last executing test programs: 23.916564572s ago: executing program 1 (id=179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x44, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 23.678813532s ago: executing program 1 (id=185): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='rxrpc_peer\x00', r1, 0x0, 0xfffffffffc}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r0}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 23.631960155s ago: executing program 1 (id=186): r0 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000007c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x28}, 0x48, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6075ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r4, r3, r3, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 23.598677426s ago: executing program 1 (id=189): r0 = perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4b3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000000940), 0x0) 23.549747848s ago: executing program 1 (id=192): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 23.452204492s ago: executing program 1 (id=195): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0)=0x5, 0x4) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000240)={0x5, 0x57, "f76cd25a2b8596512f71d1ae8a3a5817f56fd34ba3f554d2d158e4d0daab861e58a91edae54f4a2b2ae7372ff8ed5d3002f6530e9b150da08c654fc8478c29bf84b93af717fa0c08bb7d8bca387ed9d168991ff16e9ab5"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 8.325199809s ago: executing program 32 (id=195): r0 = mq_open(&(0x7f0000000000)='batadv_slave_1\xbb', 0x8c2, 0x30, &(0x7f0000000080)={0x3, 0x8, 0x6, 0xc07}) r1 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x10) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f00000001c0)=0x5, 0x4) mq_getsetattr(r0, &(0x7f0000000040)={0x0, 0x40, 0x4, 0xffff}, 0x0) mq_timedreceive(r0, &(0x7f0000000100)=""/90, 0x5a, 0x0, 0x0) ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000240)={0x5, 0x57, "f76cd25a2b8596512f71d1ae8a3a5817f56fd34ba3f554d2d158e4d0daab861e58a91edae54f4a2b2ae7372ff8ed5d3002f6530e9b150da08c654fc8478c29bf84b93af717fa0c08bb7d8bca387ed9d168991ff16e9ab5"}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10) mq_timedsend(r0, 0x0, 0x0, 0x5, 0x0) 2.349295408s ago: executing program 2 (id=657): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "bb28ced7b820ec2d", "ca08bd91171e6405c84cdc6e52f57229", "f5ce6f37", "fe017c9f4e95f742"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 2.348771668s ago: executing program 2 (id=659): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$int_out(r1, 0x2, &(0x7f0000000180)) 2.326840089s ago: executing program 2 (id=661): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000d80)={0x3, 0x1c88000000}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[&(0x7f0000000340)='^-%-\\x\\$})\'!&}*', &(0x7f0000000440)='syz0']}, 0x0) 2.264234092s ago: executing program 2 (id=662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0x1}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20020804}, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$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") chdir(&(0x7f00000001c0)='./file0\x00') quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000000)='./file0\x00') 2.137177008s ago: executing program 2 (id=667): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x451e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x3a82}, 0x0, 0x0, 0x8, 0x1, 0x8, 0x2020005, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$igmp(0x2, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='netlink_extack\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r2], 0x38}}, 0x0) 2.127757918s ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e2b, 0x2, @empty, 0x5a60}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000400)={r4}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r4, r2}) sendmmsg$inet(r3, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="e8", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000700)="81", 0x1}], 0x1}}], 0x2, 0x20004050) 2.045251582s ago: executing program 0 (id=672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000005f80)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1ff, 0x0, 0x20000001, 0x4, 0x2}, 0x1, r5}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20}, 0x0) 2.044930872s ago: executing program 2 (id=673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) sendmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{&(0x7f00000000c0)=@l2tp6={0xa, 0x0, 0x1000, @local, 0x100a, 0x1}, 0x80, &(0x7f0000000040)=[{&(0x7f00000002c0)="3ee55d9613dd35bcdfb3b25864d1b34187ac57c05cc429e8f909522b22dc45acb9a3ae5618f1bddfa0c9ee97042efcf0efca46904dcb617cd6f4fcf253cf31288b6e6fab60a81b08635fc1cb664cac2f8b0400000000000000a9", 0x5a}, {&(0x7f0000000240)="98b8e92920ff322718f7653dec4e8f9f63aa25889be6163d40b3c2eb01f1f43d9211df86eeb17be6b4d4d786eaf69b0b077e821509028bc56d8d7de8dd5b055001c292ee15059e1f1af28f54605f", 0x4e}], 0x2}}], 0x1, 0xc88c4) 1.937279097s ago: executing program 0 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0}, 0x94) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x0}, &(0x7f0000000100)=0x14) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x1, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) vmsplice(r4, &(0x7f0000000080)=[{&(0x7f0000000500)='|', 0x1}], 0x1, 0x0) 1.204835288s ago: executing program 4 (id=706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) 1.121227742s ago: executing program 4 (id=707): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fc, &(0x7f0000001300)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f0000002240)="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", 0xfffffffffffffee9, 0x4004085, 0x0, 0x49) 1.114970962s ago: executing program 0 (id=708): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x20040880}, 0x4840) 1.074414194s ago: executing program 0 (id=709): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 719.728549ms ago: executing program 3 (id=716): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, 0x0, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r2}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) 695.3413ms ago: executing program 3 (id=717): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0x80000}], 0x1, 0x10022, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0xb, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 508.757658ms ago: executing program 3 (id=720): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x0, &(0x7f0000000780)}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4a, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd4d, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) 241.22311ms ago: executing program 4 (id=723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0100000007000000e27f000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b706000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket(0x200000000000011, 0x2, 0xd) bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000500)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x18, 0x0, @wg=@data={0x4, 0x101, 0x430a}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) 236.60507ms ago: executing program 4 (id=725): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000240), 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) listen(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 177.520843ms ago: executing program 3 (id=727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) 177.082663ms ago: executing program 0 (id=728): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000a80)=@newqdisc={0x64, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x8001, 0x7, 0x7fff, 0x5, 0x3ff, 0x401432d}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xffffffff, 0xfffffff8, 0xffff0001, 0x3}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 176.802423ms ago: executing program 4 (id=729): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) 121.223506ms ago: executing program 4 (id=731): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0xb0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) 120.944185ms ago: executing program 5 (id=732): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0xa, 0x80001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 120.793815ms ago: executing program 3 (id=733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r2, &(0x7f0000005640)=ANY=[@ANYRES16=r4], 0x69) close(r2) execve(&(0x7f0000019140)='./file0\x00', 0x0, 0x0) 106.880456ms ago: executing program 5 (id=734): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x8) getsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, &(0x7f0000000000)) close(0x3) socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r2, 0x1, 0x70bd25, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0xfffffff9, 0x1, 0x5}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 95.208656ms ago: executing program 5 (id=735): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000008085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r4, @ANYBLOB="08002b000800000005002f0000000000050029000000000005002d000000000042f83000010000002b3a8a2af95dd32375f8e31db2ef1f5daa1867ce34639e94bfc8670c787d19d3a8b847868ea36bb20cdd3eef5ec06484ac28a963e261055da6806abf3097a9ff26102123b8f7947711ab20f8806feae2a14cadaa9e5ddfdc7949a225ee8e6bc948278b48b744c43fe2c00681ee8abf6bb2c41109aa5ab9b540ccaab699e3079e0ba156fe4e3d74339cd18601355388483a3e88c9fff2c24c3d631663ad6af7280714df1ea28d2d70fcff4d0a2ea25c9564b5f6298d4604e452c5520f3eb637dc85bc93451a2c197a84a23e2a06182244eada82a18940975a24dcb35c9cf9a8a549115db4c829078eb879a3fe94d75fd8d98cb4c102458194dcac9f0ca2de5ec253e8df91694275ae066c539c071a91b03d141b6f343a8e9c4b95e3bb05c5db7f1595ac84497b0b04992179d7751124a8b9b55c5b72913fed0e6c8b6c46daa4cc5439a7fa853731c2fcf46b5e334ebb8caa8d4e03d361b61bb28645984e920aa09f6dbc1fd7b93f38fc8a92"], 0x4c}}, 0x18) 88.568717ms ago: executing program 3 (id=736): fsopen(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)=ANY=[]) 8.04717ms ago: executing program 5 (id=737): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x101, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1103, 0x21e}, &(0x7f0000000240), &(0x7f0000000340)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x35, {0x5, 0x1}, 0x1}, 0x1) 7.57906ms ago: executing program 5 (id=738): bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=739): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x1100, 0x0, 0xfffffffc, 0x4, 0x2, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 20.741491][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 