last executing test programs: 4.185123129s ago: executing program 2 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYBLOB, @ANYRES32], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000004000000000000000000000000000007000000000000000092bc9581336d4d221f4cb676"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f0000000200)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = epoll_create(0x2) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r4, &(0x7f0000000280)={0x2000000}) 4.105109462s ago: executing program 1 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 4.078447813s ago: executing program 2 (id=264): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r5, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) 4.054394264s ago: executing program 1 (id=266): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r2}, 0x10) socket(0x10, 0x803, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) 4.027487675s ago: executing program 2 (id=267): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00', r1}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x18) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000240)='4', 0x1}, {&(0x7f0000000300)="8547", 0x2}], 0x2) 3.958406308s ago: executing program 2 (id=268): unshare(0x62040200) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x67, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 3.945354499s ago: executing program 0 (id=269): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000480)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab4", 0xffffffffffffffca, 0x840, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r0, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) 3.867774002s ago: executing program 3 (id=271): socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x200400, &(0x7f0000000040)=ANY=[], 0x2, 0x815, &(0x7f00000001c0)="$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") openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4008800) socket$netlink(0x10, 0x3, 0x8000000004) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x0, &(0x7f0000000080)}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x94552, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f9aa7743889067036ffa02bea63473574f2296831d53edb5397d28201d1135c53be5d1d74eeecebbbb02c7438e32df8c1f64191305a1f007bc7a3dddca20ae3fb54366310cd70e23e308911d648d1370a9f33b40fa75edfaf73a54c8f398511d8a9973f79bc6d2ede2f760ee8f0840542779c8a448c07fe", @ANYRESHEX=0x0], 0xfb, 0x1219, &(0x7f0000001100)="$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") 3.858475623s ago: executing program 0 (id=272): syz_usb_connect(0x3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r1, 0x9c3fa077fa966179, 0x3, 0x25dfdbfc, {{0x7e}, {@void, @val={0xc, 0x99, {0x3, 0x47}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4028054}, 0x40048d0) 3.722494339s ago: executing program 2 (id=274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = syz_clone3(&(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, 0xffffffffffffffff, 0x0) 3.172275382s ago: executing program 3 (id=276): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000440)={{0x6, 0x3}, 'port1\x00', 0x192, 0x40010, 0x8, 0x91, 0xd, 0x8, 0x4, 0x0, 0x0, 0x3}) setsockopt$inet_opts(r0, 0x0, 0x8, &(0x7f0000000000)="a8", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000180)) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) socket$inet(0x2, 0x2, 0x4) syz_clone(0xca011, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000000206050000000000000000000000000005000100070000000900020073797a31000000000c00078008001240000000020c000300686173683a697000050005000200000005000400010000009c92a936a88cba90df014ca10860178e092146228aac51e0714abd"], 0x50}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 2.677023514s ago: executing program 3 (id=279): socket(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x50) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r0}, 0x18) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) 2.655890985s ago: executing program 2 (id=280): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x4, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000000)="3703c70f70e244b7878fedf0c0c6c2ff2f524255d61dbfb25921e3d3686454b93e5842722103c5c67b0da4173b9e63544ee1f32fc67080b7b83c0a31", 0x3c, 0x2) 1.977188444s ago: executing program 4 (id=281): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback, 0x1}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002400)=""/4096, 0xffffffffffffffbb, 0x0, 0x0}, &(0x7f0000000280)=0x40) splice(r1, 0x0, r0, 0x0, 0x10020, 0x0) 1.932019526s ago: executing program 4 (id=282): connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440), 0x4803, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = inotify_init1(0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000003c0)={0x84, @dev={0xac, 0x14, 0x14, 0x3e}, 0x15, 0x3, 'lc\x00', 0x4, 0x4, 0x49}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.792383523s ago: executing program 1 (id=283): r0 = syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) unshare(0x2040400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0, r0, 0x0, 0x1}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x89, 0x10001, 0x49, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xd, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, 0x0, 0x7) 1.779393103s ago: executing program 4 (id=284): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001540)=@newtfilter={0x68, 0x28, 0xd27, 0x1004001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x2, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_sample={0x30, 0x21d, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x400c8b4) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x10) 1.650597098s ago: executing program 4 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) io_uring_enter(0xffffffffffffffff, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x7, 0x9) write$P9_RWRITE(r5, &(0x7f0000000040)={0xb}, 0x11000) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8010) 1.37766597s ago: executing program 3 (id=286): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x100000000000000, 0x2}}) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.249697706s ago: executing program 3 (id=287): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.194890928s ago: executing program 0 (id=288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.135582481s ago: executing program 3 (id=289): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 758.672897ms ago: executing program 4 (id=290): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r0, 0x0, 0x4004001) unshare(0x64000600) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x10000) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={r1}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xa}, 0x10) close(r3) 744.728988ms ago: executing program 1 (id=291): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc2d3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x1e5800, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 381.567493ms ago: executing program 4 (id=292): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300000000008085000000c0000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000380)="c1dfb061cd21d3084d94d3540800", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000040)={0x4, 