last executing test programs: 33.410423838s ago: executing program 2 (id=177): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 33.343588489s ago: executing program 2 (id=179): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x7, 0x9) write$P9_RWRITE(r3, &(0x7f0000000040)={0xb, 0x77, 0x87}, 0x10c00) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 32.478496512s ago: executing program 2 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) chown(0x0, 0x0, 0x0) bind$rds(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed) 32.415950203s ago: executing program 2 (id=204): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$eJzs3c9vI1cdAPCvZ+PEyaZNWnoARNulLSxotU7ibaOqBygnhFAlRI9FSkPiRFHsOIqd0oQ9pGeuSFTiBEf+AM49IXHkguDGpRyQ+BGBGiQORjOeZL1Zu4k2iR3Fn480mvfmeef7fZud99YviV8AI+tORBxExHhEvB8RM/n1Qn7E250jfd1nhw9Xjg4frhSi3X73n4WsPb0WXX8mdTu/ZykifvjdiB8Xnozb3NvfXK7Vqjt5fa5V355r7u3f36gvr1fXq1uVyuLC4vybD96oXFpfX66P56UXP/3DwTd/mqY1nV/p7sdl6nS9eBInNRYR37+KYENwK+/P+LAT4akkEfF8RLySPf8zcSv7agIAN1m7PRPtme46AHDTJdkaWCEp52sB05Ek5XJnDe+FmEpqjWbr3lpjd2u1s1Y2G8VkbaNWnc/XCmejWEjrC1n5Ub1yqv4gIp6LiJ9PTGb18kqjtjrM//gAwAi7fWr+/89EZ/4/04tLA8gOALgypWEnAAAMnPkfAEaP+R8ARo/5HwBGT2f+nxx2GgDAAHn/DwCjx/wPACPlB++8kx7to/zzr1c/2NvdbHxwf7Xa3CzXd1fKK42d7fJ6o7GefWZP/az71RqN7YXXY/fD2W9tN1tzzb39pXpjd6u1lH2u91K1mL3qYAA9AwD6ee7lT/5cSGfktyazI7r2cigONTPgqiXDTgAYmlvDTgAYGrt9wei6wHt8ywNwQ/TYovcxpV6/INRut9tXlxJwxe5+yfo/jKqu9X8/BQwjxvo/jC7r/zC62u3Ceff8j/O+EAC43qzxA32+//98fv5N/s2BH62efsXHV5kVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXG/H+/+W873ApyNJyuWIZyJiNoqFtY1adT4ino2IP00UJ9L6wpBzBgAuKvlbId//6+7Ma9OPNb10+6Q4HhE/+eW7v/hwudXa+WPEeOFfE8fXWx/n1yuDzx4AONvxPJ2du97If3b4cOX4GGQ+f/9ORJQ68Y8Ox+PoJP5YjGXnUhQjYurfhbzeUehau7iIg48i4ou9+l+I6WwNpLPz6en4aexnBho/eSx+krV1zunfxRcuIRcYNZ+k48/bvZ6/JO5k597PfykboS4uH//SW60cZWPgo/jH49+tPuPfnfPGeP133+uUJp9s+yjiy2MRx7GPusaf4/iFPvFfO2f8v3zlpVf6tbV/FXE3esfvjjXXqm/PNff272/Ul9er69WtSmVxYXH+zQdvVObWNn5fnZ/rPxv84617z/ZrS/s/1Sd+6Yz+f+2c/f/1/95/76s9ro/l8b/xaq/4SbzwOfHTOfHr54y/PPXbUr+2NP5qn/6f9fW/d874n/51/4ltwwGA4Wnu7W8u12rVnYsX3stvmV2J5BLv/LSFUgwzusLlF9J/X9cgjZ6Fbw8q1nj0bvrZq50H8FRTu/1UsfqNGJex6gZcBycPfUT8d9jJAAAAAAAAAAAAAAAAPQ3iN5aG3UcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABurv8HAAD//5B9y08=") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x80100000400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47d8780820335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff000000e8f20000000200", "b73267f0fffffffff2ff00", [0x10000000000004]}) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511881, 0x96) 31.94581723s ago: executing program 2 (id=218): setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000001940)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, 0x0, 0x8842) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="020100030a0000000000000000000000020010000000000200000000000000000300050000000000020000009d1414000000000000000000030006000000000002000000ac14"], 0x50}}, 0x0) 31.378518999s ago: executing program 2 (id=235): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, r1, 0x391f}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1000"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 31.378212979s ago: executing program 32 (id=235): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, r1, 0x391f}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1000"], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 16.740855449s ago: executing program 3 (id=535): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x200000}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 16.672697169s ago: executing program 3 (id=537): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f00000000c0)={0xffffffd1, 0x2, 0x2, 0x831a, 0x1, "030000000000000000049dd0ffd76d7fcb0b0e", 0x6, 0x201}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x7f) 16.6683279s ago: executing program 3 (id=538): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) dup2(r0, r1) 16.62486137s ago: executing program 3 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891008, 0x0) 16.556538102s ago: executing program 3 (id=541): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) close(r0) 16.444858993s ago: executing program 3 (id=545): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 16.444696283s ago: executing program 33 (id=545): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 2.064567899s ago: executing program 1 (id=907): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 2.047434269s ago: executing program 1 (id=908): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2e, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8259, 0x400, 0x2, 0xf8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 1.179622362s ago: executing program 1 (id=928): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x81}, 0x106263, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x2a, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 1.179364422s ago: executing program 5 (id=929): unshare(0x42000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f0000000800)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000100)={'mangle\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x7]}, &(0x7f0000000040)=0x54) 877.159167ms ago: executing program 4 (id=938): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x0) 873.579037ms ago: executing program 4 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newtfilter={0xf0, 0x28, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flow={{0x9}, {0xb8, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8f}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0xdd96}, @TCA_FLOW_XOR={0x2, 0x7, 0x1}, @TCA_FLOW_EMATCHES={0x94, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x400}, {0x400, 0x2, 0x1, "8876"}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0xb}, {0x6, 0x2, 0x3, 0x0, 0x6}}}, @TCF_EM_CONTAINER={0xc, 0x3, 0x0, 0x0, {{0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x2, 0x3, 0x6}, {0x5, 0x8, 0x3, 0x2fba}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x800}}]}]}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x1}}]}, 0xf0}}, 0x0) 845.894377ms ago: executing program 0 (id=941): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) 845.309408ms ago: executing program 5 (id=942): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x0, 'lblcr\x00', 0x7, 0xfffffff8}, 0x2c) 814.006548ms ago: executing program 0 (id=943): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffb, 0x3, 0x8, 0x3, 0xfffffffd, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 773.803278ms ago: executing program 5 (id=944): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 773.438989ms ago: executing program 4 (id=945): unshare(0x68040200) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000008c0)={0x601993eb106a2e2e, 0x18, 0x11}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x268) 772.827689ms ago: executing program 0 (id=947): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r2 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 724.498669ms ago: executing program 6 (id=949): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r0}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 698.916459ms ago: executing program 6 (id=950): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 690.16517ms ago: executing program 5 (id=951): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001e00)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) unlinkat(r0, &(0x7f0000000080)='./bus/file0\x00', 0x200) 626.088111ms ago: executing program 6 (id=952): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70a0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e294aaf5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000a80)="d48c8225ddfdf23dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75200000000000000000000000000000000daf2eea77d37fde052788fed8f7db246f0be4929a5afc2222845e9008620c4535c6c2c96868c32b827ae4357bbccf7f99a1daa6d2e9ceca5ed14f752105d6499a3ea31ed4559fa7e44d418a8b0be76", 0xa2}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa8", 0xea}], 0x4}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="6a422a90b49aff66e6d57061f85cd63d581d6e27741be92c4a9081cd661ab03e82ca5e1169e5bf91b0dd79cde0d1789dffbea8280cf8c7439d10e62b2b84f99180da2c85fec394e95872", 0x4a}, {&(0x7f0000001980)="f2fe84e07da72d5be0eee26e6693cc950e7080ba2901a53b969dc13369b90492865a9fb8d25a00b9c2d8e52e23e3267d15c4aeea5918add6f28e302868e1d4500b073ac1a7c72c4e805ff1fce9c5e0273d0ea144b6999eb15d1fed8ddba6250af47fde6e4225f438528b6660d8b67812526721f6b755bb37ca116f51e2f239675ff38126c1d6816304f28e8a5fe57757f47708f267844018e27b4ad806ad910c7e6e8f58d26d097154539d34b5e5b044044d1d613c4658514b81c0e3b6bb8a489a45004e332ac5a9", 0xc8}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 625.799211ms ago: executing program 4 (id=953): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nolazytime}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 625.273331ms ago: executing program 6 (id=954): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) ioctl$TCSETSW2(r0, 0x5425, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(r3, &(0x7f0000001840)=""/4096, 0x1000, 0x1) 595.786711ms ago: executing program 0 (id=955): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xea, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r2, 0x0, 0x2000}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = epoll_create(0x3) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000006c0)={0xf6c447fee59251f4}) close_range(r0, 0xffffffffffffffff, 0x0) 570.499261ms ago: executing program 0 (id=956): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) 569.631072ms ago: executing program 5 (id=957): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 522.230822ms ago: executing program 0 (id=958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) syz_io_uring_setup(0xe46, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x4001, 0x2b7}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) 521.940522ms ago: executing program 5 (id=959): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 520.923262ms ago: executing program 4 (id=960): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) 428.974503ms ago: executing program 4 (id=961): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x39000, 0x0) r5 = memfd_create(&(0x7f0000000080), 0x0) splice(r3, 0x0, r5, 0x0, 0x408cd, 0x0) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) 280.181106ms ago: executing program 1 (id=962): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x9, 0x8, 0xfffffffffffffff5, 0x6, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) 70.779259ms ago: executing program 6 (id=963): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = epoll_create1(0x80000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r3, &(0x7f0000001980)=""/179, 0xb3) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000000)) 68.883789ms ago: executing program 1 (id=973): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r4 = dup2(r3, r2) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r4, &(0x7f0000008800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000008a40)=ANY=[], 0x10b0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f0000006140)="dc3d9f1fa8006c73d2aab62515573429b04a48e8e9429e8ec01f24fb0063600251bca0f0a3b0c05443d93ab05936b4ef8e90364f337b6283e9c6a1f3f2ba69122ad46635515220503a28061b488bb87e202c5a7911722f76caaa2723998ecc7524c5242fded742dca34f6ef83e5228f70a715a5221e9a5ee05f0e204158ec7a31a1a", 0x82}, {&(0x7f0000006200)="767d97d5615ccaa1869cfc67b66dc9c5baae07b0af9adc8c5dd3139c2b74bcaa9782e3c31a01d58f0e0670489bc1582296723402a15ad9073230f213bba40a3243c9fc2f26a88b54fe98c890704f1c8f7c963c3228136fc352486f0eff308f946eb53488d8496f0ca8978f14da5ef96c2c1d8335a8637371effcaa7365a1d0ff8d5f97b7649e85743731dfd3d8df3987437092dd281043bf", 0x98}, {&(0x7f00000062c0)="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", 0x4c3}], 0x3}}], 0x6, 0x20004095) 