20.741508][ T29] audit: type=1400 audit(1765259224.535:57): avc: denied { transition } for pid=3192 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.770397][ T29] audit: type=1400 audit(1765259224.535:58): avc: denied { noatsecure } for pid=3192 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.790113][ T29] audit: type=1400 audit(1765259224.535:59): avc: denied { write } for pid=3192 comm="sh" path="pipe:[2215]" dev="pipefs" ino=2215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 20.812632][ T29] audit: type=1400 audit(1765259224.535:60): avc: denied { rlimitinh } for pid=3192 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.831387][ T29] audit: type=1400 audit(1765259224.535:61): avc: denied { siginh } for pid=3192 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 23.144609][ T29] audit: type=1400 audit(1765259226.935:62): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.166621][ T29] audit: type=1400 audit(1765259226.935:63): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.189183][ T29] audit: type=1400 audit(1765259226.935:64): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.212074][ T29] audit: type=1400 audit(1765259226.935:65): avc: denied { search } for pid=3198 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.235041][ T29] audit: type=1400 audit(1765259226.945:66): avc: denied { read open } for pid=3199 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.213' (ED25519) to the list of known hosts. [ 29.459806][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 29.459823][ T29] audit: type=1400 audit(1765259233.255:70): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.461081][ T3304] cgroup: Unknown subsys name 'net' [ 29.466311][ T29] audit: type=1400 audit(1765259233.255:71): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.516397][ T29] audit: type=1400 audit(1765259233.285:72): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.655894][ T3304] cgroup: Unknown subsys name 'cpuset' [ 29.662184][ T3304] cgroup: Unknown subsys name 'rlimit' [ 29.774018][ T29] audit: type=1400 audit(1765259233.565:73): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.797638][ T29] audit: type=1400 audit(1765259233.575:74): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.818210][ T29] audit: type=1400 audit(1765259233.575:75): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.838746][ T29] audit: type=1400 audit(1765259233.575:76): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.859069][ T29] audit: type=1400 audit(1765259233.585:77): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.868707][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.884042][ T29] audit: type=1400 audit(1765259233.585:78): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.916113][ T29] audit: type=1400 audit(1765259233.585:79): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.954009][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.127200][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 31.214272][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.225641][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 31.261809][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 31.297716][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.304900][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.312039][ T3314] bridge_slave_0: entered allmulticast mode [ 31.318457][ T3314] bridge_slave_0: entered promiscuous mode [ 31.330640][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 31.347318][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.354394][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.361522][ T3314] bridge_slave_1: entered allmulticast mode [ 31.368038][ T3314] bridge_slave_1: entered promiscuous mode [ 31.407708][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.414927][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.422245][ T3315] bridge_slave_0: entered allmulticast mode [ 31.429001][ T3315] bridge_slave_0: entered promiscuous mode [ 31.450206][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.457337][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.464492][ T3315] bridge_slave_1: entered allmulticast mode [ 31.471024][ T3315] bridge_slave_1: entered promiscuous mode [ 31.483421][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.509982][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.519099][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.526293][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.533750][ T3316] bridge_slave_0: entered allmulticast mode [ 31.540201][ T3316] bridge_slave_0: entered promiscuous mode [ 31.553941][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.561031][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.568219][ T3323] bridge_slave_0: entered allmulticast mode [ 31.574763][ T3323] bridge_slave_0: entered promiscuous mode [ 31.586267][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.593343][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.600552][ T3316] bridge_slave_1: entered allmulticast mode [ 31.607076][ T3316] bridge_slave_1: entered promiscuous mode [ 31.619550][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.628684][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.635818][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.643074][ T3323] bridge_slave_1: entered allmulticast mode [ 31.649569][ T3323] bridge_slave_1: entered promiscuous mode [ 31.671445][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.686626][ T3314] team0: Port device team_slave_0 added [ 31.697375][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.704525][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.711824][ T3317] bridge_slave_0: entered allmulticast mode [ 31.718325][ T3317] bridge_slave_0: entered promiscuous mode [ 31.734933][ T3314] team0: Port device team_slave_1 added [ 31.741750][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.750981][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.758077][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.765482][ T3317] bridge_slave_1: entered allmulticast mode [ 31.771830][ T3317] bridge_slave_1: entered promiscuous mode [ 31.784395][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.799942][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.814916][ T3315] team0: Port device team_slave_0 added [ 31.821474][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.831326][ T3315] team0: Port device team_slave_1 added [ 31.860691][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.867706][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.893612][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.910184][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.930490][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.937505][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.963429][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.974833][ T3316] team0: Port device team_slave_0 added [ 31.981528][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.991477][ T3316] team0: Port device team_slave_1 added [ 31.997896][ T3323] team0: Port device team_slave_0 added [ 32.003711][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.010821][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.036875][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.061146][ T3323] team0: Port device team_slave_1 added [ 32.067056][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.074035][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.100011][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.137524][ T3317] team0: Port device team_slave_0 added [ 32.143349][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.150325][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.176260][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.198912][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.206019][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.231953][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.244273][ T3317] team0: Port device team_slave_1 added [ 32.250144][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.257123][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.283091][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.303808][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.310818][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.336740][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.357073][ T3314] hsr_slave_0: entered promiscuous mode [ 32.363018][ T3314] hsr_slave_1: entered promiscuous mode [ 32.385294][ T3315] hsr_slave_0: entered promiscuous mode [ 32.391395][ T3315] hsr_slave_1: entered promiscuous mode [ 32.397460][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.403189][ T3315] Cannot create hsr debugfs directory [ 32.409830][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.416900][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.442854][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.454518][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.461606][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.487567][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.538911][ T3323] hsr_slave_0: entered promiscuous mode [ 32.545440][ T3323] hsr_slave_1: entered promiscuous mode [ 32.551353][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 32.557143][ T3323] Cannot create hsr debugfs directory [ 32.565723][ T3316] hsr_slave_0: entered promiscuous mode [ 32.571700][ T3316] hsr_slave_1: entered promiscuous mode [ 32.577643][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 32.583377][ T3316] Cannot create hsr debugfs directory [ 32.614644][ T3317] hsr_slave_0: entered promiscuous mode [ 32.621000][ T3317] hsr_slave_1: entered promiscuous mode [ 32.626860][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 32.632586][ T3317] Cannot create hsr debugfs directory [ 