0x7fff, 0x7, 0x6, 0x40, 0x77}) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f00000001c0)={0xdc, 0x10, 0x2}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="b9f8030768045c8c989a14f088a8", 0x0, 0x809e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) timerfd_create(0x8, 0x80000) 298.253567ms ago: executing program 1 (id=293): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x2}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 294.783767ms ago: executing program 0 (id=294): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r1, &(0x7f0000000480)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000840)="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", 0x3d9}, {&(0x7f0000002b40)="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", 0x1dc}], 0x2}, 0x8400) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="fb58", 0x2}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/4096, 0x1000}], 0x1}, 0x40010040) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r2, 0x402, 0x8000003d) close_range(r0, r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x5}, @IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048010}, 0x404c800) 185.810612ms ago: executing program 1 (id=295): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000950ab096a4baefb77778fb057b3a04245da343ffac11f12a97b8", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 112.857025ms ago: executing program 0 (id=296): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000012c0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) recvmsg$unix(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x22fe0}], 0x1}, 0x0) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000001380)="3efcfd", 0x3}], 0x1}, 0x4000000) 0s ago: executing program 0 (id=297): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$kcm(0x2b, 0x1, 0x0) socket$inet6(0xa, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts. [ 33.611332][ T29] audit: type=1400 audit(1763937851.292:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.634546][ T29] audit: type=1400 audit(1763937851.312:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.635234][ T3304] cgroup: Unknown subsys name 'net' [ 33.662512][ T29] audit: type=1400 audit(1763937851.342:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.766832][ T3304] cgroup: Unknown subsys name 'cpuset' [ 33.773103][ T3304] cgroup: Unknown subsys name 'rlimit' [ 33.942796][ T29] audit: type=1400 audit(1763937851.622:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.966448][ T29] audit: type=1400 audit(1763937851.622:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.986989][ T29] audit: type=1400 audit(1763937851.622:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.006466][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.007529][ T29] audit: type=1400 audit(1763937851.622:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.036505][ T29] audit: type=1400 audit(1763937851.632:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.042687][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.061437][ T29] audit: type=1400 audit(1763937851.632:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.094269][ T29] audit: type=1400 audit(1763937851.702:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.172540][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 35.217067][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.255044][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.262252][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.269437][ T3319] bridge_slave_0: entered allmulticast mode [ 35.276078][ T3319] bridge_slave_0: entered promiscuous mode [ 35.301132][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.308333][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.315423][ T3319] bridge_slave_1: entered allmulticast mode [ 35.322149][ T3319] bridge_slave_1: entered promiscuous mode [ 35.357809][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 35.383441][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.395079][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.407722][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.414781][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.422145][ T3315] bridge_slave_0: entered allmulticast mode [ 35.428652][ T3315] bridge_slave_0: entered promiscuous mode [ 35.435173][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 35.456434][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.463575][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.470747][ T3315] bridge_slave_1: entered allmulticast mode [ 35.477299][ T3315] bridge_slave_1: entered promiscuous mode [ 35.511609][ T3319] team0: Port device team_slave_0 added [ 35.518470][ T3319] team0: Port device team_slave_1 added [ 35.527503][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.552591][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.578613][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.599898][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.607007][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.633184][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.648097][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.655254][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.662401][ T3314] bridge_slave_0: entered allmulticast mode [ 35.668914][ T3314] bridge_slave_0: entered promiscuous mode [ 35.678887][ T3315] team0: Port device team_slave_0 added [ 35.688373][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.695696][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.702845][ T3321] bridge_slave_0: entered allmulticast mode [ 35.709221][ T3321] bridge_slave_0: entered promiscuous mode [ 35.716003][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.723072][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.749235][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.762712][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.769811][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.777085][ T3314] bridge_slave_1: entered allmulticast mode [ 35.783434][ T3314] bridge_slave_1: entered promiscuous mode [ 35.797255][ T3315] team0: Port device team_slave_1 added [ 35.803010][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.810128][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.817237][ T3321] bridge_slave_1: entered allmulticast mode [ 35.823555][ T3321] bridge_slave_1: entered promiscuous mode [ 35.858009][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.878405][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.885464][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.911486][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.923392][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.933632][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.952278][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.959309][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.985295][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.003860][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.019373][ T3319] hsr_slave_0: entered promiscuous mode [ 36.025423][ T3319] hsr_slave_1: entered promiscuous mode [ 36.041362][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.048563][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.055804][ T3318] bridge_slave_0: entered allmulticast mode [ 36.062342][ T3318] bridge_slave_0: entered promiscuous mode [ 36.069118][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.076356][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.083462][ T3318] bridge_slave_1: entered allmulticast mode [ 36.089892][ T3318] bridge_slave_1: entered promiscuous mode [ 36.102445][ T3321] team0: Port device team_slave_0 added [ 36.113569][ T3314] team0: Port device team_slave_0 added [ 36.129050][ T3321] team0: Port device team_slave_1 added [ 36.136214][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.151035][ T3314] team0: Port device team_slave_1 added [ 36.166495][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.191987][ T3315] hsr_slave_0: entered promiscuous mode [ 36.198230][ T3315] hsr_slave_1: entered promiscuous mode [ 36.204197][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.209975][ T3315] Cannot create hsr debugfs directory [ 36.224899][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.231902][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.257792][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.268800][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.275752][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.301796][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.326736][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.333713][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.359731][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.371129][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.378116][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.404311][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.423193][ T3318] team0: Port device team_slave_0 added [ 36.430377][ T3318] team0: Port device team_slave_1 added [ 36.461345][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.468658][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.494658][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.513158][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.520375][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.546565][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.595774][ T3314] hsr_slave_0: entered promiscuous mode [ 36.601866][ T3314] hsr_slave_1: entered promiscuous mode [ 36.607965][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.613791][ T3314] Cannot create hsr debugfs directory [ 36.631877][ T3321] hsr_slave_0: entered promiscuous mode [ 36.637974][ T3321] hsr_slave_1: entered promiscuous mode [ 36.643861][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.649736][ T3321] Cannot create hsr debugfs directory [ 36.684298][ T3318] hsr_slave_0: entered promiscuous mode [ 36.690521][ T3318] hsr_slave_1: entered promiscuous mode [ 36.696466][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.702291][ T3318] Cannot create hsr debugfs directory [ 36.794620][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.810090][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.828260][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.851442][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.880342][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.893830][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.903125][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.911926][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.948478][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.957404][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.966713][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.975535][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.999962][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.022231][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.030112][ T3321] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.041818][ T3321] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.050651][ T3321] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.059697][ T3321] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.096263][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.103473][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.112370][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.119553][ T1979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.141838][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.163036][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.176092][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.186513][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.198274][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.220796][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.238547][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.254338][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.266064][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.273222][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.286760][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.293948][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.305314][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.319634][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.332912][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.340114][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.350182][ T1979] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.357317][ T1979] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.366014][ T1979] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.373166][ T1979] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.412302][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.419417][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.430003][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.452622][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.484398][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.518673][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.525819][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.547435][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.554532][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.578615][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.592447][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.603007][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.647395][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.691252][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.764402][ T3319] veth0_vlan: entered promiscuous mode [ 37.785060][ T3319] veth1_vlan: entered promiscuous mode [ 37.795971][ T3315] veth0_vlan: entered promiscuous mode [ 37.815033][ T3319] veth0_macvtap: entered promiscuous mode [ 37.829410][ T3319] veth1_macvtap: entered promiscuous mode [ 37.838947][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.851836][ T3314] veth0_vlan: entered promiscuous mode [ 37.858390][ T3315] veth1_vlan: entered promiscuous mode [ 37.869525][ T3314] veth1_vlan: entered promiscuous mode [ 37.876751][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.900907][ T3314] veth0_macvtap: entered promiscuous mode [ 37.918198][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.928995][ T3314] veth1_macvtap: entered promiscuous mode [ 