591.04µs ago: executing program 1 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) write$cgroup_type(r2, &(0x7f0000000100), 0x9) 0s ago: executing program 6 (id=965): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x2]}}) kernel console output (not intermixed with test programs): =process permissive=1 [ 16.595539][ T29] audit: type=1400 audit(1752763496.312:61): avc: denied { siginh } for pid=3181 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. [ 23.841011][ T29] audit: type=1400 audit(1752763503.572:62): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.841855][ T3292] cgroup: Unknown subsys name 'net' [ 23.863719][ T29] audit: type=1400 audit(1752763503.572:63): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.891065][ T29] audit: type=1400 audit(1752763503.602:64): avc: denied { unmount } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.039665][ T3292] cgroup: Unknown subsys name 'cpuset' [ 24.045706][ T3292] cgroup: Unknown subsys name 'rlimit' [ 24.154697][ T29] audit: type=1400 audit(1752763503.882:65): avc: denied { setattr } for pid=3292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.178144][ T29] audit: type=1400 audit(1752763503.882:66): avc: denied { create } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.198590][ T29] audit: type=1400 audit(1752763503.882:67): avc: denied { write } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.218929][ T29] audit: type=1400 audit(1752763503.882:68): avc: denied { read } for pid=3292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.239245][ T29] audit: type=1400 audit(1752763503.912:69): avc: denied { mounton } for pid=3292 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.245814][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.264092][ T29] audit: type=1400 audit(1752763503.912:70): avc: denied { mount } for pid=3292 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.296068][ T29] audit: type=1400 audit(1752763504.012:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.332556][ T3292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.409362][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.452084][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 25.506408][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 25.550704][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 25.559945][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.567057][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.574516][ T3305] bridge_slave_0: entered allmulticast mode [ 25.581014][ T3305] bridge_slave_0: entered promiscuous mode [ 25.587301][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 25.597692][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.604824][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.611951][ T3309] bridge_slave_0: entered allmulticast mode [ 25.618306][ T3309] bridge_slave_0: entered promiscuous mode [ 25.627279][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.634369][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.641515][ T3309] bridge_slave_1: entered allmulticast mode [ 25.647806][ T3309] bridge_slave_1: entered promiscuous mode [ 25.653971][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.661054][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.668171][ T3305] bridge_slave_1: entered allmulticast mode [ 25.674359][ T3305] bridge_slave_1: entered promiscuous mode [ 25.722321][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.734486][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.754683][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.764639][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.784193][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.791300][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.798467][ T3304] bridge_slave_0: entered allmulticast mode [ 25.804965][ T3304] bridge_slave_0: entered promiscuous mode [ 25.827195][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.834280][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.842362][ T3304] bridge_slave_1: entered allmulticast mode [ 25.848811][ T3304] bridge_slave_1: entered promiscuous mode [ 25.859990][ T3309] team0: Port device team_slave_0 added [ 25.866177][ T3305] team0: Port device team_slave_0 added [ 25.876228][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.883330][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.890573][ T3306] bridge_slave_0: entered allmulticast mode [ 25.896822][ T3306] bridge_slave_0: entered promiscuous mode [ 25.908547][ T3309] team0: Port device team_slave_1 added [ 25.920316][ T3305] team0: Port device team_slave_1 added [ 25.930740][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.937798][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.945055][ T3306] bridge_slave_1: entered allmulticast mode [ 25.951623][ T3306] bridge_slave_1: entered promiscuous mode [ 25.970693][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.977773][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.984980][ T3307] bridge_slave_0: entered allmulticast mode [ 25.991531][ T3307] bridge_slave_0: entered promiscuous mode [ 26.002464][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.016723][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.023717][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.049662][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.065222][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.072407][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.079600][ T3307] bridge_slave_1: entered allmulticast mode [ 26.085808][ T3307] bridge_slave_1: entered promiscuous mode [ 26.092667][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.102821][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.112159][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.119181][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.145209][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.156082][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.163104][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.189089][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.209709][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.221827][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.228776][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.254821][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.289416][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.299309][ T3304] team0: Port device team_slave_0 added [ 26.306101][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.321176][ T3306] team0: Port device team_slave_0 added [ 26.333105][ T3309] hsr_slave_0: entered promiscuous mode [ 26.339369][ T3309] hsr_slave_1: entered promiscuous mode [ 26.355101][ T3304] team0: Port device team_slave_1 added [ 26.361406][ T3306] team0: Port device team_slave_1 added [ 26.377157][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.384151][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.410100][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.421490][ T3307] team0: Port device team_slave_0 added [ 26.446428][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.453390][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.479379][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.493174][ T3307] team0: Port device team_slave_1 added [ 26.504306][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.511253][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.537228][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.568561][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.575593][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.601654][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.614368][ T3305] hsr_slave_0: entered promiscuous mode [ 26.620470][ T3305] hsr_slave_1: entered promiscuous mode [ 26.626388][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.633962][ T3305] Cannot create hsr debugfs directory [ 26.643830][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.650877][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.676989][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.698518][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.705495][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.731457][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.751405][ T3304] hsr_slave_0: entered promiscuous mode [ 26.757431][ T3304] hsr_slave_1: entered promiscuous mode [ 26.763386][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.771015][ T3304] Cannot create hsr debugfs directory [ 26.814041][ T3307] hsr_slave_0: entered promiscuous mode [ 26.820158][ T3307] hsr_slave_1: entered promiscuous mode [ 26.825877][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.833517][ T3307] Cannot create hsr debugfs directory [ 26.845015][ T3306] hsr_slave_0: entered promiscuous mode [ 26.851188][ T3306] hsr_slave_1: entered promiscuous mode [ 26.857022][ T3306] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.864604][ T3306] Cannot create hsr debugfs directory [ 27.003016][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.021253][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.038975][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.053727][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.070222][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.089438][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.098329][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.107354][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.132252][ T3305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.141121][ T3305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.150417][ T3305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.159454][ T3305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.193483][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.201979][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.211167][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.231410][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.254209][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.278184][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.292404][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.304983][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.312787][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.326631][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.335800][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.351120][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.358255][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.376157][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.386244][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.393372][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.402211][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.409290][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.426886][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.449240][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.456337][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.484423][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.492860][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.510853][ T1933] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.517891][ T1933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.530998][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.544298][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.551439][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.571925][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.579002][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.591678][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.598806][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.622211][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.643833][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.665955][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.678557][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.688962][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.701822][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.720826][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.727889][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.753140][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.760237][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.773955][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.788506][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.799133][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.937216][ T3306] veth0_vlan: entered promiscuous mode [ 27.945650][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.955678][ T3309] veth0_vlan: entered promiscuous mode [ 27.963307][ T3309] veth1_vlan: entered promiscuous mode [ 27.981004][ T3306] veth1_vlan: entered promiscuous mode [ 27.990111][ T3304] veth0_vlan: entered promiscuous mode [ 28.002432][ T3304] veth1_vlan: entered promiscuous mode [ 28.017365][ T3309] veth0_macvtap: entered promiscuous mode [ 28.032640][ T3309] veth1_macvtap: entered promiscuous mode [ 28.040807][ T3306] veth0_macvtap: entered promiscuous mode [ 28.047850][ T3306] veth1_macvtap: entered promiscuous mode [ 28.086027][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.096943][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.116781][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.127596][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.136413][ T3305] veth0_vlan: entered promiscuous mode [ 28.143846][ T3304] veth0_macvtap: entered promiscuous mode [ 28.151690][ T3306] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.160480][ T3306] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.169206][ T3306] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.177985][ T3306] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.190584][ T3305] veth1_vlan: entered promiscuous mode [ 28.203831][ T3304] veth1_macvtap: entered promiscuous mode [ 28.210631][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.219417][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.228103][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.236859][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.252890][ T3307] veth0_vlan: entered promiscuous mode [ 28.268976][ T3307] veth1_vlan: entered promiscuous mode [ 28.288721][ T3305] veth0_macvtap: entered promiscuous mode [ 28.296498][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.304605][ T3305] veth1_macvtap: entered promiscuous mode [ 28.313282][ T3306] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.320353][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.342472][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.358157][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.375803][ T3307] veth0_macvtap: entered promiscuous mode [ 28.404848][ T3305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.413731][ T3305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.422516][ T3305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.431457][ T3305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.471695][ T3481] SELinux: failed to load policy [ 28.481091][ T3304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.489840][ T3304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.498596][ T3304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.507338][ T3304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.527341][ T3307] veth1_macvtap: entered promiscuous mode [ 28.539451][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.554249][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.580312][ T3307] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.589077][ T3307] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.597786][ T3307] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.606722][ T3307] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.797586][ T3507] loop1: detected capacity change from 0 to 256 [ 28.818213][ T3507] FAT-fs (loop1): bogus number of FAT sectors [ 28.824365][ T3507] FAT-fs (loop1): Can't find a valid FAT filesystem [ 28.851581][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 28.851595][ T29] audit: type=1400 audit(1752763508.572:129): avc: denied { connect } for pid=3510 comm="syz.2.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.877228][ T29] audit: type=1400 audit(1752763508.572:130): avc: denied { write } for pid=3510 comm="syz.2.17" path="socket:[4372]" dev="sockfs" ino=4372 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.921122][ T29] audit: type=1400 audit(1752763508.652:131): avc: denied { create } for pid=3516 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.942869][ T3519] loop2: detected capacity change from 0 to 128 [ 28.966933][ T29] audit: type=1400 audit(1752763508.692:132): avc: denied { bind } for pid=3516 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.986136][ T29] audit: type=1400 audit(1752763508.692:133): avc: denied { setopt } for pid=3516 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.005449][ T29] audit: type=1400 audit(1752763508.692:134): avc: denied { write } for pid=3516 comm="syz.0.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 29.035765][ T3519] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.066815][ T3519] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.086279][ T29] audit: type=1400 audit(1752763508.792:135): avc: denied { mount } for pid=3518 comm="syz.2.20" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.107836][ T29] audit: type=1400 audit(1752763508.812:136): avc: denied { bind } for pid=3531 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 29.126952][ T29] audit: type=1400 audit(1752763508.812:137): avc: denied { name_bind } for pid=3531 comm="syz.0.24" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 29.148537][ T29] audit: type=1400 audit(1752763508.812:138): avc: denied { node_bind } for pid=3531 comm="syz.0.24" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 29.230115][ T3536] netlink: 256 bytes leftover after parsing attributes in process `syz.4.27'. [ 29.239016][ T3536] netlink: 72 bytes leftover after parsing attributes in process `syz.4.27'. [ 29.259127][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.413663][ T3553] loop2: detected capacity change from 0 to 512 [ 29.431783][ T3553] EXT4-fs: Ignoring removed nobh option [ 29.460438][ T3557] loop4: detected capacity change from 0 to 128 [ 29.467077][ T3553] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.486294][ T3533] syz.0.25 (3533) used greatest stack depth: 10672 bytes left [ 29.500499][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.30: corrupted inode contents [ 29.514610][ T3553] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #3: comm syz.2.30: mark_inode_dirty error [ 29.528917][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #3: comm syz.2.30: corrupted inode contents [ 29.546254][ T3553] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #3: comm syz.2.30: mark_inode_dirty error [ 29.578004][ T3553] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.30: Failed to acquire dquot type 0 [ 29.592911][ T3563] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 29.609481][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.30: corrupted inode contents [ 29.643778][ T3567] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3567 comm=syz.4.34 [ 29.668405][ T3553] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #16: comm syz.2.30: mark_inode_dirty error [ 29.727038][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.30: corrupted inode contents [ 29.757530][ T3553] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #16: comm syz.2.30: mark_inode_dirty error [ 29.771059][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.30: corrupted inode contents [ 29.783429][ T3553] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 29.798059][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #16: comm syz.2.30: corrupted inode contents [ 29.823615][ T3578] loop1: detected capacity change from 0 to 512 [ 29.831699][ T3553] EXT4-fs error (device loop2): ext4_truncate:4597: inode #16: comm syz.2.30: mark_inode_dirty error [ 29.839605][ T3578] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 29.864581][ T3577] loop4: detected capacity change from 0 to 8192 [ 29.872384][ T3577] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 29.876927][ T3553] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 29.893387][ T3578] EXT4-fs (loop1): failed to initialize system zone (-117) [ 29.901019][ T3578] EXT4-fs (loop1): mount failed [ 29.910467][ T3553] EXT4-fs (loop2): 1 truncate cleaned up [ 29.919559][ T3553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.958277][ T3553] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.971284][ T3553] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.041103][ T3553] syz.2.30 (3553) used greatest stack depth: 9768 bytes left [ 30.870099][ C1] hrtimer: interrupt took 27090 ns [ 30.921753][ T3617] syz.0.53 uses obsolete (PF_INET,SOCK_PACKET) [ 31.022904][ T3619] bridge_slave_1: left allmulticast mode [ 31.028580][ T3619] bridge_slave_1: left promiscuous mode [ 31.034382][ T3619] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.042450][ T3619] bridge_slave_0: left allmulticast mode [ 31.048154][ T3619] bridge_slave_0: left promiscuous mode [ 31.053821][ T3619] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.082661][ T3623] syz.4.56 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 31.176821][ T3627] Zero length message leads to an empty skb [ 31.372565][ T3637] loop4: detected capacity change from 0 to 512 [ 31.385589][ T3637] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 31.420877][ T3637] EXT4-fs (loop4): 1 truncate cleaned up [ 31.430188][ T3637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.458731][ T3637] mmap: syz.4.63 (3637) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.983050][ T3707] loop1: detected capacity change from 0 to 1024 [ 32.008968][ T3707] ======================================================= [ 32.008968][ T3707] WARNING: The mand mount option has been deprecated and [ 32.008968][ T3707] and is ignored by this kernel. Remove the mand [ 32.008968][ T3707] option from the mount to silence this warning. [ 32.008968][ T3707] ======================================================= [ 32.064855][ T3707] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.088877][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.139010][ T3707] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.322444][ T3731] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.69: bg 0: block 393: padding at end of block bitmap is not set [ 32.363733][ T3731] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 32.454140][ T3744] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 32.472325][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.495486][ T3747] bridge_slave_1: left allmulticast mode [ 32.501229][ T3747] bridge_slave_1: left promiscuous mode [ 32.506875][ T3747] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.557076][ T3747] bridge_slave_0: left allmulticast mode [ 32.562944][ T3747] bridge_slave_0: left promiscuous mode [ 32.568719][ T3747] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.733340][ T3761] loop0: detected capacity change from 0 to 128 [ 32.753236][ T3766] loop4: detected capacity change from 0 to 512 [ 32.763424][ T3761] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.780796][ T3761] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.791569][ T3766] EXT4-fs (loop4): orphan cleanup on readonly fs [ 32.813971][ T3766] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.90: bad orphan inode 13 [ 32.863727][ T3766] ext4_test_bit(bit=12, block=18) = 1 [ 32.869196][ T3766] is_bad_inode(inode)=0 [ 32.873352][ T3766] NEXT_ORPHAN(inode)=2130706432 [ 32.878278][ T3766] max_ino=32 [ 32.881686][ T3766] i_nlink=1 [ 32.917481][ T3766] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.956979][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.991799][ T3304] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 33.118203][ T3783] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 33.150799][ T3783] netlink: 'syz.0.94': attribute type 4 has an invalid length. [ 33.270126][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 33.278919][ T3801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.99'. [ 33.663604][ T3797] netlink: 92 bytes leftover after parsing attributes in process `syz.3.101'. [ 33.867306][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 33.867320][ T29] audit: type=1400 audit(1752763513.592:246): avc: denied { getopt } for pid=3825 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.907056][ T29] audit: type=1400 audit(1752763513.632:247): avc: denied { firmware_load } for pid=3825 comm="syz.4.113" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 33.994282][ T29] audit: type=1400 audit(1752763513.692:248): avc: denied { mount } for pid=3822 comm="syz.2.112" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 34.016597][ T29] audit: type=1400 audit(1752763513.692:249): avc: denied { mounton } for pid=3822 comm="syz.2.112" path="/20/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 34.038693][ T29] audit: type=1400 audit(1752763513.692:250): avc: denied { unmount } for pid=3822 comm="syz.2.112" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.058287][ T29] audit: type=1400 audit(1752763513.702:251): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 34.125288][ T3827] netlink: 'syz.1.111': attribute type 7 has an invalid length. [ 34.133101][ T3827] netlink: 32 bytes leftover after parsing attributes in process `syz.1.111'. [ 34.329911][ T29] audit: type=1400 audit(1752763514.062:252): avc: denied { bind } for pid=3850 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.369568][ T29] audit: type=1400 audit(1752763514.092:253): avc: denied { setopt } for pid=3850 comm="syz.1.123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.389906][ T29] audit: type=1400 audit(1752763514.092:254): avc: denied { ioctl } for pid=3850 comm="syz.1.123" path="socket:[5576]" dev="sockfs" ino=5576 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.430634][ T29] audit: type=1326 audit(1752763514.152:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3852 comm="syz.1.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 34.484695][ T3857] loop1: detected capacity change from 0 to 512 [ 34.492194][ T3857] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.513116][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.528469][ T3857] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.580383][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.600512][ T3861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 35.066451][ T3884] bridge: RTM_NEWNEIGH with invalid ether address [ 35.206155][ T3895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.142'. [ 35.295524][ T3907] netlink: 14 bytes leftover after parsing attributes in process `syz.0.148'. [ 35.308963][ T3907] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.323975][ T3910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.149'. [ 35.333202][ T3907] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.342952][ T3907] bond0 (unregistering): Released all slaves [ 35.355730][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.149'. [ 35.444202][ T3917] loop0: detected capacity change from 0 to 512 [ 35.453578][ T3917] EXT4-fs: Ignoring removed orlov option [ 35.460277][ T3917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.468844][ T3917] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 35.579582][ T3930] netlink: 'syz.0.157': attribute type 12 has an invalid length. [ 35.605325][ T3932] serio: Serial port ptm0 [ 35.664222][ T3935] loop4: detected capacity change from 0 to 8192 [ 36.006972][ T3965] capability: warning: `syz.4.171' uses deprecated v2 capabilities in a way that may be insecure [ 36.017654][ T3963] loop0: detected capacity change from 0 to 1024 [ 36.024845][ T3963] EXT4-fs: Ignoring removed orlov option [ 36.041761][ T3963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.067636][ T3972] loop4: detected capacity change from 0 to 1024 [ 36.094500][ T3972] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.144443][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.171748][ T3972] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.173: Allocating blocks 385-513 which overlap fs metadata [ 36.188450][ T3972] EXT4-fs (loop4): pa ffff8881004af5b0: logic 16, phys. 129, len 24 [ 36.196573][ T3972] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 36.227844][ T3979] loop3: detected capacity change from 0 to 8192 [ 36.247643][ T3987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 36.316141][ T3992] loop3: detected capacity change from 0 to 512 [ 36.320663][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.358644][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.392357][ T3992] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.431437][ T3992] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.181: corrupted inode contents [ 36.441290][ T4002] SELinux: failed to load policy [ 36.449091][ T3990] netlink: 'syz.0.180': attribute type 2 has an invalid length. [ 36.480402][ T3992] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.181: mark_inode_dirty error [ 36.514588][ T3992] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.181: corrupted inode contents [ 36.546828][ T4007] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.181: corrupted inode contents [ 36.566256][ T4007] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.181: mark_inode_dirty error [ 36.587574][ T4007] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.181: corrupted inode contents [ 36.601463][ T4007] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.181: mark_inode_dirty error [ 36.612990][ T4007] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.181: corrupted inode contents [ 36.625779][ T4007] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.181: mark_inode_dirty error [ 36.703962][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.810036][ T4017] loop3: detected capacity change from 0 to 512 [ 36.827128][ T4017] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.853928][ T4025] loop0: detected capacity change from 0 to 128 [ 36.866956][ T4017] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 36.876468][ T4017] System zones: 0-2, 18-18, 34-34 [ 36.896709][ T4017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.906311][ T4025] syz.0.193: attempt to access beyond end of device [ 36.906311][ T4025] loop0: rw=0, sector=121, nr_sectors = 920 limit=128 [ 36.928900][ T4017] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.006555][ T4036] SELinux: failed to load policy [ 37.008422][ T4017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.190'. [ 37.035737][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.138860][ T4047] loop3: detected capacity change from 0 to 1024 [ 37.151402][ T4052] loop2: detected capacity change from 0 to 512 [ 37.167764][ T4047] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.175480][ T4052] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 37.220099][ T4052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.234430][ T4047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.247175][ T4052] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.321558][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.369313][ T4052] loop2: detected capacity change from 512 to 0 [ 37.376553][ T4052] syz.2.204: attempt to access beyond end of device [ 37.376553][ T4052] loop2: rw=12288, sector=72, nr_sectors = 4 limit=0 [ 37.402460][ T4052] EXT4-fs error (device loop2): ext4_read_inode_bitmap:203: comm syz.2.204: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 37.422340][ T4077] dummy0: entered allmulticast mode [ 37.428117][ T4077] dummy0: left allmulticast mode [ 37.437947][ T4052] syz.2.204: attempt to access beyond end of device [ 37.437947][ T4052] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 37.451852][ T4052] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 37.476285][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.484326][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.505187][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.513382][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.521040][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.528656][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.536206][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.539865][ T4052] EXT4-fs (loop2): I/O error while writing superblock [ 37.543643][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.558383][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.565804][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.569780][ T4091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 37.573256][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.585824][ T3309] syz-executor: attempt to access beyond end of device [ 37.585824][ T3309] loop2: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 37.590018][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.621261][ T4091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.216'. [ 37.647649][ T3688] kworker/u8:51: attempt to access beyond end of device [ 37.647649][ T3688] loop2: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 37.671590][ T3688] kworker/u8:51: attempt to access beyond end of device [ 37.671590][ T3688] loop2: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 37.705678][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.713198][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.720634][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.727903][ T3688] kworker/u8:51: attempt to access beyond end of device [ 37.727903][ T3688] loop2: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 37.728154][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.749675][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.757109][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.764560][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.764954][ T3688] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4915: inode #18: block 35: comm kworker/u8:51: unable to read itable block [ 37.772605][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.793373][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.801573][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.809157][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.816652][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.824096][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.832106][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.839549][ T3380] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 37.844420][ T3688] kworker/u8:51: attempt to access beyond end of device [ 37.844420][ T3688] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 37.860697][ T3688] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 37.873590][ T3688] EXT4-fs (loop2): I/O error while writing superblock [ 37.881272][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.897497][ T3380] hid-generic 0003:0000:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 37.902248][ T3309] syz-executor: attempt to access beyond end of device [ 37.902248][ T3309] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 37.919998][ T3309] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 37.931889][ T3309] EXT4-fs (loop2): I/O error while writing superblock [ 37.943187][ T4059] kmmpd-loop2: attempt to access beyond end of device [ 37.943187][ T4059] loop2: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 37.956568][ T4059] Buffer I/O error on dev loop2, logical block 12, lost sync page write [ 38.011338][ T4103] fido_id[4103]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.187671][ T3713] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.240734][ T3713] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.313673][ T3713] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.460583][ T3713] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.962100][ T29] kauditd_printk_skb: 184 callbacks suppressed [ 38.962113][ T29] audit: type=1400 audit(1752763518.692:440): avc: denied { read open } for pid=4178 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 38.983925][ T4138] Set syz1 is full, maxelem 65536 reached [ 38.996638][ T4132] chnl_net:caif_netlink_parms(): no params data found [ 39.036071][ T29] audit: type=1400 audit(1752763518.742:441): avc: denied { getattr } for pid=4178 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.074486][ T29] audit: type=1400 audit(1752763518.802:442): avc: denied { add_name } for pid=4176 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.097650][ T29] audit: type=1400 audit(1752763518.802:443): avc: denied { create } for pid=4176 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.120776][ T29] audit: type=1400 audit(1752763518.832:444): avc: denied { write } for pid=4176 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.146826][ T29] audit: type=1400 audit(1752763518.832:445): avc: denied { append } for pid=4176 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.189901][ T29] audit: type=1400 audit(1752763518.922:446): avc: denied { remove_name } for pid=4188 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.213979][ T29] audit: type=1400 audit(1752763518.922:447): avc: denied { unlink } for pid=4188 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1830 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.310477][ T3713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.331366][ T3713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.343705][ T3713] bond0 (unregistering): Released all slaves [ 39.406248][ T4192] netlink: 'syz.3.252': attribute type 3 has an invalid length. [ 39.424144][ T4192] netlink: 'syz.3.252': attribute type 3 has an invalid length. [ 39.437243][ T3713] hsr_slave_0: left promiscuous mode [ 39.444439][ T3713] hsr_slave_1: left promiscuous mode [ 39.450972][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.458460][ T3713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.469601][ T3713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.477073][ T3713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.497309][ T29] audit: type=1400 audit(1752763519.222:448): avc: denied { create } for pid=4212 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 39.517345][ T29] audit: type=1400 audit(1752763519.222:449): avc: denied { write } for pid=4212 comm="syz.1.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 39.547410][ T3713] veth1_macvtap: left promiscuous mode [ 39.557001][ T3713] veth0_macvtap: left promiscuous mode [ 39.572892][ T3713] veth1_vlan: left promiscuous mode [ 39.596281][ T3713] veth0_vlan: left promiscuous mode [ 39.697123][ T3713] team0 (unregistering): Port device team_slave_1 removed [ 39.711825][ T3713] team0 (unregistering): Port device team_slave_0 removed [ 39.777865][ T4222] pimreg: entered allmulticast mode [ 39.799268][ T4224] pimreg: left allmulticast mode [ 39.834429][ T4132] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.842267][ T4132] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.860365][ T4132] bridge_slave_0: entered allmulticast mode [ 39.868160][ T4132] bridge_slave_0: entered promiscuous mode [ 39.875578][ T4132] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.882709][ T4132] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.889985][ T4132] bridge_slave_1: entered allmulticast mode [ 39.896371][ T4132] bridge_slave_1: entered promiscuous mode [ 39.943288][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 39.956309][ T4231] loop0: detected capacity change from 0 to 512 [ 39.974618][ T4132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.990820][ T4238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'. [ 40.010071][ T4132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.041440][ T4231] EXT4-fs (loop0): too many log groups per flexible block group [ 40.049852][ T4231] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 40.074360][ T4231] EXT4-fs (loop0): mount failed [ 40.093844][ T4132] team0: Port device team_slave_0 added [ 40.105878][ T4132] team0: Port device team_slave_1 added [ 40.128598][ T4258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 40.137651][ T4258] netlink: 28 bytes leftover after parsing attributes in process `syz.4.268'. [ 40.159512][ T4132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.166478][ T4132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.192426][ T4132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.205529][ T4132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.212715][ T4132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.239329][ T4132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.265322][ T4267] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 40.302612][ T4132] hsr_slave_0: entered promiscuous mode [ 40.308837][ T4132] hsr_slave_1: entered promiscuous mode [ 40.341134][ T4269] loop0: detected capacity change from 0 to 8192 [ 40.441697][ T4276] netlink: 'syz.1.271': attribute type 10 has an invalid length. [ 40.473476][ T4276] syz_tun: entered promiscuous mode [ 40.490473][ T4276] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 40.530831][ T4132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 40.570508][ T4132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 40.578183][ T4287] loop3: detected capacity change from 0 to 8192 [ 40.590923][ T4132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 40.609644][ T4287] SELinux: security_context_str_to_sid (poot) failed with errno=-22 [ 40.628692][ T4132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 40.766485][ T4132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.770182][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810a93be00: rx timeout, send abort [ 40.783199][ T4269] ./file0: Can't lookup blockdev [ 40.822567][ T4132] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.849261][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.856350][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.872224][ T4333] loop1: detected capacity change from 0 to 128 [ 40.886868][ T4333] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.910945][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.918047][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.973571][ T4335] loop4: detected capacity change from 0 to 4096 [ 40.999935][ T4132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 41.010418][ T4132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 41.036485][ T4335] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.061351][ T4345] syzkaller0: entered promiscuous mode [ 41.066856][ T4345] syzkaller0: entered allmulticast mode [ 41.191082][ T4132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.281387][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810a93be00: abort rx timeout. Force session deactivation [ 41.423597][ T4132] veth0_vlan: entered promiscuous mode [ 41.433276][ T4132] veth1_vlan: entered promiscuous mode [ 41.463324][ T4132] veth0_macvtap: entered promiscuous mode [ 41.486533][ T4132] veth1_macvtap: entered promiscuous mode [ 41.522631][ T4132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.566325][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.577120][ T4132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.600524][ T4132] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.609301][ T4132] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.618047][ T4132] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.626845][ T4132] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.723700][ T4403] netlink: 8 bytes leftover after parsing attributes in process `syz.5.236'. [ 42.008073][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 42.136474][ T4430] loop1: detected capacity change from 0 to 512 [ 42.165656][ T4428] netlink: 8 bytes leftover after parsing attributes in process `syz.5.303'. [ 42.238637][ T4430] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.315779][ T4430] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.341769][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.307'. [ 42.522645][ T4416] netlink: 87 bytes leftover after parsing attributes in process `syz.4.299'. [ 42.751724][ T4445] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.304: corrupted inode contents [ 42.764701][ T4445] EXT4-fs error (device loop1): ext4_dirty_inode:6459: inode #19: comm syz.1.304: mark_inode_dirty error [ 42.776601][ T4445] EXT4-fs error (device loop1): ext4_do_update_inode:5568: inode #19: comm syz.1.304: corrupted inode contents [ 42.824107][ T4445] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2991: inode #19: comm syz.1.304: mark_inode_dirty error [ 42.846051][ T4445] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2994: inode #19: comm syz.1.304: mark inode dirty (error -117) [ 42.861416][ T4445] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -117) [ 42.883998][ T4468] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4468 comm=syz.4.312 [ 42.949535][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.035438][ T4479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.072597][ T4479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.105444][ T4486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.317'. [ 43.125859][ T4479] loop1: detected capacity change from 0 to 1024 [ 43.146986][ T4479] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.157153][ T4432] syz.3.305 (4432) used greatest stack depth: 9384 bytes left [ 43.177190][ T4479] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 43.216312][ T4479] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 43.233995][ T4479] EXT4-fs (loop1): orphan cleanup on readonly fs [ 43.248226][ T4479] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.314: Freeing blocks not in datazone - block = 0, count = 4096 [ 43.267215][ T4479] EXT4-fs (loop1): 1 orphan inode deleted [ 43.276457][ T4479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.408442][ T4505] loop4: detected capacity change from 0 to 512 [ 43.451441][ T4507] macvlan2: entered promiscuous mode [ 43.456852][ T4507] macvlan2: entered allmulticast mode [ 43.469708][ T4505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.472572][ T4507] team0: Device macvlan2 is already an upper device of the team interface [ 43.491414][ T4505] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.565862][ T4520] loop0: detected capacity change from 0 to 1024 [ 43.580804][ T4520] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 43.591759][ T4520] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 43.614369][ T4520] JBD2: no valid journal superblock found [ 43.620258][ T4520] EXT4-fs (loop0): Could not load journal inode [ 43.662206][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.838731][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.019263][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 44.019280][ T29] audit: type=1326 audit(1752763523.732:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.048986][ T29] audit: type=1326 audit(1752763523.732:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.072269][ T29] audit: type=1326 audit(1752763523.732:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.095626][ T29] audit: type=1326 audit(1752763523.732:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.119132][ T29] audit: type=1326 audit(1752763523.732:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.142563][ T29] audit: type=1326 audit(1752763523.732:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.165928][ T29] audit: type=1326 audit(1752763523.732:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.189244][ T29] audit: type=1326 audit(1752763523.732:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.212747][ T29] audit: type=1326 audit(1752763523.732:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.235991][ T29] audit: type=1326 audit(1752763523.732:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4567 comm="syz.1.