32.825250][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.837638][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.848760][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.857471][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.874865][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.884196][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.894542][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.906293][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.940950][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.953548][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.968648][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.986521][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.016403][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.029509][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.042351][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.054078][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.072810][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.084044][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.093413][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.102943][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.115991][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.140368][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.154035][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.167281][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.174333][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.192555][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.199747][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.210674][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.226040][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.233141][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.255175][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.262278][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.292799][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.321781][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.346838][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.353964][ T1722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.374897][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.387736][ T1722] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.394826][ T1722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.417383][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.436886][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.447966][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.463632][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.470732][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.483999][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.494854][ T1722] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.502007][ T1722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.522387][ T1722] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.529588][ T1722] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.541692][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.557201][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.564287][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.660712][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.777997][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.789040][ T3323] veth0_vlan: entered promiscuous mode [ 33.811870][ T3314] veth0_vlan: entered promiscuous mode [ 33.821114][ T3323] veth1_vlan: entered promiscuous mode [ 33.840114][ T3316] veth0_vlan: entered promiscuous mode [ 33.847535][ T3314] veth1_vlan: entered promiscuous mode [ 33.858618][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.878988][ T3316] veth1_vlan: entered promiscuous mode [ 33.903051][ T3314] veth0_macvtap: entered promiscuous mode [ 33.911396][ T3323] veth0_macvtap: entered promiscuous mode [ 33.926031][ T3316] veth0_macvtap: entered promiscuous mode [ 33.932823][ T3323] veth1_macvtap: entered promiscuous mode [ 33.940327][ T3314] veth1_macvtap: entered promiscuous mode [ 33.951375][ T3316] veth1_macvtap: entered promiscuous mode [ 33.970056][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.985921][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.999769][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.017402][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.027675][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.041584][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.056522][ T1722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.065935][ T3315] veth0_vlan: entered promiscuous mode [ 34.075945][ T1722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.096717][ T3317] veth0_vlan: entered promiscuous mode [ 34.102456][ T1722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.112352][ T3315] veth1_vlan: entered promiscuous mode [ 34.119480][ T1722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.131798][ T1722] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.140755][ T1722] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.156806][ T3317] veth1_vlan: entered promiscuous mode [ 34.163059][ T1722] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.175719][ T1722] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.193042][ T1722] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.194008][ T3323] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.206563][ T3317] veth0_macvtap: entered promiscuous mode [ 34.224360][ T1837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.243709][ T1837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.252634][ T1722] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.264289][ T3317] veth1_macvtap: entered promiscuous mode [ 34.300408][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.330337][ T3315] veth0_macvtap: entered promiscuous mode [ 34.343660][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.357999][ T3315] veth1_macvtap: entered promiscuous mode [ 34.372334][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.402984][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.421679][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.434608][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.453878][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.481792][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.501518][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.532724][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.543090][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 34.543156][ T29] audit: type=1400 audit(1765259238.335:112): avc: denied { mount } for pid=3497 comm="syz.4.7" name="/" dev="ramfs" ino=5237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.585467][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.597376][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.610764][ T29] audit: type=1400 audit(1765259238.405:113): avc: denied { open } for pid=3502 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.657849][ T3507] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9'. [ 34.666906][ T29] audit: type=1400 audit(1765259238.405:114): avc: denied { kernel } for pid=3502 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.686221][ T29] audit: type=1400 audit(1765259238.405:115): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.710411][ T29] audit: type=1400 audit(1765259238.405:116): avc: denied { open } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.734530][ T29] audit: type=1400 audit(1765259238.405:117): avc: denied { ioctl } for pid=3314 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=104 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 34.840671][ T3513] netlink: 204 bytes leftover after parsing attributes in process `syz.2.10'. [ 34.873535][ T29] audit: type=1400 audit(1765259238.665:118): avc: denied { create } for pid=3515 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 34.880823][ T3514] loop4: detected capacity change from 0 to 512 [ 34.905777][ T3514] EXT4-fs: Ignoring removed oldalloc option [ 34.910819][ T3516] loop0: detected capacity change from 0 to 512 [ 34.938650][ T3516] ext4: Unknown parameter 'fowner' [ 34.950421][ T29] audit: type=1400 audit(1765259238.695:119): avc: denied { create } for pid=3515 comm="syz.0.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 34.970165][ T29] audit: type=1400 audit(1765259238.735:120): avc: denied { create } for pid=3517 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.990602][ T29] audit: type=1400 audit(1765259238.745:121): avc: denied { write } for pid=3517 comm="syz.1.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 35.053600][ T3531] loop3: detected capacity change from 0 to 512 [ 35.060955][ T3514] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.075062][ T3531] EXT4-fs (loop3): 1 truncate cleaned up [ 35.081445][ T3531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.124442][ T3514] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.191392][ T3542] mmap: syz.1.20 (3542) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.228099][ T3531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.17: bg 0: block 465: padding at end of block bitmap is not set [ 35.247698][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.305677][ T3531] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 35.318292][ T3531] EXT4-fs (loop3): This should not happen!! Data will be lost [ 35.318292][ T3531] [ 35.328057][ T3531] EXT4-fs (loop3): Total free blocks count 0 [ 35.334064][ T3531] EXT4-fs (loop3): Free/Dirty block details [ 35.340023][ T3531] EXT4-fs (loop3): free_blocks=0 [ 35.345070][ T3531] EXT4-fs (loop3): dirty_blocks=2372 [ 35.350409][ T3531] EXT4-fs (loop3): Block reservation details [ 35.356434][ T3531] EXT4-fs (loop3): i_reserved_data_blocks=2372 [ 35.418641][ T3549] xt_connbytes: Forcing CT accounting to be enabled [ 35.492363][ T3549] Cannot find set identified by id 0 to match [ 35.501394][ T3531] syz.3.17 (3531) used greatest stack depth: 10200 bytes left [ 35.551255][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 316 with error 28 [ 35.573619][ T23] IPVS: starting estimator thread 0... [ 35.665804][ T3560] IPVS: using max 2304 ests per chain, 115200 per kthread [ 35.702171][ T3572] netlink: 96 bytes leftover after parsing attributes in process `syz.4.32'. [ 35.740481][ T3575] loop4: detected capacity change from 0 to 512 [ 35.766198][ T3575] EXT4-fs: Mount option(s) incompatible with ext3 [ 35.840501][ T3581] syz.2.37 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.856132][ T3585] vhci_hcd vhci_hcd.3: invalid port number 9 [ 35.894230][ T3588] loop2: detected capacity change from 0 to 1024 [ 35.910422][ T3588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.948212][ T3588] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.090103][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.174031][ T3614] netlink: 'syz.1.50': attribute type 1 has an invalid length. [ 36.197042][ T3614] bond1 (unregistering): Released all slaves [ 36.902965][ T3647] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3647 comm=syz.4.59 [ 36.986920][ T3651] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.056305][ T3651] Zero length message leads to an empty skb [ 37.107215][ T3643] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 37.115575][ T3643] vhci_hcd vhci_hcd.2: invalid port number 96 [ 37.121695][ T3643] vhci_hcd vhci_hcd.2: default hub control req: 0311 v0005 i0060 l7 [ 37.137352][ T3663] netlink: 'syz.3.66': attribute type 1 has an invalid length. [ 37.416472][ T3686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.77'. [ 37.443230][ T3686] netlink: 32 bytes leftover after parsing attributes in process `syz.4.77'. [ 37.751918][ T3703] loop0: detected capacity change from 0 to 512 [ 37.771829][ T3703] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.784949][ T3703] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 37.819881][ T3703] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.83: corrupted in-inode xattr: invalid ea_ino [ 37.838423][ T3703] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.83: couldn't read orphan inode 15 (err -117) [ 37.851550][ T3703] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.894703][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.282670][ T3723] loop1: detected capacity change from 0 to 256 [ 38.471337][ C1] hrtimer: interrupt took 28534 ns [ 38.545837][ T3744] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 38.583434][ T3744] team0: Failed to send options change via netlink (err -105) [ 38.590976][ T3744] team0: Port device dummy0 added [ 38.625413][ T3755] netlink: 'syz.3.101': attribute type 10 has an invalid length. [ 38.679091][ T3755] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 38.726842][ T3755] team0: Failed to send options change via netlink (err -105) [ 38.745202][ T3755] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 38.770660][ T3755] team0: Port device dummy0 removed [ 38.794311][ T3755] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 38.823821][ T3744] syz.3.101 (3744) used greatest stack depth: 9968 bytes left [ 38.859854][ T3767] loop4: detected capacity change from 0 to 256 [ 38.867439][ T3765] netlink: 4 bytes leftover after parsing attributes in process `syz.0.109'. [ 38.894246][ T3765] hsr_slave_0: left promiscuous mode [ 38.933708][ T3765] hsr_slave_1: left promiscuous mode [ 38.989711][ T3774] loop3: detected capacity change from 0 to 1024 [ 39.007558][ T3774] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.018552][ T3774] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.030496][ T3774] JBD2: no valid journal superblock found [ 39.036354][ T3774] EXT4-fs (loop3): Could not load journal inode [ 39.072553][ T3774] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 39.082451][ T3782] ref_ctr increment failed for inode: 0x72 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888104595e80 [ 39.244965][ T3796] netlink: 96 bytes leftover after parsing attributes in process `syz.1.124'. [ 39.263566][ T3800] syz.0.126 uses obsolete (PF_INET,SOCK_PACKET) [ 39.271064][ T3800] capability: warning: `syz.0.126' uses 32-bit capabilities (legacy support in use) [ 39.464887][ T3816] loop4: detected capacity change from 0 to 164 [ 39.489358][ T3816] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.518521][ T3816] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 39.616890][ T29] kauditd_printk_skb: 101 callbacks suppressed [ 39.616908][ T29] audit: type=1400 audit(1765259243.415:223): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.661581][ T29] audit: type=1400 audit(1765259243.445:224): avc: denied { create } for pid=3820 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.680985][ T29] audit: type=1400 audit(1765259243.445:225): avc: denied { setopt } for pid=3820 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.700271][ T29] audit: type=1400 audit(1765259243.445:226): avc: denied { ioctl } for pid=3820 comm="syz.1.134" path="socket:[7221]" dev="sockfs" ino=7221 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.724721][ T29] audit: type=1400 audit(1765259243.445:227): avc: denied { write } for pid=3820 comm="syz.1.134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 39.745323][ T29] audit: type=1400 audit(1765259243.455:228): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 39.858285][ T3827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.985674][ T29] audit: type=1400 audit(1765259243.775:229): avc: denied { mounton } for pid=3826 comm="syz.2.137" path="/18/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 40.083070][ T3317] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 40.120567][ T29] audit: type=1400 audit(1765259243.825:230): avc: denied { write } for pid=3833 comm="syz.4.138" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.143933][ T29] audit: type=1400 audit(1765259243.825:231): avc: denied { open } for pid=3833 comm="syz.4.138" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 40.167619][ T29] audit: type=1400 audit(1765259243.875:232): avc: denied { remove_name } for pid=3317 comm="syz-executor" name="lost+found" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 40.193284][ T3317] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 40.223943][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.346790][ T3847] Driver unsupported XDP return value 0 on prog (id 120) dev N/A, expect packet loss! [ 40.798521][ T3877] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 41.024103][ T3886] set_capacity_and_notify: 2 callbacks suppressed [ 41.024124][ T3886] loop4: detected capacity change from 0 to 512 [ 41.043223][ T3890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.066182][ T3890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.076889][ T3886] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 41.084996][ T3886] EXT4-fs (loop4): orphan cleanup on readonly fs [ 41.110056][ T3886] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.133176][ T3897] loop1: detected capacity change from 0 to 128 [ 41.139796][ T3886] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 41.155314][ T3897] FAT-fs (loop1): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 41.165093][ T3886] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.162: bg 0: block 40: padding at end of block bitmap is not set [ 41.183027][ T3886] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 41.194770][ T3886] EXT4-fs (loop4): 1 truncate cleaned up [ 41.201029][ T3886] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.224922][ T3886] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.288631][ T3905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 41.298359][ T3905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.167'. [ 41.359333][ T3911] loop1: detected capacity change from 0 to 164 [ 41.368395][ T3908] loop2: detected capacity change from 0 to 512 [ 41.385365][ T3908] EXT4-fs: Ignoring removed oldalloc option [ 41.392792][ T3911] process 'syz.1.170' launched '/dev/fd/5' with NULL argv: empty string added [ 41.404443][ T3908] EXT4-fs (loop2): 1 truncate cleaned up [ 41.410706][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.415247][ T3565] Bluetooth: hci0: command 0x1003 tx timeout [ 41.424622][ T3908] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.439956][ T3911] syz.1.170: attempt to access beyond end of device [ 41.439956][ T3911] loop1: rw=8912896, sector=263328, nr_sectors = 4 limit=164 [ 41.454068][ T3911] syz.1.170: attempt to access beyond end of device [ 41.454068][ T3911] loop1: rw=8388608, sector=263328, nr_sectors = 4 limit=164 [ 41.513535][ T3920] loop4: detected capacity change from 0 to 512 [ 41.521718][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.533222][ T3920] ======================================================= [ 41.533222][ T3920] WARNING: The mand mount option has been deprecated and [ 41.533222][ T3920] and is ignored by this kernel. Remove the mand [ 41.533222][ T3920] option from the mount to silence this warning. [ 41.533222][ T3920] ======================================================= [ 41.597142][ T3920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.620960][ T3928] loop2: detected capacity change from 0 to 1024 [ 41.621955][ T3920] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.641417][ T3928] EXT4-fs: Ignoring removed bh option [ 41.650433][ T3920] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.174: corrupted inode contents [ 41.662749][ T3928] EXT4-fs: inline encryption not supported [ 41.667949][ T3920] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #2: comm syz.4.174: mark_inode_dirty error [ 41.681635][ T3928] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.692851][ T3928] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 41.711487][ T3920] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #2: comm syz.4.174: corrupted inode contents [ 41.714284][ T3928] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 2: comm syz.2.177: lblock 2 mapped to illegal pblock 2 (length 1) [ 41.740164][ T3928] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 48: comm syz.2.177: lblock 0 mapped to illegal pblock 48 (length 1) [ 41.755957][ T3928] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.177: Failed to acquire dquot type 0 [ 41.777698][ T3928] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 41.787859][ T3928] EXT4-fs error (device loop2): ext4_evict_inode:253: inode #11: comm syz.2.177: mark_inode_dirty error [ 41.799589][ T3928] EXT4-fs warning (device loop2): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 41.810951][ T3928] EXT4-fs (loop2): 1 orphan inode deleted [ 41.817610][ T3928] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.830506][ T60] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 41.847184][ T60] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:4: Failed to release dquot type 0 [ 41.859999][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.888011][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.903808][ T3317] EXT4-fs error (device loop2): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 41.917233][ T3317] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 41.927409][ T3317] EXT4-fs error (device loop2): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 42.133898][ T3965] loop1: detected capacity change from 0 to 2048 [ 42.160154][ T3965] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.401185][ T3985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.200'. [ 42.432032][ T3988] loop2: detected capacity change from 0 to 512 [ 42.439174][ T3988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.461014][ T3988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.473837][ T3988] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.523938][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.647832][ T4000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 42.697452][ T4002] netlink: 168 bytes leftover after parsing attributes in process `syz.2.208'. [ 42.822809][ T4012] netlink: 12 bytes leftover after parsing attributes in process `syz.0.213'. [ 42.954856][ T4018] loop4: detected capacity change from 0 to 512 [ 43.010613][ T4018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.024088][ T4018] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.024591][ T4018] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.285467][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 43.442851][ T4055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 43.676875][ T4065] wireguard0: entered promiscuous mode [ 43.682373][ T4065] wireguard0: entered allmulticast mode [ 43.778481][ T4070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.237'. [ 43.877723][ T4076] loop4: detected capacity change from 0 to 512 [ 43.933196][ T4076] EXT4-fs: Ignoring removed bh option [ 43.949209][ T4076] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.975427][ T4076] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.016172][ T4080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.037644][ T4076] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.241: corrupted inode contents [ 44.062783][ T4076] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #18: comm syz.4.241: mark_inode_dirty error [ 44.093333][ T4076] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #18: comm syz.4.241: corrupted inode contents [ 44.106428][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.143078][ T4076] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3000: inode #18: comm syz.4.241: mark_inode_dirty error [ 44.157026][ T4076] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3003: inode #18: comm syz.4.241: mark inode dirty (error -117) [ 44.184316][ T4076] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -117) [ 44.316779][ T4104] syzkaller0: entered allmulticast mode [ 44.329844][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.339337][ T4104] syzkaller0 (unregistering): left allmulticast mode [ 44.385802][ T4110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 44.588136][ T4119] bridge: RTM_NEWNEIGH with invalid ether address [ 45.347715][ T4123] Set syz1 is full, maxelem 65536 reached [ 45.366940][ T4145] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 45.379140][ T4143] hsr_slave_0: left promiscuous mode [ 45.395009][ T4143] hsr_slave_1: left promiscuous mode [ 45.406964][ T4145] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.467728][ T4148] EXT4-fs (loop4): too many log groups per flexible block group [ 45.475774][ T4148] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 45.482562][ T4148] EXT4-fs (loop4): mount failed [ 45.504310][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 45.504325][ T29] audit: type=1400 audit(1765259249.295:414): avc: denied { ioctl } for pid=4144 comm="syz.3.264" path="/46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/memory.stat" dev="loop3" ino=12 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.576971][ T4145] syzkaller1: entered promiscuous mode [ 45.582513][ T4145] syzkaller1: entered allmulticast mode [ 45.659011][ T29] audit: type=1400 audit(1765259249.455:415): avc: denied { setopt } for pid=4155 comm="syz.0.268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.681514][ T4154] netlink: 'syz.2.266': attribute type 30 has an invalid length. [ 45.713784][ T3316] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.840491][ T29] audit: type=1326 audit(1765259249.635:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 45.877811][ T29] audit: type=1326 audit(1765259249.635:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 45.901313][ T29] audit: type=1400 audit(1765259249.635:418): avc: denied { relabelfrom } for pid=4165 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.921029][ T29] audit: type=1400 audit(1765259249.635:419): avc: denied { relabelto } for pid=4165 comm="syz.4.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.940511][ T29] audit: type=1326 audit(1765259249.665:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 45.963777][ T29] audit: type=1326 audit(1765259249.665:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 45.987008][ T29] audit: type=1326 audit(1765259249.665:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 46.017947][ T29] audit: type=1326 audit(1765259249.795:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4166 comm="syz.2.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 46.082710][ T4177] set_capacity_and_notify: 3 callbacks suppressed [ 46.082731][ T4177] loop4: detected capacity change from 0 to 1024 [ 46.096514][ T4177] EXT4-fs: Ignoring removed orlov option [ 46.117361][ T4177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.668257][ T4197] ref_ctr_offset mismatch. inode: 0x12f offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000380 [ 46.868206][ T4203] __nla_validate_parse: 2 callbacks suppressed [ 46.868220][ T4203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.286'. [ 46.883404][ T4203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.286'. [ 46.957586][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 47.016120][ T4205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.287'. [ 47.134228][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.205850][ T4215] netlink: 96 bytes leftover after parsing attributes in process `syz.3.293'. [ 47.216053][ T4217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.292'. [ 47.419989][ T4243] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 47.433211][ T4245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.306'. [ 47.488216][ T4245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.529379][ T4254] netlink: 'syz.4.307': attribute type 7 has an invalid length. [ 47.537294][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.307'. [ 47.591094][ T4251] macvlan2: entered promiscuous mode [ 47.596479][ T4251] macvlan2: entered allmulticast mode [ 47.645061][ T4251] bond1: (slave macvlan2): Opening slave failed [ 47.717623][ T4259] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 47.727019][ T4259] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 47.734704][ T4259] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.310'. [ 47.756220][ T4259] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 47.763884][ T4259] netlink: 'syz.4.310': attribute type 4 has an invalid length. [ 47.771732][ T4259] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.310'. [ 48.113613][ T4277] netlink: 'syz.0.317': attribute type 11 has an invalid length. [ 49.062928][ T4363] netlink: 'syz.3.356': attribute type 1 has an invalid length. [ 49.116163][ T4363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.133806][ T4371] bond1: (slave geneve2): making interface the new active one [ 49.143815][ T4371] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 49.384579][ T4391] loop3: detected capacity change from 0 to 1024 [ 49.410298][ T4391] EXT4-fs: Ignoring removed orlov option [ 49.434567][ T4399] 9p: Bad value for 'rfdno' [ 49.454781][ T4391] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.697147][ T4420] loop0: detected capacity change from 0 to 128 [ 49.704652][ T4420] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.854766][ T4424] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.279498][ T4438] loop4: detected capacity change from 0 to 1024 [ 50.338699][ T4438] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.381667][ T4442] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 50.439676][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.456043][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.710647][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 50.710665][ T29] audit: type=1400 audit(1765259254.505:519): avc: denied { load_policy } for pid=4463 comm="syz.3.399" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 50.743254][ T4465] SELinux: failed to load policy [ 50.885156][ T29] audit: type=1326 audit(1765259254.675:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 50.908681][ T29] audit: type=1326 audit(1765259254.675:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 50.932108][ T29] audit: type=1326 audit(1765259254.675:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 50.955615][ T29] audit: type=1326 audit(1765259254.675:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 50.978901][ T29] audit: type=1326 audit(1765259254.675:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 51.002200][ T29] audit: type=1326 audit(1765259254.675:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 51.025457][ T29] audit: type=1326 audit(1765259254.675:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 51.048749][ T29] audit: type=1326 audit(1765259254.675:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 51.071969][ T29] audit: type=1326 audit(1765259254.675:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4474 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4c00f749 code=0x7ffc0000 [ 51.816303][ T4516] syzkaller1: entered promiscuous mode [ 51.821952][ T4516] syzkaller1: entered allmulticast mode [ 51.909259][ T4515] program syz.2.422 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 51.945216][ T4515] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 52.017963][ T4521] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 52.052976][ T4525] netlink: 'syz.3.427': attribute type 1 has an invalid length. [ 52.066949][ T4525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 52.086248][ T4525] macvlan2: entered promiscuous mode [ 52.092758][ T4525] bond2: entered promiscuous mode [ 52.099413][ T4525] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 52.108009][ T4525] bond2: left promiscuous mode [ 52.400096][ T4540] ip6gre1: entered allmulticast mode [ 52.457423][ T4543] bridge: RTM_NEWNEIGH with invalid ether address [ 52.983330][ T4565] netlink: 'syz.0.444': attribute type 3 has an invalid length. [ 53.441654][ T4583] infiniband !yz!: set active [ 53.446424][ T4583] infiniband !yz!: added team_slave_0 [ 53.481264][ T4583] RDS/IB: !yz!: added [ 53.496312][ T4583] smc: adding ib device !yz! with port count 1 [ 53.517403][ T4583] smc: ib device !yz! port 1 has no pnetid [ 53.995946][ T4583] syz.3.452 (4583) used greatest stack depth: 9728 bytes left [ 54.363722][ T4607] loop4: detected capacity change from 0 to 1024 [ 54.377173][ T4607] EXT4-fs: inline encryption not supported [ 54.383042][ T4607] EXT4-fs: Ignoring