37.939099][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.959154][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.968891][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.978486][ T3315] veth0_macvtap: entered promiscuous mode [ 37.990557][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.000485][ T3321] veth0_vlan: entered promiscuous mode [ 38.008600][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.017670][ T3321] veth1_vlan: entered promiscuous mode [ 38.025715][ T3315] veth1_macvtap: entered promiscuous mode [ 38.037566][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.054791][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.072198][ T3318] veth0_vlan: entered promiscuous mode [ 38.080264][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.097169][ T3318] veth1_vlan: entered promiscuous mode [ 38.104743][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.115987][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.126308][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.138341][ T3321] veth0_macvtap: entered promiscuous mode [ 38.148659][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.158244][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.171821][ T3318] veth0_macvtap: entered promiscuous mode [ 38.181681][ T3321] veth1_macvtap: entered promiscuous mode [ 38.189688][ T3318] veth1_macvtap: entered promiscuous mode [ 38.200531][ T1015] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.212392][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.228405][ T1015] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.245316][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.254423][ T1015] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.268942][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.281126][ T1015] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.299370][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.326943][ T1015] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.354387][ T1015] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.363676][ T1015] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.393685][ T1015] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.421792][ T1015] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.459493][ T1015] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.486562][ C1] hrtimer: interrupt took 65189 ns [ 38.525896][ T1015] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.568486][ T1015] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.620552][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 38.620571][ T29] audit: type=1400 audit(1763937856.302:110): avc: denied { allowed } for pid=3504 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 38.649139][ T3508] ref_ctr increment failed for inode: 0x17 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005b980 [ 38.683800][ T29] audit: type=1400 audit(1763937856.332:111): avc: denied { create } for pid=3505 comm="syz.2.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.704867][ T29] audit: type=1400 audit(1763937856.332:112): avc: denied { create } for pid=3504 comm="syz.3.8" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.725964][ T29] audit: type=1400 audit(1763937856.332:113): avc: denied { map } for pid=3504 comm="syz.3.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.750032][ T29] audit: type=1400 audit(1763937856.332:114): avc: denied { read write } for pid=3504 comm="syz.3.8" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5122 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 38.774594][ T29] audit: type=1400 audit(1763937856.362:115): avc: denied { create } for pid=3505 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.793829][ T29] audit: type=1400 audit(1763937856.362:116): avc: denied { bind } for pid=3505 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.812888][ T29] audit: type=1400 audit(1763937856.362:117): avc: denied { listen } for pid=3505 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.832256][ T29] audit: type=1400 audit(1763937856.362:118): avc: denied { connect } for pid=3505 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.851782][ T29] audit: type=1400 audit(1763937856.362:119): avc: denied { read } for pid=3505 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.988562][ T3516] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 39.195092][ T3525] netlink: 'syz.3.12': attribute type 33 has an invalid length. [ 39.202838][ T3525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12'. [ 39.305133][ T3525] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.370164][ T3528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12'. [ 39.537041][ T3532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14'. [ 39.656204][ T3535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15'. [ 39.665143][ T3535] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15'. [ 39.674316][ T3535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15'. [ 39.714138][ T3535] netlink: 36 bytes leftover after parsing attributes in process `syz.4.15'. [ 39.766010][ T3539] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17'. [ 39.789378][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 40.447214][ T3565] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 40.495487][ T3569] process 'syz.3.28' launched './file0' with NULL argv: empty string added [ 40.538478][ T3573] serio: Serial port ptm0 [ 40.627889][ T3578] loop3: detected capacity change from 0 to 512 [ 40.634647][ T3578] journal_path: Non-blockdev passed as './file1' [ 40.641248][ T3578] EXT4-fs: error: could not find journal device path [ 40.792068][ T3583] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 40.880869][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.888427][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.912419][ T3587] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.920015][ T3587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.126410][ T3581] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 41.188634][ T3596] capability: warning: `syz.0.38' uses deprecated v2 capabilities in a way that may be insecure [ 41.251785][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.270699][ T3600] bridge_slave_1 (unregistering): left allmulticast mode [ 41.277817][ T3600] bridge_slave_1 (unregistering): left promiscuous mode [ 41.284899][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.299301][ T3602] loop0: detected capacity change from 0 to 512 [ 41.309973][ T3602] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.323114][ T3602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.407625][ T3602] EXT4-fs (loop0): 1 truncate cleaned up [ 41.416889][ T3602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.542475][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.572226][ T3616] loop4: detected capacity change from 0 to 1024 [ 41.578928][ T3616] ======================================================= [ 41.578928][ T3616] WARNING: The mand mount option has been deprecated and [ 41.578928][ T3616] and is ignored by this kernel. Remove the mand [ 41.578928][ T3616] option from the mount to silence this warning. [ 41.578928][ T3616] ======================================================= [ 41.636689][ T3616] EXT4-fs: Ignoring removed nobh option [ 41.642309][ T3616] EXT4-fs: Ignoring removed bh option [ 41.709406][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.837503][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.071481][ T3635] loop0: detected capacity change from 0 to 512 [ 42.570608][ T3635] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.583372][ T3635] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.659404][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.722013][ T3647] bridge: RTM_NEWNEIGH with invalid ether address [ 42.861090][ T3655] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.874105][ T3655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.890120][ T3655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.971319][ T3667] netlink: 'syz.1.62': attribute type 4 has an invalid length. [ 43.255114][ T3690] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.289970][ T3690] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.350597][ T3690] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.381184][ T3690] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.474610][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.504649][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.519016][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.529116][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.611347][ T3704] loop0: detected capacity change from 0 to 512 [ 43.649011][ T3704] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.661798][ T3704] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.675681][ T29] kauditd_printk_skb: 108 callbacks suppressed [ 43.675700][ T29] audit: type=1400 audit(1763937861.352:228): avc: denied { setattr } for pid=3703 comm="syz.0.73" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.686641][ T3704] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.73: corrupted inode contents [ 43.716310][ T3704] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #4: comm syz.0.73: mark_inode_dirty error [ 43.728617][ T3704] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #4: comm syz.0.73: corrupted inode contents [ 43.740557][ T3704] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #4: comm syz.0.73: mark_inode_dirty error [ 43.751890][ T3704] Quota error (device loop0): write_blk: dquota write failed [ 43.759422][ T3704] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 43.769485][ T3704] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.73: Failed to acquire dquot type 1 [ 43.832382][ T3704] syz.0.73 (3704) used greatest stack depth: 9728 bytes left [ 43.841348][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.928780][ T3721] syz_tun: entered allmulticast mode [ 43.952930][ T3721] dvmrp1: entered allmulticast mode [ 43.974863][ T3717] syz_tun: left allmulticast mode [ 44.039802][ T29] audit: type=1400 audit(1763937861.722:229): avc: denied { read } for pid=3724 comm="syz.4.81" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.060961][ T29] audit: type=1400 audit(1763937861.722:230): avc: denied { open } for pid=3724 comm="syz.4.81" path="net:[4026532499]" dev="nsfs" ino=4026532499 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.183778][ T29] audit: type=1400 audit(1763937861.862:231): avc: denied { read append } for pid=3730 comm="syz.0.83" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.207275][ T29] audit: type=1400 audit(1763937861.862:232): avc: denied { open } for pid=3730 comm="syz.0.83" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.270607][ T29] audit: type=1400 audit(1763937861.952:233): avc: denied { write } for pid=3730 comm="syz.0.83" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.340310][ T3737] loop4: detected capacity change from 0 to 256 [ 44.360556][ T3737] FAT-fs (loop4): Directory bread(block 64) failed [ 44.367236][ T3737] FAT-fs (loop4): Directory bread(block 65) failed [ 44.373942][ T3737] FAT-fs (loop4): Directory bread(block 66) failed [ 44.380554][ T3737] FAT-fs (loop4): Directory bread(block 67) failed [ 44.387252][ T3737] FAT-fs (loop4): Directory bread(block 68) failed [ 44.394015][ T3737] FAT-fs (loop4): Directory bread(block 69) failed [ 44.400693][ T3737] FAT-fs (loop4): Directory bread(block 70) failed [ 44.407281][ T3737] FAT-fs (loop4): Directory bread(block 71) failed [ 44.413908][ T3737] FAT-fs (loop4): Directory bread(block 72) failed [ 44.420563][ T3737] FAT-fs (loop4): Directory bread(block 73) failed [ 44.665626][ T29] audit: type=1400 audit(1763937862.112:234): avc: denied { mount } for pid=3724 comm="syz.4.81" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 44.742838][ T29] audit: type=1326 audit(1763937862.402:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3740 comm="syz.3.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d84ddf749 code=0x7ffc0000 [ 44.769789][ T3741] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.777090][ T3741] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.832375][ T3741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.850349][ T3741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.931137][ T57] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.950748][ T57] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.980385][ T57] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.002249][ T57] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.715677][ T3765] __nla_validate_parse: 12 callbacks suppressed [ 45.715732][ T3765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 45.852899][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 45.897841][ T3771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.96'. [ 45.923278][ T3771] hsr_slave_1 (unregistering): left promiscuous mode [ 46.066532][ T3783] netlink: 'syz.4.101': attribute type 13 has an invalid length. [ 46.130604][ T3783] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.138026][ T3783] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.300580][ T1979] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.310183][ T1979] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.326596][ T1979] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.345766][ T1979] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.799370][ T3811] loop0: detected capacity change from 0 to 512 [ 46.820427][ T3807] tipc: Started in network mode [ 46.825420][ T3807] tipc: Node identity b2420697d5fa, cluster identity 4711 [ 46.832849][ T3807] tipc: Enabled bearer , priority 0 [ 46.847319][ T3807] tipc: Disabling bearer [ 46.854279][ T3811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.867368][ T3811] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.901679][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.901748][ T3818] loop3: detected capacity change from 0 to 128 [ 46.940230][ T3820] netlink: 'syz.1.116': attribute type 13 has an invalid length. [ 46.993385][ T3820] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.000626][ T3820] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.027647][ T3829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.036956][ T3829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.062450][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.072515][ T3820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.126339][ T57] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.147384][ T57] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.160644][ T57] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.170091][ T57] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.733625][ T3859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.742580][ T3859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.751880][ T3859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.775334][ T3859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.784295][ T3859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.793503][ T3859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.129'. [ 47.820248][ T3865] netlink: 24 bytes leftover after parsing attributes in process `syz.3.130'. [ 48.133354][ T3896] loop0: detected capacity change from 0 to 1024 [ 48.158790][ T3896] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.139: Failed to acquire dquot type 0 [ 48.176786][ T3896] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 48.206270][ T3896] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.139: corrupted inode contents [ 48.258366][ T3896] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #13: comm syz.0.139: mark_inode_dirty error [ 48.270202][ T3896] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.139: corrupted inode contents [ 48.282530][ T3896] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.139: mark_inode_dirty error [ 48.294109][ T3896] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.139: corrupted inode contents [ 48.307379][ T3896] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 48.316999][ T3896] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #13: comm syz.0.139: corrupted inode contents [ 48.346139][ T3896] EXT4-fs error (device loop0): ext4_truncate:4637: inode #13: comm syz.0.139: mark_inode_dirty error [ 48.367064][ T3896] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 48.397222][ T3896] EXT4-fs (loop0): 1 truncate cleaned up [ 48.405561][ T3896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.489719][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.535016][ T3923] loop4: detected capacity change from 0 to 1024 [ 48.542337][ T3923] EXT4-fs: inline encryption not supported [ 48.661438][ T3923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.709748][ T3923] usb usb8: usbfs: process 3923 (syz.4.147) did not claim interface 0 before use [ 48.733947][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 48.733965][ T29] audit: type=1400 audit(1763937866.412:344): avc: denied { add_name } for pid=3922 comm="syz.4.147" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.760880][ T29] audit: type=1400 audit(1763937866.412:345): avc: denied { create } for pid=3922 comm="syz.4.147" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.795073][ T29] audit: type=1400 audit(1763937866.422:346): avc: denied { read write } for pid=3922 comm="syz.4.147" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.817797][ T29] audit: type=1400 audit(1763937866.422:347): avc: denied { open } for pid=3922 comm="syz.4.147" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.869805][ T3943] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.147: Allocating blocks 385-513 which overlap fs metadata [ 48.885938][ T29] audit: type=1400 audit(1763937866.552:348): avc: denied { ioctl } for pid=3922 comm="syz.4.147" path="/31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop4" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.113969][ T3965] loop0: detected capacity change from 0 to 1024 [ 49.120936][ T3965] EXT4-fs: Ignoring removed bh option [ 49.126426][ T3965] EXT4-fs: inline encryption not supported [ 49.152978][ T3922] EXT4-fs (loop4): pa ffff888106dbe0e0: logic 16, phys. 129, len 24 [ 49.161141][ T3922] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 49.192219][ T3965] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.223335][ T3965] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 49.231602][ T3965] EXT4-fs (loop0): orphan cleanup on readonly fs [ 49.238764][ T3965] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #3: block 1: comm syz.0.152: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.252905][ T3965] Quota error (device loop0): write_blk: dquota write failed [ 49.260336][ T3965] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 49.270384][ T3965] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.152: Failed to acquire dquot type 0 [ 49.281759][ T3965] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.152: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.295256][ T3965] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.152: Invalid inode bitmap blk 0 in block_group 0 [ 49.308190][ T3965] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 49.317276][ T3965] EXT4-fs (loop0): 1 orphan inode deleted [ 49.605392][ T29] audit: type=1400 audit(1763937867.282:349): avc: denied { read } for pid=3948 comm="syz.3.151" path="socket:[5854]" dev="sockfs" ino=5854 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.016272][ T1979] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 50.053154][ T1979] Quota error (device loop0): remove_tree: Can't read quota data block 1 [ 50.061756][ T1979] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 50.106323][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.116719][ T3965] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.638417][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.688452][ T29] audit: type=1400 audit(1763937868.372:350): avc: denied { read } for pid=4020 comm="syz.4.158" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 50.808251][ T4036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.859878][ T4036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.923617][ T4036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.003409][ T4036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.088486][ T57] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.097456][ T57] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.097524][ T57] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.097639][ T57] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.167821][ T4084] netlink: 'syz.4.167': attribute type 1 has an invalid length. [ 51.191582][ T4085] __nla_validate_parse: 7 callbacks suppressed [ 51.191747][ T4085] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.168'. [ 51.195731][ T4084] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.205681][ T4085] netlink: zone id is out of range [ 51.226461][ T4085] netlink: zone id is out of range [ 51.251048][ T4084] bond1: entered allmulticast mode [ 51.270140][ T4084] bond1: (slave ip6gretap1): making interface the new active one [ 51.278139][ T4084] ip6gretap1: entered allmulticast mode [ 51.285198][ T4084] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 51.391247][ T4085] netlink: set zone limit has 8 unknown bytes [ 51.449606][ T4115] loop2: detected capacity change from 0 to 512 [ 51.456837][ T4115] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.465154][ T4115] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.483139][ T4115] EXT4-fs (loop2): 1 truncate cleaned up [ 51.489620][ T4115] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.505226][ T4115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'. [ 51.522123][ T4115] hsr_slave_1 (unregistering): left promiscuous mode [ 51.899164][ T4159] loop4: detected capacity change from 0 to 164 [ 51.912037][ T4159] syz.4.175: attempt to access beyond end of device [ 51.912037][ T4159] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 51.935659][ T4161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.176'. [ 51.942660][ T4159] syz.4.175: attempt to access beyond end of device [ 51.942660][ T4159] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 51.960448][ T4161] netlink: 'syz.0.176': attribute type 4 has an invalid length. [ 51.968415][ T4161] netlink: 152 bytes leftover after parsing attributes in process `syz.0.176'. [ 51.982297][ T4161] .