last executing test programs: 1m14.566530164s ago: executing program 4 (id=42): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$inet(r0, 0x0, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = socket(0x10, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x180048a, &(0x7f0000000000)={[{@usrjquota}, {@dax_never, 0x22}, {@quota}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@barrier}, {@grpid}, {@noblock_validity}]}, 0x1, 0x44e, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000380)='memory.stat\x00', 0x275a, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1m14.512195306s ago: executing program 4 (id=43): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41001, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000380)='kmem_cache_free\x00', r3}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000002dc0)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 1m14.487808867s ago: executing program 4 (id=44): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x107b42, 0x32) write$cgroup_subtree(r1, &(0x7f0000000740)=ANY=[], 0x9) ftruncate(r3, 0x6000000) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0x100, 0x9, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, 0x0, 0x221c0, 0xac) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x2, 0xfffffffffdffffff}) 1m14.270275977s ago: executing program 4 (id=49): r0 = syz_open_procfs(0x0, 0x0) open_tree(r0, 0x0, 0x89901) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_uring_setup(0xaae, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000003c0)={[{@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@nouid32}]}, 0x1, 0x441, &(0x7f00000011c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) ioprio_set$pid(0x1, 0x0, 0x0) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 1m14.064835495s ago: executing program 4 (id=51): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"a2e39b214fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324d078b089b3b0838681a0890e0878f0e1ac6e7049b3d6d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b343b0d076c0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0d9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c30900004288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef7becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda930b000000cbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe505003d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6ae4effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d71eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d471c8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949d9a92587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15aa82000000000000a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000", 0x1000}}, 0x1006) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20000080) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xb1, 0xbd, 0x2f, 0x8, 0x47d, 0x5003, 0x2f8c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x58, 0xb7}}]}}]}}, 0x0) pipe2$9p(&(0x7f0000000000), 0x0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) openat$incfs(0xffffffffffffff9c, 0x0, 0x1a10c3, 0x9c37611dc13d0d83) fchown(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x1, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0xb8}}, 0x4000) 1m13.784067827s ago: executing program 4 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40090) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1m13.783763708s ago: executing program 32 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bd7000010000000f00000008"], 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x80) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0xd, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040e0}, 0x40090) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756a85d88a8", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 35.457368741s ago: executing program 5 (id=470): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800"], 0x0, 0x9, 0x1002, &(0x7f0000002500)=""/4098, 0x41000, 0x64}, 0x94) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1, 0x0, 0x3}, 0x18) mknodat(0xffffffffffffffff, 0x0, 0x20, 0x10008) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r2) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 34.870296536s ago: executing program 5 (id=475): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sched_setscheduler(0x0, 