last executing test programs: 4.271114023s ago: executing program 0 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000400), &(0x7f0000000340)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000340)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x9, 0x800, 0xffffffffffffffff, 0x0, 0x0, 0x30}]) mkdirat$cgroup(r2, &(0x7f00000004c0)='syz0\x00', 0x1ff) 4.037742907s ago: executing program 0 (id=197): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f0000000400)='^\'#/\x00', 0x0) 4.014002827s ago: executing program 0 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) 3.928695559s ago: executing program 0 (id=199): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r1) 2.870390015s ago: executing program 3 (id=213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0x8000}, 0x18) r2 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xabd0, 0x400, 0x2, 0x349}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000000540)=[{0x0}], 0x1) r3 = io_uring_setup(0x7625, &(0x7f0000000600)={0x0, 0x1e28, 0x40, 0x40, 0x89, 0x0, r2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) getrlimit(0x1, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r2], 0x1) 2.847359866s ago: executing program 3 (id=214): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) bpf$PROG_LOAD(0x5, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xa, 0x2) 2.521392351s ago: executing program 3 (id=219): unshare(0x42000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) unshare(0x80) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x60400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) 2.198208596s ago: executing program 0 (id=224): socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000200)=0x4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000"], 0x310) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0x3}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) 1.731388523s ago: executing program 0 (id=229): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') pread64(r3, &(0x7f0000000580)=""/150, 0x8f, 0x10) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d75a3d0000b110000000000000000000000000000000000ff0200000000000000000000000000014f1c4e20"], 0xd6) 1.527605886s ago: executing program 2 (id=232): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 1.501998797s ago: executing program 2 (id=233): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) 1.458825748s ago: executing program 2 (id=234): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40b04000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'lo\x00'}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8922, &(0x7f0000000080)) 1.100038753s ago: executing program 2 (id=240): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x0) 1.097521493s ago: executing program 1 (id=241): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.042728894s ago: executing program 1 (id=242): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 933.108876ms ago: executing program 1 (id=243): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x18) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 875.320756ms ago: executing program 1 (id=244): r0 = eventfd2(0x0, 0x0) read$eventfd(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r4, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) 837.913247ms ago: executing program 1 (id=245): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x8b7c, 0x800, 0x200007, 0x22}, &(0x7f0000000940)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x47f9, 0x4db, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x37dc12502000000, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) fsopen(0x0, 0x0) 768.162558ms ago: executing program 1 (id=246): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 645.86049ms ago: executing program 4 (id=248): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x401) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000a9000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 632.87034ms ago: executing program 4 (id=249): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000300000000000000000000000000000000000000000000000105"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x3, 0x8, 0x2}, 0x5}) mmap(&(0x7f0000071000/0x1000)=nil, 0x1000, 0xf, 0x80010, r1, 0x3d2d1000) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 546.435782ms ago: executing program 4 (id=250): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x40000000015, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, r3, 0x0, 0x0, 0x0, 0x12100, 0x1}) io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0) 529.735952ms ago: executing program 4 (id=251): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000680)={[{@rodir}, {@shortname_win95}, {@utf8}, {@fat=@dmask={'dmask', 0x3d, 0x1ec}}, {@numtail}, {@fat=@check_strict}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@uni_xlateno}]}, 0x0, 0x27c, &(0x7f00000002c0)="$eJzs3EFrHGUYB/DHbG3SlHZzEEFBfNGLXpY2foJFWhAXlNgt6kGYmo0uGXfDzhJZEZuLePVzFI/eBPUL5CJevHsLguClB3GlO7t20241qUmzbX4/CO8zed8/8w6ZhGcCO3vvfv3J5kZR28j6sbCUYiFiJ25HrNypxp4ajwuj+mxM24lXz//xywvvvPf+m/VG48paSlfr115bTSldfPH7Tz//5qUf++evf3vxu8XYXflg7/fVX3ef3X1u769rH7eL1C5Sp9tPWbrR7fazG3krrbeLzVpKb+etrGildqdo9fbNb+Tdra1ByjrrF5a3eq2iSFlnkDZbg9Tvpn5vkLKPsnYn1Wq1dGE5TrczB1jTvLW2ltUfOD2sHOmOOHbnZn2z16tnlZmTzVuPYlMAwHz59/6/7PUf3P83rpej/v9xsbPv6D/6f54Id/r/5fHv7376fwAAAAAAAAAAAAAAeBzcHg6rw+GwOhknX4sRsRQRk+OT3ifHw8//dJv64N5SRP7VdnO7WY7lfH0j2pFHKy5FNf4c3Q9jZX31jcaVS2lkJX7Ib47zN7eblVic5CdWZucvl/m0P/90LE+ffzWq8czs/OrM/Nl45eWpfC2q8dOH0Y081kf39d38F5dTev2txj35c6N1AAAA8CSopX/c9/w+mh8tWIr758v8If4/cM/z9Zl4/iCvqAQAAAD+t2Lw2WaW562e4qiKSszFNhRlkR4m9VtEHCI1nIsrPdripP8yAQAAR+1u03+I0M9fHuOOAAAAAAAAAAAAAAAAAAAA4PQ56PvAJusf5nViU6ernMxVAgAAAAAAAAAAAAAAAAAAAAAAwHz4OwAA///1IirV") r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r0, 0x0, 0x0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000002340)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x48c0) 470.997553ms ago: executing program 4 (id=252): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) clock_getres(0x7, &(0x7f0000000140)) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16, @ANYBLOB="02002dbd7000ffdbdf251200000008000300", @ANYRES32, @ANYBLOB="0600ed001e0500004500be006e339f3773c7580c939a28ebf8a11e790aa48f381aa9987810c7a1e14a3d8b259ac4c67c3a269ac71752814e25bc3c84733fb17cefbbf9044c710f700ed17d0f7a0000000500c2000900000039f33e475e1e3f1c"], 0x74}}, 0x20000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 218.413637ms ago: executing program 2 (id=253): socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd26, 0x8000002, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) 195.666567ms ago: executing program 3 (id=254): syz_mount_image$ext4(0x0, &(0x7f0000000200)='./file0\x00', 0x40001, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00"], 0x0, 0x4977, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 86.116529ms ago: executing program 3 (id=255): socket$inet(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x279, &(0x7f0000000200)={0x0, 0x84d8, 0x3}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r0 = syz_io_uring_setup(0x1ed3, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x5, 0x279}, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x4, 