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb054ae929 code=0x7ffc0000 [ 44.302449][ T4577] loop1: detected capacity change from 0 to 128 [ 44.328115][ T4577] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.345898][ T4577] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.393572][ T3307] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.710026][ T4628] program syz.4.344 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.197535][ T4698] __nla_validate_parse: 6 callbacks suppressed [ 45.197622][ T4698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'. [ 45.264482][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.299584][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.823841][ T4663] syz.3.349 (4663) used greatest stack depth: 8936 bytes left [ 46.315615][ T4654] syz.3.349 (4654) used greatest stack depth: 6824 bytes left [ 46.398332][ T4804] loop5: detected capacity change from 0 to 764 [ 46.501942][ T4814] loop5: detected capacity change from 0 to 8192 [ 46.510055][ T4814] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 46.661736][ T4826] netlink: 72 bytes leftover after parsing attributes in process `syz.3.385'. [ 46.710734][ T4834] process 'syz.5.387' launched '/dev/fd/3' with NULL argv: empty string added [ 46.724246][ T4831] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 46.821890][ T4843] netlink: 'syz.3.392': attribute type 13 has an invalid length. [ 46.918561][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.930608][ T4843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.973148][ T4843] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.982232][ T4843] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.992068][ T4843] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.001089][ T4843] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.116579][ T4849] loop5: detected capacity change from 0 to 8192 [ 47.237585][ T4864] netlink: 16 bytes leftover after parsing attributes in process `syz.4.401'. [ 47.260315][ T4864] netlink: 'syz.4.401': attribute type 10 has an invalid length. [ 47.277867][ T4864] team0 (unregistering): Port device team_slave_0 removed [ 47.287067][ T4864] team0 (unregistering): Port device team_slave_1 removed [ 47.338517][ T4867] syzkaller0: entered promiscuous mode [ 47.344144][ T4867] syzkaller0: entered allmulticast mode [ 47.380770][ T4872] loop3: detected capacity change from 0 to 512 [ 47.394598][ T4872] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.422223][ T4872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.430002][ T4879] loop5: detected capacity change from 0 to 1764 [ 47.439269][ T4872] ext4 filesystem being mounted at /73/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.458766][ T4872] netlink: 'syz.3.404': attribute type 27 has an invalid length. [ 47.484121][ T4872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.491859][ T4872] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.501519][ T4872] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.542547][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.634210][ T4890] Driver unsupported XDP return value 0 on prog (id 304) dev N/A, expect packet loss! [ 47.988928][ T4909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 48.628037][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.5.431'. [ 48.657023][ T4942] netlink: 12 bytes leftover after parsing attributes in process `syz.5.431'. [ 48.708634][ T4942] netlink: 2 bytes leftover after parsing attributes in process `syz.5.431'. [ 48.718872][ T4931] loop1: detected capacity change from 0 to 32768 [ 48.730554][ T4944] tipc: Started in network mode [ 48.735507][ T4944] tipc: Node identity 7a214476902a, cluster identity 4711 [ 48.742755][ T4944] tipc: Enabled bearer , priority 0 [ 48.784611][ T4944] tipc: Disabling bearer [ 49.021530][ T4964] tipc: Failed to remove unknown binding: 66,1,1/0:247745249/247745251 [ 49.042815][ T4964] tipc: Failed to remove unknown binding: 66,1,1/0:247745249/247745251 [ 49.051145][ T4964] tipc: Failed to remove unknown binding: 66,1,1/0:247745249/247745251 [ 49.406106][ T4973] loop5: detected capacity change from 0 to 1024 [ 49.544798][ T4984] ip6gre1: entered allmulticast mode [ 49.550922][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 49.550933][ T29] audit: type=1400 audit(1752763529.272:962): avc: denied { compute_member } for pid=4979 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 49.678382][ T4991] tipc: Started in network mode [ 49.683365][ T4991] tipc: Node identity 52c963d27f6, cluster identity 4711 [ 49.691157][ T4991] tipc: Enabled bearer , priority 0 [ 49.771662][ T4991] tipc: Disabling bearer [ 49.898066][ T29] audit: type=1400 audit(1752763529.622:963): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.957209][ T29] audit: type=1400 audit(1752763529.682:964): avc: denied { write } for pid=5010 comm="syz.3.457" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 50.008143][ T5013] loop5: detected capacity change from 0 to 512 [ 50.024555][ T5015] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 50.055302][ T29] audit: type=1400 audit(1752763529.782:965): avc: denied { bind } for pid=5019 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.074642][ T29] audit: type=1400 audit(1752763529.782:966): avc: denied { listen } for pid=5019 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.094120][ T29] audit: type=1400 audit(1752763529.782:967): avc: denied { write } for pid=5019 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.116762][ T5021] netlink: 'syz.0.461': attribute type 39 has an invalid length. [ 50.125810][ T29] audit: type=1400 audit(1752763529.782:968): avc: denied { accept } for pid=5019 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.145306][ T29] audit: type=1400 audit(1752763529.782:969): avc: denied { read } for pid=5019 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 50.175217][ T5013] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.214079][ T5013] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.291835][ T5029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.323526][ T29] audit: type=1400 audit(1752763530.052:970): avc: denied { ioctl } for pid=5028 comm="syz.4.463" path="socket:[9375]" dev="sockfs" ino=9375 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.359410][ T4132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.369934][ T5033] netlink: 'syz.0.467': attribute type 7 has an invalid length. [ 50.377653][ T5033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.467'. [ 50.482352][ T5041] loop5: detected capacity change from 0 to 4096 [ 50.516852][ T5041] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.537585][ T5044] loop1: detected capacity change from 0 to 512 [ 50.584906][ T5041] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.605345][ T5044] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c11d, mo2=0002] [ 50.619493][ T5044] System zones: 1-12 [ 50.627684][ T5044] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.468: corrupted in-inode xattr: e_value size too large [ 50.648797][ T29] audit: type=1400 audit(1752763530.352:971): avc: denied { read write } for pid=5036 comm="syz.5.466" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 50.676141][ T5044] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.468: couldn't read orphan inode 15 (err -117) [ 50.689952][ T5044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.715624][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.468'. [ 50.725388][ T5044] veth1_macvtap: left promiscuous mode [ 50.828986][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.964430][ T5075] netlink: 1276 bytes leftover after parsing attributes in process `syz.5.478'. [ 51.052151][ T5081] loop3: detected capacity change from 0 to 1024 [ 51.060331][ T5081] EXT4-fs: inline encryption not supported [ 51.066388][ T5081] EXT4-fs: Ignoring removed bh option [ 51.101144][ T5081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.229211][ T5102] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 51.275135][ T5107] loop1: detected capacity change from 0 to 128 [ 51.493891][ T5123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'. [ 51.607743][ T5129] lo speed is unknown, defaulting to 1000 [ 51.615132][ T5129] lo speed is unknown, defaulting to 1000 [ 51.641639][ T5129] lo speed is unknown, defaulting to 1000 [ 51.648546][ T5129] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 51.658004][ T5129] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 51.673826][ T5129] lo speed is unknown, defaulting to 1000 [ 51.682941][ T5129] lo speed is unknown, defaulting to 1000 [ 51.689191][ T5129] lo speed is unknown, defaulting to 1000 [ 51.704377][ T5129] lo speed is unknown, defaulting to 1000 [ 51.710720][ T5129] lo speed is unknown, defaulting to 1000 [ 51.792989][ T5138] loop5: detected capacity change from 0 to 736 [ 51.892821][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.946271][ T5160] netlink: 14 bytes leftover after parsing attributes in process `syz.3.518'. [ 52.024127][ T5160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.044086][ T5160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.061270][ T5160] bond0 (unregistering): Released all slaves [ 52.222866][ T5172] loop5: detected capacity change from 0 to 1024 [ 52.230813][ T5172] EXT4-fs: Ignoring removed orlov option [ 52.250750][ T5172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.278855][ T5170] loop3: detected capacity change from 0 to 8192 [ 52.368150][ T4132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.036730][ T5210] SELinux: failed to load policy [ 53.066483][ T5214] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 53.097998][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.142391][ T5214] bond0: (slave gretap1): making interface the new active one [ 53.164782][ T5214] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 53.186185][ T5214] bond0 (unregistering): (slave gretap1): Releasing active interface [ 53.206117][ T5214] bond0 (unregistering): Released all slaves [ 53.362683][ T5237] dummy0: entered allmulticast mode [ 53.376883][ T5234] loop0: detected capacity change from 0 to 8192 [ 53.384343][ T5237] dummy0: left allmulticast mode [ 53.394262][ T5219] lo speed is unknown, defaulting to 1000 [ 53.480138][ T5243] netlink: 256 bytes leftover after parsing attributes in process `syz.0.555'. [ 53.489215][ T5243] netlink: 72 bytes leftover after parsing attributes in process `syz.0.555'. [ 53.606129][ T3688] hsr_slave_0: left promiscuous mode [ 53.621645][ T3688] hsr_slave_1: left promiscuous mode [ 53.648121][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 53.682150][ T5258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.560'. [ 53.725785][ T3688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 53.790547][ T5263] loop1: detected capacity change from 0 to 1024 [ 53.797145][ T3688] team0 (unregistering): Port device team_slave_1 removed [ 53.808777][ T3688] team0 (unregistering): Port device team_slave_0 removed [ 53.817404][ T5263] EXT4-fs: Ignoring removed nobh option [ 53.823010][ T5263] EXT4-fs: Ignoring removed bh option [ 53.862113][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 53.872326][ T5263] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.890578][ T5256] pimreg: entered allmulticast mode [ 53.900256][ T5259] pimreg: left allmulticast mode [ 53.911517][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 53.920384][ T5261] netlink: 'syz.0.561': attribute type 30 has an invalid length. [ 53.977842][ T5261] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.986622][ T5261] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.995390][ T5261] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.004190][ T5261] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.020835][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.561'. [ 54.029707][ T5261] netlink: 'syz.0.561': attribute type 30 has an invalid length. [ 54.038610][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.068920][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.076065][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.085928][ T5219] bridge_slave_0: entered allmulticast mode [ 54.092892][ T5219] bridge_slave_0: entered promiscuous mode [ 54.100389][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.107524][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.115617][ T5219] bridge_slave_1: entered allmulticast mode [ 54.125331][ T5219] bridge_slave_1: entered promiscuous mode [ 54.158300][ T3413] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 54.166354][ T5280] loop5: detected capacity change from 0 to 1024 [ 54.167637][ T3413] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.191694][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.192798][ T5280] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.212996][ T5280] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.220473][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.240918][ T5280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.273377][ T5219] team0: Port device team_slave_0 added [ 54.280079][ T5219] team0: Port device team_slave_1 added [ 54.295795][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.302856][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.329885][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.349604][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.356623][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.382738][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.436831][ T5219] hsr_slave_0: entered promiscuous mode [ 54.444053][ T5219] hsr_slave_1: entered promiscuous mode [ 54.450187][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.457756][ T5219] Cannot create hsr debugfs directory [ 54.527439][ T5219] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 54.536292][ T5219] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 54.545037][ T5219] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 54.554100][ T5219] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 54.567908][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.575006][ T5219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.582432][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.589601][ T5219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.615897][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.626734][ T3655] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.634674][ T3655] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.646371][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.656425][ T3655] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.663583][ T3655] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.673813][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.680944][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.736733][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.823611][ T5219] veth0_vlan: entered promiscuous mode [ 54.831229][ T5219] veth1_vlan: entered promiscuous mode [ 54.844862][ T5219] veth0_macvtap: entered promiscuous mode [ 54.852423][ T5219] veth1_macvtap: entered promiscuous mode [ 54.863492][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.875287][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.885020][ T5219] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.893805][ T5219] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.902664][ T5219] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.911410][ T5219] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.930720][ T29] kauditd_printk_skb: 165 callbacks suppressed [ 54.930732][ T29] audit: type=1400 audit(1752763534.662:1137): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.8aDJbm/syz-tmp" dev="sda1" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 54.961817][ T29] audit: type=1400 audit(1752763534.672:1138): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 54.962608][ T4132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.983910][ T29] audit: type=1400 audit(1752763534.672:1139): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 54.983939][ T29] audit: type=1400 audit(1752763534.672:1140): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.8aDJbm/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 54.984015][ T29] audit: type=1400 audit(1752763534.672:1141): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/root/syzkaller.8aDJbm/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=10131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 55.072463][ T29] audit: type=1400 audit(1752763534.812:1142): avc: denied { mounton } for pid=5219 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 55.097221][ T29] audit: type=1400 audit(1752763534.822:1143): avc: denied { mount } for pid=5219 comm="syz-executor" name="/" dev="gadgetfs" ino=3893 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 55.197396][ T5331] loop6: detected capacity change from 0 to 8192 [ 55.206759][ T5331] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.535345][ T5346] __nla_validate_parse: 3 callbacks suppressed [ 55.535361][ T5346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 55.586132][ T5346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 55.634232][ T5346] netlink: 2 bytes leftover after parsing attributes in process `syz.1.583'. [ 55.742747][ T5354] syzkaller0: entered promiscuous mode [ 55.748349][ T5354] syzkaller0: entered allmulticast mode [ 55.886683][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.591'. [ 55.978370][ T29] audit: type=1400 audit(1752763535.702:1144): avc: denied { create } for pid=5371 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 55.998097][ T29] audit: type=1400 audit(1752763535.702:1145): avc: denied { connect } for pid=5371 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.052957][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.596'. [ 56.062627][ T5376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.596'. [ 56.075527][ T5374] lo speed is unknown, defaulting to 1000 [ 56.086328][ T5376] netlink: 2 bytes leftover after parsing attributes in process `syz.0.596'. [ 56.162034][ T29] audit: type=1326 audit(1752763535.882:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5383 comm="syz.4.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ccfe3e929 code=0x7ffc0000 [ 56.377592][ T5397] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.604'. [ 56.386716][ T5397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.604'. [ 56.530198][ T5407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.610'. [ 56.736485][ T5423] loop4: detected capacity change from 0 to 512 [ 56.767079][ T5423] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.617: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 56.893492][ T5423] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.617: Bad quota inode: 3, type: 0 [ 56.908288][ T5423] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 56.945651][ T5423] EXT4-fs (loop4): mount failed [ 57.174897][ T5441] loop0: detected capacity change from 0 to 512 [ 57.219828][ T5441] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.253616][ T5441] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 57.263618][ T5441] FAT-fs (loop0): Filesystem has been set read-only [ 57.430624][ T5461] netlink: 'syz.6.632': attribute type 39 has an invalid length. [ 57.550077][ T5469] syz_tun: entered allmulticast mode [ 57.574008][ T5471] syzkaller0: entered promiscuous mode [ 57.579567][ T5471] syzkaller0: entered allmulticast mode [ 57.826940][ T5505] loop4: detected capacity change from 0 to 512 [ 57.837739][ T5505] EXT4-fs (loop4): orphan cleanup on readonly fs [ 57.845123][ T5505] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.652: bg 0: block 248: padding at end of block bitmap is not set [ 57.861100][ T5505] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.652: Failed to acquire dquot type 1 [ 57.873092][ T5505] EXT4-fs (loop4): 1 truncate cleaned up [ 57.879699][ T5505] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 57.896111][ T5505] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 57.911043][ T5505] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 57.986617][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.011039][ T5526] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.028156][ T5527] loop1: detected capacity change from 0 to 1024 [ 58.035303][ T5527] EXT4-fs: Ignoring removed nobh option [ 58.041566][ T5527] EXT4-fs: Ignoring removed bh option [ 58.057715][ T5527] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.198663][ T5527] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.657: Allocating blocks 497-513 which overlap fs metadata [ 58.248916][ T5522] EXT4-fs (loop1): pa ffff8881004af690: logic 16, phys. 449, len 4 [ 58.257288][ T5522] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 58.294889][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.028500][ T5571] vlan2: entered allmulticast mode [ 59.257402][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.277229][ T5599] macvlan2: entered promiscuous mode [ 59.282771][ T5599] macvlan2: entered allmulticast mode [ 59.289266][ T5599] bond0: (slave macvlan2): Opening slave failed [ 59.492014][ T5617] netlink: 'syz.6.698': attribute type 2 has an invalid length. [ 59.499713][ T5617] netlink: 'syz.6.698': attribute type 1 has an invalid length. [ 59.575907][ T5626] loop4: detected capacity change from 0 to 128 [ 59.728541][ T5642] loop6: detected capacity change from 0 to 512 [ 59.823117][ T5654] loop6: detected capacity change from 0 to 128 [ 59.908003][ T5665] netlink: 'syz.6.718': attribute type 30 has an invalid length. [ 59.934413][ T5665] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.943281][ T5665] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.952099][ T5665] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.960813][ T5665] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.973256][ T5665] netlink: 'syz.6.718': attribute type 30 has an invalid length. [ 60.336621][ T29] kauditd_printk_skb: 378 callbacks suppressed [ 60.336636][ T29] audit: type=1326 audit(1752763540.062:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1095cfe929 code=0x7ffc0000 [ 60.369274][ T29] audit: type=1326 audit(1752763540.092:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f1095cfe929 code=0x7ffc0000 [ 60.392851][ T29] audit: type=1326 audit(1752763540.092:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1095cfe929 code=0x7ffc0000 [ 60.416364][ T29] audit: type=1326 audit(1752763540.092:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1095cfe929 code=0x7ffc0000 [ 60.443251][ T5697] loop5: detected capacity change from 0 to 128 [ 60.455336][ T29] audit: type=1326 audit(1752763540.132:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1095cfe929 code=0x7ffc0000 [ 60.478739][ T29] audit: type=1326 audit(1752763540.132:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1095cfe963 code=0x7ffc0000 [ 60.502157][ T29] audit: type=1326 audit(1752763540.132:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1095cfd3df code=0x7ffc0000 [ 60.525435][ T29] audit: type=1326 