last executing test programs: 35.801231514s ago: executing program 2 (id=147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 35.768363147s ago: executing program 2 (id=150): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 35.682866393s ago: executing program 2 (id=153): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) accept(r0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) syz_clone3(0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r2, 0x1, r1, 0x4}) 34.826669001s ago: executing program 2 (id=182): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file3\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$UHID_CREATE(r0, &(0x7f0000000a80)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x4, 0x3ff, 0x10000, 0xffffffff}}, 0x120) 34.5766086s ago: executing program 2 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffb4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 34.187727431s ago: executing program 2 (id=190): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ptrace(0x10, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 34.187623921s ago: executing program 32 (id=190): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) ptrace(0x10, 0x0) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 13.047438674s ago: executing program 4 (id=914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000000000000001, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x8000000) 13.033838415s ago: executing program 4 (id=915): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048084}, 0x4006) 12.986400758s ago: executing program 4 (id=916): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0xffffff6c}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8000}, 0x0) dup2(r1, r0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg$inet(r0, &(0x7f0000006ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40000) 12.508509346s ago: executing program 4 (id=919): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121c, &(0x7f0000001840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121080, 0x70) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 12.369742437s ago: executing program 4 (id=920): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0x3e, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100100000000000000001000000440005"], 0x58}}, 0x0) 12.132605255s ago: executing program 4 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r2, @ANYBLOB="08002b000800000005002f0000000000050029000000000005002d000000000042f83000010000002b3a8a2af95dd32375f8e31db2ef1f5daa1867ce34639e94bfc8670c787d19d3a8b847868ea36bb20cdd3eef5ec06484ac28a963e261055da6806abf3097a9ff26102123b8f7947711ab20f8806feae2a14cadaa9e5ddfdc7949a225ee8e6bc948278b48b744c43fe2c00681ee8abf6bb2c41109aa5ab9b540ccaab699e3079e0ba156fe4e3d74"], 0x4c}}, 0x18) 12.099660798s ago: executing program 33 (id=930): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r2, @ANYBLOB="08002b000800000005002f0000000000050029000000000005002d000000000042f83000010000002b3a8a2af95dd32375f8e31db2ef1f5daa1867ce34639e94bfc8670c787d19d3a8b847868ea36bb20cdd3eef5ec06484ac28a963e261055da6806abf3097a9ff26102123b8f7947711ab20f8806feae2a14cadaa9e5ddfdc7949a225ee8e6bc948278b48b744c43fe2c00681ee8abf6bb2c41109aa5ab9b540ccaab699e3079e0ba156fe4e3d74"], 0x4c}}, 0x18) 9.350752665s ago: executing program 6 (id=1028): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000016000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0xfffffffffffffe45}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) 9.28092021s ago: executing program 6 (id=1034): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 9.228835524s ago: executing program 6 (id=1037): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x8000000000000001, 0x0, 0x2, 0x0, 0x10000000}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0xb4, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$key(0xf, 0x3, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x0, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x8000000) 9.212056006s ago: executing program 6 (id=1038): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file2\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x10, 0x121c, &(0x7f0000001840)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x121080, 0x70) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000d00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 9.134023901s ago: executing program 6 (id=1040): syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200000005000100"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 7.798953286s ago: executing program 6 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 7.76038286s ago: executing program 34 (id=1081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32], 0x40}}, 0x0) 3.861466726s ago: executing program 1 (id=1210): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 3.81207603s ago: executing program 1 (id=1200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) 3.754868274s ago: executing program 1 (id=1202): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="4800000010000305ff810000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="1748000040000200280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.603702477s ago: executing program 1 (id=1206): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3.395992643s ago: executing program 1 (id=1212): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) ptrace$getregset(0x4204, r0, 0x1, &(0x7f00000001c0)={0x0}) 3.227816156s ago: executing program 1 (id=1214): syz_emit_ethernet(0x72, &(0x7f0000000a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd60004000003c3c0020010000000000000000000000000000ff0200000000000000000000000000010004000000000000c910feff"], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000014130331ee05f7a8169c59e3"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$selinux_user(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t '], 0x27) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xb}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) 1.156152189s ago: executing program 7 (id=1272): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8002}, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 1.13531395s ago: executing program 7 (id=1273): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) 1.079029865s ago: executing program 7 (id=1276): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r0, 0x308000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x7}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1.005813221s ago: executing program 5 (id=1280): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000faff00000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0xfffffd9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) 931.854837ms ago: executing program 5 (id=1282): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000400), &(0x7f0000000500)=r1}, 0x20) io_uring_enter(0xffffffffffffffff, 0x4d10, 0x2, 0x2, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0x0) 931.482937ms ago: executing program 5 (id=1284): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000380)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r2, 0x2) 899.395829ms ago: executing program 7 (id=1288): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r0, 0x0, 0xfffffffffc}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_buf(r1, 0x6, 0xb, 0x0, &(0x7f0000000400)) 672.916847ms ago: executing program 0 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000680)='kfree\x00', r1}, 0x62) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 613.824252ms ago: executing program 0 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250200000008000800", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 555.778116ms ago: executing program 0 (id=1297): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 555.590547ms ago: executing program 0 (id=1298): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0, 0xffffffffffffffff}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0xf}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="a183000000000000000005", @ANYRES32=r2], 0x28}}, 0x0) 550.102087ms ago: executing program 0 (id=1299): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f00003f0000/0x2000)=nil, 0x2000, 0x4, 0x11012, r0, 0x308000) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10021, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x80, 0x7}, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 437.549196ms ago: executing program 0 (id=1303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x9}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 425.254456ms ago: executing program 7 (id=1304): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r2, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000a, 0x12, r2, 0x0) read(r2, &(0x7f0000000080)=""/221, 0xdd) 232.863612ms ago: executing program 3 (id=1316): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r1, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 109.010161ms ago: executing program 3 (id=1317): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x4) 92.764252ms ago: executing program 5 (id=1318): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x43, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x803}, 0x0) 89.997783ms ago: executing program 3 (id=1319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 73.559384ms ago: executing program 5 (id=1320): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xf3f, 0x30bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x46}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xffffffffffffff33, 0x1, {{0x5, 0xe, 0x1}, {0x5, 0x40}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 67.882425ms ago: executing program 3 (id=1321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r2, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 49.423866ms ago: executing program 5 (id=1322): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288c", 0xe) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=1323): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) poll(&(0x7f0000000140)=[{r2, 0x2cfc08c20dafc34e}, {r0, 0xf102}], 0x2, 0x8000007) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.208' (ED25519) to the list of known hosts. [ 26.316304][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 26.316318][ T29] audit: type=1400 audit(1765603496.710:70): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.345210][ T29] audit: type=1400 audit(1765603496.740:71): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.345926][ T3309] cgroup: Unknown subsys name 'net' [ 26.372788][ T29] audit: type=1400 audit(1765603496.770:72): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.509362][ T3309] cgroup: Unknown subsys name 'cpuset' [ 26.515374][ T3309] cgroup: Unknown subsys name 'rlimit' [ 26.684436][ T29] audit: type=1400 audit(1765603497.080:73): avc: denied { setattr } for pid=3309 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.707986][ T29] audit: type=1400 audit(1765603497.080:74): avc: denied { create } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.728473][ T29] audit: type=1400 audit(1765603497.080:75): avc: denied { write } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.734688][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.748855][ T29] audit: type=1400 audit(1765603497.080:76): avc: denied { read } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.777584][ T29] audit: type=1400 audit(1765603497.090:77): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.802339][ T29] audit: type=1400 audit(1765603497.090:78): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.825606][ T29] audit: type=1400 audit(1765603497.100:79): avc: denied { read } for pid=3048 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 26.829331][ T3309] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.915784][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 27.932469][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 28.005435][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.036453][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.044764][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 28.056720][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.063777][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.070863][ T3325] bridge_slave_0: entered allmulticast mode [ 28.077093][ T3325] bridge_slave_0: entered promiscuous mode [ 28.097531][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.104590][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.111715][ T3325] bridge_slave_1: entered allmulticast mode [ 28.117986][ T3325] bridge_slave_1: entered promiscuous mode [ 28.124149][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.131339][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.138455][ T3320] bridge_slave_0: entered allmulticast mode [ 28.144822][ T3320] bridge_slave_0: entered promiscuous mode [ 28.155039][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.162095][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.169178][ T3320] bridge_slave_1: entered allmulticast mode [ 28.175549][ T3320] bridge_slave_1: entered promiscuous mode [ 28.220246][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.232235][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.245995][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.260136][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.298156][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.305245][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.312423][ T3318] bridge_slave_0: entered allmulticast mode [ 28.318808][ T3318] bridge_slave_0: entered promiscuous mode [ 28.337905][ T3320] team0: Port device team_slave_0 added [ 28.343591][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.350704][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.357765][ T3318] bridge_slave_1: entered allmulticast mode [ 28.364117][ T3318] bridge_slave_1: entered promiscuous mode [ 28.371094][ T3325] team0: Port device team_slave_0 added [ 28.376669][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.383722][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.391050][ T3319] bridge_slave_0: entered allmulticast mode [ 28.397276][ T3319] bridge_slave_0: entered promiscuous mode [ 28.403754][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.410901][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.417946][ T3327] bridge_slave_0: entered allmulticast mode [ 28.424287][ T3327] bridge_slave_0: entered promiscuous mode [ 28.431076][ T3320] team0: Port device team_slave_1 added [ 28.441820][ T3325] team0: Port device team_slave_1 added [ 28.447515][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.454578][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.461669][ T3319] bridge_slave_1: entered allmulticast mode [ 28.468001][ T3319] bridge_slave_1: entered promiscuous mode [ 28.474250][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.481332][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.488468][ T3327] bridge_slave_1: entered allmulticast mode [ 28.494932][ T3327] bridge_slave_1: entered promiscuous mode [ 28.526994][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.537402][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.559349][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.566335][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.592426][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.607547][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.614498][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.640420][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.651940][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.661971][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.671696][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.680941][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.687847][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.713840][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.729646][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.736590][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.762587][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.774051][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.790023][ T3318] team0: Port device team_slave_0 added [ 28.798475][ T3318] team0: Port device team_slave_1 added [ 28.814643][ T3319] team0: Port device team_slave_0 added [ 28.821258][ T3319] team0: Port device team_slave_1 added [ 28.846737][ T3327] team0: Port device team_slave_0 added [ 28.865523][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.872535][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.898473][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.909689][ T3327] team0: Port device team_slave_1 added [ 28.919693][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.926667][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 28.952716][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.973967][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.980926][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.006920][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.024739][ T3320] hsr_slave_0: entered promiscuous mode [ 29.030723][ T3320] hsr_slave_1: entered promiscuous mode [ 29.036942][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.043961][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.069867][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.082298][ T3325] hsr_slave_0: entered promiscuous mode [ 29.088225][ T3325] hsr_slave_1: entered promiscuous mode [ 29.094144][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 29.099868][ T3325] Cannot create hsr debugfs directory [ 29.115910][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.122863][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.148782][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.159881][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.166808][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 29.192704][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.253367][ T3318] hsr_slave_0: entered promiscuous mode [ 29.259316][ T3318] hsr_slave_1: entered promiscuous mode [ 29.265056][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 29.270825][ T3318] Cannot create hsr debugfs directory [ 29.284392][ T3319] hsr_slave_0: entered promiscuous mode [ 29.290354][ T3319] hsr_slave_1: entered promiscuous mode [ 29.296213][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 29.301941][ T3319] Cannot create hsr debugfs directory [ 29.311903][ T3327] hsr_slave_0: entered promiscuous mode [ 29.317772][ T3327] hsr_slave_1: entered promiscuous mode [ 29.323679][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 29.329410][ T3327] Cannot create hsr debugfs directory [ 29.504241][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.512762][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.523692][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.534249][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.551404][ T3325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.560047][ T3325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.571022][ T3325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.580690][ T3325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.610958][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.619843][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.628766][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.638330][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.662536][ T3327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.679628][ T3327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.690655][ T3327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.701948][ T3327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.720967][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.729742][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.738225][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.749489][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.791985][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.816278][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.835369][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.848009][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.855118][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.866550][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.875115][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.884722][ T395] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.891773][ T395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.903767][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.916522][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.923552][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.939070][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.954500][ T2604] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.961536][ T2604] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.970952][ T2604] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.978008][ T2604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.990012][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.004427][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.011489][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.019983][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.027065][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.037652][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.054991][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.062073][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.084854][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.100618][ T3325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.118304][ T2604] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.125345][ T2604] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.146082][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.153130][ T2066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.167943][ T3327] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.178333][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.224463][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.266751][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.278151][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.331027][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.398003][ T3325] veth0_vlan: entered promiscuous mode [ 30.409673][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.419557][ T3325] veth1_vlan: entered promiscuous mode [ 30.435419][ T3320] veth0_vlan: entered promiscuous mode [ 30.453083][ T3320] veth1_vlan: entered promiscuous mode [ 30.485866][ T3319] veth0_vlan: entered promiscuous mode [ 30.495766][ T3325] veth0_macvtap: entered promiscuous mode [ 30.505188][ T3319] veth1_vlan: entered promiscuous mode [ 30.516468][ T3325] veth1_macvtap: entered promiscuous mode [ 30.549560][ T3320] veth0_macvtap: entered promiscuous mode [ 30.560665][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.568564][ T3327] veth0_vlan: entered promiscuous mode [ 30.579817][ T3320] veth1_macvtap: entered promiscuous mode [ 30.587379][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.599703][ T3318] veth0_vlan: entered promiscuous mode [ 30.605472][ T3319] veth0_macvtap: entered promiscuous mode [ 30.613086][ T2604] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.622585][ T3327] veth1_vlan: entered promiscuous mode [ 30.628401][ T2066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.637377][ T2066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.647546][ T3319] veth1_macvtap: entered promiscuous mode [ 30.654068][ T2066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.671382][ T3318] veth1_vlan: entered promiscuous mode [ 30.677987][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.689599][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.702123][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.713849][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.729754][ T2604] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.744463][ T2604] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.757119][ T3325] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.774472][ T2604] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.789652][ T3327] veth0_macvtap: entered promiscuous mode [ 30.796091][ T2604] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.811771][ T3318] veth0_macvtap: entered promiscuous mode [ 30.821182][ T2604] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.833277][ T2604] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.842557][ T3318] veth1_macvtap: entered promiscuous mode [ 30.858500][ T3327] veth1_macvtap: entered promiscuous mode [ 30.870027][ T2604] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.880901][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.903180][ T2604] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.915874][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.927280][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.942445][ T2066] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.952819][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.967708][ T2066] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.980781][ T3500] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 31.004716][ T2066] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.044623][ T2066] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.054752][ T2066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.087798][ T2066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.110791][ T2066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.148571][ T2066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.272340][ C0] hrtimer: interrupt took 37088 ns [ 31.330039][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 31.330082][ T29] audit: type=1400 audit(1765603501.730:129): avc: denied { create } for pid=3529 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.379397][ T29] audit: type=1400 audit(1765603501.760:130): avc: denied { shutdown } for pid=3529 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.398941][ T29] audit: type=1400 audit(1765603501.760:131): avc: denied { getopt } for pid=3529 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.418305][ T29] audit: type=1400 audit(1765603501.760:132): avc: denied { connect } for pid=3529 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 31.437742][ T29] audit: type=1400 audit(1765603501.760:133): avc: denied { name_connect } for pid=3529 comm="syz.1.17" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 31.459717][ T29] audit: type=1400 audit(1765603501.760:134): avc: denied { getopt } for pid=3529 comm="syz.1.17" lport=51903 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 31.498101][ T29] audit: type=1400 audit(1765603501.880:135): avc: denied { write } for pid=3531 comm="syz.3.18" laddr=fe80::3c lport=34541 faddr=fe80::3c fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 31.557709][ T29] audit: type=1400 audit(1765603501.930:136): avc: denied { relabelfrom } for pid=3535 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.577382][ T29] audit: type=1400 audit(1765603501.930:137): avc: denied { relabelto } for pid=3535 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.596892][ T29] audit: type=1400 audit(1765603501.930:138): avc: denied { attach_queue } for pid=3535 comm="syz.3.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 31.618526][ T3542] veth1_to_bond: entered allmulticast mode [ 31.645501][ T3538] veth1_to_bond: left allmulticast mode [ 31.661004][ T3544] bridge0: entered promiscuous mode [ 31.666608][ T3544] bridge0: left promiscuous mode [ 31.823411][ T3563] loop4: detected capacity change from 0 to 512 [ 31.846246][ T3563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 31.854928][ T3563] EXT4-fs (loop4): orphan cleanup on readonly fs [ 31.861702][ T3563] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 31.877933][ T3563] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 31.884768][ T3563] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #13: comm syz.4.32: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 31.904218][ T3563] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.32: couldn't read orphan inode 13 (err -117) [ 31.916822][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.933752][ T3563] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 31.944909][ T3563] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 31.959585][ T3563] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 31.987997][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.093608][ T3594] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 32.447571][ T3634] loop1: detected capacity change from 0 to 1024 [ 32.452074][ T3632] Zero length message leads to an empty skb [ 32.476980][ T3634] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.495172][ T3634] EXT4-fs error (device loop1): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.1.58: path /13/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 32.546351][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.687729][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 32.816332][ T3664] loop3: detected capacity change from 0 to 1024 [ 32.835019][ T3664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.859558][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.987301][ T3675] loop4: detected capacity change from 0 to 164 [ 33.062534][ T3675] ISOFS: unable to read i-node block [ 33.068002][ T3675] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 33.097897][ T3679] atomic_op ffff88811b073128 conn xmit_atomic 0000000000000000 [ 33.170244][ T3687] netlink: 24 bytes leftover after parsing attributes in process `syz.0.81'. [ 33.395603][ T3704] netlink: 20 bytes leftover after parsing attributes in process `syz.4.89'. [ 33.705013][ T3734] geneve2: entered promiscuous mode [ 33.838603][ T3754] loop1: detected capacity change from 0 to 1024 [ 33.855784][ T3754] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.113: bad orphan inode 134217728 [ 33.891426][ T3754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.917588][ T3764] SELinux: Context Ü is not valid (left unmapped). [ 34.210924][ T3796] netlink: 'syz.4.131': attribute type 83 has an invalid length. [ 34.334657][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.521092][ T3813] loop1: detected capacity change from 0 to 8192 [ 34.579769][ T3597] loop1: p1 p2 p4 < > [ 34.583918][ T3597] loop1: partition table partially beyond EOD, truncated [ 34.614063][ T3597] loop1: p1 start 16777216 is beyond EOD, truncated [ 34.620726][ T3597] loop1: p2 size 515840 extends beyond EOD, truncated [ 34.629590][ T3597] loop1: p4 start 16777216 is beyond EOD, truncated [ 34.710468][ T3813] loop1: p1 p2 p4 < > [ 34.714595][ T3813] loop1: partition table partially beyond EOD, truncated [ 34.722181][ T3813] loop1: p1 start 16777216 is beyond EOD, truncated [ 34.728840][ T3813] loop1: p2 size 515840 extends beyond EOD, truncated [ 34.756806][ T3813] loop1: p4 start 16777216 is beyond EOD, truncated [ 35.098943][ T3847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3847 comm=syz.0.148 [ 35.443590][ T3893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.169'. [ 35.458567][ T3893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.169'. [ 35.588234][ T3904] wireguard0: entered promiscuous mode [ 35.593800][ T3904] wireguard0: entered allmulticast mode [ 35.604285][ T3907] loop4: detected capacity change from 0 to 512 [ 35.611893][ T3907] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.620763][ T3907] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.641097][ T3907] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.175: Allocating blocks 41-42 which overlap fs metadata [ 35.656151][ T3907] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.175: Allocating blocks 41-42 which overlap fs metadata [ 35.670256][ T3907] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.175: Failed to acquire dquot type 1 [ 35.681684][ T3907] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 35.696672][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.175: corrupted inode contents [ 35.709368][ T3907] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.175: mark_inode_dirty error [ 35.721052][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.175: corrupted inode contents [ 35.733112][ T3907] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.175: mark_inode_dirty error [ 35.744780][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.175: corrupted inode contents [ 35.757193][ T3907] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 35.766229][ T3907] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.175: corrupted inode contents [ 35.778290][ T3907] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.175: mark_inode_dirty error [ 35.790389][ T3907] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 35.799813][ T3907] EXT4-fs (loop4): 1 truncate cleaned up [ 35.806397][ T3907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.895272][ T3907] syz.4.175 (3907) used greatest stack depth: 9952 bytes left [ 35.903980][ T3327] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.028521][ T3927] loop2: detected capacity change from 0 to 2048 [ 36.042409][ T3927] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.109089][ T3927] loop2: detected capacity change from 2048 to 64 [ 36.151528][ T3927] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.182: corrupted xattr entries [ 36.200124][ T3927] EXT4-fs error (device loop2): get_max_inline_xattr_value_size:74: inode #15: comm syz.2.182: corrupt xattr in inline inode [ 36.220272][ T3927] EXT4-fs error (device loop2): xattr_find_entry:337: inode #15: comm syz.2.182: corrupted xattr entries [ 36.241983][ T3982] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.293365][ T3325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.402907][ T3928] kmmpd-loop2: attempt to access beyond end of device [ 36.402907][ T3928] loop2: rw=8402945, sector=256, nr_sectors = 4 limit=64 [ 36.416757][ T3928] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 36.457330][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 36.457344][ T29] audit: type=1400 audit(1765603506.850:450): avc: denied { write } for pid=3994 comm="syz.4.189" name="ppp" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.586524][ T2214] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.670376][ T2214] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.719020][ T2214] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.743007][ T29] audit: type=1400 audit(1765603507.140:451): avc: denied { execute } for pid=4003 comm="syz.1.193" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5835 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 36.783200][ T2214] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.801526][ T4009] loop1: detected capacity change from 0 to 1024 [ 36.826732][ T4009] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 36.837752][ T4009] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 36.858257][ T4009] JBD2: no valid journal superblock found [ 36.864076][ T4009] EXT4-fs (loop1): Could not load journal inode [ 36.917165][ T4009] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 36.934589][ T2214] bridge_slave_1: left allmulticast mode [ 36.940593][ T2214] bridge_slave_1: left promiscuous mode [ 36.946434][ T2214] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.974811][ T2214] bridge_slave_0: left allmulticast mode [ 36.980726][ T2214] bridge_slave_0: left promiscuous mode [ 36.986568][ T2214] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.016743][ T29] audit: type=1400 audit(1765603507.410:452): avc: denied { read } for pid=4019 comm="syz.1.