last executing test programs: 21.409289709s ago: executing program 4 (id=597): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 21.35690093s ago: executing program 4 (id=600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = dup2(r2, r2) write$tun(r3, 0x0, 0x46) 21.313606871s ago: executing program 4 (id=601): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socket$kcm(0x2, 0xa, 0x73) socket$inet(0x2, 0xa, 0x400) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 21.136532643s ago: executing program 4 (id=605): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004002, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@noload}, {@noinit_itable}, {@usrjquota}, {@grpjquota, 0x2e}], [{@seclabel}]}, 0x81, 0x46c, &(0x7f00000004c0)="$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") 20.916651857s ago: executing program 4 (id=610): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xa}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') 20.659407261s ago: executing program 4 (id=616): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811", 0x3c}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53", 0xd4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba5064338", 0x5f}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba000000", 0x4d}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a12", 0x55}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 20.659214831s ago: executing program 32 (id=616): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811", 0x3c}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def", 0xe8}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53", 0xd4}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018aba5064338", 0x5f}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50d36f3c028c27ba000000", 0x4d}, {&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a12", 0x55}], 0x2}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.799130101s ago: executing program 3 (id=1127): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe4059d1ed18e2292, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000000)="da", 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x0) close(r2) 3.766929182s ago: executing program 3 (id=1129): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 3.669441853s ago: executing program 3 (id=1134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r2, &(0x7f0000000900)="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", 0x45c) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r4, 0x0, 0x0}, 0x10) 3.616635154s ago: executing program 3 (id=1137): syz_open_dev$loop(0x0, 0x9, 0x12d600) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) iopl(0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@noload}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@errors_remount}, {@noinit_itable}, {@errors_continue}]}, 0x2, 0x44b, &(0x7f0000000400)="$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") mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.142145062s ago: executing program 3 (id=1148): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000004c0)="a5", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private0, 0x2}, 0x1c) 2.766522057s ago: executing program 3 (id=1155): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 2.761963657s ago: executing program 33 (id=1155): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 2.506432991s ago: executing program 5 (id=1161): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 2.488202042s ago: executing program 5 (id=1162): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 2.464126612s ago: executing program 5 (id=1163): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_usb_disconnect(0xffffffffffffffff) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x92f5e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) 1.648333834s ago: executing program 5 (id=1181): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x80, 0x0, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r1, 0x47fa, 0xe0000, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r4, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20042, 0x1}) 1.452795738s ago: executing program 5 (id=1185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x4000884) 1.392291529s ago: executing program 5 (id=1186): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.067266414s ago: executing program 6 (id=1192): creat(&(0x7f0000000040)='./file0\x00', 0x2) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r3}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 895.323036ms ago: executing program 6 (id=1197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000070095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) utimes(&(0x7f0000001ac0)='./file1\x00', 0x0) 612.47355ms ago: executing program 0 (id=1204): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 545.384971ms ago: executing program 6 (id=1206): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1, 0x0, 0x800}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000414, 0x0, 0x1, 0x0, &(0x7f0000000480)) 502.490832ms ago: executing program 0 (id=1208): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) r2 = epoll_create1(0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote, 0x4, 0x0, 0x1}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 493.626302ms ago: executing program 2 (id=1209): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='fdinfo/3\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x5, 0x0, 0x7ffc1ffb}]}) lseek(r2, 0x4, 0x0) 481.859892ms ago: executing program 0 (id=1210): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 464.962183ms ago: executing program 2 (id=1211): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0xf1d, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xe, 0x3}, {}, {0x7, 0xfff3}}}, 0x24}}, 0x4000000) 392.286834ms ago: executing program 2 (id=1212): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x3000) 340.252845ms ago: executing program 1 (id=1213): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r3}]}]}, 0x28}}, 0x0) 306.288335ms ago: executing program 1 (id=1214): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002ec0)={0x38, r2, 0x10ada85e65c25359, 0xfffffffd, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x72}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}]}]}]}, 0x38}}, 0x0) 296.947685ms ago: executing program 0 (id=1215): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000b800000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 269.607956ms ago: executing program 2 (id=1216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xf4}}, 0x0) socket$packet(0x11, 0xa, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd000411000400000000006eec00be00442f0100000000000000000000ffff7f000001ff020000000000000000000000000001"], 0x7a) 230.798746ms ago: executing program 0 (id=1217): r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, r0, 0x3) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xd814, 0x8, 0x80000000, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0xfffffffffffffffd, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 230.575657ms ago: executing program 1 (id=1218): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = dup2(r0, r1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mq_open(&(0x7f00000004c0)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xednux\x02\xc7\x12\xec\xca7\xbc\x1fS\x1c\x05y\x91\xe5\x9aL\xa9u\b\x00\x00\x00\xa0pC\x19\x9b\vY\x186\xa4\xe7\x1eg{`\xfa\xf3n\x8fIj6f\xfb\x13-g\x19(a6\x18\xe24nz\x83w8\xff\xfb\x83\f\x9a\xda\xc5w\x8eo\x02\xa3\xc1\x83\x91\xc6\xfd\x8c\xc4s\x03\x16\xa4+\xce|^\x98K_0\x8a\xb0\xff~\x1e\xd92\xb4r\xd8\xe7', 0x40, 0x110, 0x0) write$P9_RGETLOCK(r2, &(0x7f0000000500)=ANY=[@ANYBLOB='df'], 0x2c) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) 220.249627ms ago: executing program 6 (id=1219): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 133.112028ms ago: executing program 1 (id=1220): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 100.654768ms ago: executing program 2 (id=1221): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x50, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x9}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x101}]}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200008d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) 97.044798ms ago: executing program 1 (id=1222): bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, 0x0, 0x0) 96.303088ms ago: executing program 6 (id=1223): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) 67.136999ms ago: executing program 6 (id=1224): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 66.551189ms ago: executing program 1 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000200)=0x32) close(r2) 6.4438ms ago: executing program 0 (id=1226): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_settime(r1, 0x1, &(0x7f0000000080)={{0x77359400}}, 0x0) timer_delete(r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 0s ago: executing program 2 (id=1227): kexec_load(0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r2, 0x0, 0x8000000000000000}, 0x18) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @remote, 0x1c3}, 0x1c) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 71.251111][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 71.251139][ T29] audit: type=1400 audit(1749858492.394:57): avc: denied { transition } for pid=3297 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.283778][ T29] audit: type=1400 audit(1749858492.394:58): avc: denied { noatsecure } for pid=3297 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.303537][ T29] audit: type=1400 audit(1749858492.394:59): avc: denied { write } for pid=3297 comm="sh" path="pipe:[422]" dev="pipefs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 71.325565][ T29] audit: type=1400 audit(1749858492.394:60): avc: denied { rlimitinh } for pid=3297 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 71.344276][ T29] audit: type=1400 audit(1749858492.394:61): avc: denied { siginh } for pid=3297 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. [ 79.600829][ T29] audit: type=1400 audit(1749858500.744:62): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 79.602001][ T3309] cgroup: Unknown subsys name 'net' [ 79.623581][ T29] audit: type=1400 audit(1749858500.744:63): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.651017][ T29] audit: type=1400 audit(1749858500.774:64): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.768265][ T3309] cgroup: Unknown subsys name 'cpuset' [ 79.774531][ T3309] cgroup: Unknown subsys name 'rlimit' [ 79.886048][ T29] audit: type=1400 audit(1749858501.024:65): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 79.912762][ T29] audit: type=1400 audit(1749858501.034:66): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.933533][ T29] audit: type=1400 audit(1749858501.034:67): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.943194][ T3312] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 79.953944][ T29] audit: type=1400 audit(1749858501.034:68): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.982838][ T29] audit: type=1400 audit(1749858501.044:69): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 80.007771][ T29] audit: type=1400 audit(1749858501.044:70): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 80.031208][ T29] audit: type=1400 audit(1749858501.104:71): avc: denied { relabelto } for pid=3312 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 80.059438][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.292232][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 81.338348][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 81.371151][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 81.420572][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 81.429640][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.436792][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.444020][ T3321] bridge_slave_0: entered allmulticast mode [ 81.450502][ T3321] bridge_slave_0: entered promiscuous mode [ 81.461825][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 81.476205][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.483409][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.490768][ T3321] bridge_slave_1: entered allmulticast mode [ 81.497352][ T3321] bridge_slave_1: entered promiscuous mode [ 81.525191][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.532318][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.539573][ T3319] bridge_slave_0: entered allmulticast mode [ 81.546242][ T3319] bridge_slave_0: entered promiscuous mode [ 81.555233][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.562353][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.569530][ T3319] bridge_slave_1: entered allmulticast mode [ 81.575976][ T3319] bridge_slave_1: entered promiscuous mode [ 81.613671][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.624074][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.643302][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.650497][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.657727][ T3320] bridge_slave_0: entered allmulticast mode [ 81.664161][ T3320] bridge_slave_0: entered promiscuous mode [ 81.671730][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.682003][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.698707][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.705862][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.713119][ T3320] bridge_slave_1: entered allmulticast mode [ 81.719564][ T3320] bridge_slave_1: entered promiscuous mode [ 81.761483][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.768625][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.775830][ T3326] bridge_slave_0: entered allmulticast mode [ 81.782450][ T3326] bridge_slave_0: entered promiscuous mode [ 81.794195][ T3319] team0: Port device team_slave_0 added [ 81.800657][ T3321] team0: Port device team_slave_0 added [ 81.811526][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.818686][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.825816][ T3326] bridge_slave_1: entered allmulticast mode [ 81.832516][ T3326] bridge_slave_1: entered promiscuous mode [ 81.839985][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.850430][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.860267][ T3319] team0: Port device team_slave_1 added [ 81.866690][ T3321] team0: Port device team_slave_1 added [ 81.877463][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.884539][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.891920][ T3328] bridge_slave_0: entered allmulticast mode [ 81.898543][ T3328] bridge_slave_0: entered promiscuous mode [ 81.924655][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.931784][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.939060][ T3328] bridge_slave_1: entered allmulticast mode [ 81.945420][ T3328] bridge_slave_1: entered promiscuous mode [ 81.971081][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.978180][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.004160][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.015540][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.022557][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.048685][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.065247][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.075208][ T3320] team0: Port device team_slave_0 added [ 82.081795][ T3320] team0: Port device team_slave_1 added [ 82.087812][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.094776][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.120865][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.136027][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.146161][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.165453][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.172457][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.198436][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.210135][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.230042][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.237076][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.263049][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.276242][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.283297][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.309355][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.330687][ T3326] team0: Port device team_slave_0 added [ 82.356374][ T3326] team0: Port device team_slave_1 added [ 82.364011][ T3321] hsr_slave_0: entered promiscuous mode [ 82.370080][ T3321] hsr_slave_1: entered promiscuous mode [ 82.388332][ T3328] team0: Port device team_slave_0 added [ 82.396124][ T3319] hsr_slave_0: entered promiscuous mode [ 82.402283][ T3319] hsr_slave_1: entered promiscuous mode [ 82.408269][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.415842][ T3319] Cannot create hsr debugfs directory [ 82.442101][ T3328] team0: Port device team_slave_1 added [ 82.465000][ T3320] hsr_slave_0: entered promiscuous mode [ 82.471241][ T3320] hsr_slave_1: entered promiscuous mode [ 82.477031][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.484685][ T3320] Cannot create hsr debugfs directory [ 82.496137][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.503247][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.529292][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.540675][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.547746][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.573754][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.592438][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.599542][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.625529][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.636563][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.643581][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.669664][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.747898][ T3326] hsr_slave_0: entered promiscuous mode [ 82.753953][ T3326] hsr_slave_1: entered promiscuous mode [ 82.760022][ T3326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.767618][ T3326] Cannot create hsr debugfs directory [ 82.784819][ T3328] hsr_slave_0: entered promiscuous mode [ 82.791096][ T3328] hsr_slave_1: entered promiscuous mode [ 82.797120][ T3328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.804742][ T3328] Cannot create hsr debugfs directory [ 82.929923][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.954475][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.967988][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.983794][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.003541][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.013907][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.023031][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.033075][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.065775][ T3320] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.088778][ T3320] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.098384][ T3320] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.107163][ T3320] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.138462][ T3328] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.151208][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.158880][ T3328] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.168562][ T3328] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.185840][ T3328] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.204338][ T3326] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.213265][ T3326] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.226457][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.238279][ T3326] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.247106][ T3326] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.269673][ T133] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.276811][ T133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.296979][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.304156][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.314992][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.333105][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.349305][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.356440][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.365896][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.372995][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.386510][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.425843][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.445332][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.452533][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.473654][ T3319] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.492124][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.502413][ T133] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.509545][ T133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.519967][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.533873][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.568561][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.580379][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.601673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.608819][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.619504][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.626671][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.639771][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.646860][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.669075][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.676176][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.716600][ T3328] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.727352][ T3328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.779042][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.802992][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.851933][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.866592][ T3319] veth0_vlan: entered promiscuous mode [ 83.885035][ T3319] veth1_vlan: entered promiscuous mode [ 83.896150][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.915644][ T3319] veth0_macvtap: entered promiscuous mode [ 83.939227][ T3319] veth1_macvtap: entered promiscuous mode [ 83.970064][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.992635][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.002852][ T3319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.011714][ T3319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.020551][ T3319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.029327][ T3319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078470][ T3320] veth0_vlan: entered promiscuous mode [ 84.116628][ T3320] veth1_vlan: entered promiscuous mode [ 84.123272][ T3321] veth0_vlan: entered promiscuous mode [ 84.131092][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.135710][ T3328] veth0_vlan: entered promiscuous mode [ 84.174444][ T3321] veth1_vlan: entered promiscuous mode [ 84.192371][ T3328] veth1_vlan: entered promiscuous mode [ 84.212525][ T3320] veth0_macvtap: entered promiscuous mode [ 84.222055][ T3326] veth0_vlan: entered promiscuous mode [ 84.234386][ T3320] veth1_macvtap: entered promiscuous mode [ 84.244130][ T3321] veth0_macvtap: entered promiscuous mode [ 84.255207][ T3326] veth1_vlan: entered promiscuous mode [ 84.263159][ T3321] veth1_macvtap: entered promiscuous mode [ 84.282130][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.299337][ T3326] veth0_macvtap: entered promiscuous mode [ 84.307091][ T3326] veth1_macvtap: entered promiscuous mode [ 84.315960][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.330562][ T3328] veth0_macvtap: entered promiscuous mode [ 84.342882][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.351688][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.359507][ T3494] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 84.366999][ T3494] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8'. [ 84.370181][ T3328] veth1_macvtap: entered promiscuous mode [ 84.384222][ T3320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.393021][ T3320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.401789][ T3320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.410556][ T3320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.428910][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.437836][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.446578][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.455393][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.466270][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.487079][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.522204][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.530909][ T3326] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.539785][ T3326] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.548588][ T3326] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.557504][ T3326] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.580564][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.610984][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 84.611002][ T29] audit: type=1400 audit(1749858505.754:112): avc: denied { create } for pid=3501 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.645430][ T3328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.654283][ T3328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.663089][ T3328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.671862][ T3328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.685574][ T29] audit: type=1400 audit(1749858505.824:113): avc: denied { bind } for pid=3501 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.705359][ T29] audit: type=1400 audit(1749858505.824:114): avc: denied { write } for pid=3501 comm="syz.4.5" path="socket:[3654]" dev="sockfs" ino=3654 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 84.728711][ T29] audit: type=1400 audit(1749858505.824:115): avc: denied { read write } for pid=3505 comm="syz.3.11" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.731812][ T3507] sg_write: data in/out 2012/14 bytes for SCSI command 0x0-- guessing data in; [ 84.731812][ T3507] program syz.3.11 not setting count and/or reply_len properly [ 84.752675][ T29] audit: type=1400 audit(1749858505.824:116): avc: denied { open } for pid=3505 comm="syz.3.11" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 84.873803][ T29] audit: type=1400 audit(1749858506.014:117): avc: denied { watch watch_reads } for pid=3512 comm="syz.4.14" path="/1" dev="tmpfs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.923684][ T3516] xt_CT: You must specify a L4 protocol and not use inversions on it [ 84.941905][ T29] audit: type=1400 audit(1749858506.084:118): avc: denied { setopt } for pid=3519 comm="syz.4.15" lport=32973 faddr=172.30.0.5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=tcp_socket permissive=1 [ 85.094834][ T29] audit: type=1326 audit(1749858506.224:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e661e929 code=0x7ffc0000 [ 85.118199][ T29] audit: type=1326 audit(1749858506.224:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e661e929 code=0x7ffc0000 [ 85.141448][ T29] audit: type=1326 audit(1749858506.234:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3539 comm="syz.0.21" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44e661e929 code=0x7ffc0000 [ 85.178779][ T3540] lo speed is unknown, defaulting to 1000 [ 85.184831][ T3540] lo speed is unknown, defaulting to 1000 [ 85.204562][ T3540] lo speed is unknown, defaulting to 1000 [ 85.220295][ T3548] syzkaller0: entered allmulticast mode [ 85.231500][ T3540] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 85.250633][ T3540] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 85.273771][ T3540] lo speed is unknown, defaulting to 1000 [ 85.284807][ T3540] lo speed is unknown, defaulting to 1000 [ 85.292133][ T3540] lo speed is unknown, defaulting to 1000 [ 85.299263][ T3540] lo speed is unknown, defaulting to 1000 [ 85.307996][ T3540] lo speed is unknown, defaulting to 1000 [ 85.313984][ T3556] loop4: detected capacity change from 0 to 512 [ 85.327934][ T3556] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.27: iget: bad i_size value: 38620345925642 [ 85.334918][ T3540] syz.0.21 (3540) used greatest stack depth: 10712 bytes left [ 85.352703][ T3556] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.27: couldn't read orphan inode 15 (err -117) [ 85.367828][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.392143][ T3560] SELinux: policydb version 51586048 does not match my version range 15-34 [ 85.405548][ T3560] SELinux: failed to load policy [ 85.416543][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.482264][ T3566] loop4: detected capacity change from 0 to 512 [ 85.505009][ T3566] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.518360][ T3566] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 85.545423][ T3566] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 85.581130][ T3566] EXT4-fs (loop4): 1 truncate cleaned up [ 85.588636][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.683847][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.724485][ T3584] netlink: 'syz.2.37': attribute type 4 has an invalid length. [ 85.734972][ T3584] netlink: 'syz.2.37': attribute type 4 has an invalid length. [ 85.793827][ T3586] netlink: 96 bytes leftover after parsing attributes in process `syz.4.38'. [ 85.882105][ T3590] loop4: detected capacity change from 0 to 2048 [ 85.934140][ T3590] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.043058][ T3600] Zero length message leads to an empty skb [ 86.136360][ T3605] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 86.313761][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.517323][ T3635] syz.4.59 uses obsolete (PF_INET,SOCK_PACKET) [ 87.314988][ T3690] loop0: detected capacity change from 0 to 164 [ 87.349089][ T3690] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 87.544208][ T3694] loop1: detected capacity change from 0 to 512 [ 87.594125][ T3694] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 87.612941][ T3694] System zones: 0-2, 18-18, 34-35 [ 87.637501][ T3694] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #4: comm syz.1.85: iget: bad i_size value: 5910974510929920 [ 87.651569][ T3694] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.85: Bad quota inode: 4, type: 1 [ 87.670340][ T3694] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 87.731410][ T3694] EXT4-fs (loop1): mount failed [ 87.797933][ T3708] loop0: detected capacity change from 0 to 512 [ 87.818568][ T3708] ======================================================= [ 87.818568][ T3708] WARNING: The mand mount option has been deprecated and [ 87.818568][ T3708] and is ignored by this kernel. Remove the mand [ 87.818568][ T3708] option from the mount to silence this warning. [ 87.818568][ T3708] ======================================================= [ 87.892516][ T3708] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.903325][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.2.93'. [ 87.928800][ T3708] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 87.936910][ T3708] System zones: 0-2, 18-18, 34-34 [ 87.943764][ T3708] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.956526][ T3708] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.019973][ T3714] syz.2.93 (3714) used greatest stack depth: 10192 bytes left [ 88.079087][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.079826][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888119ad4600: rx timeout, send abort [ 88.096620][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888119ad4600: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.126960][ T3724] SELinux: ebitmap: truncated map [ 88.135817][ T3724] SELinux: failed to load policy [ 88.351232][ T3745] loop9: detected capacity change from 0 to 7 [ 88.358934][ T3745] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.366861][ T3745] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.374776][ T3745] loop9: unable to read partition table [ 88.391107][ T3745] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 88.391107][ T3745] ) failed (rc=-5) [ 88.394427][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.476694][ T3749] loop1: detected capacity change from 0 to 128 [ 88.497384][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.515265][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.529162][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.544296][ C0] hrtimer: interrupt took 27138 ns [ 88.571233][ T3311] Buffer I/O error on dev loop9, logical block 0, async page read [ 88.748348][ T3779] loop4: detected capacity change from 0 to 512 [ 88.772238][ T3779] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.847675][ T3779] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.885862][ T3779] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.933439][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.223220][ T3817] loop0: detected capacity change from 0 to 2048 [ 89.255955][ T3817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.326013][ T3817] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.192765][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 90.192783][ T29] audit: type=1400 audit(1749858511.304:342): avc: denied { execute } for pid=3862 comm="syz.1.155" path="/dev/snd/seq" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 90.222876][ T29] audit: type=1400 audit(1749858511.324:343): avc: denied { mounton } for pid=3863 comm="syz.3.157" path="/proc/88/task" dev="proc" ino=6273 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 90.283305][ T29] audit: type=1400 audit(1749858511.394:344): avc: denied { read write } for pid=3869 comm="syz.4.156" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.306713][ T29] audit: type=1400 audit(1749858511.394:345): avc: denied { open } for pid=3869 comm="syz.4.156" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.330009][ T29] audit: type=1400 audit(1749858511.394:346): avc: denied { ioctl } for pid=3869 comm="syz.4.156" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.359481][ T3788] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 90.395511][ T3817] syz.0.136 (3817) used greatest stack depth: 6784 bytes left [ 90.414789][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.587892][ T3896] SELinux: Context system_u:object_r:framebuf_device_t:s0 is not valid (left unmapped). [ 90.590052][ T29] audit: type=1400 audit(1749858511.734:347): avc: denied { relabelfrom } for pid=3895 comm="syz.1.170" name="NETLINK" dev="sockfs" ino=6321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 90.632778][ T29] audit: type=1400 audit(1749858511.744:348): avc: denied { relabelto } for pid=3895 comm="syz.1.170" name="NETLINK" dev="sockfs" ino=6321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=netlink_netfilter_socket permissive=1 trawcon="system_u:object_r:framebuf_device_t:s0" [ 90.704234][ T29] audit: type=1400 audit(1749858511.804:349): avc: denied { create } for pid=3897 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.723582][ T29] audit: type=1400 audit(1749858511.804:350): avc: denied { write } for pid=3897 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 90.809368][ T29] audit: type=1400 audit(1749858511.954:351): avc: denied { create } for pid=3917 comm="syz.2.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 90.846605][ T3922] loop0: detected capacity change from 0 to 2048 [ 90.867746][ T3922] ext4: Unknown parameter 'appraise' [ 91.099155][ T3955] syz.3.192 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.113145][ T3959] loop2: detected capacity change from 0 to 2048 [ 91.121663][ T3959] ext4: Unknown parameter 'appraise' [ 91.238182][ T3969] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.308986][ T3976] loop0: detected capacity change from 0 to 256 [ 91.324040][ T3976] FAT-fs (loop0): bogus number of FAT sectors [ 91.330315][ T3976] FAT-fs (loop0): Can't find a valid FAT filesystem [ 91.504890][ T3988] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 91.549909][ T3991] netlink: 100 bytes leftover after parsing attributes in process `syz.3.207'. [ 91.639928][ T3998] mmap: syz.4.213 (3998) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.740636][ T2998] udevd[2998]: worker [3311] terminated by signal 33 (Unknown signal 33) [ 91.770034][ T2998] udevd[2998]: worker [3311] failed while handling '/devices/virtual/block/loop0' [ 91.798565][ T4010] loop4: detected capacity change from 0 to 128 [ 91.918809][ T4017] loop3: detected capacity change from 0 to 128 [ 91.981797][ T4017] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.042960][ T4017] ext4 filesystem being mounted at /57/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.174045][ T4038] netlink: 20 bytes leftover after parsing attributes in process `syz.1.228'. [ 92.228119][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.290060][ T4042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.231'. [ 92.310901][ T4044] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 92.331635][ T4044] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 92.632429][ T4081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 92.678083][ T4081] erspan0: entered promiscuous mode [ 92.683833][ T4081] macvtap1: entered promiscuous mode [ 92.689303][ T4081] macvtap1: entered allmulticast mode [ 92.694801][ T4081] erspan0: entered allmulticast mode [ 92.707934][ T4088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.247'. [ 92.913079][ T4105] lo speed is unknown, defaulting to 1000 [ 93.059768][ T4121] netlink: 'syz.0.262': attribute type 1 has an invalid length. [ 93.067572][ T4121] netlink: 224 bytes leftover after parsing attributes in process `syz.0.262'. [ 93.528747][ T4150] loop3: detected capacity change from 0 to 4096 [ 93.568606][ T4150] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.875218][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.964393][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 93.975785][ T4177] loop1: detected capacity change from 0 to 2048 [ 93.996697][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 94.048178][ T4177] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.075381][ T4184] rdma_op ffff8881193ef980 conn xmit_rdma 0000000000000000 [ 94.209518][ T3320] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 94.233123][ T4190] hub 6-0:1.0: USB hub found [ 94.247938][ T4194] netlink: 'syz.4.292': attribute type 3 has an invalid length. [ 94.257915][ T4190] hub 6-0:1.0: 8 ports detected [ 94.880091][ T4233] loop0: detected capacity change from 0 to 512 [ 94.908518][ T4233] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 94.947749][ T4233] EXT4-fs (loop0): 1 truncate cleaned up [ 94.953764][ T4233] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.042790][ T3326] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.114119][ T4249] xt_hashlimit: max too large, truncated to 1048576 [ 95.386412][ T4266] hub 6-0:1.0: USB hub found [ 95.386476][ T4266] hub 6-0:1.0: 8 ports detected [ 95.514834][ T4278] capability: warning: `syz.0.329' uses deprecated v2 capabilities in a way that may be insecure [ 95.591892][ T4282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 95.657314][ T4282] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 95.680205][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 95.680220][ T29] audit: type=1400 audit(1749858516.824:402): avc: denied { read } for pid=4285 comm="syz.2.333" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.709531][ T29] audit: type=1400 audit(1749858516.824:403): avc: denied { open } for pid=4285 comm="syz.2.333" path="/dev/input/event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 95.757772][ T4284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.332'. [ 95.766818][ T4284] netlink: 'syz.0.332': attribute type 7 has an invalid length. [ 95.774632][ T4284] netlink: 'syz.0.332': attribute type 8 has an invalid length. [ 95.782342][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 95.806145][ T4286] loop2: detected capacity change from 0 to 8192 [ 95.822514][ T4291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.334'. [ 95.843202][ T29] audit: type=1400 audit(1749858516.984:404): avc: denied { mount } for pid=4285 comm="syz.2.333" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 96.063430][ T36] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 96.071963][ T36] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.191257][ T4311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.222359][ T29] audit: type=1400 audit(1749858517.364:405): avc: denied { ioctl } for pid=4310 comm="syz.0.341" path="socket:[6817]" dev="sockfs" ino=6817 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 96.247118][ T4311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.341'. [ 96.257360][ T4311] bridge_slave_1: left allmulticast mode [ 96.263047][ T4311] bridge_slave_1: left promiscuous mode [ 96.268851][ T4311] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.281357][ T4311] bridge_slave_0: left allmulticast mode [ 96.287134][ T4311] bridge_slave_0: left promiscuous mode [ 96.292910][ T4311] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.531994][ T29] audit: type=1400 audit(1749858517.664:406): avc: denied { listen } for pid=4317 comm="syz.4.344" path=2F35372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 96.589962][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 96.709819][ T4327] loop1: detected capacity change from 0 to 128 [ 96.914664][ T29] audit: type=1400 audit(1749858518.054:407): avc: denied { unmount } for pid=3328 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 96.998680][ T29] audit: type=1400 audit(1749858518.144:408): avc: denied { create } for pid=4336 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.047361][ T29] audit: type=1400 audit(1749858518.144:409): avc: denied { setopt } for pid=4336 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 97.103561][ T4345] xt_hashlimit: max too large, truncated to 1048576 [ 97.111838][ T4347] netlink: 'syz.0.360': attribute type 10 has an invalid length. [ 97.119683][ T4347] netlink: 'syz.0.360': attribute type 19 has an invalid length. [ 97.127516][ T4347] netlink: 156 bytes leftover after parsing attributes in process `syz.0.360'. [ 97.148502][ T3401] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 97.176086][ T3401] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 97.357936][ T29] audit: type=1400 audit(1749858518.494:410): avc: denied { relabelto } for pid=4368 comm="syz.1.369" name="NETLINK" dev="sockfs" ino=6928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 97.398851][ T29] audit: type=1326 audit(1749858518.534:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.0.370" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44e661e929 code=0x7ffc0000 [ 97.471163][ T4378] sd 0:0:1:0: device reset [ 97.653653][ T4390] loop4: detected capacity change from 0 to 512 [ 97.678932][ T4394] SELinux: Context system_u:object_r:hald_sonypic_exec_t:s0 is not valid (left unmapped). [ 97.699991][ T4390] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.378: bg 0: block 5: invalid block bitmap [ 97.720479][ T4396] Illegal XDP return value 4294967274 on prog (id 291) dev syz_tun, expect packet loss! [ 97.740466][ T4390] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 97.776144][ T4390] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.378: invalid indirect mapped block 3 (level 2) [ 97.800241][ T4390] EXT4-fs (loop4): 2 truncates cleaned up [ 97.806687][ T4390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.856117][ T4410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.386'. [ 97.877786][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.889835][ T3428] IPVS: starting estimator thread 0... [ 97.900331][ T4411] vhci_hcd: invalid port number 96 [ 97.905633][ T4411] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 97.980004][ T4414] IPVS: using max 2352 ests per chain, 117600 per kthread [ 98.056435][ T4436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 98.288799][ T4452] sd 0:0:1:0: device reset [ 98.372043][ T4459] loop2: detected capacity change from 0 to 512 [ 98.392800][ T4459] EXT4-fs (loop2): orphan cleanup on readonly fs [ 98.400014][ T4459] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.407: bad orphan inode 13 [ 98.412375][ T4459] ext4_test_bit(bit=12, block=18) = 1 [ 98.417864][ T4459] is_bad_inode(inode)=0 [ 98.422233][ T4459] NEXT_ORPHAN(inode)=2130706432 [ 98.427180][ T4459] max_ino=32 [ 98.430463][ T4459] i_nlink=1 [ 98.461102][ T4459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.499576][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.642395][ T4471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 98.656106][ T4471] erspan0: entered promiscuous mode [ 98.664182][ T4471] macvtap1: entered promiscuous mode [ 98.669598][ T4471] macvtap1: entered allmulticast mode [ 98.675100][ T4471] erspan0: entered allmulticast mode [ 98.723714][ T4471] erspan0: left allmulticast mode [ 98.729045][ T4471] erspan0: left promiscuous mode [ 98.746962][ T4475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 98.756696][ T4475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.413'. [ 98.957158][ T4493] loop4: detected capacity change from 0 to 1024 [ 98.970730][ T4493] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.981831][ T4493] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.995608][ T4493] JBD2: no valid journal superblock found [ 99.001423][ T4493] EXT4-fs (loop4): Could not load journal inode [ 99.047724][ T4493] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 99.336452][ T4516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.360493][ T4516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.395476][ T4521] process 'syz.4.434' launched '/dev/fd/6' with NULL argv: empty string added [ 99.597951][ T4533] loop3: detected capacity change from 0 to 512 [ 99.610112][ T4533] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.438: bg 0: block 5: invalid block bitmap [ 99.655863][ T4538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.441'. [ 99.674894][ T4533] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 99.697627][ T4533] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.438: invalid indirect mapped block 3 (level 2) [ 99.722024][ T4533] EXT4-fs (loop3): 2 truncates cleaned up [ 99.728352][ T4533] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.769739][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.862441][ T4560] loop1: detected capacity change from 0 to 1024 [ 99.874245][ T4560] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 99.885292][ T4560] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 99.898570][ T4562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.451'. [ 99.908448][ T4560] JBD2: no valid journal superblock found [ 99.914422][ T4560] EXT4-fs (loop1): Could not load journal inode [ 99.929464][ T4562] erspan0: entered promiscuous mode [ 99.934935][ T4562] macvtap1: entered promiscuous mode [ 99.938887][ T4560] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 99.940440][ T4562] macvtap1: entered allmulticast mode [ 99.955283][ T4562] erspan0: entered allmulticast mode [ 99.962822][ T4565] erspan0: left allmulticast mode [ 99.968097][ T4565] erspan0: left promiscuous mode [ 100.089737][ T4581] lo speed is unknown, defaulting to 1000 [ 100.234217][ T4592] loop3: detected capacity change from 0 to 512 [ 100.241771][ T4594] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 100.253851][ T4592] EXT4-fs (loop3): orphan cleanup on readonly fs [ 100.261010][ T4592] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.464: bad orphan inode 13 [ 100.272737][ T4592] ext4_test_bit(bit=12, block=18) = 1 [ 100.278311][ T4592] is_bad_inode(inode)=0 [ 100.282523][ T4592] NEXT_ORPHAN(inode)=2130706432 [ 100.287593][ T4592] max_ino=32 [ 100.290817][ T4592] i_nlink=1 [ 100.296653][ T4592] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.357606][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.505731][ T4608] 9pnet_fd: Insufficient options for proto=fd [ 100.692260][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 100.692277][ T29] audit: type=1400 audit(1749858521.834:589): avc: denied { mounton } for pid=4620 comm="syz.2.486" path="/83/file0" dev="tmpfs" ino=444 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 100.742455][ T29] audit: type=1400 audit(1749858521.884:590): avc: denied { create } for pid=4625 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.763435][ T4627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.477'. [ 100.772509][ T29] audit: type=1400 audit(1749858521.904:591): avc: denied { connect } for pid=4625 comm="syz.3.477" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 100.871719][ T29] audit: type=1400 audit(1749858522.014:592): avc: denied { create } for pid=4636 comm="syz.3.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 100.902385][ T4637] netlink: 'syz.3.482': attribute type 4 has an invalid length. [ 100.926393][ T29] audit: type=1400 audit(1749858522.044:593): avc: denied { ioctl } for pid=4636 comm="syz.3.482" path="socket:[7677]" dev="sockfs" ino=7677 ioctlcmd=0x8955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.951029][ T29] audit: type=1400 audit(1749858522.054:594): avc: denied { bind } for pid=4640 comm="syz.1.484" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.971118][ T29] audit: type=1400 audit(1749858522.054:595): avc: denied { name_bind } for pid=4640 comm="syz.1.484" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 100.992889][ T29] audit: type=1400 audit(1749858522.054:596): avc: denied { node_bind } for pid=4640 comm="syz.1.484" saddr=172.20.20.170 src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 101.015436][ T29] audit: type=1400 audit(1749858522.064:597): avc: denied { setopt } for pid=4640 comm="syz.1.484" laddr=172.20.20.170 lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 101.043385][ T29] audit: type=1400 audit(1749858522.184:598): avc: denied { bind } for pid=4644 comm="syz.1.