0x6, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x20000023896) close(r2) r4 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000003c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000001}, 0x18) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) 34.345870769s ago: executing program 5 (id=478): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x1, 0x0, @thr={0x0, 0x0}}, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c9a42, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$RTC_SET_TIME(r4, 0x4024700a, &(0x7f0000000140)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) 33.028222577s ago: executing program 5 (id=490): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x392200, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) 32.182070213s ago: executing program 5 (id=497): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x8c, 0x453, 0x200, 0x70bd2d, 0x25dfdbff, "9b216dd3dda72c853dde2aac6f8e1d4c2f3e0e39b96ee08416fc96e191324e1469d001a6d5c8ab8b4d1982b0c432b0118fa017c7388e85c8b9c2d2d572a0110869ebe6c2e2b456853cc7e1c7f3a7e86650487d653c876056b93a8b848613697b2e8a8504dec83020d5ca0615fa9f015dee25fc8afd9428a3486882", ["", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0x60004881}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000001400)={[{}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000000200)=""/4098, 0x1002, 0xd37) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) request_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95::\x01\x00\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x128) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) 31.953975823s ago: executing program 5 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_usbip_server_init(0x5) 16.932042275s ago: executing program 33 (id=504): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_usbip_server_init(0x5) 10.692601746s ago: executing program 3 (id=674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0x2, 0x5, 0x9, 0x7, 0x9, 0x2, 0x4, 0x2, 0xf, 0x6, 0x0, 0x3, 0x2, 0x7, 0x1, 0x6], 0x3, [0x8b, 0x101, 0x200, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0xd], [0xfff1, 0x5, 0xffff, 0xfff5, 0x3, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x8, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 9.476542839s ago: executing program 1 (id=668): syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf7ffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) syz_open_procfs(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d000000"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) writev(r5, &(0x7f0000000580)=[{&(0x7f00000003c0)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000f4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 9.475468839s ago: executing program 3 (id=670): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x5, 0x6}, 0x0, 0x5bd20d9e, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = memfd_create(0x0, 0x3) dup(r1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 8.135910217s ago: executing program 2 (id=671): socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000003c0)={r0, 0x0, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000240)={r0, @in={{0x2, 0x4e24, @multicast2}}, 0xff8, 0x4001}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000002480)={0xffffffffffffffff}) read(r3, &(0x7f0000032440)=""/102364, 0x18fdc) 8.135563377s ago: executing program 0 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_user(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t '], 0x27) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x24, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0xb}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_FILTER={0x4}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_open_dev$sg(&(0x7f0000000200), 0xff, 0x2a840) syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_mr_cache\x00') syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002b2000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) tee(r3, r4, 0x53, 0x0) 6.716599909s ago: executing program 0 (id=673): r0 = socket$netlink(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) dup3(r4, r2, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 6.713956009s ago: executing program 2 (id=675): open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 6.713205199s ago: executing program 3 (id=676): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_audit(0x10, 0x3, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$unix(0x1, 0x1, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x9}}, 0xf) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.712879549s ago: executing program 1 (id=677): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x2405, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000001000000000000000000000418110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x200006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000091}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x80, 0x808, 0x5, 0x1, 0xc}, 0xb, 0x0, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x2, 0x1, {0xffff1c72, 0x10000003, 0x1000, 0x101, 0xfffffffe, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008810}, 0x8000) 5.191101805s ago: executing program 2 (id=678): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) unshare(0x62040200) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) 5.190506045s ago: executing program 3 (id=679): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x70bd29}, 0x14}}, 0x40000) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='4\x00', @ANYRES16, @ANYBLOB="01022dbd7000ffdb652520e7000109001f0070687931000000000a0001007770616e33000000050020"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r4, 0x3, 0x3) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x1) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x11, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000eeff120000000a0004007778616e3300000008001500", @ANYRES32=0x0, @ANYBLOB="080001"], 0x30}}, 0x0) 5.190062335s ago: executing program 0 (id=681): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x6, @loopback, 0x7fff}, 0x1c) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x1b0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x800}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x58, 0x2, {{'cbc(aes)\x00'}, 0x80, "e0fad3f10cd3a506627800000000074f"}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1b0}}, 0x4050) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000088b000850000001b000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x18) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1818e58, &(0x7f00000003c0), 0x2a, 0x63f, &(0x7f0000000d80)="$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") sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x7b}, 0x4d3, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@multicast1, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xa}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x3c}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3501, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x278b6a28}, {{@in=@local, 0x0, 0x6c}, 0xa, @in=@broadcast, 0x3506, 0x4, 0x1, 0x80}]}]}, 0x1fc}}, 0x44000080) 5.189772335s ago: executing program 1 (id=682): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000240), 0xffffffffffffffff) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, 0x0, 0x20000000) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000440)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x3c}}, 0x404c084) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) 3.566576565s ago: executing program 1 (id=683): openat(0xffffffffffffff9c, 0x0, 0xa4c42, 0x108) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x800bf5, 0x2000402) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x800000000006}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f00000017c0)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0xb80, &(0x7f0000000c40)="$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") bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.564378466s ago: executing program 2 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8e7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x1, 0x4, 0x2}, 0x50) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x16201, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x204000, 0x1000}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r4, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000030c0)=@newtaction={0xe6c, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x1000, 0x4, 0x4, 0x5}, 0x1, 0x2}, [{0xdc8, 0xffffffff, 0x1, 0x4, 0x101, 0x4}, {0x28d, 0x7ff, 0x8, 0x0, 0x9, 0x2}, {0x401, 0xfdfffff5, 0x4, 0x8, 0x3, 0x8}, {0xaff, 0x9, 0x4, 0x5, 0x3, 0x983c3b9}, {0x11, 0x7, 0xfffff770, 0x9, 