0x0, @fd_index=0x8, 0x0, 0x0, 0x9, 0x7, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 63.339329ms ago: executing program 3 (id=256): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_io_uring_setup(0x1066, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8150}}) io_uring_enter(r2, 0x47f5, 0x68d1, 0x0, 0x0, 0x0) ppoll(&(0x7f0000000140)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 39.4213ms ago: executing program 4 (id=257): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xf60, 0x4}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x39) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=@newqdisc={0x78, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x2236}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0xffff}, {0x0, 0x0, 0x0, 0x8, 0x2, 0x3}, 0x0, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x78}}, 0x4000080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 0s ago: executing program 2 (id=258): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r3}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 26.219392][ T29] audit: type=1400 audit(1749059909.012:62): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.220157][ T3307] cgroup: Unknown subsys name 'net' [ 26.242121][ T29] audit: type=1400 audit(1749059909.012:63): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.269514][ T29] audit: type=1400 audit(1749059909.042:64): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.382673][ T3307] cgroup: Unknown subsys name 'cpuset' [ 26.388672][ T3307] cgroup: Unknown subsys name 'rlimit' [ 26.516781][ T29] audit: type=1400 audit(1749059909.312:65): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.540154][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.540159][ T29] audit: type=1400 audit(1749059909.312:66): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.569339][ T29] audit: type=1400 audit(1749059909.312:67): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.589662][ T29] audit: type=1400 audit(1749059909.312:68): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.603390][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.609923][ T29] audit: type=1400 audit(1749059909.322:69): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.643503][ T29] audit: type=1400 audit(1749059909.322:70): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.666905][ T29] audit: type=1400 audit(1749059909.352:71): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.665168][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 27.740477][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.747753][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.755064][ T3322] bridge_slave_0: entered allmulticast mode [ 27.761500][ T3322] bridge_slave_0: entered promiscuous mode [ 27.767978][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 27.792808][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.799894][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.807205][ T3322] bridge_slave_1: entered allmulticast mode [ 27.813625][ T3322] bridge_slave_1: entered promiscuous mode [ 27.848771][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.868551][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.897081][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 27.927208][ T3322] team0: Port device team_slave_0 added [ 27.939209][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.946373][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.953538][ T3324] bridge_slave_0: entered allmulticast mode [ 27.959960][ T3324] bridge_slave_0: entered promiscuous mode [ 27.966492][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 27.975090][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 27.984053][ T3322] team0: Port device team_slave_1 added [ 27.996572][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.003753][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.010879][ T3324] bridge_slave_1: entered allmulticast mode [ 28.017167][ T3324] bridge_slave_1: entered promiscuous mode [ 28.054539][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.061504][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.087587][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.103162][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.123305][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.130320][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.156272][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.169644][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.184590][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.191656][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.199048][ T3325] bridge_slave_0: entered allmulticast mode [ 28.205340][ T3325] bridge_slave_0: entered promiscuous mode [ 28.227070][ T3324] team0: Port device team_slave_0 added [ 28.233131][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.240165][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.247332][ T3325] bridge_slave_1: entered allmulticast mode [ 28.253713][ T3325] bridge_slave_1: entered promiscuous mode [ 28.270209][ T3324] team0: Port device team_slave_1 added [ 28.307351][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.317378][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.330822][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.337911][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.345126][ T3316] bridge_slave_0: entered allmulticast mode [ 28.351693][ T3316] bridge_slave_0: entered promiscuous mode [ 28.358531][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.365575][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.391707][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.404310][ T3322] hsr_slave_0: entered promiscuous mode [ 28.410234][ T3322] hsr_slave_1: entered promiscuous mode [ 28.421503][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.428659][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.435904][ T3317] bridge_slave_0: entered allmulticast mode [ 28.442254][ T3317] bridge_slave_0: entered promiscuous mode [ 28.448613][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.455755][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.462845][ T3316] bridge_slave_1: entered allmulticast mode [ 28.469332][ T3316] bridge_slave_1: entered promiscuous mode [ 28.475800][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.482868][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.508975][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.529981][ T3325] team0: Port device team_slave_0 added [ 28.536013][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.543086][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.550246][ T3317] bridge_slave_1: entered allmulticast mode [ 28.556773][ T3317] bridge_slave_1: entered promiscuous mode [ 28.579241][ T3325] team0: Port device team_slave_1 added [ 28.605353][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.619376][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.636143][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.645418][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.652435][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.678425][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.695362][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.706194][ T3324] hsr_slave_0: entered promiscuous mode [ 28.712087][ T3324] hsr_slave_1: entered promiscuous mode [ 28.717926][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.725488][ T3324] Cannot create hsr debugfs directory [ 28.737820][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.744793][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.770816][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.801669][ T3317] team0: Port device team_slave_0 added [ 28.808302][ T3317] team0: Port device team_slave_1 added [ 28.814605][ T3316] team0: Port device team_slave_0 added [ 28.845101][ T3316] team0: Port device team_slave_1 added [ 28.851071][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.858143][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.884276][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.908309][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.915403][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.941548][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.970348][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.977343][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.003407][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.014846][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.022047][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.048051][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.060756][ T3325] hsr_slave_0: entered promiscuous mode [ 29.066799][ T3325] hsr_slave_1: entered promiscuous mode [ 29.072692][ T3325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.080254][ T3325] Cannot create hsr debugfs directory [ 29.133111][ T3316] hsr_slave_0: entered promiscuous mode [ 29.138999][ T3316] hsr_slave_1: entered promiscuous mode [ 29.144878][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.152450][ T3316] Cannot create hsr debugfs directory [ 29.167070][ T3317] hsr_slave_0: entered promiscuous mode [ 29.173527][ T3317] hsr_slave_1: entered promiscuous mode [ 29.179287][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.186876][ T3317] Cannot create hsr debugfs directory [ 29.271102][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.289007][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.299185][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.317144][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.354465][ T3324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.362820][ T3324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.373094][ T3324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.382486][ T3324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.413974][ T3325] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.422714][ T3325] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.440610][ T3325] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.451115][ T3325] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.476339][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.489889][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.499068][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.507873][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.535737][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.559478][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.574143][ T3317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.585121][ T3317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.598449][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.608948][ T3317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.617323][ T3317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.629082][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.642708][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.649767][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.658569][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.665654][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.683125][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.696576][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.703678][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.712872][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.719978][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.730057][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.746619][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.754015][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.778169][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.785275][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.822023][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.858343][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.882545][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.899822][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.907047][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.930046][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.940518][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.956513][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.965906][ T392] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.973068][ T392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.998132][ T392] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.005595][ T392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.016298][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.031334][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.038560][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.060339][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.079873][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.116472][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.191599][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.225021][ T3325] veth0_vlan: entered promiscuous mode [ 30.235936][ T3322] veth0_vlan: entered promiscuous mode [ 30.254773][ T3325] veth1_vlan: entered promiscuous mode [ 30.271640][ T3322] veth1_vlan: entered promiscuous mode [ 30.299662][ T3324] veth0_vlan: entered promiscuous mode [ 30.310824][ T3322] veth0_macvtap: entered promiscuous mode [ 30.318507][ T3316] veth0_vlan: entered promiscuous mode [ 30.328829][ T3322] veth1_macvtap: entered promiscuous mode [ 30.338055][ T3316] veth1_vlan: entered promiscuous mode [ 30.345385][ T3324] veth1_vlan: entered promiscuous mode [ 30.357432][ T3325] veth0_macvtap: entered promiscuous mode [ 30.373364][ T3325] veth1_macvtap: entered promiscuous mode [ 30.382710][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.396303][ T3316] veth0_macvtap: entered promiscuous mode [ 30.406744][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.418417][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.427753][ T3316] veth1_macvtap: entered promiscuous mode [ 30.435210][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.444052][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.452814][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.461663][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476845][ T3324] veth0_macvtap: entered promiscuous mode [ 30.487443][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.496311][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.503963][ T3324] veth1_macvtap: entered