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 101.092229][ T4649] lo speed is unknown, defaulting to 1000 [ 101.661333][ T4693] pim6reg1: entered promiscuous mode [ 101.666737][ T4693] pim6reg1: entered allmulticast mode [ 101.831730][ T4711] random: crng reseeded on system resumption [ 101.846085][ T4707] lo speed is unknown, defaulting to 1000 [ 102.380168][ T4795] lo speed is unknown, defaulting to 1000 [ 102.453251][ T4799] netlink: 'syz.2.527': attribute type 15 has an invalid length. [ 102.711013][ T4817] veth1_macvtap: left promiscuous mode [ 102.726867][ T4817] macsec0: entered promiscuous mode [ 102.987040][ T4838] netlink: 'syz.3.544': attribute type 3 has an invalid length. [ 103.132010][ T4847] lo speed is unknown, defaulting to 1000 [ 103.153603][ T36] IPVS: starting estimator thread 0... [ 103.160668][ T4850] loop3: detected capacity change from 0 to 1024 [ 103.201928][ T4850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.251961][ T4853] IPVS: using max 2352 ests per chain, 117600 per kthread [ 103.288876][ T4850] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4113: comm syz.3.549: Allocating blocks 449-513 which overlap fs metadata [ 103.351863][ T4848] EXT4-fs (loop3): pa ffff88810048b5b0: logic 48, phys. 177, len 21 [ 103.360094][ T4848] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 103.399293][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.500385][ T4875] IPv4: Oversized IP packet from 127.202.26.0 [ 103.632425][ T4890] loop2: detected capacity change from 0 to 1024 [ 103.691907][ T4890] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.750700][ T4890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.401667][ T3328] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 104.412631][ T3328] CPU: 1 UID: 0 PID: 3328 Comm: syz-executor Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 104.412661][ T3328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 104.412681][ T3328] Call Trace: [ 104.412704][ T3328] [ 104.412713][ T3328] __dump_stack+0x1d/0x30 [ 104.412739][ T3328] dump_stack_lvl+0xe8/0x140 [ 104.412763][ T3328] dump_stack+0x15/0x1b [ 104.412783][ T3328] dump_header+0x81/0x220 [ 104.412852][ T3328] oom_kill_process+0x334/0x3f0 [ 104.412884][ T3328] out_of_memory+0x979/0xb80 [ 104.412944][ T3328] try_charge_memcg+0x5e6/0x9e0 [ 104.412982][ T3328] charge_memcg+0x51/0xc0 [ 104.413020][ T3328] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 104.413134][ T3328] __read_swap_cache_async+0x1df/0x350 [ 104.413182][ T3328] swap_cluster_readahead+0x277/0x3e0 [ 104.413219][ T3328] swapin_readahead+0xde/0x6f0 [ 104.413322][ T3328] ? __filemap_get_folio+0x49f/0x650 [ 104.413362][ T3328] ? next_uptodate_folio+0x81c/0x890 [ 104.413383][ T3328] ? swap_cache_get_folio+0x77/0x200 [ 104.413479][ T3328] do_swap_page+0x301/0x2430 [ 104.413499][ T3328] ? css_rstat_updated+0xcd/0x5b0 [ 104.413542][ T3328] ? __pfx_default_wake_function+0x10/0x10 [ 104.413573][ T3328] handle_mm_fault+0x9a5/0x2be0 [ 104.413595][ T3328] ? mas_walk+0xf2/0x120 [ 104.413688][ T3328] do_user_addr_fault+0x636/0x1090 [ 104.413734][ T3328] exc_page_fault+0x62/0xa0 [ 104.413845][ T3328] asm_exc_page_fault+0x26/0x30 [ 104.413864][ T3328] RIP: 0033:0x7f35c7485977 [ 104.413884][ T3328] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 28 fe e7 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 fd e7 00 48 01 d1 39 7c 24 [ 104.413903][ T3328] RSP: 002b:00007ffc5313a120 EFLAGS: 00010202 [ 104.413919][ T3328] RAX: 0000001b33020000 RBX: 00000000000000e4 RCX: 0000000000019640 [ 104.413977][ T3328] RDX: 00000000055cb597 RSI: 00007ffc5313a1b0 RDI: 0000000000000006 [ 104.413993][ T3328] RBP: 00007ffc5313a15c R08: 0000000014747878 R09: 7fffffffffffffff [ 104.414009][ T3328] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 104.414024][ T3328] R13: 00000000000927c0 R14: 00000000000195d6 R15: 00007ffc5313a1b0 [ 104.414044][ T3328] [ 104.414050][ T3328] memory: usage 307200kB, limit 307200kB, failcnt 182 [ 104.501606][ T4922] lo speed is unknown, defaulting to 1000 [ 104.643599][ T3328] memory+swap: usage 307392kB, limit 9007199254740988kB, failcnt 0 [ 104.651621][ T3328] kmem: usage 307184kB, limit 9007199254740988kB, failcnt 0 [ 104.658966][ T3328] Memory cgroup stats for /syz2: [ 104.668073][ T3328] cache 0 [ 104.676142][ T3328] rss 0 [ 104.678964][ T3328] shmem 0 [ 104.681916][ T3328] mapped_file 0 [ 104.685396][ T3328] dirty 0 [ 104.688371][ T3328] writeback 0 [ 104.691804][ T3328] workingset_refault_anon 949 [ 104.696495][ T3328] workingset_refault_file 87 [ 104.701202][ T3328] swap 196608 [ 104.704508][ T3328] swapcached 16384 [ 104.708271][ T3328] pgpgin 28472 [ 104.711685][ T3328] pgpgout 28468 [ 104.715233][ T3328] pgfault 27720 [ 104.718748][ T3328] pgmajfault 151 [ 104.722339][ T3328] inactive_anon 12288 [ 104.726336][ T3328] active_anon 4096 [ 104.730188][ T3328] inactive_file 0 [ 104.733846][ T3328] active_file 0 [ 104.737356][ T3328] unevictable 0 [ 104.740908][ T3328] hierarchical_memory_limit 314572800 [ 104.746319][ T3328] hierarchical_memsw_limit 9223372036854771712 [ 104.752517][ T3328] total_cache 0 [ 104.756008][ T3328] total_rss 0 [ 104.759378][ T3328] total_shmem 0 [ 104.762918][ T3328] total_mapped_file 0 [ 104.766938][ T3328] total_dirty 0 [ 104.770464][ T3328] total_writeback 0 [ 104.774299][ T3328] total_workingset_refault_anon 949 [ 104.779655][ T3328] total_workingset_refault_file 87 [ 104.784797][ T3328] total_swap 196608 [ 104.788638][ T3328] total_swapcached 16384 [ 104.792915][ T3328] total_pgpgin 28472 [ 104.796845][ T3328] total_pgpgout 28468 [ 104.800905][ T3328] total_pgfault 27720 [ 104.804903][ T3328] total_pgmajfault 151 [ 104.809020][ T3328] total_inactive_anon 12288 [ 104.813541][ T3328] total_active_anon 4096 [ 104.818163][ T3328] total_inactive_file 0 [ 104.822522][ T3328] total_active_file 0 [ 104.826529][ T3328] total_unevictable 0 [ 104.830567][ T3328] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.562,pid=4882,uid=0 [ 104.845262][ T3328] Memory cgroup out of memory: Killed process 4882 (syz.2.562) total-vm:95800kB, anon-rss:936kB, file-rss:22376kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 104.890171][ T4937] lo speed is unknown, defaulting to 1000 [ 105.010917][ T4883] syz.2.562 (4883) used greatest stack depth: 5904 bytes left [ 105.026859][ T4944] wg2: entered promiscuous mode [ 105.031930][ T4944] wg2: entered allmulticast mode [ 105.187125][ T4962] pimreg: entered allmulticast mode [ 105.221005][ T4962] pimreg: left allmulticast mode [ 105.239232][ T4964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.246625][ T4964] IPv6: NLM_F_CREATE should be set when creating new route [ 105.625595][ T4986] loop4: detected capacity change from 0 to 512 [ 105.642987][ T4986] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 105.676584][ T4986] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #13: comm syz.4.605: iget: bad i_size value: 12154757448730 [ 105.716049][ T4986] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.605: couldn't read orphan inode 13 (err -117) [ 105.761615][ T4986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.786033][ T4994] __nla_validate_parse: 5 callbacks suppressed [ 105.786051][ T4994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.608'. [ 105.821015][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.882366][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 105.882383][ T29] audit: type=1400 audit(1749858527.024:701): avc: denied { connect } for pid=4997 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.909745][ T29] audit: type=1400 audit(1749858527.054:702): avc: denied { ioctl } for pid=4997 comm="syz.3.611" path="socket:[8019]" dev="sockfs" ino=8019 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 105.934371][ T29] audit: type=1400 audit(1749858527.054:703): avc: denied { read } for pid=4997 comm="syz.3.611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.063841][ T4761] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.190022][ T4761] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.213757][ T29] audit: type=1400 audit(1749858527.354:704): avc: denied { read } for pid=5009 comm="syz.1.617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.236677][ T29] audit: type=1400 audit(1749858527.374:705): avc: denied { mounton } for pid=5016 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 106.308669][ T4761] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.385073][ T4761] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.402176][ T5028] loop1: detected capacity change from 0 to 1024 [ 106.411331][ T5028] EXT4-fs: Ignoring removed oldalloc option [ 106.421626][ T5016] lo speed is unknown, defaulting to 1000 [ 106.429514][ T5028] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 106.446558][ T29] audit: type=1400 audit(1749858527.584:706): avc: denied { watch_reads } for pid=5033 comm="syz.3.622" path="/139/file0" dev="tmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.485922][ T5032] netlink: 96 bytes leftover after parsing attributes in process `syz.0.623'. [ 106.506479][ T5028] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.539604][ T29] audit: type=1400 audit(1749858527.674:707): avc: denied { mount } for pid=5036 comm="syz.3.624" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 106.571978][ T5041] loop2: detected capacity change from 0 to 128 [ 106.581499][ T29] audit: type=1400 audit(1749858527.724:708): avc: denied { bind } for pid=5042 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.606092][ T29] audit: type=1400 audit(1749858527.724:709): avc: denied { read } for pid=3037 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 106.627344][ T29] audit: type=1400 audit(1749858527.724:710): avc: denied { setopt } for pid=5042 comm="syz.0.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.701673][ T4761] bridge_slave_1: left allmulticast mode [ 106.707469][ T4761] bridge_slave_1: left promiscuous mode [ 106.713164][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.772691][ T5053] syz.2.626: attempt to access beyond end of device [ 106.772691][ T5053] loop2: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 106.790745][ T4761] bridge_slave_0: left allmulticast mode [ 106.796483][ T4761] bridge_slave_0: left promiscuous mode [ 106.802475][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.842642][ T5053] syz.2.626: attempt to access beyond end of device [ 106.842642][ T5053] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 106.858205][ T5053] syz.2.626: attempt to access beyond end of device [ 106.858205][ T5053] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 106.872680][ T5053] syz.2.626: attempt to access beyond end of device [ 106.872680][ T5053] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 106.890004][ T5053] syz.2.626: attempt to access beyond end of device [ 106.890004][ T5053] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 106.903876][ T5053] syz.2.626: attempt to access beyond end of device [ 106.903876][ T5053] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 106.935852][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'. [ 106.942424][ T5053] syz.2.626: attempt to access beyond end of device [ 106.942424][ T5053] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 106.944913][ T5059] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'. [ 106.986557][ T5063] xt_cluster: you have exceeded the maximum number of cluster nodes (514 > 32) [ 106.995771][ T5053] syz.2.626: attempt to access beyond end of device [ 106.995771][ T5053] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 107.028310][ T5053] syz.2.626: attempt to access beyond end of device [ 107.028310][ T5053] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 107.072830][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.3.634'. [ 107.073802][ T5053] syz.2.626: attempt to access beyond end of device [ 107.073802][ T5053] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 107.101825][ T4761] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.121949][ T4761] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.132244][ T4761] bond0 (unregistering): Released all slaves [ 107.132993][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.155799][ T5065] 8021q: adding VLAN 0 to HW filter on device team1 [ 107.199203][ T5016] chnl_net:caif_netlink_parms(): no params data found [ 107.217842][ T4761] hsr_slave_0: left promiscuous mode [ 107.225178][ T4761] hsr_slave_1: left promiscuous mode [ 107.237419][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.244945][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.255572][ T4761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.263034][ T4761] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.285913][ T4761] veth1_macvtap: left promiscuous mode [ 107.293855][ T4761] veth0_macvtap: left promiscuous mode [ 107.299723][ T4761] veth1_vlan: left promiscuous mode [ 107.308569][ T4761] veth0_vlan: left promiscuous mode [ 107.446672][ T4761] team0 (unregistering): Port device team_slave_1 removed [ 107.456907][ T4761] team0 (unregistering): Port device team_slave_0 removed [ 107.500849][ T5083] netlink: 96 bytes leftover after parsing attributes in process `syz.3.639'. [ 107.565801][ T5076] lo speed is unknown, defaulting to 1000 [ 107.593199][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.600470][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.608213][ T5016] bridge_slave_0: entered allmulticast mode [ 107.614494][ T5101] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.641'. [ 107.623699][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.3.641'. [ 107.634633][ T5016] bridge_slave_0: entered promiscuous mode [ 107.658385][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.665650][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.681973][ T5016] bridge_slave_1: entered allmulticast mode [ 107.688865][ T5016] bridge_slave_1: entered promiscuous mode [ 107.767117][ T5016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.799241][ T5016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.803375][ T5120] loop2: detected capacity change from 0 to 1024 [ 107.813743][ T5122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.645'. [ 107.845306][ T5122] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 107.856442][ T5120] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.861954][ T5016] team0: Port device team_slave_0 added [ 107.875426][ T5016] team0: Port device team_slave_1 added [ 107.882200][ T5120] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.905428][ T5120] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 3: comm syz.2.644: lblock 3 mapped to illegal pblock 3 (length 13) [ 107.919834][ T5120] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 107.932349][ T5120] EXT4-fs (loop2): This should not happen!! Data will be lost [ 107.932349][ T5120] [ 107.963834][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.970960][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.997254][ T5016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.025368][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.042514][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.049533][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.075645][ T5016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.082328][ T5135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.650'. [ 108.145539][ T5016] hsr_slave_0: entered promiscuous mode [ 108.157960][ T5016] hsr_slave_1: entered promiscuous mode [ 108.357458][ T5016] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.392629][ T5016] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.419422][ T5016] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.447092][ T5016] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.500560][ T5179] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 108.590062][ T5195] pim6reg: entered allmulticast mode [ 108.599217][ T5195] pim6reg: left allmulticast mode [ 108.614090][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.626802][ T5016] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.636838][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.643953][ T4752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.656749][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.663918][ T4752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.706569][ T5016] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.717040][ T5016] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.804798][ T5016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.867192][ T5219] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 108.874910][ T5219] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 108.888878][ T5219] netlink: 'syz.3.675': attribute type 1 has an invalid length. [ 108.896672][ T5219] netlink: 'syz.3.675': attribute type 4 has an invalid length. [ 109.047734][ T5241] lo speed is unknown, defaulting to 1000 [ 109.086191][ T5016] veth0_vlan: entered promiscuous mode [ 109.127694][ T5016] veth1_vlan: entered promiscuous mode [ 109.152274][ T5016] veth0_macvtap: entered promiscuous mode [ 109.170032][ T5016] veth1_macvtap: entered promiscuous mode [ 109.193239][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.214881][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.230682][ T5016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.239637][ T5016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.248472][ T5016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.257396][ T5016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.300694][ T5250] loop1: detected capacity change from 0 to 2048 [ 109.335033][ T5250] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.415309][ T5250] lo speed is unknown, defaulting to 1000 [ 110.105399][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.523899][ T5324] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 110.580348][ T5335] netlink: 'syz.2.720': attribute type 12 has an invalid length. [ 110.615860][ T9] IPVS: starting estimator thread 0... [ 110.708163][ T5337] IPVS: using max 2304 ests per chain, 115200 per kthread [ 110.783202][ T5349] pim6reg1: entered promiscuous mode [ 110.788630][ T5349] pim6reg1: entered allmulticast mode [ 110.790518][ T5351] loop5: detected capacity change from 0 to 128 [ 110.906494][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 110.906511][ T29] audit: type=1400 audit(1749858532.158:800): avc: denied { name_connect } for pid=5363 comm="syz.2.732" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 111.035558][ T5374] lo speed is unknown, defaulting to 1000 [ 111.068171][ T5377] loop3: detected capacity change from 0 to 8192 [ 111.173008][ T5385] loop5: detected capacity change from 0 to 512 [ 111.197181][ T29] audit: type=1326 audit(1749858532.465:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.220629][ T29] audit: type=1326 audit(1749858532.465:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.247624][ T29] audit: type=1326 audit(1749858532.465:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.271027][ T29] audit: type=1326 audit(1749858532.465:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.294338][ T29] audit: type=1326 audit(1749858532.465:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.317675][ T29] audit: type=1326 audit(1749858532.486:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.340969][ T29] audit: type=1326 audit(1749858532.486:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.364259][ T29] audit: type=1326 audit(1749858532.486:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.387594][ T29] audit: type=1326 audit(1749858532.486:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5386 comm="syz.3.742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc7106fe929 code=0x7ffc0000 [ 111.448988][ T5385] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2 [ 111.466411][ T5385] EXT4-fs (loop5): 1 truncate cleaned up [ 111.475558][ T5385] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.841320][ T5395] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 111.856786][ T5395] EXT4-fs (loop5): Remounting filesystem read-only [ 111.864957][ T5016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.892501][ T5448] netlink: 'syz.5.762': attribute type 12 has an invalid length. [ 112.014190][ T5462] __nla_validate_parse: 6 callbacks suppressed [ 112.014206][ T5462] netlink: 2048 bytes leftover after parsing attributes in process `syz.0.766'. [ 112.029578][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 112.093749][ T5468] lo speed is unknown, defaulting to 1000 [ 112.386062][ T5481] netlink: 'syz.1.775': attribute type 12 has an invalid length. [ 112.423382][ T5487] netlink: 52 bytes leftover after parsing attributes in process `syz.1.779'. [ 112.464537][ T5491] loop3: detected capacity change from 0 to 512 [ 112.486669][ T5491] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.781: bg 0: block 393: padding at end of block bitmap is not set [ 112.530357][ T5491] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 112.540555][ T5491] EXT4-fs (loop3): 2 truncates cleaned up [ 112.552194][ T5491] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.654260][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.678753][ T5507] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'. [ 112.696310][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.791'. [ 112.717482][ T5511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.791'. [ 112.720466][ T5507] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 112.749678][ T5514] tipc: Started in network mode [ 112.754719][ T5514] tipc: Node identity 7f000001, cluster identity 4711 [ 112.761575][ T5514] tipc: Enabling of bearer rejected, failed to enable media [ 112.805446][ T5519] loop1: detected capacity change from 0 to 128 [ 112.894983][ T5530] bio_check_eod: 22 callbacks suppressed [ 112.895002][ T5530] syz.1.794: attempt to access beyond end of device [ 112.895002][ T5530] loop1: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 113.013641][ T5530] syz.1.794: attempt to access beyond end of device [ 113.013641][ T5530] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 113.035871][ T5542] loop3: detected capacity change from 0 to 128 [ 113.084352][ T5530] syz.1.794: attempt to access beyond end of device [ 113.084352][ T5530] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 113.101718][ T5530] syz.1.794: attempt to access beyond end of device [ 113.101718][ T5530] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 113.115296][ T5530] syz.1.794: attempt to access beyond end of device [ 113.115296][ T5530] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 113.128903][ T5530] syz.1.794: attempt to access beyond end of device [ 113.128903][ T5530] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 113.145408][ T5542] syz.3.804: attempt to access beyond end of device [ 113.145408][ T5542] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 113.158783][ T5542] Buffer I/O error on dev loop3, logical block 2065, async page read [ 113.177359][ T5530] syz.1.794: attempt to access beyond end of device [ 113.177359][ T5530] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 113.180492][ T5542] syz.3.804: attempt to access beyond end of device [ 113.180492][ T5542] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 113.204006][ T5542] Buffer I/O error on dev loop3, logical block 2066, async page read [ 113.206616][ T5530] syz.1.794: attempt to access beyond end of device [ 113.206616][ T5530] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 113.217202][ T5542] Buffer I/O error on dev loop3, logical block 2067, async page read [ 113.262686][ T5542] Buffer I/O error on dev loop3, logical block 2068, async page read [ 113.271679][ T5542] Buffer I/O error on dev loop3, logical block 2069, async page read [ 113.291279][ T5542] Buffer I/O error on dev loop3, logical block 2070, async page read [ 113.300818][ T5542] Buffer I/O error on dev loop3, logical block 2071, async page read [ 113.309144][ T5542] Buffer I/O error on dev loop3, logical block 2072, async page read [ 113.317410][ T5542] Buffer I/O error on dev loop3, logical block 2065, async page read [ 113.327026][ T5542] Buffer I/O error on dev loop3, logical block 2066, async page read [ 113.383530][ T5552] xt_hashlimit: size too large, truncated to 1048576 [ 113.471851][ T5565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.815'. [ 113.577149][ T5561] lo speed is unknown, defaulting to 1000 [ 113.619146][ T5575] syzkaller1: entered promiscuous mode [ 113.624740][ T5575] syzkaller1: entered allmulticast mode [ 113.641734][ T5578] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 114.235972][ T5624] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 114.680662][ T5647] atomic_op ffff88812d306d28 conn xmit_atomic 0000000000000000 [ 115.084123][ T5686] IPv4: Oversized IP packet from 127.202.26.0 [ 115.115626][ T5681] bond0: (slave bond_slave_0): Releasing backup interface [ 115.146318][ T5689] loop1: detected capacity change from 0 to 1024 [ 115.154975][ T5689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.166849][ T5689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 115.201002][ T5689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.214897][ T5681] bond0: (slave bond_slave_1): Releasing backup interface [ 115.255908][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.282501][ T5681] team0: Port device team_slave_0 removed [ 115.346646][ T5681] team0: Port device team_slave_1 removed [ 115.396233][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.403934][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.429448][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.436950][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.491280][ T3427] lo speed is unknown, defaulting to 1000 [ 115.588872][ T5717] loop3: detected capacity change from 0 to 128 [ 115.772848][ T5728] loop3: detected capacity change from 0 to 1024 [ 115.840126][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 115.840154][ T29] audit: type=1326 audit(1749858537.202:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 115.879150][ T29] audit: type=1326 audit(1749858537.202:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 115.902644][ T29] audit: type=1326 audit(1749858537.202:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 115.918384][ T5728] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.925948][ T29] audit: type=1326 audit(1749858537.202:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 115.961263][ T29] audit: type=1326 audit(1749858537.202:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 115.984544][ T29] audit: type=1326 audit(1749858537.202:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 116.008057][ T29] audit: type=1326 audit(1749858537.202:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 116.031389][ T29] audit: type=1326 audit(1749858537.202:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 116.054877][ T29] audit: type=1326 audit(1749858537.202:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 116.078607][ T29] audit: type=1326 audit(1749858537.202:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5737 comm="syz.1.889" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa0300e929 code=0x7ffc0000 [ 116.114734][ T5728] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.125794][ T5728] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.307285][ T5753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5753 comm=syz.3.894 [ 116.447259][ T5765] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.898'. [ 116.457851][ T5759] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.898'. [ 117.513733][ T5803] macvlan2: entered promiscuous mode [ 117.519121][ T5803] macvlan2: entered allmulticast mode [ 117.539608][ T5803] bond0: entered promiscuous mode [ 117.544795][ T5803] bond_slave_0: entered promiscuous mode [ 117.550654][ T5803] bond_slave_1: entered promiscuous mode [ 117.560498][ T5803] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 117.572251][ T5803] bond0: left promiscuous mode [ 117.577111][ T5803] bond_slave_0: left promiscuous mode [ 117.582745][ T5803] bond_slave_1: left promiscuous mode [ 117.609013][ T5808] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.914'. [ 117.632240][ T5801] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.914'. [ 117.741536][ T5823] netlink: 596 bytes leftover after parsing attributes in process `syz.2.924'. [ 117.852187][ T5833] loop3: detected capacity change from 0 to 512 [ 117.863697][ T5835] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 117.915070][ T5833] EXT4-fs (loop3): 1 orphan inode deleted [ 117.921547][ T5833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.935725][ T4724] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:16: Failed to release dquot type 1 [ 117.956655][ T5833] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.127989][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.509833][ T5903] @: renamed from vlan0 (while UP) [ 118.559821][ T5913] loop5: detected capacity change from 0 to 512 [ 118.586051][ T5913] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 118.647611][ T5919] tipc: Failed to remove unknown binding: 66,1,1/0:2313848245/2313848247 [ 118.867493][ T5956] lo speed is unknown, defaulting to 1000 [ 118.900676][ T5961] atomic_op ffff888122b30128 conn xmit_atomic 0000000000000000 [ 118.912956][ T5963] loop5: detected capacity change from 0 to 512 [ 118.951746][ T5963] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.972279][ T5968] loop2: detected capacity change from 0 to 512 [ 118.980734][ T5963] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.000166][ T5968] EXT4-fs: Ignoring removed bh option [ 119.019864][ T5973] SELinux: failed to load policy [ 119.029059][ T5968] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.038306][ T5968] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 119.067427][ T5968] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 119.085648][ T5016] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.098256][ T5968] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 119.108957][ T5968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.145441][ T3328] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.225348][ T5997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1004'. [ 119.240691][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1006'. [ 119.287498][ T6011] loop5: detected capacity change from 0 to 2048 [ 119.335667][ T6019] loop3: detected capacity change from 0 to 512 [ 119.350940][ T6011] loop5: p1 < > p4 [ 119.361445][ T6011] loop5: p4 size 8388608 extends beyond EOD, truncated [ 119.380449][ T6019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.404520][ T6019] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.491415][ T6032] loop1: detected capacity change from 0 to 1024 [ 119.547721][ T6032] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.577024][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.590279][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1020'. [ 119.601736][ T6042] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1020'. [ 119.757176][ T6064] bond1: entered promiscuous mode [ 119.762461][ T6064] bond1: entered allmulticast mode [ 119.769313][ T6064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 119.783399][ T6064] bond1 (unregistering): Released all slaves [ 120.157564][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.287669][ T6109] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1047'. [ 120.299739][ T6102] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1047'. [ 120.436925][ T6120] pim6reg1: entered promiscuous mode [ 120.439820][ T6121] loop3: detected capacity change from 0 to 1024 [ 120.442324][ T6120] pim6reg1: entered allmulticast mode [ 120.484620][ T6121] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.718639][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.860763][ T29] kauditd_printk_skb: 312 callbacks suppressed [ 120.860780][ T29] audit: type=1326 audit(1749858542.288:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 120.944929][ T29] audit: type=1326 audit(1749858542.329:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 120.968559][ T29] audit: type=1326 audit(1749858542.329:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 120.992014][ T29] audit: type=1326 audit(1749858542.329:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 121.015567][ T29] audit: type=1326 audit(1749858542.329:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 121.039137][ T29] audit: type=1326 audit(1749858542.329:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 121.062590][ T29] audit: type=1326 audit(1749858542.329:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 121.086084][ T29] audit: type=1326 audit(1749858542.329:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 121.109658][ T29] audit: type=1326 audit(1749858542.329:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 121.133388][ T29] audit: type=1326 audit(1749858542.339:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6133 comm="syz.2.1061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f35c75ae929 code=0x7ffc0000 [ 121.326347][ T6145] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1065'. [ 121.697160][ T6176] bridge_slave_0: left allmulticast mode [ 121.702921][ T6176] bridge_slave_0: left promiscuous mode [ 121.708746][ T6176] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.719580][ T6176] bridge_slave_1: left allmulticast mode [ 121.725349][ T6176] bridge_slave_1: left promiscuous mode [ 121.731247][ T6176] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.742610][ T6176] bond0: (slave bond_slave_0): Releasing backup interface [ 121.757327][ T6176] bond0: (slave bond_slave_1): Releasing backup interface [ 121.772367][ T6176] team0: Port device team_slave_0 removed [ 121.782766][ T6176] team0: Port device team_slave_1 removed [ 121.790321][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.797866][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.807848][ T6176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.815495][ T6176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.888308][ T6193] netlink: 'syz.3.1087': attribute type 1 has an invalid length. [ 121.898666][ T6191] tipc: Failed to obtain node identity [ 121.904246][ T6191] tipc: Enabling of bearer rejected, failed to enable media [ 121.937802][ T6193] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.974468][ T6193] bond1: (slave veth5): Enslaving as an active interface with a down link [ 122.031191][ T6193] bond1: (slave dummy0): making interface the new active one [ 122.039997][ T6193] dummy0: entered promiscuous mode [ 122.045267][ T6193] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 122.190854][ T6237] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 122.209558][ T6234] bond1: (slave dummy0): Releasing active interface [ 122.223752][ T6234] dummy0: left promiscuous mode [ 122.242944][ T6234] bridge_slave_0: left allmulticast mode [ 122.248739][ T6234] bridge_slave_0: left promiscuous mode [ 122.254523][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.264884][ T6234] bridge_slave_1: left allmulticast mode [ 122.270645][ T6234] bridge_slave_1: left promiscuous mode [ 122.276683][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.287411][ T6234] bond0: (slave bond_slave_0): Releasing backup interface [ 122.297849][ T6234] bond0: (slave bond_slave_1): Releasing backup interface [ 122.321558][ T6234] team0: Port device team_slave_0 removed [ 122.332879][ T6234] team0: Port device team_slave_1 removed [ 122.339986][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.347479][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.359470][ T6234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.367294][ T6234] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.390521][ T6234] bond1: (slave veth5): Releasing active interface [ 122.470725][ T6248] ref_ctr_offset mismatch. inode: 0x4af offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x300001118 [ 122.510089][ T6251] lo speed is unknown, defaulting to 1000 [ 122.781763][ T6279] bridge0: port 1(gretap0) entered blocking state [ 122.788337][ T6279] bridge0: port 1(gretap0) entered disabled state [ 122.794977][ T6279] gretap0: entered allmulticast mode [ 122.801772][ T6279] gretap0: entered promiscuous mode [ 122.807578][ T6279] bridge0: port 1(gretap0) entered blocking state [ 122.814092][ T6279] bridge0: port 1(gretap0) entered forwarding state [ 122.929075][ T6292] veth1_to_bond: entered allmulticast mode [ 122.935322][ T6292] veth1_to_bond: entered promiscuous mode [ 122.942304][ T6292] veth1_to_bond: left promiscuous mode [ 122.948041][ T6292] veth1_to_bond: left allmulticast mode [ 122.976335][ T6297] SELinux: Context system_u:object_r:ptmx_t:s0 is not valid (left unmapped). [ 122.992093][ T6298] vlan2: entered allmulticast mode [ 122.997320][ T6298] bridge_slave_0: entered allmulticast mode [ 123.162912][ T6314] loop3: detected capacity change from 0 to 512 [ 123.295446][ T6314] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1137: Parent and EA inode have the same ino 15 [ 123.351528][ T6314] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.1137: Parent and EA inode have the same ino 15 [ 123.370763][ T6314] EXT4-fs (loop3): 1 orphan inode deleted [ 123.380286][ T6314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.552980][ T6334] wireguard0: entered promiscuous mode [ 123.559976][ T6334] wireguard0: entered allmulticast mode [ 123.594401][ T3319] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 123.618922][ T3319] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 123.638060][ T3319] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15 [ 123.708799][ T5699] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.722652][ T6338] vlan0: entered allmulticast mode [ 123.727945][ T6338] dummy0: entered allmulticast mode [ 123.958406][ T6354] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 124.098400][ T6362] lo speed is unknown, defaulting to 1000 [ 124.167874][ T6362] chnl_net:caif_netlink_parms(): no params data found [ 124.222402][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.229748][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.252286][ T6362] bridge_slave_0: entered allmulticast mode [ 124.271742][ T6362] bridge_slave_0: entered promiscuous mode [ 124.282915][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.290378][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.298206][ T6362] bridge_slave_1: entered allmulticast mode [ 124.304933][ T6362] bridge_slave_1: entered promiscuous mode [ 124.333669][ T6362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 124.344072][ T6362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.367568][ T6362] team0: Port device team_slave_0 added [ 124.374704][ T6362] team0: Port device team_slave_1 added [ 124.392111][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.399144][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.425421][ T6362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.436783][ T6362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.443907][ T6362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.469979][ T6362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.484509][ T6390] netlink: 'syz.1.1165': attribute type 15 has an invalid length. [ 124.521024][ T6362] hsr_slave_0: entered promiscuous mode [ 124.527675][ T6362] hsr_slave_1: entered promiscuous mode [ 124.533671][ T6362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.542077][ T6362] Cannot create hsr debugfs directory [ 124.575598][ T6395] __nla_validate_parse: 3 callbacks suppressed [ 124.575617][ T6395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1167'. [ 124.631705][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1169'. [ 124.649421][ T6362] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 124.658196][ T6362] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 124.668436][ T6362] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 124.678488][ T6362] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 124.701153][ T6362] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.708263][ T6362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.715675][ T6362] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.722888][ T6362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.752682][ T6362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.766623][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.775933][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.818728][ T6362] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.828754][ T6419] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1176'. [ 124.842741][ T4724] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.849912][ T4724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.866405][ T4754] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.873682][ T4754] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.910776][ T6422] loop1: detected capacity change from 0 to 1024 [ 124.941743][ T6422] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.949292][ T6362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.981949][ T3320] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.026618][ T6437] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.073439][ T6437] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.118464][ T6437] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.162278][ T6362] veth0_vlan: entered promiscuous mode [ 125.171584][ T6362] veth1_vlan: entered promiscuous mode [ 125.223328][ T6362] veth0_macvtap: entered promiscuous mode [ 125.242079][ T6437] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.260139][ T6362] veth1_macvtap: entered promiscuous mode [ 125.283439][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.292690][ T6362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.319177][ T6437] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.336898][ T6437] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.348543][ T6362] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.357391][ T6362] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.366252][ T6362] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.375047][ T6362] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.395912][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.398566][ T6437] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.412262][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.430158][ T6437] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.532919][ T6472] loop6: detected capacity change from 0 to 1024 [ 125.539435][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1198'. [ 125.553947][ T6472] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.590616][ T6477] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1189'. [ 125.613046][ T6362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.808388][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 125.808478][ T29] audit: type=1400 audit(1749858547.292:1330): avc: denied { ioctl } for pid=3326 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=654 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 125.848087][ T29] audit: type=1400 audit(1749858547.303:1331): avc: denied { read write } for pid=6362 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.872523][ T29] audit: type=1400 audit(1749858547.303:1332): avc: denied { open } for pid=6362 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.896724][ T29] audit: type=1400 audit(1749858547.303:1333): avc: denied { ioctl } for pid=6362 comm="syz-executor" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 125.924017][ T29] audit: type=1400 audit(1749858547.393:1334): avc: denied { allowed } for pid=6496 comm="syz.0.1196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 125.943512][ T29] audit: type=1400 audit(1749858547.393:1335): avc: denied { prog_load } for pid=6492 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 125.962727][ T29] audit: type=1400 audit(1749858547.393:1336): avc: denied { bpf } for pid=6492 comm="syz.1.1199" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 125.983306][ T29] audit: type=1400 audit(1749858547.414:1337): avc: denied { perfmon } for pid=6492 comm="syz.1.1199" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 126.004500][ T29] audit: type=1400 audit(1749858547.414:1338): avc: denied { prog_run } for pid=6492 comm="syz.1.1199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.023547][ T29] audit: type=1400 audit(1749858547.414:1339): avc: denied { map_create } for pid=6493 comm="syz.6.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 126.095080][ T6495] loop6: detected capacity change from 0 to 512 [ 126.110178][ T6495] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 126.146856][ T6495] EXT4-fs (loop6): 1 truncate cleaned up [ 126.153266][ T6495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.206671][ T6362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.262638][ T6519] loop6: detected capacity change from 0 to 512 [ 126.280526][ T6519] EXT4-fs: inline encryption not supported [ 126.290764][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1211'. [ 126.360519][ T6519] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.382385][ T6519] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.415728][ T6519] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1206: corrupted inode contents [ 126.440237][ T6519] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.1206: mark_inode_dirty error [ 126.453441][ T6519] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.1206: corrupted inode contents [ 126.473883][ T6519] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1206: mark_inode_dirty error [ 126.516556][ T6362] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.672249][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1224'. [ 126.682693][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1224'. [ 126.697475][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1224'. [ 126.707839][ T6556] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1224'. [ 126.740159][ T9] ================================================================== [ 126.748289][ T9] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 126.755338][ T9] [ 126.757658][ T9] read-write to 0xffff888237d2b664 of 4 bytes by task 1045 on cpu 1: [ 126.765744][ T9] wq_worker_running+0x95/0x120 [ 126.770610][ T9] schedule_timeout+0xb7/0x170 [ 126.775381][ T9] msleep+0x50/0x90 [ 126.779198][ T9] nsim_fib_event_work+0x14a2/0x21a0 [ 126.784510][ T9] process_scheduled_works+0x4cb/0x9d0 [ 126.789987][ T9] worker_thread+0x582/0x770 [ 126.794592][ T9] kthread+0x486/0x510 [ 126.798663][ T9] ret_from_fork+0xda/0x150 [ 126.803171][ T9] ret_from_fork_asm+0x1a/0x30 [ 126.808348][ T9] [ 126.810673][ T9] read to 0xffff888237d2b664 of 4 bytes by task 9 on cpu 0: [ 126.817956][ T9] kick_pool+0x49/0x2d0 [ 126.822135][ T9] __queue_work+0x8d6/0xb60 [ 126.826637][ T9] queue_work_on+0xd1/0x160 [ 126.831142][ T9] wg_queue_enqueue_per_peer_tx+0x119/0x270 [ 126.837048][ T9] wg_packet_encrypt_worker+0x9e1/0xb80 [ 126.842605][ T9] process_scheduled_works+0x4cb/0x9d0 [ 126.848073][ T9] worker_thread+0x582/0x770 [ 126.852675][ T9] kthread+0x486/0x510 [ 126.856743][ T9] ret_from_fork+0xda/0x150 [ 126.861420][ T9] ret_from_fork_asm+0x1a/0x30 [ 126.866189][ T9] [ 126.868510][ T9] value changed: 0x00000000 -> 0x00000001 [ 126.874221][ T9] [ 126.876544][ T9] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.882690][ T9] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted 6.16.0-rc1-syzkaller-00157-g02adc1490e6d #0 PREEMPT(voluntary) [ 126.895016][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.905077][ T9] Workqueue: wg-crypt-wg0 wg_packet_encrypt_worker [ 126.911603][ T9] ================================================================== [ 127.240666][ T4771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.288737][ T4771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.367518][ T4771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.446531][ T4771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.530724][ T4771] erspan0 (unregistering): left allmulticast mode [ 127.625850][ T4771] bond0 (unregistering): Released all slaves [ 127.686426][ T4771] hsr_slave_0: left promiscuous mode [ 127.692388][ T4771] hsr_slave_1: left promiscuous mode [ 127.700893][ T4771] veth0_macvtap: left promiscuous mode [ 127.706549][ T4771] veth1_vlan: left promiscuous mode [ 127.711936][ T4771] veth0_vlan: left promiscuous mode [ 128.051641][ T4771] IPVS: stop unused estimator thread 0... [ 128.131505][ T4771] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.180316][ T4771] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.240180][ T4771] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.290403][ T4771] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.439510][ T4771] bond0 (unregistering): Released all slaves [ 128.499458][ T4771] hsr_slave_0: left promiscuous mode [ 128.505036][ T4771] hsr_slave_1: left promiscuous mode [ 128.512971][ T4771] veth1_macvtap: left promiscuous mode [ 128.518645][ T4771] veth0_macvtap: left promiscuous mode [ 128.524188][ T4771] veth1_vlan: left promiscuous mode [ 128.529455][ T4771] veth0_vlan: left promiscuous mode [ 128.612322][ T36] lo speed is unknown, defaulting to 1000 [ 128.618131][ T36] infiniband syz0: ib_query_port failed (-19) [ 128.855348][ T4771] IPVS: stop unused estimator thread 0... [ 128.935854][ T4735] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.974805][ T4735] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.024497][ T4735] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.083990][ T4735] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.144017][ T4735] bridge_slave_1: left allmulticast mode [ 129.149687][ T4735] bridge_slave_1: left promiscuous mode [ 129.155369][ T4735] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.163255][ T4735] bridge_slave_0: left allmulticast mode [ 129.168913][ T4735] bridge_slave_0: left promiscuous mode [ 129.174597][ T4735] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.261925][ T4735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.271949][ T4735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.281611][ T4735] bond0 (unregistering): Released all slaves [ 129.342582][ T4735] hsr_slave_0: left promiscuous mode [ 129.348416][ T4735] hsr_slave_1: left promiscuous mode [ 129.354165][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.361634][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.369481][ T4735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.376909][ T4735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.387367][ T4735] veth1_macvtap: left promiscuous mode [ 129.393001][ T4735] veth0_macvtap: left promiscuous mode [ 129.398524][ T4735] veth1_vlan: left promiscuous mode [ 129.403861][ T4735] veth0_vlan: left promiscuous mode [ 129.465349][ T4735] team0 (unregistering): Port device team_slave_1 removed [ 129.475063][ T4735] team0 (unregistering): Port device team_slave_0 removed