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.059408][ T29] audit: type=1400 audit(1765603507.460:453): avc: denied { getopt } for pid=4021 comm="syz.3.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.099065][ T29] audit: type=1400 audit(1765603507.500:454): avc: denied { setopt } for pid=4024 comm="syz.0.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 37.141215][ T2214] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.155525][ T2214] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.223959][ T2214] bond0 (unregistering): Released all slaves [ 37.288197][ T2214] hsr_slave_0: left promiscuous mode [ 37.295935][ T2214] hsr_slave_1: left promiscuous mode [ 37.301858][ T2214] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.309434][ T2214] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.317209][ T2214] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.324833][ T2214] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.335188][ T2214] veth1_macvtap: left promiscuous mode [ 37.340861][ T2214] veth0_macvtap: left promiscuous mode [ 37.346614][ T2214] veth1_vlan: left promiscuous mode [ 37.352060][ T2214] veth0_vlan: left promiscuous mode [ 37.413388][ T2214] team0 (unregistering): Port device team_slave_1 removed [ 37.423045][ T2214] team0 (unregistering): Port device team_slave_0 removed [ 37.459834][ T4040] syzkaller1: entered promiscuous mode [ 37.465515][ T4040] syzkaller1: entered allmulticast mode [ 37.494223][ T4047] netlink: 180 bytes leftover after parsing attributes in process `syz.0.208'. [ 37.503428][ T4047] xt_time: unknown flags 0xf4 [ 37.543061][ T4006] chnl_net:caif_netlink_parms(): no params data found [ 37.595434][ T4006] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.602568][ T4006] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.610045][ T4006] bridge_slave_0: entered allmulticast mode [ 37.616564][ T4006] bridge_slave_0: entered promiscuous mode [ 37.623192][ T29] audit: type=1400 audit(1765603508.020:455): avc: denied { setopt } for pid=4059 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.639796][ T4006] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.649719][ T4006] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.656991][ T4006] bridge_slave_1: entered allmulticast mode [ 37.663658][ T4006] bridge_slave_1: entered promiscuous mode [ 37.702236][ T4065] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.703091][ T4006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.725057][ T4006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.771239][ T4006] team0: Port device team_slave_0 added [ 37.777879][ T4006] team0: Port device team_slave_1 added [ 37.824758][ T4006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.831839][ T4006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.842628][ T4072] capability: warning: `syz.0.217' uses deprecated v2 capabilities in a way that may be insecure [ 37.857925][ T4006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.947052][ T4006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.954141][ T4006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.981888][ T4006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.026861][ T4074] SELinux: failed to load policy [ 38.064846][ T29] audit: type=1400 audit(1765603508.420:456): avc: denied { load_policy } for pid=4073 comm="gtp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 38.129861][ T4006] hsr_slave_0: entered promiscuous mode [ 38.146247][ T4006] hsr_slave_1: entered promiscuous mode [ 38.152124][ T29] audit: type=1400 audit(1765603508.540:457): avc: denied { read write } for pid=4079 comm="syz.3.221" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.175691][ T29] audit: type=1400 audit(1765603508.540:458): avc: denied { open } for pid=4079 comm="syz.3.221" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 38.199657][ T4006] debugfs: 'hsr0' already exists in 'hsr' [ 38.205490][ T4006] Cannot create hsr debugfs directory [ 38.251138][ T29] audit: type=1400 audit(1765603508.650:459): avc: denied { name_bind } for pid=4075 comm="syz.1.219" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 38.318757][ T4096] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=4096 comm=syz.3.224 [ 38.390749][ T4006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 38.401256][ T4006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.427702][ T4006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.440203][ T4006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.499517][ T4006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.513758][ T4006] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.523611][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.530805][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.551873][ T2214] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.558943][ T2214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.656856][ T4006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.827872][ T4006] veth0_vlan: entered promiscuous mode [ 38.873910][ T4006] veth1_vlan: entered promiscuous mode [ 38.909681][ T4006] veth0_macvtap: entered promiscuous mode [ 38.926375][ T4006] veth1_macvtap: entered promiscuous mode [ 38.950090][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.972402][ T4006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.993323][ T3964] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.004159][ T3964] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.034088][ T3964] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.058963][ T3964] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.154685][ T4192] syz.3.255 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 39.309895][ T1038] Process accounting resumed [ 39.404826][ T4211] netlink: 20 bytes leftover after parsing attributes in process `syz.5.263'. [ 39.489328][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.264'. [ 39.558341][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.264'. [ 39.599839][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.264'. [ 39.624648][ T4213] netlink: 8 bytes leftover after parsing attributes in process `syz.5.264'. [ 39.661209][ T2214] Bluetooth: hci0: Frame reassembly failed (-84) [ 39.694380][ T4233] xt_CT: You must specify a L4 protocol and not use inversions on it [ 39.863540][ T4254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.937551][ T4261] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4261 comm=syz.3.286 [ 40.108445][ T4282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.294'. [ 40.173731][ T4292] netlink: 4 bytes leftover after parsing attributes in process `syz.1.299'. [ 40.197394][ T4292] netlink: 32 bytes leftover after parsing attributes in process `syz.1.299'. [ 40.246897][ T4302] netlink: 64 bytes leftover after parsing attributes in process `syz.5.303'. [ 40.323754][ T4315] loop3: detected capacity change from 0 to 1024 [ 40.330436][ T4315] ======================================================= [ 40.330436][ T4315] WARNING: The mand mount option has been deprecated and [ 40.330436][ T4315] and is ignored by this kernel. Remove the mand [ 40.330436][ T4315] option from the mount to silence this warning. [ 40.330436][ T4315] ======================================================= [ 40.369291][ T4315] EXT4-fs: Ignoring removed bh option [ 40.383015][ T4315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.405953][ T4315] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.310: Allocating blocks 385-513 which overlap fs metadata [ 40.422270][ T4315] EXT4-fs (loop3): pa ffff888107d600e0: logic 16, phys. 129, len 24 [ 40.430369][ T4315] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 40.462944][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.486690][ T4328] process 'syz.5.316' launched '/dev/fd/6' with NULL argv: empty string added [ 40.535960][ T4336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.318'. [ 41.590313][ T29] kauditd_printk_skb: 120 callbacks suppressed [ 41.590339][ T29] audit: type=1326 audit(1765603511.990:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.620537][ T29] audit: type=1326 audit(1765603511.990:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.643854][ T29] audit: type=1326 audit(1765603511.990:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.667235][ T29] audit: type=1326 audit(1765603511.990:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.690468][ T29] audit: type=1326 audit(1765603511.990:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.713863][ T29] audit: type=1326 audit(1765603511.990:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.737106][ T29] audit: type=1326 audit(1765603511.990:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.760395][ T3610] Bluetooth: hci0: command 0x1003 tx timeout [ 41.760424][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 41.760573][ T4228] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 41.766628][ T29] audit: type=1326 audit(1765603511.990:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.801676][ T29] audit: type=1326 audit(1765603511.990:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.825018][ T29] audit: type=1326 audit(1765603511.990:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.3.341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 41.934988][ T4408] loop5: detected capacity change from 0 to 128 [ 41.945279][ T4408] syz.5.344: attempt to access beyond end of device [ 41.945279][ T4408] loop5: rw=8390659, sector=104, nr_sectors = 25 limit=128 [ 42.007150][ T4415] loop1: detected capacity change from 0 to 512 [ 42.014251][ T4415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.023031][ T4415] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.040982][ T4415] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.350: Allocating blocks 41-42 which overlap fs metadata [ 42.054836][ T4415] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.350: Allocating blocks 41-42 which overlap fs metadata [ 42.068862][ T4415] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.350: Failed to acquire dquot type 1 [ 42.098958][ T4415] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 42.114456][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.350: corrupted inode contents [ 42.126502][ T4415] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.350: mark_inode_dirty error [ 42.138173][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.350: corrupted inode contents [ 42.150561][ T4415] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.350: mark_inode_dirty error [ 42.162017][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.350: corrupted inode contents [ 42.174097][ T4415] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 42.184087][ T4415] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.350: corrupted inode contents [ 42.208937][ T4415] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.350: mark_inode_dirty error [ 42.234204][ T4415] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 42.251584][ T4415] EXT4-fs (loop1): 1 truncate cleaned up [ 42.263454][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.305161][ T4427] loop3: detected capacity change from 0 to 8192 [ 42.348839][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.426755][ T4444] hsr_slave_0: left promiscuous mode [ 42.455670][ T4444] hsr_slave_1: left promiscuous mode [ 42.622596][ T4458] team0: Device gtp0 is of different type [ 42.728182][ T4466] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 42.752697][ T4466] team0: Port device dummy0 added [ 42.775953][ T4466] netlink: 'syz.0.375': attribute type 10 has an invalid length. [ 42.799767][ T4466] team0: Port device dummy0 removed [ 42.820414][ T4466] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 43.587234][ T4552] syz.3.384 uses obsolete (PF_INET,SOCK_PACKET) [ 43.617676][ T4556] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 43.624216][ T4556] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 43.631776][ T4556] vhci_hcd vhci_hcd.0: Device attached [ 43.733567][ T4557] vhci_hcd: cannot find the pending unlink 1023 [ 43.752284][ T4593] wireguard0: entered promiscuous mode [ 43.757754][ T4593] wireguard0: entered allmulticast mode [ 43.765126][ T4557] vhci_hcd: connection closed [ 43.765522][ T2214] vhci_hcd vhci_hcd.1: stop threads [ 43.775477][ T2214] vhci_hcd vhci_hcd.1: release socket [ 43.780939][ T2214] vhci_hcd vhci_hcd.1: disconnect device [ 43.808914][ T3379] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 43.931949][ T4625] netlink: 'syz.5.395': attribute type 12 has an invalid length. [ 44.366555][ T4673] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 44.672424][ T4709] loop1: detected capacity change from 0 to 256 [ 44.683049][ T4709] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 44.691594][ T4709] FAT-fs (loop1): Filesystem has been set read-only [ 44.849016][ T4725] __nla_validate_parse: 5 callbacks suppressed [ 44.849076][ T4725] netlink: 16 bytes leftover after parsing attributes in process `syz.1.443'. [ 44.864839][ T4722] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 45.050689][ T4739] SELinux: Context : is not valid (left unmapped). [ 45.100267][ T4741] loop3: detected capacity change from 0 to 8192 [ 45.304175][ T4753] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 45.325215][ T4757] netlink: 27 bytes leftover after parsing attributes in process `syz.5.456'. [ 45.334494][ T4753] bond0: (slave dummy0): Releasing backup interface [ 45.351672][ T4753] team0: Port device dummy0 added [ 45.381503][ T4753] netlink: 'syz.0.454': attribute type 10 has an invalid length. [ 45.409017][ T4753] team0: Port device dummy0 removed [ 45.432982][ T4753] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 45.520648][ T4769] loop5: detected capacity change from 0 to 512 [ 45.529668][ T4769] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.569281][ T4769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.593783][ T4774] loop3: detected capacity change from 0 to 512 [ 45.601031][ T4769] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.618824][ T4774] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 45.749243][ T4006] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.780906][ T4798] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 45.804507][ T4799] bridge0: port 3(gretap0) entered blocking state [ 45.811078][ T4799] bridge0: port 3(gretap0) entered disabled state [ 45.826608][ T4799] gretap0: entered allmulticast mode [ 45.846450][ T4799] gretap0: entered promiscuous mode [ 45.858892][ T4799] bridge0: port 3(gretap0) entered blocking state [ 45.865419][ T4799] bridge0: port 3(gretap0) entered forwarding state [ 45.882874][ T4807] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 45.893698][ T4805] IPVS: stopping master sync thread 4807 ... [ 45.898850][ T4806] gretap0: left allmulticast mode [ 45.904724][ T4806] gretap0: left promiscuous mode [ 45.909753][ T4806] bridge0: port 3(gretap0) entered disabled state [ 45.949592][ T4810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.968063][ T4810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.076812][ T4822] syzkaller1: entered promiscuous mode [ 46.082350][ T4822] syzkaller1: entered allmulticast mode [ 46.210936][ T4837] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 46.682176][ T4889] loop3: detected capacity change from 0 to 1024 [ 46.688992][ T4889] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.724127][ T4889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.751072][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 46.751086][ T29] audit: type=1400 audit(1765603517.150:759): avc: denied { mounton } for pid=4888 comm="syz.3.514" path="/131/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.808446][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.986818][ T4914] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 46.994570][ T4914] netlink: 'syz.1.525': attribute type 4 has an invalid length. [ 47.002266][ T4914] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.525'. [ 47.012280][ T29] audit: type=1404 audit(1765603517.390:760): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 47.027217][ T29] audit: type=1400 audit(1765603517.390:761): avc: denied { allowed } for pid=4905 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 47.043022][ T4918] netlink: 'syz.5.527': attribute type 3 has an invalid length. [ 47.046440][ T29] audit: type=1400 audit(1765603517.390:762): avc: denied { read write } for pid=4006 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.078933][ T29] audit: type=1404 audit(1765603517.410:763): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 47.093861][ T29] audit: type=1400 audit(1765603517.430:764): avc: denied { map_create } for pid=4917 comm="syz.5.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.112855][ T29] audit: type=1400 audit(1765603517.430:765): avc: denied { perfmon } for pid=4917 comm="syz.5.527" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.133529][ T29] audit: type=1400 audit(1765603517.430:766): avc: denied { map_read map_write } for pid=4917 comm="syz.5.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.143860][ T4922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.529'. [ 47.153183][ T29] audit: type=1400 audit(1765603517.430:767): avc: denied { prog_load } for pid=4917 comm="syz.5.527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 47.153204][ T29] audit: type=1400 audit(1765603517.430:768): avc: denied { bpf } for pid=4917 comm="syz.5.527" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.431830][ T4948] capability: warning: `syz.3.539' uses 32-bit capabilities (legacy support in use) [ 47.576924][ T4967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 47.631197][ T4972] loop4: detected capacity change from 0 to 128 [ 47.684443][ T4975] pimreg: entered allmulticast mode [ 47.702497][ T4975] pimreg: left allmulticast mode [ 47.736272][ T4981] netlink: 'syz.3.555': attribute type 3 has an invalid length. [ 47.767684][ T4983] Illegal XDP return value 51 on prog (id 396) dev syz_tun, expect packet loss! [ 48.002478][ T5001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.564'. [ 48.082910][ T5011] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 48.101583][ T5011] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 48.210362][ T5018] netlink: 360 bytes leftover after parsing attributes in process `syz.1.573'. [ 48.530419][ T5047] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 48.645060][ T5054] rdma_op ffff88811c180d80 conn xmit_rdma 0000000000000000 [ 49.145464][ T5065] ip6gre1: entered allmulticast mode [ 49.299405][ T5067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.595'. [ 49.774449][ T5116] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 49.814094][ T5116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.827209][ T5126] rdma_op ffff88811dfdd180 conn xmit_rdma 0000000000000000 [ 49.860114][ T5116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.867181][ T5116] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 49.888308][ T5116] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 49.918279][ T5137] netlink: 'syz.1.626': attribute type 13 has an invalid length. [ 49.941996][ T5142] xt_TPROXY: Can be used only with -p tcp or -p udp [ 50.028376][ T5146] vlan2: entered allmulticast mode [ 50.096813][ T5159] loop3: detected capacity change from 0 to 128 [ 50.120660][ T5159] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 50.168834][ T5171] netlink: 'syz.0.641': attribute type 10 has an invalid length. [ 50.180098][ T5171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.188293][ T5171] team0: Port device bond0 added [ 50.249474][ T5177] __nla_validate_parse: 3 callbacks suppressed [ 50.249564][ T5177] netlink: 20 bytes leftover after parsing attributes in process `syz.4.643'. [ 50.318014][ T5187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.326507][ T5187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.332456][ T5189] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 50.344701][ T5184] netlink: 96 bytes leftover after parsing attributes in process `syz.0.646'. [ 50.381664][ T5193] netlink: 36 bytes leftover after parsing attributes in process `syz.0.651'. [ 50.561963][ T5214] loop3: detected capacity change from 0 to 512 [ 50.605198][ T5214] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 50.630657][ T5214] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 50.649045][ T5214] EXT4-fs (loop3): orphan cleanup on readonly fs [ 50.657276][ T5214] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #16: comm syz.3.660: corrupted inode contents [ 50.674909][ T5214] EXT4-fs (loop3): Remounting filesystem read-only [ 50.684180][ T5214] EXT4-fs (loop3): 1 truncate cleaned up [ 50.690046][ T3940] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.700744][ T3940] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 50.718070][ T3940] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 50.731280][ T5214] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.046638][ T5240] netlink: 'syz.4.671': attribute type 1 has an invalid length. [ 51.078534][ T5244] syzkaller0: entered promiscuous mode [ 51.084245][ T5244] syzkaller0: entered allmulticast mode [ 51.291595][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.447172][ T5292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.696'. [ 51.456246][ T5292] IPVS: Error connecting to the multicast addr [ 51.506442][ T5297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.697'. [ 51.785906][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 51.785920][ T29] audit: type=1400 audit(1765603522.180:1005): avc: denied { write } for pid=5324 comm="syz.1.711" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.817461][ T5326] vhci_hcd vhci_hcd.2: invalid port number 96 [ 51.823737][ T5326] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 51.841130][ T29] audit: type=1400 audit(1765603522.210:1006): avc: denied { map } for pid=5324 comm="syz.1.711" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.871693][ T29] audit: type=1400 audit(1765603522.250:1007): avc: denied { ioctl } for pid=5325 comm="syz.0.710" path="socket:[10569]" dev="sockfs" ino=10569 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 51.896471][ T29] audit: type=1400 audit(1765603522.250:1008): avc: denied { create } for pid=5325 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.916567][ T29] audit: type=1400 audit(1765603522.250:1009): avc: denied { write } for pid=5325 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.936585][ T29] audit: type=1400 audit(1765603522.250:1010): avc: denied { nlmsg_write } for pid=5325 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.970611][ T29] audit: type=1400 audit(1765603522.370:1011): avc: denied { read } for pid=5328 comm="syz.1.722" dev="nsfs" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 51.991696][ T29] audit: type=1400 audit(1765603522.370:1012): avc: denied { open } for pid=5328 comm="syz.1.722" path="net:[4026532637]" dev="nsfs" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 52.061934][ T29] audit: type=1326 audit(1765603522.460:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c7bf749 code=0x7ffc0000 [ 52.085473][ T29] audit: type=1326 audit(1765603522.460:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.0.