`: renamed from bond0 (while UP) [ 52.043484][ T4168] netlink: 'syz.0.179': attribute type 12 has an invalid length. [ 52.095216][ T4172] netlink: 57 bytes leftover after parsing attributes in process `syz.0.181'. [ 52.337533][ T4184] tmpfs: Bad value for 'mpol' [ 52.346296][ T4184] netlink: 16 bytes leftover after parsing attributes in process `syz.1.186'. [ 52.450995][ T4188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 52.687168][ T4208] netlink: 4 bytes leftover after parsing attributes in process `syz.4.194'. [ 53.112031][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 53.449916][ T4242] loop1: detected capacity change from 0 to 512 [ 53.459008][ T4242] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 53.478032][ T4242] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 53.493561][ T4242] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.207: bg 0: block 248: padding at end of block bitmap is not set [ 53.508549][ T4242] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.207: Failed to acquire dquot type 1 [ 53.520977][ T4242] EXT4-fs (loop1): 1 truncate cleaned up [ 53.527018][ T4245] loop0: detected capacity change from 0 to 512 [ 53.527414][ T4242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 53.560006][ T4242] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.207: deleted inode referenced: 12 [ 53.572228][ T4242] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.207: deleted inode referenced: 12 [ 53.585685][ T4245] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.206: bg 0: block 248: padding at end of block bitmap is not set [ 53.600685][ T4242] EXT4-fs error (device loop1): ext4_lookup:1791: inode #2: comm syz.1.207: deleted inode referenced: 12 [ 53.612561][ T4245] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.206: Failed to acquire dquot type 1 [ 53.624588][ T4242] EXT4-fs (loop1): shut down requested (1) [ 53.639660][ T4245] EXT4-fs (loop0): 1 truncate cleaned up [ 53.645866][ T4245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.651507][ T4249] loop3: detected capacity change from 0 to 512 [ 53.665685][ T4242] syz.1.207 (4242) used greatest stack depth: 9392 bytes left [ 53.674046][ T4245] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.678503][ T4249] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.698232][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 53.706618][ T4249] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.710777][ T4245] bridge_slave_0: left allmulticast mode [ 53.723343][ T4245] bridge_slave_0: left promiscuous mode [ 53.729465][ T4245] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.738491][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 53.738508][ T29] audit: type=1326 audit(1763937871.422:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d84ddf749 code=0x7ffc0000 [ 53.768568][ T29] audit: type=1326 audit(1763937871.422:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d84ddf749 code=0x7ffc0000 [ 53.791907][ T29] audit: type=1326 audit(1763937871.422:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f8d84ddf749 code=0x7ffc0000 [ 53.793002][ T4245] bridge_slave_1: left allmulticast mode [ 53.815699][ T29] audit: type=1326 audit(1763937871.422:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d84ddf749 code=0x7ffc0000 [ 53.821463][ T4245] bridge_slave_1: left promiscuous mode [ 53.844998][ T29] audit: type=1326 audit(1763937871.422:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f8d84ddf749 code=0x7ffc0000 [ 53.850811][ T4245] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.874031][ T29] audit: type=1326 audit(1763937871.422:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4248 comm="syz.3.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d84ddf749 code=0x7ffc0000 [ 53.907564][ T4253] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 53.932821][ T4245] .`: (slave bond_slave_0): Releasing backup interface [ 53.943022][ T4245] .`: (slave bond_slave_1): Releasing backup interface [ 53.950426][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.969710][ T4245] team0: Port device team_slave_0 removed [ 53.990818][ T4245] team0: Port device team_slave_1 removed [ 53.999532][ T4245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.007076][ T4245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.018117][ T4245] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.049189][ T4253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.059597][ T4256] macvlan2: entered promiscuous mode [ 54.065004][ T4256] macvlan2: entered allmulticast mode [ 54.071695][ T4256] bond2: entered promiscuous mode [ 54.077254][ T4256] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.085275][ T4256] bond2: left promiscuous mode [ 54.147483][ T29] audit: type=1400 audit(1763937871.802:536): avc: denied { read write } for pid=4266 comm="syz.4.214" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 54.171880][ T29] audit: type=1400 audit(1763937871.802:537): avc: denied { open } for pid=4266 comm="syz.4.214" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 54.199244][ T4269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.215'. [ 54.221013][ T4269] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4269 comm=syz.4.215 [ 54.272229][ T4245] syz.0.206 (4245) used greatest stack depth: 9120 bytes left [ 54.285356][ T29] audit: type=1326 audit(1763937871.962:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948975f749 code=0x7ffc0000 [ 54.308805][ T29] audit: type=1326 audit(1763937871.962:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4272 comm="syz.1.217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948975f749 code=0x7ffc0000 [ 54.470317][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.924154][ T4297] loop1: detected capacity change from 0 to 512 [ 54.947945][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 54.960719][ T4297] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.974208][ T4297] EXT4-fs (loop1): shut down requested (1) [ 54.980867][ T4297] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 55.001371][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 55.074172][ T4307] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4307 comm=+}[@ [ 55.214850][ T4354] tipc: Started in network mode [ 55.219838][ T4354] tipc: Node identity 8a53440a873c, cluster identity 4711 [ 55.227206][ T4354] tipc: Enabled bearer , priority 0 [ 55.234777][ T4354] syzkaller0: entered promiscuous mode [ 55.240353][ T4354] syzkaller0: entered allmulticast mode [ 55.249439][ T4354] tipc: Resetting bearer [ 