promiscuous mode [ 30.514852][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.530165][ T3316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.539107][ T3316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.547870][ T3316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.556646][ T3316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.568357][ T3325] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.577230][ T3325] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.586001][ T3325] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.594757][ T3325] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.615060][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.638432][ T3317] veth0_vlan: entered promiscuous mode [ 30.645894][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.660886][ T3317] veth1_vlan: entered promiscuous mode [ 30.668857][ T3322] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.670374][ T3324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.692352][ T3324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.701173][ T3324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.709922][ T3324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.771505][ T3317] veth0_macvtap: entered promiscuous mode [ 30.796877][ T3460] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.817908][ T3317] veth1_macvtap: entered promiscuous mode [ 30.857005][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.869917][ T3460] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.872883][ T3468] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6'. [ 30.899080][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.931448][ T3317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.940259][ T3317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.949096][ T3317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.957925][ T3317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.990580][ T3472] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.037665][ T3475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10'. [ 31.063603][ T3480] openvswitch: netlink: Message has 6 unknown bytes. [ 31.120039][ C1] hrtimer: interrupt took 29577 ns [ 31.131590][ T3483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 31.169621][ T3491] syz.1.15 uses obsolete (PF_INET,SOCK_PACKET) [ 31.180492][ T3491] loop1: detected capacity change from 0 to 128 [ 31.188469][ T3491] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 31.200831][ T3491] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 31.224103][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 31.224120][ T29] audit: type=1400 audit(1749059914.022:160): avc: denied { mount } for pid=3490 comm="syz.1.15" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 31.281018][ T3495] veth0: entered promiscuous mode [ 31.295396][ T29] audit: type=1326 audit(1749059914.022:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52564fd290 code=0x7ffc0000 [ 31.305163][ T3495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 31.318710][ T29] audit: type=1326 audit(1749059914.022:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f52564fd677 code=0x7ffc0000 [ 31.350820][ T29] audit: type=1326 audit(1749059914.022:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52564fd290 code=0x7ffc0000 [ 31.374071][ T29] audit: type=1326 audit(1749059914.022:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52564fe929 code=0x7ffc0000 [ 31.397308][ T29] audit: type=1326 audit(1749059914.022:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f52564fe929 code=0x7ffc0000 [ 31.420894][ T29] audit: type=1326 audit(1749059914.022:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f52564fe963 code=0x7ffc0000 [ 31.443968][ T29] audit: type=1326 audit(1749059914.022:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f52564fd3df code=0x7ffc0000 [ 31.466912][ T29] audit: type=1326 audit(1749059914.022:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f52564fe9b7 code=0x7ffc0000 [ 31.489993][ T29] audit: type=1326 audit(1749059914.022:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3490 comm="syz.1.15" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f52564fd290 code=0x7ffc0000 [ 31.529708][ T3500] loop1: detected capacity change from 0 to 128 [ 31.547512][ T3502] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.598648][ T3504] Zero length message leads to an empty skb [ 31.631541][ T3504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.21'. [ 31.677117][ T3509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.23'. [ 31.694252][ T3460] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.503485][ T3517] capability: warning: `syz.4.26' uses deprecated v2 capabilities in a way that may be insecure [ 32.556497][ T3460] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.602943][ T3523] loop4: detected capacity change from 0 to 2048 [ 32.622258][ T3525] pim6reg1: entered promiscuous mode [ 32.627655][ T3525] pim6reg1: entered allmulticast mode [ 32.683727][ T3303] loop4: p1 < > p4 [ 32.688649][ T3303] loop4: p4 size 8388608 extends beyond EOD, truncated [ 32.703284][ T3523] loop4: p1 < > p4 [ 32.708137][ T3523] loop4: p4 size 8388608 extends beyond EOD, truncated [ 32.728293][ T3007] loop4: p1 < > p4 [ 32.736023][ T3007] loop4: p4 size 8388608 extends beyond EOD, truncated [ 32.762288][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 32.786535][ T3477] udevd[3477]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 32.808745][ T3539] ref_ctr_offset mismatch. inode: 0x3a offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x1000000 [ 32.819518][ T3477] udevd[3477]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 32.831682][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 32.837665][ T3533] loop0: detected capacity change from 0 to 1024 [ 32.848804][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 32.854734][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 32.870867][ T3533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.889375][ T3532] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 32.913035][ T3324] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.984274][ T3553] loop0: detected capacity change from 0 to 256 [ 33.003283][ T3553] netlink: 'syz.0.40': attribute type 13 has an invalid length. [ 33.063436][ T3553] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.070745][ T3553] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.115241][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.126353][ T3553] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.162609][ T3553] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.171668][ T3553] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.180725][ T3553] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.189782][ T3553] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.222447][ T3460] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.245974][ T3460] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.265555][ T3553] syz.0.40 (3553) used greatest stack depth: 10768 bytes left [ 33.267891][ T3460] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.285931][ T3460] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.598819][ T3590] netlink: 'syz.4.54': attribute