removed i_version option [ 54.405037][ T4607] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 54.432149][ T4607] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.463: lblock 2 mapped to illegal pblock 2 (length 1) [ 54.461483][ T4607] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.463: lblock 0 mapped to illegal pblock 48 (length 1) [ 54.475828][ T4607] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.463: Failed to acquire dquot type 0 [ 54.487545][ T4607] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 54.497124][ T4607] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.463: mark_inode_dirty error [ 54.508515][ T4607] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 54.519048][ T4607] EXT4-fs (loop4): 1 orphan inode deleted [ 54.525314][ T4607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.537971][ T1837] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:11: lblock 1 mapped to illegal pblock 1 (length 1) [ 54.553688][ T1837] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:11: Failed to release dquot type 0 [ 54.652165][ T4617] netlink: 'syz.2.466': attribute type 3 has an invalid length. [ 54.661954][ T4617] netlink: 'syz.2.466': attribute type 3 has an invalid length. [ 54.671576][ T4607] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 54.710141][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.086017][ T4634] __nla_validate_parse: 12 callbacks suppressed [ 55.086070][ T4634] netlink: 76 bytes leftover after parsing attributes in process `syz.2.474'. [ 55.197859][ T4641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 55.653569][ T4657] loop2: detected capacity change from 0 to 1024 [ 55.660497][ T4657] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.677853][ T4657] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.691523][ T4657] EXT4-fs: test_dummy_encryption option not supported [ 55.711281][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.853802][ T4668] loop4: detected capacity change from 0 to 1024 [ 55.866711][ T4668] EXT4-fs: inline encryption not supported [ 55.873331][ T4668] EXT4-fs: Ignoring removed i_version option [ 55.884826][ T4668] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 55.900326][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 55.910215][ T4672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.487'. [ 55.960084][ T4677] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 55.975806][ T4668] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.486: lblock 2 mapped to illegal pblock 2 (length 1) [ 56.034628][ T4675] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 56.047409][ T4675] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.054638][ T4675] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.069157][ T4668] __quota_error: 113 callbacks suppressed [ 56.069323][ T4668] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 56.086468][ T29] audit: type=1400 audit(1765259259.885:639): avc: denied { bind } for pid=4679 comm="syz.2.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.105811][ T29] audit: type=1400 audit(1765259259.885:640): avc: denied { name_bind } for pid=4679 comm="syz.2.490" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.127677][ T4668] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.486: lblock 0 mapped to illegal pblock 48 (length 1) [ 56.173636][ T29] audit: type=1400 audit(1765259259.885:641): avc: denied { node_bind } for pid=4679 comm="syz.2.490" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 56.197288][ T4668] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 56.206929][ T4668] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.486: Failed to acquire dquot type 0 [ 56.221522][ T4668] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 56.233055][ T4668] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.486: mark_inode_dirty error [ 56.252123][ T4668] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 56.264253][ T4668] EXT4-fs (loop4): 1 orphan inode deleted [ 56.276175][ T584] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 1) [ 56.297239][ T584] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 56.305744][ T584] EXT4-fs error (device loop4): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 0 [ 56.334018][ T4668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.387529][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.429791][ T3314] EXT4-fs error (device loop4): __ext4_get_inode_loc:4830: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 56.473231][ T3314] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 56.501794][ T3314] EXT4-fs error (device loop4): ext4_quota_off:7270: inode #3: comm syz-executor: mark_inode_dirty error [ 56.585390][ T4702] loop2: detected capacity change from 0 to 164 [ 56.592463][ T4704] @0Ù: renamed from bond_slave_1 (while UP) [ 56.601041][ T4702] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.627595][ T4702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.501'. [ 56.672453][ T4702] bridge_slave_1: left allmulticast mode [ 56.678169][ T4702] bridge_slave_1: left promiscuous mode [ 56.683909][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.700303][ T4707] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 56.708927][ T29] audit: type=1326 audit(1765259260.495:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ebcf749 code=0x7ffc0000 [ 56.732292][ T29] audit: type=1326 audit(1765259260.495:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ebcf749 code=0x7ffc0000 [ 56.755878][ T29] audit: type=1326 audit(1765259260.495:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ebcf749 code=0x7ffc0000 [ 56.779157][ T29] audit: type=1326 audit(1765259260.495:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.4.503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc12ebcf749 code=0x7ffc0000 [ 56.802779][ T4707] Symlink component flag not implemented [ 56.808494][ T4707] Symlink component flag not implemented [ 56.814636][ T4707] Symlink component flag not implemented (7) [ 56.820991][ T4707] Symlink component flag not implemented (116) [ 56.828492][ T4702] bridge_slave_0: left allmulticast mode [ 56.834160][ T4702] bridge_slave_0: left promiscuous mode [ 56.839929][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.148974][ T4724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.510'. [ 57.174893][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.182559][ T4724] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.192453][ T4724] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.199900][ T4724] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.358454][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 57.487736][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.497976][ T875] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.552511][ T875] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.576507][ T4751] loop2: detected capacity change from 0 to 164 [ 57.588202][ T4751] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 57.603160][ T875] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.657393][ T4731] chnl_net:caif_netlink_parms(): no params data found [ 57.671815][ T875] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.773872][ T4731] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.781094][ T4731] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.797678][ T4731] bridge_slave_0: entered allmulticast mode [ 57.804366][ T4731] bridge_slave_0: entered promiscuous mode [ 57.822925][ T4731] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.830177][ T4731] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.837835][ T4731] bridge_slave_1: entered allmulticast mode [ 57.844410][ T4731] bridge_slave_1: entered promiscuous mode [ 57.864070][ T875] bridge_slave_1: left allmulticast mode [ 57.869827][ T875] bridge_slave_1: left promiscuous mode [ 57.875711][ T875] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.892098][ T875] bridge_slave_0: left allmulticast mode [ 57.897924][ T875] bridge_slave_0: left promiscuous mode [ 57.903596][ T875] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.049423][ T875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.060899][ T875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.070861][ T875] bond0 (unregistering): Released all slaves [ 58.078811][ T4773] cgroup: fork rejected by pids controller in /syz2 [ 58.129246][ T4731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.158241][ T4731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.268000][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.275393][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.451660][ T875] hsr_slave_0: left promiscuous mode [ 58.466067][ T875] hsr_slave_1: left promiscuous mode [ 58.474058][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.481690][ T875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.490574][ T875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.498092][ T875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.527022][ T875] veth1_macvtap: left promiscuous mode [ 58.532606][ T875] veth0_macvtap: left promiscuous mode [ 58.538275][ T875] veth1_vlan: left promiscuous mode [ 58.543587][ T875] veth0_vlan: left promiscuous mode [ 58.638449][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.550'. [ 58.657807][ T5208] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 58.711484][ T875] team0 (unregistering): Port device team_slave_1 removed [ 58.728623][ T875] team0 (unregistering): Port device team_slave_0 removed [ 58.778566][ T4731] team0: Port device team_slave_0 added [ 58.785270][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.794499][ T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.805419][ T4731] team0: Port device team_slave_1 added [ 58.818783][ T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.846382][ T4731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.853348][ T4731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.879345][ T4731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.891740][ T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.901253][ T4731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.908306][ T4731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 58.934521][ T4731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.971642][ T4731] hsr_slave_0: entered promiscuous mode [ 58.985774][ T4731] hsr_slave_1: entered promiscuous mode [ 58.989370][ T5229] syz.0.559 (5229): /proc/5228/oom_adj is deprecated, please use /proc/5228/oom_score_adj instead. [ 58.992899][ T4731] debugfs: 'hsr0' already exists