55.256828][ T4353] tipc: Resetting bearer [ 55.263331][ T4353] tipc: Disabling bearer [ 55.541629][ T4328] futex_wake_op: syz.0.228 tries to shift op by -1; fix this program [ 55.573099][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.936052][ T4375] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 55.982451][ T4375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.000049][ T4417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 56.206625][ T4434] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 57.542256][ T4510] __nla_validate_parse: 1 callbacks suppressed [ 57.542277][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 57.557410][ T4510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.248'. [ 57.590757][ T4512] netlink: 104 bytes leftover after parsing attributes in process `syz.4.249'. [ 57.659335][ T4519] loop2: detected capacity change from 0 to 512 [ 57.683144][ T4519] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.756529][ T4519] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.785783][ T4519] EXT4-fs (loop2): 1 truncate cleaned up [ 57.792686][ T4519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.820354][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.855085][ T4543] syz_tun: entered allmulticast mode [ 57.863748][ T4543] syz_tun: left allmulticast mode [ 58.324253][ T4574] netlink: 28 bytes leftover after parsing attributes in process `syz.1.262'. [ 58.338830][ T4577] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 58.412478][ T4591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 58.603620][ T4627] loop3: detected capacity change from 0 to 764 [ 58.627366][ T4627] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 58.642081][ T4631] xt_hashlimit: size too large, truncated to 1048576 [ 58.856181][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 58.856215][ T29] audit: type=1400 audit(1763937876.442:682): avc: denied { module_request } for pid=4585 comm="syz.1.266" kmod="ip6t_" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 58.883679][ T29] audit: type=1400 audit(1763937876.492:683): avc: denied { execmem } for pid=4637 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 58.951725][ T4636] macsec0: entered promiscuous mode [ 59.439182][ T29] audit: type=1400 audit(1763937877.062:684): avc: denied { bind } for pid=4655 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.459630][ T29] audit: type=1400 audit(1763937877.072:685): avc: denied { setopt } for pid=4655 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.480141][ T29] audit: type=1400 audit(1763937877.082:686): avc: denied { create } for pid=4655 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.499972][ T29] audit: type=1400 audit(1763937877.102:687): avc: denied { connect } for pid=4655 comm="syz.4.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.606181][ T29] audit: type=1400 audit(1763937877.212:688): avc: denied { create } for pid=4651 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.627060][ T29] audit: type=1400 audit(1763937877.212:689): avc: denied { write } for pid=4651 comm="syz.3.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.648012][ T29] audit: type=1400 audit(1763937877.262:690): avc: denied { create } for pid=4659 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 59.778929][ T29] audit: type=1400 audit(1763937877.332:691): avc: denied { setopt } for pid=4659 comm="syz.4.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.665797][ T4732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.284'. [ 60.698062][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.284'. [ 61.066805][ T4784] netlink: 131740 bytes leftover after parsing attributes in process `syz.3.286'. [ 61.087510][ T4784] netlink: zone id is out of range [ 61.092768][ T4784] netlink: zone id is out of range [ 61.110171][ T4784] netlink: zone id is out of range [ 61.120938][ T4784] netlink: zone id is out of range [ 61.131975][ T4784] netlink: del zone limit has 8 unknown bytes [ 61.635789][ T4843] loop7: detected capacity change from 0 to 16384 [ 61.843719][ T4859] mmap: syz.4.290 (4859) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.936255][ T4843] loop7: detected capacity change from 16384 to 0 [ 61.966549][ C1] I/O error, dev loop7, sector 4992 op 0x0:(READ) flags 0x80700 phys_seg 13 prio class 2 [ 62.151987][ T4898] bond0: option all_slaves_active: invalid value (5) [ 62.162498][ T4898] bond0 (unregistering): Released all slaves [ 62.182801][ T4896] wg2: entered promiscuous mode [ 62.182822][ T4896] wg2: entered allmulticast mode [ 62.248464][ T4970] loop1: detected capacity change from 0 to 1024 [ 62.251186][ T4970] EXT4-fs: Ignoring removed orlov option [ 62.348115][ T4970] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.456412][ T4970] ================================================================== [ 62.464568][ T4970] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 62.473124][ T4970] [ 62.475472][ T4970] write to 0xffff8881083985f8 of 4 bytes by task 4980 on cpu 1: [ 62.483127][ T4970] writeback_single_inode+0x150/0x3f0 [ 62.488577][ T4970] sync_inode_metadata+0x5b/0x90 [ 62.493544][ T4970] generic_buffers_fsync_noflush+0xd9/0x120 [ 62.499454][ T4970] ext4_sync_file+0x1ab/0x690 [ 62.504141][ T4970] vfs_fsync_range+0x10d/0x130 [ 62.508923][ T4970] ext4_buffered_write_iter+0x34f/0x3c0 [ 62.514476][ T4970] ext4_file_write_iter+0x387/0xf60 [ 62.519680][ T4970] iter_file_splice_write+0x666/0xa60 [ 62.525165][ T4970] direct_splice_actor+0x156/0x2a0 [ 62.530286][ T4970] splice_direct_to_actor+0x312/0x680 [ 62.535666][ T4970] do_splice_direct+0xda/0x150 [ 62.540519][ T4970] do_sendfile+0x380/0x650 [ 62.544952][ T4970] __x64_sys_sendfile64+0x105/0x150 [ 62.550163][ T4970] x64_sys_call+0x2bb4/0x3000 [ 62.554858][ T4970] do_syscall_64+0xd2/0x200 [ 62.559371][ T4970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.565269][ T4970] [ 62.567594][ T4970] read to 0xffff8881083985f8 of 4 bytes by task 4970 on cpu 0: [ 62.575135][ T4970] __mark_inode_dirty+0x191/0x750 [ 62.580168][ T4970] ext4_write_inline_data_end+0x3e5/0x5f0 [ 62.585899][ T4970] ext4_write_end+0x3d7/0x730 [ 62.590854][ T4970] generic_perform_write+0x312/0x490 [ 62.596238][ T4970] ext4_buffered_write_iter+0x1ee/0x3c0 [ 62.601804][ T4970] ext4_file_write_iter+0x387/0xf60 [ 62.607099][ T4970] iter_file_splice_write+0x666/0xa60 [ 62.612482][ T4970] direct_splice_actor+0x156/0x2a0 [ 62.617697][ T4970] splice_direct_to_actor+0x312/0x680 [ 62.623100][ T4970] do_splice_direct+0xda/0x150 [ 62.627882][ T4970] do_sendfile+0x380/0x650 [ 62.632409][ T4970] __x64_sys_sendfile64+0x105/0x150 [ 62.637619][ T4970] x64_sys_call+0x2bb4/0x3000 [ 62.642388][ T4970] do_syscall_64+0xd2/0x200 [ 62.646996][ T4970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.653073][ T4970] [ 62.655395][ T4970] value changed: 0x00000010 -> 0x00000002 [ 62.661113][ T4970] [ 62.663435][ T4970] Reported by Kernel Concurrency Sanitizer on: [ 62.669593][ T4970] CPU: 0 UID: 0 PID: 4970 Comm: syz.1.295 Not tainted syzkaller #0 PREEMPT(voluntary) [ 62.679317][ T4970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 62.689555][ T4970] ================================================================== [ 62.859491][ T3321] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.