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30c7bf749 code=0x7ffc0000 [ 52.179417][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 52.188299][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.3.719'. [ 52.828652][ T5385] loop3: detected capacity change from 0 to 512 [ 52.836387][ T5385] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 52.845104][ T5385] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 52.868654][ T5385] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.737: Allocating blocks 41-42 which overlap fs metadata [ 52.926317][ T5385] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.737: Failed to acquire dquot type 1 [ 52.957962][ T5385] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 52.973795][ T5385] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.737: corrupted inode contents [ 52.987072][ T5385] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.737: mark_inode_dirty error [ 53.012951][ T5385] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.737: corrupted inode contents [ 53.043342][ T5385] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.737: mark_inode_dirty error [ 53.077915][ T5385] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.737: corrupted inode contents [ 53.108416][ T5385] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 53.145316][ T5385] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.737: corrupted inode contents [ 53.175930][ T5385] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.737: mark_inode_dirty error [ 53.189091][ T5385] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 53.198895][ T5385] EXT4-fs (loop3): 1 truncate cleaned up [ 53.205000][ T5385] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.296042][ T5417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.750'. [ 53.317201][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.400117][ T5428] netlink: 'syz.1.755': attribute type 1 has an invalid length. [ 53.455785][ T5428] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.486439][ T5437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.755'. [ 53.508179][ T5436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.758'. [ 53.550762][ T5437] bond1 (unregistering): Released all slaves [ 53.684760][ T5460] bond0: Caught tx_queue_len zero misconfig [ 53.779787][ T5473] wireguard0: entered promiscuous mode [ 53.785285][ T5473] wireguard0: entered allmulticast mode [ 53.914784][ T5495] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2572 sclass=netlink_xfrm_socket pid=5495 comm=syz.1.783 [ 54.173471][ T5507] openvswitch: netlink: Missing key (keys=40, expected=80) [ 54.331519][ T4572] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.351029][ T4572] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.370924][ T4572] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.389723][ T4572] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 54.710083][ T5545] netlink: zone id is out of range [ 54.715208][ T5545] netlink: zone id is out of range [ 54.728191][ T5545] netlink: zone id is out of range [ 54.736153][ T5549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5549 comm=syz.5.806 [ 54.748529][ T5549] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5549 comm=syz.5.806 [ 54.772306][ T5545] netlink: set zone limit has 8 unknown bytes [ 55.086587][ T5572] rdma_op ffff88811c127580 conn xmit_rdma 0000000000000000 [ 55.095077][ T5573] $Hÿ: renamed from bond0 (while UP) [ 55.131400][ T5573] $Hÿ: entered promiscuous mode [ 55.136470][ T5573] bond_slave_0: entered promiscuous mode [ 55.142396][ T5573] bond_slave_1: entered promiscuous mode [ 55.219860][ T5579] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 55.433258][ T5583] atomic_op ffff88811c127528 conn xmit_atomic 0000000000000000 [ 55.496270][ T5595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5595 comm=syz.1.828 [ 55.726959][ T5619] netlink: 'syz.3.838': attribute type 10 has an invalid length. [ 55.738430][ T5619] team0: Port device dummy0 added [ 55.783075][ T5619] netlink: 'syz.3.838': attribute type 10 has an invalid length. [ 55.855912][ T5619] team0: Port device dummy0 removed [ 55.863471][ T5619] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 55.913552][ T5638] netlink: 'syz.0.846': attribute type 12 has an invalid length. [ 55.998425][ T5650] loop3: detected capacity change from 0 to 1024 [ 56.045061][ T5650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.093796][ T5650] EXT4-fs error (device loop3): ext4_read_inline_dir:1486: inode #12: block 7: comm syz.3.851: path /194/file1/file0: bad entry in directory: inode out of bounds - offset=24, inode=150994957, rec_len=16, size=80 fake=0 [ 56.136398][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.204549][ T5665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5665 comm=syz.3.853 [ 56.225030][ T5667] syzkaller1: entered promiscuous mode [ 56.230601][ T5667] syzkaller1: entered allmulticast mode [ 56.628187][ T5688] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 56.681077][ T5688] bond0: (slave dummy0): Releasing backup interface [ 56.699612][ T5688] team0: Port device dummy0 added [ 56.723882][ T5688] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 56.758078][ T5688] team0: Port device dummy0 removed [ 56.778162][ T5688] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 56.883119][ T29] kauditd_printk_skb: 382 callbacks suppressed [ 56.883162][ T29] audit: type=1400 audit(1765603527.280:1394): avc: denied { bind } for pid=5707 comm="syz.0.887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.908681][ T29] audit: type=1400 audit(1765603527.280:1395): avc: denied { name_bind } for pid=5707 comm="syz.0.887" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 56.929548][ T29] audit: type=1400 audit(1765603527.280:1396): avc: denied { node_bind } for pid=5707 comm="syz.0.887" saddr=::ffff:0.0.0.0 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 56.953522][ T29] audit: type=1400 audit(1765603527.350:1397): avc: denied { connect } for pid=5707 comm="syz.0.887" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.976457][ T29] audit: type=1400 audit(1765603527.370:1398): avc: denied { write } for pid=5707 comm="syz.0.887" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.999608][ T29] audit: type=1400 audit(1765603527.400:1399): avc: denied { setopt } for pid=5707 comm="syz.0.887" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.022332][ T29] audit: type=1400 audit(1765603527.420:1400): avc: denied { read } for pid=5707 comm="syz.0.887" laddr=::ffff:0.0.0.0 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.046471][ T29] audit: type=1400 audit(1765603527.420:1401): avc: denied { sys_module } for pid=5711 comm="syz.1.877" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 57.067656][ T29] audit: type=1326 audit(1765603527.450:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 57.090980][ T29] audit: type=1326 audit(1765603527.450:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5718 comm="syz.3.878" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d9ebbf749 code=0x7ffc0000 [ 57.198836][ T5723] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 57.625129][ T5775] __nla_validate_parse: 10 callbacks suppressed [ 57.625161][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.907'. [ 57.684595][ T5780] mmap: syz.3.908 (5780) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.414869][ T5801] loop4: detected capacity change from 0 to 8192 [ 58.424583][ T5801] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 58.494727][ T10] kernel read not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 58.685612][ T3959] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.741155][ T3959] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.785842][ T5832] vlan2: entered allmulticast mode [ 58.798894][ T5841] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 58.815202][ T5839] IPVS: stopping backup sync thread 5841 ... [ 58.835519][ T3959] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.935829][ T3959] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.009768][ T3959] bridge_slave_1: left allmulticast mode [ 59.015421][ T3959] bridge_slave_1: left promiscuous mode [ 59.021223][ T3959] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.029497][ T3959] bridge_slave_0: left allmulticast mode [ 59.035151][ T3959] bridge_slave_0: left promiscuous mode [ 59.041005][ T3959] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.205840][ T3959] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.217558][ T3959] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.230739][ T3959] bond0 (unregistering): Released all slaves [ 59.240030][ T3959] bond1 (unregistering): Released all slaves [ 59.248275][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 59.278207][ T5871] syzkaller1: entered promiscuous mode [ 59.283764][ T5871] syzkaller1: entered allmulticast mode [ 59.292130][ T3959] hsr_slave_0: left promiscuous mode [ 59.297713][ T3959] hsr_slave_1: left promiscuous mode [ 59.303895][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.311379][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.320594][ T3959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.328025][ T3959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.350268][ T3959] veth1_macvtap: left promiscuous mode [ 59.357275][ T3959] veth0_macvtap: left promiscuous mode [ 59.365938][ T3959] veth1_vlan: left promiscuous mode [ 59.374856][ T3959] veth0_vlan: left promiscuous mode [ 59.481336][ T3959] team0 (unregistering): Port device team_slave_1 removed [ 59.494302][ T3959] team0 (unregistering): Port device team_slave_0 removed [ 59.558093][ T5908] all: renamed from lo (while UP) [ 59.563654][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 59.600384][ T5901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.957'. [ 59.614978][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.622060][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.630201][ T5840] bridge_slave_0: entered allmulticast mode [ 59.636783][ T5840] bridge_slave_0: entered promiscuous mode [ 59.653933][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.962'. [ 59.673577][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.680702][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.691655][ T5919] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 59.698894][ T5919] IPv6: NLM_F_CREATE should be set when creating new route [ 59.736354][ T5840] bridge_slave_1: entered allmulticast mode [ 59.748187][ T5840] bridge_slave_1: entered promiscuous mode [ 59.793720][ T5929] lo: Caught tx_queue_len zero misconfig [ 59.799416][ T5929] sch_tbf: burst 19360 is lower than device lo mtu (65550) ! [ 59.841837][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.852426][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.893568][ T5840] team0: Port device team_slave_0 added [ 59.899338][ T5937] C: renamed from team_slave_0 (while UP) [ 59.912579][ T5937] netlink: 'syz.0.970': attribute type 3 has an invalid length. [ 59.920247][ T5937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.970'. [ 59.930232][ T5937] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 59.948359][ T5840] team0: Port device team_slave_1 added [ 59.968402][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.975404][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.001377][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.031962][ T5945] rdma_op ffff88813cf0f980 conn xmit_rdma 0000000000000000 [ 60.034062][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.046250][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.072127][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.109195][ T5840] hsr_slave_0: entered promiscuous mode [ 60.116410][ T5840] hsr_slave_1: entered