type 39 has an invalid length. [ 33.616071][ T3591] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.663844][ T3591] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.700435][ T3596] IPv6: sit1: Disabled Multicast RS [ 33.737395][ T3591] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.813604][ T3591] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.840022][ T3606] netlink: 12 bytes leftover after parsing attributes in process `syz.4.61'. [ 34.565902][ T3674] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 34.593158][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.71'. [ 34.621603][ T3674] team0: Port device team_slave_1 removed [ 34.800399][ T3700] syz.1.75 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 34.844073][ T3700] tipc: Started in network mode [ 34.849126][ T3700] tipc: Node identity 8, cluster identity 4711 [ 34.855377][ T3700] tipc: Node number set to 8 [ 35.078731][ T3721] IPv6: NLM_F_CREATE should be specified when creating new route [ 35.141817][ T3725] ref_ctr increment failed for inode: 0x8b offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810ad95c00 [ 35.154003][ T3724] uprobe: syz.0.81:3724 failed to unregister, leaking uprobe [ 35.215836][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.84'. [ 35.313702][ T3737] loop3: detected capacity change from 0 to 512 [ 35.322458][ T3737] EXT4-fs: Ignoring removed nobh option [ 35.342738][ T3739] rdma_op ffff88811a06e180 conn xmit_rdma 0000000000000000 [ 35.350377][ T3737] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.363510][ T3737] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.383585][ T3737] EXT4-fs (loop3): 1 truncate cleaned up [ 35.389864][ T3737] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.452372][ T3737] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #12: block 7: comm syz.3.87: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0 [ 35.507549][ T3745] tipc: Started in network mode [ 35.512516][ T3745] tipc: Node identity ac14140f, cluster identity 4711 [ 35.530528][ T3745] tipc: New replicast peer: 10.1.1.2 [ 35.535938][ T3745] tipc: Enabled bearer , priority 10 [ 35.542389][ T3737] EXT4-fs (loop3): Remounting filesystem read-only [ 35.591559][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.693911][ T3733] loop1: detected capacity change from 0 to 128 [ 35.719882][ T3733] FAT-fs (loop1): Invalid FSINFO signature: 0x00615252, 0x61417272 (sector = 1) [ 35.752416][ T3733] netlink: 'syz.1.85': attribute type 10 has an invalid length. [ 35.763715][ T3733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.773147][ T3733] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 35.790172][ T3733] syz.1.85 (3733) used greatest stack depth: 9392 bytes left [ 35.833977][ T3755] netlink: 12 bytes leftover after parsing attributes in process `syz.0.93'. [ 35.904086][ T3757] loop3: detected capacity change from 0 to 128 [ 35.916353][ T3757] batadv_slave_0: entered promiscuous mode [ 35.922836][ T3757] __nla_validate_parse: 1 callbacks suppressed [ 35.922852][ T3757] netlink: 76 bytes leftover after parsing attributes in process `syz.3.94'. [ 35.938746][ T3757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.973288][ T3765] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 35.996689][ T3757] batadv_slave_0 (unregistering): left promiscuous mode [ 36.004312][ T3757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.021984][ T3765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.96'. [ 36.030905][ T3765] 8021q: VLANs not supported on ip6_vti1 [ 36.037420][ T3765] dummy0: entered promiscuous mode [ 36.064511][ T3773] netlink: 24 bytes leftover after parsing attributes in process `syz.0.98'. [ 36.084802][ T3773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 36.101761][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.99'. [ 36.111682][ T3775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.99'. [ 36.183376][ T3777] process 'syz.0.100' launched './file0' with NULL argv: empty string added [ 36.211133][ T3779] bridge0: port 3(syz_tun) entered blocking state [ 36.217761][ T3779] bridge0: port 3(syz_tun) entered disabled state [ 36.224683][ T3779] syz_tun: entered allmulticast mode [ 36.230708][ T3779] syz_tun: entered promiscuous mode [ 36.237246][ T3779] bridge0: port 3(syz_tun) entered blocking state [ 36.243736][ T3779] bridge0: port 3(syz_tun) entered forwarding state [ 36.258492][ T3779] syz_tun: left allmulticast mode [ 36.263605][ T3779] syz_tun: left promiscuous mode [ 36.268765][ T3779] bridge0: port 3(syz_tun) entered disabled state [ 36.280759][ T3779] bridge_slave_0: left allmulticast mode [ 36.286841][ T3779] bridge_slave_0: left promiscuous mode [ 36.292687][ T3779] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.300903][ T3779] bridge_slave_1: left allmulticast mode [ 36.306635][ T3779] bridge_slave_1: left promiscuous mode [ 36.307303][ T3784] netlink: 2036 bytes leftover after parsing attributes in process `syz.0.103'. [ 36.312303][ T3779] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.321414][ T3784] netlink: 24 bytes leftover after parsing attributes in process `syz.0.103'. [ 36.339436][ T3779] bond0: (slave bond_slave_0): Releasing backup interface [ 36.350163][ T3779] bond0: (slave bond_slave_1): Releasing backup interface [ 36.361440][ T3779] team0: Port device team_slave_0 removed [ 36.368247][ T3779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.375717][ T3779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.459290][ T3786] netlink: 'syz.3.104': attribute type 10 has an invalid length. [ 36.470747][ T3786] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 36.559136][ T3791] loop3: detected capacity change from 0 to 512 [ 36.574560][ T3791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.587243][ T3791] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.601560][ T29] kauditd_printk_skb: 403 callbacks suppressed [ 36.601572][ T29] audit: type=1400 audit(1749059918.397:573): avc: denied { read write } for pid=3790 comm="syz.3.106" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.631316][ T29] audit: type=1400 audit(1749059918.397:574): avc: denied { open } for pid=3790 comm="syz.3.106" path="/28/file0/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.654130][ T29] audit: type=1400 audit(1749059918.397:575): avc: denied { ioctl } for pid=3790 comm="syz.3.106" path="/28/file0/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.682343][ T1057] tipc: Node number set to 2886997007 [ 36.689478][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.706482][ T29] audit: type=1400 audit(1749059918.507:576): avc: denied { read } for pid=3794 comm="syz.3.107" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.729235][ T29] audit: type=1400 audit(1749059918.507:577): avc: denied { open } for pid=3794 comm="syz.3.107" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 36.753235][ T29] audit: type=1400 audit(1749059918.507:578): avc: denied { create } for pid=3794 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.773079][ T29] audit: type=1400 audit(1749059918.507:579): avc: denied { connect } for pid=3794 comm="syz.3.