 53.803973][ T4745] loop3: detected capacity change from 0 to 1024 [ 53.803997][ T3003] ================================================================== [ 53.805164][ T4745] EXT4-fs: Ignoring removed nobh option [ 53.810352][ T3003] BUG: KCSAN: data-race in block_uevent / inc_diskseq [ 53.818440][ T4745] EXT4-fs: Ignoring removed bh option [ 53.823916][ T3003] [ 53.823923][ T3003] write to 0xffff8881022daa18 of 8 bytes by task 4745 on cpu 1: [ 53.823944][ T3003] inc_diskseq+0x2d/0x40 [ 53.850164][ T3003] disk_force_media_change+0x9e/0xe0 [ 53.853952][ T4745] ext4: Unknown parameter 'mask' [ 53.855451][ T3003] loop_configure+0x6cb/0x9c0 [ 53.855478][ T3003] lo_ioctl+0x1e1/0x12b0 [ 53.855499][ T3003] blkdev_ioctl+0x356/0x440 [ 53.855514][ T3003] __se_sys_ioctl+0xce/0x140 [ 53.855530][ T3003] __x64_sys_ioctl+0x43/0x50 [ 53.860887][ T4741] EXT4-fs: Ignoring removed bh option [ 53.865094][ T3003] x64_sys_call+0x1816/0x3000 [ 53.865118][ T3003] do_syscall_64+0xd2/0x200 [ 53.897371][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.903260][ T3003] [ 53.905568][ T3003] read to 0xffff8881022daa18 of 8 bytes by task 3003 on cpu 0: [ 53.913099][ T3003] block_uevent+0x31/0x50 [ 53.917415][ T3003] dev_uevent+0x375/0x400 [ 53.921730][ T3003] uevent_show+0x11a/0x200 [ 53.926135][ T3003] dev_attr_show+0x3f/0xa0 [ 53.930537][ T3003] sysfs_kf_seq_show+0x1a3/0x280 [ 53.935457][ T3003] kernfs_seq_show+0x82/0xa0 [ 53.940026][ T3003] seq_read_iter+0x31e/0x950 [ 53.944594][ T3003] kernfs_fop_read_iter+0xc1/0x330 [ 53.949689][ T3003] vfs_read+0x64c/0x770 [ 53.953825][ T3003] ksys_read+0xda/0x1a0 [ 53.957965][ T3003] __x64_sys_read+0x40/0x50 [ 53.962449][ T3003] x64_sys_call+0x27c0/0x3000 [ 53.967109][ T3003] do_syscall_64+0xd2/0x200 [ 53.971588][ T3003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.977474][ T3003] [ 53.979774][ T3003] value changed: 0x0000000000000054 -> 0x000000000000005b [ 53.986857][ T3003] [ 53.989157][ T3003] Reported by Kernel Concurrency Sanitizer on: [ 53.995296][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 54.004581][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.014619][ T3003] ================================================================== [ 54.168136][ T4745] loop3: detected capacity change from 0 to 512 [ 54.365441][ T4745] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 54.382808][ T4741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.426437][ T4741] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.445531][ T4745] EXT4-fs (loop3): mount failed [ 54.564948][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.