audit(1752763540.132:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1095cfe9b7 code=0x7ffc0000 [ 60.548855][ T29] audit: type=1326 audit(1752763540.172:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1095cfd290 code=0x7ffc0000 [ 60.572367][ T29] audit: type=1326 audit(1752763540.172:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5696 comm="syz.5.731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1095cfe52b code=0x7ffc0000 [ 60.643724][ T5707] __nla_validate_parse: 11 callbacks suppressed [ 60.643742][ T5707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.733'. [ 60.667949][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 60.676895][ T5709] netlink: 'syz.5.734': attribute type 30 has an invalid length. [ 60.697228][ T5709] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.706066][ T5709] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.714869][ T5709] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.723608][ T5709] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.769309][ T5709] netlink: 8 bytes leftover after parsing attributes in process `syz.5.734'. [ 60.778140][ T5709] netlink: 'syz.5.734': attribute type 30 has an invalid length. [ 60.836274][ T5716] netlink: 'syz.6.737': attribute type 7 has an invalid length. [ 60.843983][ T5716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.737'. [ 61.047570][ T5734] netlink: 96 bytes leftover after parsing attributes in process `syz.6.746'. [ 61.068674][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.6.747'. [ 61.156733][ T5746] loop6: detected capacity change from 0 to 512 [ 61.164200][ T5746] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.172698][ T5746] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 61.184127][ T5746] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.198548][ T5746] EXT4-fs (loop6): 1 truncate cleaned up [ 61.204691][ T5746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.230849][ T5219] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.380856][ T5766] loop1: detected capacity change from 0 to 1024 [ 61.387668][ T5766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 61.400654][ T5766] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.427097][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.753678][ T5789] lo speed is unknown, defaulting to 1000 [ 61.997266][ C1] vcan0: j1939_tp_rxtimer: 0xffff888104359c00: rx timeout, send abort [ 62.006221][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888104359c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 62.184218][ T5814] loop0: detected capacity change from 0 to 8192 [ 62.205769][ T5814] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 62.247026][ T5817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 62.338079][ T5820] lo speed is unknown, defaulting to 1000 [ 62.507460][ T5838] netlink: 72 bytes leftover after parsing attributes in process `syz.4.789'. [ 62.838650][ T5862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5862 comm=syz.5.798 [ 63.022538][ T5880] loop5: detected capacity change from 0 to 512 [ 63.031191][ T5880] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 63.044431][ T5880] EXT4-fs (loop5): 1 truncate cleaned up [ 63.052490][ T5880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.088364][ T4132] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.109610][ T5890] syzkaller0: entered promiscuous mode [ 63.115124][ T5890] syzkaller0: entered allmulticast mode [ 63.123071][ T5893] netlink: 'syz.6.814': attribute type 7 has an invalid length. [ 63.130820][ T5893] netlink: 8 bytes leftover after parsing attributes in process `syz.6.814'. [ 63.164984][ T5897] loop6: detected capacity change from 0 to 512 [ 63.173837][ T5897] ext4: Unknown parameter 'appraise_type' [ 63.449785][ T5931] loop5: detected capacity change from 0 to 128 [ 63.457704][ T5931] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.472418][ T5931] ext4 filesystem being mounted at /109/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 63.505493][ T4132] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.532540][ T5934] loop6: detected capacity change from 0 to 1024 [ 63.541179][ T5934] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 63.552225][ T5934] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 63.567749][ T5934] JBD2: no valid journal superblock found [ 63.573572][ T5934] EXT4-fs (loop6): Could not load journal inode [ 63.608048][ T5939] syzkaller0: entered promiscuous mode [ 63.613839][ T5939] syzkaller0: entered allmulticast mode [ 63.778977][ T5948] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 64.182724][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.844'. [ 64.408963][ T5991] lo speed is unknown, defaulting to 1000 [ 64.468823][ T5994] syzkaller0: entered promiscuous mode [ 64.475037][ T5994] syzkaller0: entered allmulticast mode [ 65.106964][ T6039] loop1: detected capacity change from 0 to 1024 [ 65.114732][ T6039] EXT4-fs: inline encryption not supported [ 65.122389][ T6039] EXT4-fs: Ignoring removed bh option [ 65.122984][ T6040] syzkaller0: entered promiscuous mode [ 65.133759][ T6040] syzkaller0: entered allmulticast mode [ 65.141028][ T6039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e856c018, mo2=0002] [ 65.154690][ T6039] System zones: 1-12 [ 65.161202][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.183316][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.302467][ T6054] pim6reg1: entered allmulticast mode [ 65.313552][ T6054] pim6reg1: left allmulticast mode [ 65.494328][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 65.494343][ T29] audit: type=1400 audit(1752763545.222:1640): avc: denied { setopt } for pid=6073 comm="syz.1.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.538374][ T6076] syzkaller0: entered promiscuous mode [ 65.543896][ T6076] syzkaller0: entered allmulticast mode [ 65.716703][ T6088] __nla_validate_parse: 2 callbacks suppressed [ 65.716720][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.6.885'. [ 65.946319][ T6081] loop5: detected capacity change from 0 to 32768 [ 66.313110][ T6098] sch_fq: defrate 2048 ignored. [ 66.362082][ T29] audit: type=1326 audit(1752763546.082:1641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.385492][ T29] audit: type=1326 audit(1752763546.082:1642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.410153][ T29] audit: type=1326 audit(1752763546.142:1643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.433581][ T29] audit: type=1326 audit(1752763546.142:1644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.457466][ T29] audit: type=1326 audit(1752763546.142:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.487982][ T29] audit: type=1326 audit(1752763546.222:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.512142][ T29] audit: type=1326 audit(1752763546.222:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.535863][ T29] audit: type=1326 audit(1752763546.222:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.559873][ T29] audit: type=1326 audit(1752763546.222:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6099 comm="syz.6.892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f725b3ae929 code=0x7ffc0000 [ 66.620344][ T6100] tipc: Started in network mode [ 66.625331][ T6100] tipc: Node identity ac14140f, cluster identity 4711 [ 66.640146][ T6100] tipc: New replicast peer: 255.255.255.255 [ 66.646362][ T6100] tipc: Enabled bearer , priority 10 [ 66.967716][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 66.976923][ T6121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.900'. [ 67.202233][ T6130] loop1: detected capacity change from 0 to 512 [ 67.230488][ T6130] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.243158][ T6130] ext4 filesystem being mounted at /186/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.288079][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.613667][ T6152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.911'. [ 67.705457][ T6162] loop4: detected capacity change from 0 to 4096 [ 67.715469][ T6162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.731366][ T6162] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.759704][ T3380] tipc: Node number set to 2886997007 [ 68.391017][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.931'. [ 68.393271][ T6195] lo speed is unknown, defaulting to 1000 [ 68.399890][ T6196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.931'. [ 68.498250][ T6203] loop4: detected capacity change from 0 to 128 [ 68.561775][ T6203] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.575237][ T6203] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.637829][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.680362][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'. [ 68.691706][ T6223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.940'. [ 68.718697][ T9] IPVS: starting estimator thread 0... [ 68.725695][ T6223] netlink: 156 bytes leftover after parsing attributes in process `syz.4.940'. [ 68.768224][ T6234] lo speed is unknown, defaulting to 1000 [ 68.785354][ T6240] siw: device registration error -23 [ 68.850402][ T6229] IPVS: using max 2688 ests per chain, 134400 per kthread [ 68.928210][ T6248] loop5: detected capacity change from 0 to 8192 [ 68.935136][ T6252] loop4: detected capacity change from 0 to 1024 [ 68.943913][ T6252] EXT4-fs: Ignoring removed orlov option [ 68.962171][ T6252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.026885][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.567210][ C0] ================================================================== [ 69.575292][ C0] BUG: KCSAN: data-race in do_select / pollwake [ 69.581556][ C0] [ 69.583863][ C0] read to 0xffffc90002e0f9e0 of 4 bytes by task 6267 on cpu 1: [ 69.591385][ C0] do_select+0xe48/0xf50 [ 69.595626][ C0] core_sys_select+0x3d7/0x6e0 [ 69.600382][ C0] __se_sys_pselect6+0x216/0x280 [ 69.605307][ C0] __x64_sys_pselect6+0x78/0x90 [ 69.610146][ C0] x64_sys_call+0x1caa/0x2fb0 [ 69.614819][ C0] do_syscall_64+0xd2/0x200 [ 69.619306][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.625202][ C0] [ 69.627505][ C0] write to 0xffffc90002e0f9e0 of 4 bytes by interrupt on cpu 0: [ 69.635112][ C0] pollwake+0xb6/0x100 [ 69.639159][ C0] __wake_up+0x66/0xb0 [ 69.643211][ C0] bpf_ringbuf_notify+0x22/0x30 [ 69.648049][ C0] irq_work_run+0xe2/0x2d0 [ 69.652446][ C0] __sysvec_irq_work+0x22/0x170 [ 69.657277][ C0] sysvec_irq_work+0x66/0x80 [ 69.661851][ C0] asm_sysvec_irq_work+0x1a/0x20 [ 69.666788][ C0] native_apic_msr_write+0x3d/0x60 [ 69.671895][ C0] x2apic_send_IPI_self+0x10/0x20 [ 69.676908][ C0] arch_irq_work_raise+0x46/0x50 [ 69.681832][ C0] __irq_work_queue_local+0x10f/0x2c0 [ 69.687190][ C0] irq_work_queue+0x70/0x100 [ 69.691778][ C0] bpf_ringbuf_discard+0xd3/0xf0 [ 69.696701][ C0] bpf_prog_fe0ed97373b08409+0x4b/0x4f [ 69.702145][ C0] bpf_trace_run3+0x10f/0x1d0 [ 69.706806][ C0] __traceiter_kmem_cache_free+0x35/0x60 [ 69.712418][ C0] kmem_cache_free+0x257/0x300 [ 69.717163][ C0] vm_area_free+0x71/0xb0 [ 69.721473][ C0] remove_vma+0xc0/0xd0 [ 69.725606][ C0] exit_mmap+0x388/0x6c0 [ 69.729823][ C0] __mmput+0x28/0x1c0 [ 69.733786][ C0] mmput+0x40/0x50 [ 69.737485][ C0] exit_mm+0xe4/0x190 [ 69.741449][ C0] do_exit+0x417/0x1590 [ 69.745587][ C0] do_group_exit+0x139/0x140 [ 69.750157][ C0] __x64_sys_exit_group+0x1f/0x20 [ 69.755163][ C0] x64_sys_call+0x2fa4/0x2fb0 [ 69.759821][ C0] do_syscall_64+0xd2/0x200 [ 69.764302][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.770262][ C0] [ 69.772564][ C0] value changed: 0x00000001 -> 0x00000000 [ 69.778261][ C0] [ 69.780564][ C0] Reported by Kernel Concurrency Sanitizer on: [ 69.786703][ C0] CPU: 0 UID: 0 PID: 6289 Comm: modprobe Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 69.798919][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 69.808956][ C0] ==================================================================