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.793371][ T29] audit: type=1400 audit(1749059918.557:580): avc: denied { write } for pid=3794 comm="syz.3.107" path="socket:[4893]" dev="sockfs" ino=4893 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 36.840437][ T29] audit: type=1400 audit(1749059918.637:581): avc: denied { getopt } for pid=3797 comm="syz.1.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.963137][ T3591] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.989967][ T3591] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.017416][ T3591] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.030559][ T3591] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.064970][ T3807] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 37.319552][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.116'. [ 37.338791][ T3820] 8021q: adding VLAN 0 to HW filter on device team1 [ 37.441507][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.449027][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.478324][ T29] audit: type=1400 audit(1749059919.277:582): avc: denied { mount } for pid=3825 comm="syz.0.119" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 37.520016][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.537043][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.584777][ T3811] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.593404][ T3811] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.601808][ T3811] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.610483][ T3811] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.773543][ T3383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 37.781709][ T3840] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 37.789490][ T3842] loop3: detected capacity change from 0 to 1024 [ 37.789874][ T3842] EXT4-fs: Ignoring removed orlov option [ 37.802768][ T3383] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 37.858549][ T3842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.872602][ T3846] netlink: 24 bytes leftover after parsing attributes in process `syz.0.127'. [ 38.017416][ T3855] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3855 comm=syz.2.130 [ 38.373600][ T3882] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3882 comm=syz.0.136 [ 38.747073][ T3899] cgroup: fork rejected by pids controller in /syz0 [ 38.875839][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.074172][ T392] bridge_slave_1: left allmulticast mode [ 39.080041][ T392] bridge_slave_1: left promiscuous mode [ 39.085825][ T392] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.110648][ T392] bridge_slave_0: left allmulticast mode [ 39.116422][ T392] bridge_slave_0: left promiscuous mode [ 39.122088][ T392] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.184527][ T392] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.202134][ T392] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.211147][ T392] bond0 (unregistering): Released all slaves [ 39.225014][ T3928] netlink: 'syz.3.149': attribute type 3 has an invalid length. [ 39.233093][ T3928] netlink: 'syz.3.149': attribute type 3 has an invalid length. [ 39.331287][ T392] tipc: Disabling bearer [ 39.336715][ T392] tipc: Left network mode [ 39.341242][ T3942] bridge: RTM_NEWNEIGH with invalid ether address [ 39.341563][ T3936] netlink: 'syz.2.152': attribute type 4 has an invalid length. [ 39.369831][ T3936] netlink: 'syz.2.152': attribute type 4 has an invalid length. [ 39.380631][ T392] hsr_slave_0: left promiscuous mode [ 39.399114][ T392] hsr_slave_1: left promiscuous mode [ 39.405575][ T392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.413811][ T392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.441257][ T3952] loop3: detected capacity change from 0 to 1024 [ 39.486578][ T3952] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.498845][ T3952] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.499501][ T392] team0 (unregistering): Port device team_slave_1 removed [ 39.528329][ T392] team0 (unregistering): Port device team_slave_0 removed [ 39.560082][ T3952] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 39.576950][ T3952] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 39.589274][ T3952] EXT4-fs (loop3): This should not happen!! Data will be lost [ 39.589274][ T3952] [ 39.594479][ T3947] ip6gre1: entered allmulticast mode [ 39.599021][ T3952] EXT4-fs (loop3): Total free blocks count 0 [ 39.610311][ T3952] EXT4-fs (loop3): Free/Dirty block details [ 39.616276][ T3952] EXT4-fs (loop3): free_blocks=4293918720 [ 39.622195][ T3952] EXT4-fs (loop3): dirty_blocks=16 [ 39.627328][ T3952] EXT4-fs (loop3): Block reservation details [ 39.633476][ T3952] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 39.643760][ T3905] chnl_net:caif_netlink_parms(): no params data found [ 39.715878][ T3968] serio: Serial port ptm0 [ 39.743789][ T3905] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.750918][ T3905] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.774314][ T3325] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.775733][ T3905] bridge_slave_0: entered allmulticast mode [ 39.790094][ T3905] bridge_slave_0: entered promiscuous mode [ 39.797548][ T3905] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.804750][ T3905] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.821177][ T3905] bridge_slave_1: entered allmulticast mode [ 39.838887][ T3905] bridge_slave_1: entered promiscuous mode [ 39.905772][ T3982] usb usb8: usbfs: process 3982 (syz.1.163) did not claim interface 0 before use [ 39.923670][ T3905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.945138][ T3997] loop4: detected capacity change from 0 to 512 [ 39.949572][ T3905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.985777][ T3997] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.008794][ T3905] team0: Port device team_slave_0 added [ 40.014918][ T3997] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 40.027518][ T3905] team0: Port device team_slave_1 added [ 40.038822][ T3997] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 40.095426][ T3905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.102484][ T3905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.128727][ T3905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.143797][ T3905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.150843][ T3905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.176998][ T3905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.282786][ T3905] hsr_slave_0: entered promiscuous mode [ 40.289020][ T3905] hsr_slave_1: entered promiscuous mode [ 40.308184][ T3905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.320394][ T3905] Cannot create hsr debugfs directory [ 40.669926][ T3905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.695346][ T3905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.714506][ T3905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.748836][ T3905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.864060][ T3905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.902210][ T3905] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.932421][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.939553][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.980356][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.987494][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.152038][ T3905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.355249][ T3905] veth0_vlan: entered promiscuous mode [ 41.376047][ T3905] veth1_vlan: entered promiscuous mode [ 41.418519][ T3905] veth0_macvtap: entered promiscuous mode [ 41.426189][ T3905] veth1_macvtap: entered promiscuous mode [ 41.439883][ T3905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.440967][ T4127] SELinux: failed to load policy [ 41.460132][ T3905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.469752][ T3905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.478598][ T3905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.487579][ T3905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.496398][ T3905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.624303][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 41.624391][ T29] audit: type=1326 audit(1749059923.427:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.654033][ T29] audit: type=1326 audit(1749059923.427:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.693491][ T29] audit: type=1326 audit(1749059923.477:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.716861][ T29] audit: type=1326 audit(1749059923.477:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.740205][ T29] audit: type=1326 audit(1749059923.477:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.763454][ T29] audit: type=1326 audit(1749059923.477:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.786861][ T29] audit: type=1326 audit(1749059923.477:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.810240][ T29] audit: type=1326 audit(1749059923.477:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.833683][ T29] audit: type=1326 audit(1749059923.477:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 41.857124][ T29] audit: type=1326 audit(1749059923.477:704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4147 comm="syz.0.145" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b207ce929 code=0x7ffc0000 [ 42.100133][ T4190] loop1: detected capacity change from 0 to 512 [ 42.108123][ T4190] ======================================================= [ 42.108123][ T4190] WARNING: The mand mount option has been deprecated and [ 42.108123][ T4190] and is ignored by this kernel. Remove the mand [ 42.108123][ T4190] option from the mount to silence this warning. [ 42.108123][ T4190] ======================================================= [ 42.166174][ T4190] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.181231][ T4190] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.200: invalid block [ 42.201602][ T4190] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.200: invalid indirect mapped block 4294967295 (level 1) [ 42.218286][ T4190] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.200: invalid indirect mapped block 4294967295 (level 1) [ 42.236553][ T4190] EXT4-fs (loop1): 2 truncates cleaned up [ 42.243249][ T4190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.275938][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.313093][ T4205] tipc: Enabling of bearer rejected, failed to enable media [ 42.431709][ T4211] Driver unsupported XDP return value 0 on prog (id 172) dev N/A, expect packet loss! [ 42.497583][ T4218] __nla_validate_parse: 4 callbacks suppressed [ 42.497600][ T4218] netlink: 4 bytes leftover after parsing attributes in process `syz.1.203'. [ 42.841545][ T4215] Set syz1 is full, maxelem 65536 reached [ 42.895906][ T4227] loop4: detected capacity change from 0 to 512 [ 42.903826][ T4227] EXT4-fs: Ignoring removed orlov option [ 42.910329][ T4227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.933513][ T4227] EXT4-fs (loop4): orphan cleanup on readonly fs [ 42.940556][ T4227] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.208: bg 0: block 248: padding at end of block bitmap is not set [ 42.956050][ T4227] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.208: Failed to acquire dquot type 1 [ 42.968337][ T4227] EXT4-fs (loop4): 1 truncate cleaned up [ 42.975874][ T4227] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.992506][ T4227] EXT4-fs (loop4): shut down requested (2) [ 42.998724][ T4227] EXT4-fs: Ignoring removed orlov option [ 43.004594][ T4227] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.021020][ T4227] syz.4.208 (4227) used greatest stack depth: 9304 bytes left [ 43.028981][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.129505][ T4238] netlink: 16 bytes leftover after parsing attributes in process `syz.4.210'. [ 43.789022][ T4294] netlink: 'syz.0.224': attribute type 13 has an invalid length. [ 43.841745][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.849027][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.925573][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.946876][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.027969][ T4294] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.037090][ T4294] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.046055][ T4294] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.054983][ T4294] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.075645][ T4320] ref_ctr increment failed for inode: 0x113 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810ae1dc00 [ 44.105611][ T4316] uprobe: syz.1.227:4316 failed to unregister, leaking uprobe [ 44.368657][ T4349] bridge: RTM_NEWNEIGH with invalid ether address [ 44.473980][ T4352] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 44.492483][ T4352] SELinux: failed to load policy [ 45.297915][ T4448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.444397][ T4460] loop4: detected capacity change from 0 to 128 [ 45.452963][ T4460] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 45.479204][ T4448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.510784][ T4462] loop4: detected capacity change from 0 to 2048 [ 45.535964][ T4462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 45.668585][ T4466] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 45.684413][ T4466] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 45.696917][ T4466] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.696917][ T4466] [ 45.706607][ T4466] EXT4-fs (loop4): Total free blocks count 0 [ 45.712637][ T4466] EXT4-fs (loop4): Free/Dirty block details [ 45.718557][ T4466] EXT4-fs (loop4): free_blocks=2415919104 [ 45.724520][ T4466] EXT4-fs (loop4): dirty_blocks=2384 [ 45.729899][ T4466] EXT4-fs (loop4): Block reservation details [ 45.732881][ T4448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.736149][ T4466] EXT4-fs (loop4): i_reserved_data_blocks=149 [ 45.923335][ T392] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 45.999331][ T4448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.046219][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.257'. [ 46.119820][ T4483] ================================================================== [ 46.127967][ T4483] BUG: KCSAN: data-race in __io_arm_poll_handler / __tty_hangup [ 46.135658][ T4483] [ 46.137999][ T4483] write to 0xffff888125e869c8 of 8 bytes by task 4480 on cpu 1: [ 46.145655][ T4483] __tty_hangup+0x1c2/0x510 [ 46.150202][ T4483] tty_vhangup+0x17/0x20 [ 46.154482][ T4483] pty_close+0x266/0x290 [ 46.158767][ T4483] tty_release+0x1fc/0xb10 [ 46.163217][ T4483] __fput+0x29b/0x650 [ 46.167326][ T4483] ____fput+0x1c/0x30 [ 46.171349][ T4483] task_work_run+0x12e/0x1a0 [ 46.175974][ T4483] exit_to_user_mode_loop+0xe4/0x100 [ 46.181313][ T4483] do_syscall_64+0x1d6/0x200 [ 46.185946][ T4483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.191876][ T4483] [ 46.194224][ T4483] read to 0xffff888125e869c8 of 8 bytes by task 4483 on cpu 0: [ 46.201806][ T4483] __io_arm_poll_handler+0x1be/0xb70 [ 46.207135][ T4483] io_poll_add+0x69/0xe0 [ 46.211410][ T4483] __io_issue_sqe+0xfe/0x2e0 [ 46.216028][ T4483] io_issue_sqe+0x53/0x970 [ 46.220472][ T4483] io_submit_sqes+0x667/0xfd0 [ 46.225171][ T4483] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 46.230742][ T4483] __x64_sys_io_uring_enter+0x78/0x90 [ 46.236145][ T4483] x64_sys_call+0x28c8/0x2fb0 [ 46.240916][ T4483] do_syscall_64+0xd2/0x200 [ 46.245430][ T4483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.251412][ T4483] [ 46.253789][ T4483] value changed: 0xffffffff8589fd60 -> 0xffffffff8589fc50 [ 46.260897][ T4483] [ 46.263224][ T4483] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 46.269474][ T4483] CPU: 0 UID: 0 PID: 4483 Comm: syz.3.256 Not tainted 6.15.0-syzkaller-11802-g1af80d00e1e0 #0 PREEMPT(voluntary) [ 46.281472][ T4483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.291543][ T4483] ================================================================== [ 46.385576][ T4448] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.420249][ T4448] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.454658][ T4448] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.478677][ T4448] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.847811][ T41] bridge_slave_1: left allmulticast mode [ 46.853688][ T41] bridge_slave_1: left promiscuous mode [ 46.859479][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.868863][ T41] bridge_slave_0: left allmulticast mode [ 46.874677][ T41] bridge_slave_0: left promiscuous mode [ 46.880371][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.934247][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.943491][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.952470][ T41] bond0 (unregistering): Released all slaves [ 47.008919][ T41] hsr_slave_0: left promiscuous mode [ 47.015084][ T41] hsr_slave_1: left promiscuous mode [ 47.020670][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.030484][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.063625][ T41] team0 (unregistering): Port device team_slave_1 removed [ 47.072892][ T41] team0 (unregistering): Port device team_slave_0 removed [ 47.583826][ T41] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.604374][ T41] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.664694][ T41] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.713751][ T41] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.792365][ T41] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.864369][ T41] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.914010][ T41] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.984208][ T41] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.053519][ T41] bridge_slave_1: left allmulticast mode [ 48.059408][ T41] bridge_slave_1: left promiscuous mode [ 48.065166][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.074532][ T41] bridge_slave_0: left allmulticast mode [ 48.080211][ T41] bridge_slave_0: left promiscuous mode [ 48.085917][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.095610][ T41] bridge_slave_1: left allmulticast mode [ 48.101359][ T41] bridge_slave_1: left promiscuous mode [ 48.107175][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.115283][ T41] bridge_slave_0: left allmulticast mode [ 48.120951][ T41] bridge_slave_0: left promiscuous mode [ 48.126842][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.234104][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.243385][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.252412][ T41] bond0 (unregistering): Released all slaves [ 48.383339][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.392863][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.402311][ T41] bond0 (unregistering): Released all slaves [ 48.421755][ T41] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 48.493311][ T41] bond0 (unregistering): Released all slaves [ 48.547895][ T41] hsr_slave_0: left promiscuous mode [ 48.554342][ T41] hsr_slave_1: left promiscuous mode [ 48.560111][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.568718][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.577729][ T41] hsr_slave_0: left promiscuous mode [ 48.583972][ T41] hsr_slave_1: left promiscuous mode [ 48.589631][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.597183][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.605963][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.613422][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.621798][ T41] hsr_slave_0: left promiscuous mode [ 48.627767][ T41] hsr_slave_1: left promiscuous mode [ 48.636176][ T41] veth1_macvtap: left promiscuous mode [ 48.641632][ T41] veth0_macvtap: left promiscuous mode [ 48.647751][ T41] veth1_vlan: left promiscuous mode [ 48.653009][ T41] veth0_vlan: left promiscuous mode [ 48.715177][ T41] team0 (unregistering): Port device team_slave_1 removed [ 48.723967][ T41] team0 (unregistering): Port device team_slave_0 removed [ 48.763505][ T41] team0 (unregistering): Port device team_slave_1 removed [ 48.772587][ T41] team0 (unregistering): Port device team_slave_0 removed [ 50.576248][ T41] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.612906][ T41] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.653271][ T41] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.713464][ T41] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.791665][ T41] bridge_slave_1: left allmulticast mode [ 50.797381][ T41] bridge_slave_1: left promiscuous mode [ 50.803104][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.810612][ T41] bridge_slave_0: left allmulticast mode [ 50.816310][ T41] bridge_slave_0: left promiscuous mode [ 50.822019][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.924424][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.934289][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.943902][ T41] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 50.954159][ T41] bond0 (unregistering): Released all slaves [ 51.003700][ T41] tipc: Left network mode [ 51.011191][ T41] hsr_slave_0: left promiscuous mode [ 51.017551][ T41] hsr_slave_1: left promiscuous mode [ 51.023748][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.031162][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.039159][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.046936][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.058199][ T41] veth1_macvtap: left promiscuous mode [ 51.063752][ T41] veth0_macvtap: left promiscuous mode [ 51.069358][ T41] veth1_vlan: left promiscuous mode [ 51.074782][ T41] veth0_vlan: left promiscuous mode [ 51.122113][ T41] team0 (unregistering): Port device team_slave_1 removed [ 51.130950][ T41] team0 (unregistering): Port device team_slave_0 removed