promiscuous mode [ 60.316603][ T5840] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 60.326404][ T5840] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 60.342572][ T5840] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 60.354881][ T5840] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 60.378841][ T5987] netlink: 'syz.0.993': attribute type 3 has an invalid length. [ 60.402094][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.409233][ T5840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.416562][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.423661][ T5840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.543264][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.561658][ T3952] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.579194][ T3952] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.595098][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.609547][ T3973] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.616656][ T3973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.630338][ T3952] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.637431][ T3952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.751605][ T6022] 9p: Bad value for 'rfdno' [ 60.863569][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.011119][ T3427] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 61.018819][ T3427] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 61.037390][ T3427] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 61.046249][ T3427] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 61.085171][ T5840] veth0_vlan: entered promiscuous mode [ 61.100874][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 61.103946][ T5840] veth1_vlan: entered promiscuous mode [ 61.144935][ T5840] veth0_macvtap: entered promiscuous mode [ 61.158890][ T5840] veth1_macvtap: entered promiscuous mode [ 61.169983][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.195444][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.207815][ T3959] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.227571][ T3959] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.270308][ T6080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.302440][ T3959] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.320348][ T6080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.344205][ T3959] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.498951][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1028'. [ 61.507917][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1028'. [ 61.522121][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1028'. [ 61.531116][ T6101] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1028'. [ 61.585658][ T3427] kernel read not supported for file /sg0 (pid: 3427 comm: kworker/1:5) [ 61.670813][ T6116] loop6: detected capacity change from 0 to 8192 [ 61.678148][ T6116] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.832520][ T6127] bridge: RTM_NEWNEIGH with invalid ether address [ 61.967633][ T6145] xt_hashlimit: max too large, truncated to 1048576 [ 62.000403][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 62.000418][ T29] audit: type=1326 audit(1765603532.400:1592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.039132][ T29] audit: type=1326 audit(1765603532.400:1593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.062625][ T29] audit: type=1326 audit(1765603532.430:1594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.086100][ T29] audit: type=1326 audit(1765603532.430:1595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.109645][ T29] audit: type=1326 audit(1765603532.430:1596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.133103][ T29] audit: type=1326 audit(1765603532.430:1597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.156547][ T29] audit: type=1326 audit(1765603532.430:1598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6147 comm="syz.5.1054" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.192386][ T29] audit: type=1400 audit(1765603532.590:1599): avc: denied { write } for pid=6154 comm="syz.5.1057" path="socket:[13244]" dev="sockfs" ino=13244 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 62.285559][ T29] audit: type=1400 audit(1765603532.680:1600): avc: denied { ioctl } for pid=6166 comm="syz.5.1063" path="socket:[13261]" dev="sockfs" ino=13261 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 62.322426][ T29] audit: type=1326 audit(1765603532.720:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6171 comm="syz.5.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f588ad0f749 code=0x7ffc0000 [ 62.402611][ T6177] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 63.035960][ T3978] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.287622][ T6243] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 63.294161][ T6243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 63.301602][ T6243] vhci_hcd vhci_hcd.0: Device attached [ 63.310319][ T6244] vhci_hcd: cannot find the pending unlink 1023 [ 63.317671][ T6244] vhci_hcd: connection closed [ 63.317918][ T53] vhci_hcd vhci_hcd.3: stop threads [ 63.327824][ T53] vhci_hcd vhci_hcd.3: release socket [ 63.333218][ T53] vhci_hcd vhci_hcd.3: disconnect device [ 63.466720][ T6219] chnl_net:caif_netlink_parms(): no params data found [ 63.565570][ T6219] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.572707][ T6219] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.580463][ T6219] bridge_slave_0: entered allmulticast mode [ 63.587000][ T6219] bridge_slave_0: entered promiscuous mode [ 63.595573][ T6219] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.602662][ T6219] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.610051][ T6219] bridge_slave_1: entered allmulticast mode [ 63.616767][ T6219] bridge_slave_1: entered promiscuous mode [ 63.650812][ T6219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.669917][ T6219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.711804][ T6219] team0: Port device team_slave_0 added [ 63.718464][ T6219] team0: Port device team_slave_1 added [ 63.775000][ T6280] $Hÿ: renamed from bond0 (while UP) [ 63.785674][ T6280] $Hÿ: entered promiscuous mode [ 63.790732][ T6280] bond_slave_0: entered promiscuous mode [ 63.796506][ T6280] bond_slave_1: entered promiscuous mode [ 63.803145][ T6280] dummy0: entered promiscuous mode [ 63.819929][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.826886][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.852875][ T6219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.881221][ T6219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.888214][ T6219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.914259][ T6219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.023457][ T6219] hsr_slave_0: entered promiscuous mode [ 64.029962][ T6219] hsr_slave_1: entered promiscuous mode [ 64.035889][ T6219] debugfs: 'hsr0' already exists in 'hsr' [ 64.041680][ T6219] Cannot create hsr debugfs directory [ 64.206823][ T6302] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 64.233799][ T6219] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 64.262560][ T6219] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 64.283434][ T6219] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.299977][ T6308] __nla_validate_parse: 3 callbacks suppressed [ 64.299991][ T6308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1118'. [ 64.321857][ T6219] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.385681][ T6219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.449079][ T6219] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.459352][ T3970] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.466413][ T3970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.483287][ T3968] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.490384][ T3968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.506950][ T6329] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1125'. [ 64.527175][ T6219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.537590][ T6219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.561963][ T3978] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.622536][ T6336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1136'. [ 64.634926][ T3978] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.666167][ T6219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.706339][ T3978] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.778461][ T6357] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 64.826887][ T3978] bridge_slave_1: left allmulticast mode [ 64.832874][ T3978] bridge_slave_1: left promiscuous mode [ 64.838741][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.850163][ T6365] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 64.886685][ T3978] bridge_slave_0: left allmulticast mode [ 64.892627][ T3978] bridge_slave_0: left promiscuous mode [ 64.898266][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.920390][ T6372] netlink: 'syz.1.1135': attribute type 10 has an invalid length. [ 65.023465][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.034042][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.044856][ T3978] bond0 (unregistering): Released all slaves [ 65.063077][ T6365] team0: Port device dummy0 added [ 65.085871][ T6372] team0: Port device dummy0 removed [ 65.100920][ T6372] dummy0: entered promiscuous mode [ 65.106344][ T6372] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 65.129520][ T3978] hsr_slave_0: left promiscuous mode [ 65.138814][ T3978] hsr_slave_1: left promiscuous mode [ 65.144605][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.152029][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.179961][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.187368][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.207863][ T3978] veth1_macvtap: left promiscuous mode [ 65.225706][ T3978] veth0_macvtap: left promiscuous mode [ 65.231666][ T3978] veth1_vlan: left promiscuous mode [ 65.236978][ T3978] veth0_vlan: left promiscuous mode [ 65.328239][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 65.337837][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 65.369753][ T6390] ipip0: entered promiscuous mode [ 65.381429][ T6219] veth0_vlan: entered promiscuous mode [ 65.399517][ T6219] veth1_vlan: entered promiscuous mode [ 65.414760][ T6406] netlink: 'syz.0.1159': attribute type 13 has an invalid length. [ 65.420769][ T6219] veth0_macvtap: entered promiscuous mode [ 65.442335][ T6219] veth1_macvtap: entered promiscuous mode [ 65.549358][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.581381][ T6219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.595929][ T3976] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.604909][ T3976] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.641922][ T3976] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.669154][ T3976] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.823051][ T6442] netlink: 'syz.7.1166': attribute type 1 has an invalid length. [ 65.861975][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1166'. [ 66.301986][ T6482] loop7: detected capacity change from 0 to 256 [ 66.313727][ T6482] FAT-fs (loop7): error, fat_free_clusters: deleting FAT entry beyond EOF [ 66.322352][ T6482] FAT-fs (loop7): Filesystem has been set read-only [ 67.039966][ T6530] netlink: 'syz.5.1199': attribute type 1 has an invalid length. [ 67.085743][ T6530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.187006][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1199'. [ 67.279215][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 67.279274][ T29] audit: type=1400 audit(1765603537.670:1695): avc: denied { accept } for pid=6539 comm="syz.7.1205" lport=37859 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.320272][ T6530] bond1 (unregistering): Released all slaves [ 67.396105][ T6548] loop7: detected capacity change from 0 to 1024 [ 67.415239][ T6550] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1209'. [ 67.423278][ T6548] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.449045][ T6548] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.470779][ T29] audit: type=1400 audit(1765603537.870:1696): avc: denied { add_name } for pid=6547 comm="syz.7.1208" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.495221][ T6561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1209'. [ 67.497323][ T29] audit: type=1400 audit(1765603537.870:1697): avc: denied { create } for pid=6547 comm="syz.7.1208" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.524553][ T29] audit: type=1400 audit(1765603537.890:1698): avc: denied { read write } for pid=6547 comm="syz.7.1208" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.547231][ T29] audit: type=1400 audit(1765603537.890:1699): avc: denied { open } for pid=6547 comm="syz.7.1208" path="/12/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.570219][ T29] audit: type=1400 audit(1765603537.890:1700): avc: denied { ioctl } for pid=6547 comm="syz.7.1208" path="/12/file1/file1" dev="loop7" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.570517][ T6548] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 67.632314][ T6219] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.657768][ T6564] SELinux: syz.1.1214 (6564) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.759175][ T29] audit: type=1326 audit(1765603538.160:1701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c7bf749 code=0x7ffc0000 [ 67.783266][ T29] audit: type=1326 audit(1765603538.160:1702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c7bf749 code=0x7ffc0000 [ 67.806758][ T29] audit: type=1326 audit(1765603538.160:1703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fc30c7bf749 code=0x7ffc0000 [ 67.830220][ T29] audit: type=1326 audit(1765603538.160:1704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6576 comm="syz.0.1220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c7bf749 code=0x7ffc0000 [ 67.863715][ T6581] netlink: 'syz.7.1222': attribute type 13 has an invalid length. [ 68.140274][ T6609] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 68.246179][ T6625] rdma_op ffff888139b9b180 conn xmit_rdma 0000000000000000 [ 68.283907][ T6628] netlink: 'syz.3.1243': attribute type 13 has an invalid length. [ 68.294791][ T6633] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1253'. [ 68.573067][ T6648] loop7: detected capacity change from 0 to 128 [ 68.637794][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.637794][ T6648] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 68.651670][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.651670][ T6648] loop7: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 68.665758][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.665758][ T6648] loop7: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 68.681134][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.681134][ T6648] loop7: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 68.695202][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.695202][ T6648] loop7: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 68.695238][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.695238][ T6648] loop7: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 68.695472][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.695472][ T6648] loop7: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 68.695509][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.695509][ T6648] loop7: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 68.695538][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.695538][ T6648] loop7: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 68.695621][ T6648] syz.7.1250: attempt to access beyond end of device [ 68.695621][ T6648] loop7: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 69.464324][ T6678] loop7: detected capacity change from 0 to 128 [ 69.714721][ T6699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6699 comm=syz.7.1273 [ 69.741538][ T6703] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 69.769257][ T6703] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 70.127507][ T6744] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 70.195902][ T6750] wg1: Caught tx_queue_len zero misconfig [ 70.204261][ T6748] block device autoloading is deprecated and will be removed. [ 70.267926][ T6756] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1298'. [ 70.359639][ T6764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1301'. [ 70.419954][ T6770] loop7: detected capacity change from 0 to 164 [ 70.455169][ T6775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 70.495507][ T6780] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1305'. [ 70.870860][ T6810] ================================================================== [ 70.878969][ T6810] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 70.887582][ T6810] [ 70.889898][ T6810] write to 0xffff888113d14a68 of 8 bytes by task 6814 on cpu 0: [ 70.897523][ T6810] shmem_file_splice_read+0x470/0x600 [ 70.902898][ T6810] splice_direct_to_actor+0x26f/0x680 [ 70.908265][ T6810] do_splice_direct+0xda/0x150 [ 70.913024][ T6810] do_sendfile+0x380/0x650 [ 70.917437][ T6810] __x64_sys_sendfile64+0x105/0x150 [ 70.922630][ T6810] x64_sys_call+0x2db1/0x3000 [ 70.927313][ T6810] do_syscall_64+0xd8/0x2a0 [ 70.931827][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.937710][ T6810] [ 70.940016][ T6810] write to 0xffff888113d14a68 of 8 bytes by task 6810 on cpu 1: [ 70.947630][ T6810] shmem_file_splice_read+0x470/0x600 [ 70.953000][ T6810] splice_direct_to_actor+0x26f/0x680 [ 70.958359][ T6810] do_splice_direct+0xda/0x150 [ 70.963122][ T6810] do_sendfile+0x380/0x650 [ 70.967540][ T6810] __x64_sys_sendfile64+0x105/0x150 [ 70.972732][ T6810] x64_sys_call+0x2db1/0x3000 [ 70.977405][ T6810] do_syscall_64+0xd8/0x2a0 [ 70.981908][ T6810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.987792][ T6810] [ 70.990098][ T6810] value changed: 0x0000000000014072 -> 0x000000000001409c [ 70.997187][ T6810] [ 70.999496][ T6810] Reported by Kernel Concurrency Sanitizer on: [ 71.005646][ T6810] CPU: 1 UID: 0 PID: 6810 Comm: syz.5.1322 Not tainted syzkaller #0 PREEMPT(voluntary) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 71.015443][ T6810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 71.025484][ T6810] ================================================================== [ 71.512876][ T3978] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.571417][ T3978] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.664739][ T3978] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.702124][ T3978] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.790916][ T3978] bridge_slave_1: left allmulticast mode [ 71.796604][ T3978] bridge_slave_1: left promiscuous mode [ 71.802293][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.810738][ T3978] bridge_slave_0: left allmulticast mode [ 71.816373][ T3978] bridge_slave_0: left promiscuous mode [ 71.822252][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.900602][ T3978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.910223][ T3978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.920305][ T3978] bond0 (unregistering): Released all slaves [ 71.982012][ T3978] hsr_slave_0: left promiscuous mode [ 71.987623][ T3978] hsr_slave_1: left promiscuous mode [ 71.993287][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.000684][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.008089][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.015525][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.025358][ T3978] veth1_macvtap: left promiscuous mode [ 72.030916][ T3978] veth0_macvtap: left promiscuous mode [ 72.036451][ T3978] veth1_vlan: left promiscuous mode [ 72.041871][ T3978] veth0_vlan: left promiscuous mode [ 72.101080][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 72.110612][ T3978] team0 (unregistering): Port device team_slave_0 removed [ 72.501754][ T3978] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.551160][ T3978] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.591268][ T3978] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.671911][ T3978] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.750947][ T3978] bridge_slave_1: left allmulticast mode [ 72.756614][ T3978] bridge_slave_1: left promiscuous mode [ 72.762283][ T3978] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.770102][ T3978] bridge_slave_0: left allmulticast mode [ 72.775724][ T3978] bridge_slave_0: left promiscuous mode [ 72.781428][ T3978] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.910117][ T3978] team0: Port device $Hÿ removed [ 72.916547][ T3978] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.925493][ T3978] bond_slave_0: left promiscuous mode [ 72.931882][ T3978] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.940830][ T3978] bond_slave_1: left promiscuous mode [ 72.947423][ T3978] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 72.955727][ T3978] dummy0: left promiscuous mode [ 72.961339][ T3978] $Hÿ (unregistering): Released all slaves [ 73.012823][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.020241][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.027741][ T3978] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.035142][ T3978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.043574][ T3978] veth1_macvtap: left promiscuous mode [ 73.049109][ T3978] veth0_macvtap: left promiscuous mode [ 73.054766][ T3978] veth1_vlan: left promiscuous mode [ 73.060071][ T3978] veth0_vlan: left promiscuous mode [ 73.110652][ T3978] team0 (unregistering): Port device team_slave_1 removed [ 73.119811][ T3978] team0 (unregistering): Port device C removed [ 73.632342][ T4572] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.642621][ T4572] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.691082][ T4572] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.701378][ T4572] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.760965][ T4572] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.771271][ T4572] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.850943][ T4572] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.861237][ T4572] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.940816][ T4572] bridge_slave_1: left allmulticast mode [ 73.946481][ T4572] bridge_slave_1: left promiscuous mode [ 73.952175][ T4572] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.959863][ T4572] bridge_slave_0: left promiscuous mode [ 73.965526][ T4572] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.040531][ T4572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.050075][ T4572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.059650][ T4572] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 74.068373][ T4572] bond0 (unregistering): Released all slaves [ 74.122642][ T4572] hsr_slave_0: left promiscuous mode [ 74.128238][ T4572] hsr_slave_1: left promiscuous mode [ 74.133759][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.141217][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.148689][ T4572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.156081][ T4572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.164789][ T4572] veth1_macvtap: left promiscuous mode [ 74.170287][ T4572] veth0_macvtap: left promiscuous mode [ 74.175833][ T4572] veth1_vlan: left promiscuous mode [ 74.181300][ T4572] veth0_vlan: left promiscuous mode [ 74.232696][ T4572] team0 (unregistering): Port device team_slave_1 removed [ 74.241477][ T4572] team0 (unregistering): Port device team_slave_0 removed