in 'hsr' [ 59.007880][ T4731] Cannot create hsr debugfs directory [ 59.111615][ T5238] loop2: detected capacity change from 0 to 512 [ 59.126651][ T5238] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.135420][ T5239] loop4: detected capacity change from 0 to 2048 [ 59.146321][ T5239] EXT4-fs: Ignoring removed i_version option [ 59.156820][ T5238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.170097][ T5238] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.174432][ T875] IPVS: stop unused estimator thread 0... [ 59.181497][ T5239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.202481][ T5239] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.215446][ T4731] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 59.224292][ T4731] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 59.233857][ T4731] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 59.244589][ T4731] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 59.280409][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.310920][ T4731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.361669][ T4731] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.377377][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.384512][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.411805][ T875] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.418926][ T875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.493700][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.497679][ T4731] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.513120][ T4731] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.716215][ T4731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.815009][ T5285] netlink: 14 bytes leftover after parsing attributes in process `syz.3.573'. [ 59.825212][ T5285] hsr_slave_0: left promiscuous mode [ 59.840927][ T5285] hsr_slave_1: left promiscuous mode [ 59.859305][ T5287] loop2: detected capacity change from 0 to 164 [ 59.888926][ T5287] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.904843][ T5287] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 59.943865][ T5287] Symlink component flag not implemented [ 59.949697][ T5287] Symlink component flag not implemented [ 59.979337][ T5287] Symlink component flag not implemented (7) [ 59.982498][ T5257] Set syz1 is full, maxelem 65536 reached [ 59.985566][ T5287] Symlink component flag not implemented (116) [ 60.037511][ T4731] veth0_vlan: entered promiscuous mode [ 60.100678][ T4731] veth1_vlan: entered promiscuous mode [ 60.146761][ T4731] veth0_macvtap: entered promiscuous mode [ 60.155433][ T4731] veth1_macvtap: entered promiscuous mode [ 60.182383][ T4731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.191889][ T4731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.267540][ T875] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.298641][ T5313] loop3: detected capacity change from 0 to 2048 [ 60.301976][ T875] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.330515][ T875] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.352592][ T875] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.416484][ T5313] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 60.455334][ T5323] loop5: detected capacity change from 0 to 512 [ 60.462555][ T5323] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.505045][ T5323] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 60.515620][ T5323] EXT4-fs (loop5): orphan cleanup on readonly fs [ 60.545859][ T5323] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.511: Allocating blocks 41-42 which overlap fs metadata [ 60.570761][ T5323] EXT4-fs (loop5): Remounting filesystem read-only [ 60.587645][ T5323] EXT4-fs (loop5): 1 truncate cleaned up [ 60.608800][ T5323] EXT4-fs (loop5): pa ffff888107ac50e0: logic 1, phys. 41, len 23 [ 60.640427][ T5323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.659432][ T5313] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 60.674535][ T5313] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 146 with error 28 [ 60.687075][ T5313] EXT4-fs (loop3): This should not happen!! Data will be lost [ 60.687075][ T5313] [ 60.696746][ T5313] EXT4-fs (loop3): Total free blocks count 0 [ 60.702744][ T5313] EXT4-fs (loop3): Free/Dirty block details [ 60.708662][ T5313] EXT4-fs (loop3): free_blocks=2415919104 [ 60.714394][ T5313] EXT4-fs (loop3): dirty_blocks=160 [ 60.715447][ T5293] Set syz1 is full, maxelem 65536 reached [ 60.719616][ T5313] EXT4-fs (loop3): Block reservation details [ 60.731315][ T5313] EXT4-fs (loop3): i_reserved_data_blocks=10 [ 60.739659][ T5323] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.739814][ T5330] smc: removing ib device !yz! [ 60.788710][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 118 with max blocks 28 with error 28 [ 60.880802][ T5335] loop3: detected capacity change from 0 to 512 [ 60.887862][ T5335] EXT4-fs: Ignoring removed oldalloc option [ 60.904584][ T5335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.920517][ T5335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.953641][ T5343] loop3: detected capacity change from 0 to 1024 [ 60.960725][ T5343] EXT4-fs: Ignoring removed orlov option [ 60.970158][ T5343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.240080][ T5357] netlink: 'syz.5.596': attribute type 13 has an invalid length. [ 61.256390][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.309261][ T5361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.597'. [ 61.320256][ T5357] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.358258][ T5359] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 61.366721][ T29] kauditd_printk_skb: 584 callbacks suppressed [ 61.366738][ T29] audit: type=1326 audit(1765259265.165:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.402641][ T29] audit: type=1326 audit(1765259265.165:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.425968][ T29] audit: type=1326 audit(1765259265.165:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.449347][ T29] audit: type=1326 audit(1765259265.165:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.452811][ T5359] bond1: (slave bridge0): making interface the new active one [ 61.472719][ T29] audit: type=1326 audit(1765259265.165:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.472758][ T29] audit: type=1326 audit(1765259265.165:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.481003][ T5359] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 61.503958][ T29] audit: type=1326 audit(1765259265.165:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.559230][ T29] audit: type=1326 audit(1765259265.165:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5362 comm="syz.0.599" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.602835][ T29] audit: type=1400 audit(1765259265.225:1236): avc: denied { bind } for pid=5367 comm="syz.5.600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.622331][ T29] audit: type=1326 audit(1765259265.385:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5371 comm="syz.0.602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff03063f749 code=0x7ffc0000 [ 61.878819][ T5388] loop4: detected capacity change from 0 to 2048 [ 61.915720][ T5388] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.941335][ T5393] loop3: detected capacity change from 0 to 512 [ 61.948798][ T5393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 61.960675][ T5393] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.974334][ T5393] EXT4-fs (loop3): 1 truncate cleaned up [ 61.980636][ T5393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.033175][ T5401] veth2: entered promiscuous mode [ 62.038287][ T5401] veth2: entered allmulticast mode [ 62.070820][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.314553][ T5430] netlink: 'syz.3.628': attribute type 39 has an invalid length. [ 62.607796][ T5444] loop2: detected capacity change from 0 to 512 [ 62.630361][ T5444] EXT4-fs: inline encryption not supported [ 62.639161][ T5444] EXT4-fs (loop2): couldn't mount as ext2 due to feature incompatibilities [ 62.652406][ T5448] netlink: 'syz.5.636': attribute type 10 has an invalid length. [ 62.660286][ T5448] netlink: 32 bytes leftover after parsing attributes in process `syz.5.636'. [ 62.672698][ T5448] ipvlan2: entered promiscuous mode [ 62.679251][ T5448] bridge0: port 3(ipvlan2) entered blocking state [ 62.685794][ T5448] bridge0: port 3(ipvlan2) entered disabled state [ 62.692774][ T5448] ipvlan2: entered allmulticast mode [ 62.698198][ T5448] bridge0: entered allmulticast mode [ 62.706070][ T5448] ipvlan2: left allmulticast mode [ 62.711132][ T5448] bridge0: left allmulticast mode [ 62.721207][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.816501][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.641'. [ 62.818983][ T5460] loop4: detected capacity change from 0 to 1024 [ 62.833845][ T5460] EXT4-fs: Ignoring removed mblk_io_submit option [ 62.845661][ T5459] gtp0: entered promiscuous mode [ 62.881403][ T5463] loop5: detected capacity change from 0 to 1024 [ 62.889442][ T5463] EXT4-fs: inline encryption not supported [ 62.901056][ T5460] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.952550][ T5463] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.970325][ T5463] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.643: Allocating blocks 385-513 which overlap fs metadata [ 63.008219][ T5474] syz_tun: entered allmulticast mode [ 63.014273][ T5473] syz_tun: left allmulticast mode [ 63.058408][ T5477] EXT4-fs (loop5): pa ffff8881079961c0: logic 16, phys. 129, len 24 [ 63.066547][ T5477] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 63.088247][ T5477] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 63.089286][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.100722][ T5477] EXT4-fs (loop5): This should not happen!! Data will be lost [ 63.100722][ T5477] [ 63.100742][ T5477] EXT4-fs (loop5): Total free blocks count 0 [ 63.100765][ T5477] EXT4-fs (loop5): Free/Dirty block details [ 63.100779][ T5477] EXT4-fs (loop5): free_blocks=128 [ 63.100793][ T5477] EXT4-fs (loop5): dirty_blocks=0 [ 63.100815][ T5477] EXT4-fs (loop5): Block reservation details [ 63.100828][ T5477] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 63.257207][ T5492] pimreg: entered allmulticast mode [ 63.350878][ T5510] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13 [ 63.359506][ T5510] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.662: invalid indirect mapped block 2683928664 (level 1) [ 63.374002][ T5510] EXT4-fs (loop2): Remounting filesystem read-only [ 63.381289][ T5510] EXT4-fs (loop2): 1 truncate cleaned up [ 63.395639][ T5510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.419653][ T5510] EXT4-fs (loop2): Quota file not on filesystem root. Journaled quota will not work [ 63.431984][ T5517] netlink: 96 bytes leftover after parsing attributes in process `syz.5.665'. [ 63.466515][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.484922][ T5519] tipc: Started in network mode [ 63.490031][ T5519] tipc: Node identity 4, cluster identity 4711 [ 63.496270][ T5519] tipc: Node number set to 4 [ 63.539601][ T5523] syzkaller0: entered promiscuous mode [ 63.545290][ T5523] syzkaller0: entered allmulticast mode [ 63.584110][ T1837] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.643340][ T5537] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.678622][ T5537] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.742402][ T5537] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.828622][ T5537] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.901842][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.917860][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.930265][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.938788][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.987097][ T5555] netlink: 360 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 63.998894][ T5557] netlink: 64 bytes leftover after parsing attributes in process `syz.4.683'. [ 64.008606][ T5557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.683'. [ 64.036389][ T5559] syzkaller0: entered allmulticast mode [ 64.042356][ T5559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.684'. [ 64.083366][ T5563] netlink: 96 bytes leftover after parsing attributes in process `syz.4.686'. [ 64.121215][ T5558] syzkaller0: left allmulticast mode [ 64.451559][ T5611] veth0: entered promiscuous mode [ 64.456800][ T5611] veth0: entered allmulticast mode [ 65.063620][ T5641] SET target dimension over the limit! [ 65.141736][ T5643] SELinux: ebitmap: truncated map [ 65.147303][ T5643] SELinux: failed to load policy [ 65.489244][ T5673] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.498981][ T5675] netlink: 'syz.5.732': attribute type 83 has an invalid length. [ 65.512989][ T5676] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 65.528154][ T5673] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.557526][ T5673] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.571337][ T5683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.735'. [ 65.618718][ T5673] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.646556][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.648328][ T3565] Bluetooth: hci0: command 0x1003 tx timeout [ 65.659163][ T5534] ================================================================== [ 65.667363][ T5534] BUG: KCSAN: data-race in __hci_cmd_sync_sk / hci_cmd_sync_cancel_sync [ 65.675745][ T5534] [ 65.678080][ T5534] write to 0xffff88810b33c8f8 of 4 bytes by task 44 on cpu 1: [ 65.685550][ T5534] hci_cmd_sync_cancel_sync+0x67/0xa0 [ 65.690958][ T5534] hci_cmd_work+0x27a/0x320 [ 65.695477][ T5534] process_scheduled_works+0x4ce/0x9d0 [ 65.700973][ T5534] worker_thread+0x582/0x770 [ 65.705584][ T5534] kthread+0x489/0x510 [ 65.709683][ T5534] ret_from_fork+0x149/0x290 [ 65.714307][ T5534] ret_from_fork_asm+0x1a/0x30 [ 65.719087][ T5534] [ 65.721427][ T5534] read to 0xffff88810b33c8f8 of 4 bytes by task 5534 on cpu 0: [ 65.728980][ T5534] __hci_cmd_sync_sk+0x34f/0x640 [ 65.733951][ T5534] hci_cmd_sync_status+0x4b/0x100 [ 65.738996][ T5534] hci_dev_cmd+0x4e4/0x500 [ 65.743435][ T5534] hci_sock_ioctl+0x578/0x7f0 [ 65.748136][ T5534] sock_do_ioctl+0x73/0x220 [ 65.752660][ T5534] sock_ioctl+0x41b/0x610 [ 65.757012][ T5534] __se_sys_ioctl+0xce/0x140 [ 65.761622][ T5534] __x64_sys_ioctl+0x43/0x50 [ 65.766233][ T5534] x64_sys_call+0x14b0/0x3000 [ 65.770926][ T5534] do_syscall_64+0xd8/0x2a0 [ 65.775446][ T5534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.781350][ T5534] [ 65.783679][ T5534] value changed: 0x00000001 -> 0x00000002 [ 65.789400][ T5534] [ 65.791725][ T5534] Reported by Kernel Concurrency Sanitizer on: [ 65.797893][ T5534] CPU: 0 UID: 0 PID: 5534 Comm: syz.2.673 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.807712][ T5534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 65.817777][ T5534] ================================================================== [ 65.826401][ T5534] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 66.125486][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.168188][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.218046][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.277964][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.339787][ T12] bridge_slave_1: left allmulticast mode [ 66.345555][ T12] bridge_slave_1: left promiscuous mode [ 66.351239][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.359237][ T12] bridge_slave_0: left allmulticast mode [ 66.364927][ T12] bridge_slave_0: left promiscuous mode [ 66.370698][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.497871][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 66.507713][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 66.517183][ T12] bond0 (unregistering): Released all slaves [ 66.567953][ T12] hsr_slave_0: left promiscuous mode [ 66.573659][ T12] hsr_slave_1: left promiscuous mode [ 66.579302][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.586742][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.594317][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.601809][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.612838][ T12] veth1_macvtap: left promiscuous mode [ 66.618350][ T12] veth0_macvtap: left promiscuous mode [ 66.668401][ T12] team0 (unregistering): Port device team_slave_1 removed [ 66.677827][ T12] team0 (unregistering): Port device team_slave_0 removed [ 66.989542][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.038095][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.107907][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.148032][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.201810][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.228887][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.268290][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.308326][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.379119][ T12] bridge_slave_1: left allmulticast mode [ 67.384836][ T12] bridge_slave_1: left promiscuous mode [ 67.390543][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.398362][ T12] bridge_slave_0: left allmulticast mode [ 67.404058][ T12] bridge_slave_0: left promiscuous mode [ 67.409760][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.488635][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 67.567982][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.577873][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.588006][ T12] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 67.597033][ T12] bond0 (unregistering): Released all slaves [ 67.605614][ T12] bond1 (unregistering): Released all slaves [ 67.614284][ T12] bond2 (unregistering): Released all slaves [ 67.786566][ T12] bond1 (unregistering): (slave bridge0): Releasing active interface [ 67.827365][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.837062][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.846532][ T12] bond0 (unregistering): Released all slaves [ 67.854724][ T12] bond1 (unregistering): Released all slaves [ 67.869817][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.880815][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.892645][ T295] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.904162][ T295] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.914637][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.922119][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.929928][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.937364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.947318][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.954711][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.962321][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.969827][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.982057][ T12] veth1_macvtap: left promiscuous mode [ 67.987613][ T12] veth0_macvtap: left promiscuous mode [ 67.993122][ T12] veth1_vlan: left promiscuous mode [ 67.998369][ T12] veth0_vlan: left promiscuous mode [ 68.004101][ T12] veth1_macvtap: left promiscuous mode [ 68.009659][ T12] veth0_macvtap: left promiscuous mode [ 68.015179][ T12] veth1_vlan: left promiscuous mode [ 68.020470][ T12] veth0_vlan: left promiscuous mode [ 68.117660][ T12] team0 (unregistering): Port device team_slave_1 removed [ 68.127285][ T12] team0 (unregistering): Port device team_slave_0 removed [ 68.185788][ T12] team0 (unregistering): Port device team_slave_1 removed [ 68.195536][ T12] team0 (unregistering): Port device team_slave_0 removed [ 71.590543][ T12] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.627020][ T12] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.696724][ T12] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.736727][ T12] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.809162][ T12] bridge_slave_1: left allmulticast mode [ 71.814818][ T12] bridge_slave_1: left promiscuous mode [ 71.820483][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.828226][ T12] bridge_slave_0: left allmulticast mode [ 71.833868][ T12] bridge_slave_0: left promiscuous mode [ 71.839557][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.987305][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.996946][ T12] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 72.006054][ T12] bond0 (unregistering): Released all slaves [ 72.027256][ T12] tipc: Left network mode [ 72.033856][ T12] hsr_slave_0: left promiscuous mode [ 72.039533][ T12] hsr_slave_1: left promiscuous mode [ 72.045156][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.052533][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.060558][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.068034][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.078143][ T12] veth1_macvtap: left promiscuous mode [ 72.083637][ T12] veth0_macvtap: left promiscuous mode [ 72.089155][ T12] veth1_vlan: left promiscuous mode [ 72.094371][ T12] veth0_vlan: left promiscuous mode [ 72.154256][ T12] team0 (unregistering): Port device team_slave_1 removed [ 72.163867][ T12] team0 (unregistering): Port device team_slave_0 removed