0xc, 0x80000001}, {0x7, 0x9, 0x1, 0x7f, 0x10001, 0x2}, {0x4, 0xe3e, 0x4f, 0x4, 0x6}, {0x8ce, 0x8, 0x2, 0x4, 0x803, 0x8}, {0x3, 0x4, 0x0, 0x7dad, 0x7f, 0x6}, {0x1, 0x361, 0x7, 0x4, 0x2, 0x3}, {0x797e, 0x9, 0x1, 0xf56, 0x1, 0x8}, {0x5, 0x8, 0xff, 0x4ff537c1, 0x5, 0x5}, {0x4, 0xe8c, 0xcbf, 0x4, 0x4, 0x400}, {0x800, 0x4, 0xd4f7, 0x9, 0x400, 0xffffff00}, {0xffffffff, 0x4, 0xe546, 0x0, 0x300, 0xd789}, {0x5, 0x5, 0x7, 0x1, 0x7fffffff, 0x8}, {0x7fffffff, 0x401, 0x1, 0xffffffff, 0x380000, 0x2}, {0x1, 0x10000, 0xffffffff, 0x0, 0x17a, 0x6}, {0xff, 0x3ff, 0x91c7, 0x6cff, 0x40, 0x2}, {0x7, 0xffffff00, 0x0, 0x7f, 0x4010000, 0x10001}, {0x7, 0x5, 0x0, 0x1, 0x8, 0x4}, {0x6a7, 0x7, 0x5aa2, 0xb97, 0xb1fb, 0x4}, {0x9, 0x7fffffff, 0x2, 0x6, 0x1, 0x5}, {0xd, 0x3, 0xb3b0, 0x4, 0x80000000, 0x1}, {0xb, 0x0, 0x10000, 0x6, 0x5, 0xd}, {0x29, 0x7, 0x2, 0x1c0, 0x3, 0x10}, {0x5, 0x2, 0x401, 0x3, 0x0, 0x7a01}, {0x7, 0x1611c00, 0xfffffff3, 0x10000, 0x9, 0x101}, {0x1, 0x7, 0x4, 0x3, 0x7}, {0x3, 0x3, 0x2, 0x9, 0x6, 0x2}, {0x6bc5896b, 0x1, 0xb7, 0x4, 0x2, 0x9323}, {0x0, 0xfffffff8, 0x1, 0x7, 0xfffffff8, 0x480}, {0xf, 0x7, 0x8, 0x1ff, 0x7, 0x3}, {0x4, 0x5, 0x9, 0x2, 0x2, 0x401}, {0x922e, 0x0, 0x1944, 0x3, 0x9, 0x8}, {0x10001, 0xfffffffa, 0xd, 0x2, 0x3ff, 0xffffffff}, {0x2, 0x1eb8dd6d, 0x5, 0x8, 0x1, 0x6}, {0xa4, 0x7ff, 0xff, 0x1, 0xd1e5}, {0x0, 0x2, 0x0, 0x8, 0x5, 0x101}, {0x1000005, 0x1, 0x6, 0x7fffffff, 0x8, 0x7}, {0x3, 0x4, 0xadf, 0x10, 0x9, 0x5}, {0x4, 0x2, 0x2, 0x2, 0x7fff, 0x8}, {0x3, 0x8, 0x2, 0x38d9, 0x1, 0x4}, {0x0, 0x824c, 0x3, 0x3, 0xfff, 0x8}, {0x5, 0xc, 0x3, 0x80, 0x9, 0x8}, {0x10001, 0x1, 0x7, 0x4, 0x8, 0x7ff}, {0x7, 0xf34a, 0x9, 0x80000000, 0x2, 0x4}, {0x2, 0xe7, 0x8, 0x80000000, 0x0, 0x8001}, {0xb594, 0x0, 0x2, 0x2000, 0x1, 0x5}, {0x0, 0x5, 0x1, 0xbc, 0x8, 0x1}, {0x3, 0x401, 0x1, 0x6, 0x3, 0x80000001}, {0x4, 0xfff, 0x8, 0xb, 0x8, 0x9d6}, {0x5691221d, 0x5, 0x3ff, 0xa000, 0xd0e, 0x750e}, {0xd, 0x5, 0xfffffffc, 0x35ca, 0x1ff, 0x5}, {0x4, 0x0, 0x3fc, 0x5, 0x10, 0x4}, {0x0, 0x37, 0x5, 0x10, 0x1, 0x5f5ace3f}, {0xffffffff, 0xfffffffa, 0x227, 0x7fffffff, 0x8b, 0x2}, {0x7, 0x7, 0x0, 0x2, 0xc407, 0x7}, {0x8001, 0xd1, 0xff4, 0xb, 0x0, 0x1}, {0x6, 0xc, 0xb, 0xe7, 0x7}, {0x3, 0x3, 0xffffff46, 0x8, 0x7, 0x8}, {0x7, 0x6, 0x4b48, 0x8, 0x6, 0x7}, {0xe5f, 0x10000, 0x4, 0x4, 0x9, 0xf1}, {0x401, 0xd, 0x3, 0x1, 0x80000000, 0x1}, {0x400, 0x3, 0xe8ce, 0x1, 0x8, 0x10}, {0x5, 0x8ee9, 0x2, 0x3, 0x0, 0xc}, {0x7, 0x24d476e8, 0x10200, 0x80000001, 0x6, 0x600000}, {0x6a8, 0x8, 0x3, 0xfffffffb, 0x8000, 0x9}, {0xab, 0x7, 0x7, 0x3, 0x5}, {0x0, 0xa8, 0x7fffffff, 0xfffffff8, 0x7d, 0x9}, {0x40, 0x9da5, 0x10, 0x8, 0x6}, {0x200, 0x6, 0x1, 0x1, 0x9, 0x7f}, {0x8, 0xfffffffa, 0x7e2, 0x7a, 0x6, 0x5}, {0x5e, 0x15ec, 0x1ba09691, 0x5, 0x7fffffff, 0x9}, {0x0, 0x5, 0x1, 0x0, 0xfffffffb, 0x4}, {0x40, 0x3, 0x5, 0x3ff, 0x10000, 0x254}, {0x5, 0xd5, 0x80000000, 0xf, 0x101, 0x5ca}, {0x6, 0x1, 0xf, 0x4, 0x9, 0x3cf1}, {0x7, 0x6000, 0x6, 0xff, 0xd42, 0x100}, {0x1, 0x10000, 0x9, 0x9, 0x7f, 0x1}, {0xf, 0xb, 0x6, 0x8, 0x402, 0x9}, {0x400, 0xbcb, 0x3, 0x9, 0x16b9, 0x3}, {0x1, 0xffffffff, 0x9, 0x1000, 0x80, 0x6}, {0x800, 0x9, 0xff, 0x7fffffff, 0x0, 0xe5}, {0x4, 0x6, 0x4, 0x3ff, 0x3, 0x1000}, {0x80000000, 0x9, 0x6, 0x2, 0x7, 0x5}, {0x80e0470, 0x0, 0x0, 0x1f, 0x2, 0xffff0001}, {0x9, 0x8, 0x4, 0x1, 0x0, 0xfffffffa}, {0xbb3, 0x7, 0x1, 0x7, 0x94, 0x3}, {0x4a, 0xf, 0x7, 0x3, 0xa3, 0x80000000}, {0x5, 0xfff, 0x20080, 0x9, 0x26, 0x10000}, {0x1, 0xb, 0x8, 0xffff, 0x0, 0x7}, {0x0, 0x7fffffff, 0x800, 0x6, 0x200f, 0x2}, {0xfffffffb, 0x7, 0x6, 0x8, 0x5, 0x3}, {0x5, 0xcf19, 0x8, 0x0, 0xfff, 0xfffffe00}, {0x2, 0x9, 0x2, 0x1, 0x4, 0x800}, {0xc000, 0x4, 0x807fff, 0x4, 0x1, 0x6}, {0xe37, 0x4, 0x1, 0x6, 0x67b9c8db, 0x4}, {0xac, 0xfffffffe, 0x8f, 0x8001, 0xd, 0x26}, {0xfffff800, 0x7, 0xffffffff, 0x2, 0xaa6, 0xd4}, {0x3, 0xffffc055, 0x5b6, 0x8, 0xa9, 0x63e}, {0x8, 0xfffffff8, 0xb, 0x7fd1, 0x6, 0x1750e18e}, {0x1000, 0x2, 0x1000, 0x6, 0x6887, 0x4}, {0x80000001, 0x3, 0x89bf, 0x8, 0xffffffff, 0x5}, {0x1, 0x18, 0x24d9380b, 0x8, 0xc}, {0x41e2e32, 0x6, 0x6, 0x5, 0x0, 0x4}, {0x3, 0x2, 0x5e, 0x1000, 0x6, 0x8}, {0x7, 0x80000000, 0x20000, 0x0, 0x7fffffff}, {0x2, 0x8001, 0x6, 0x3, 0x8, 0xfffffff7}, {0xe20, 0xc, 0x7, 0x9, 0x9, 0x20000009}, {0x6, 0x1000, 0x3, 0x8001, 0x5267, 0x401}, {0x9a, 0x3, 0x8, 0xfffffff9, 0x2, 0x9}, {0x1, 0x8, 0xfffffffc, 0x1}, {0xac5a, 0xfffffffd, 0xa, 0x59f3, 0x2, 0x8}, {0x5, 0xeae, 0x5, 0xc1, 0x2e, 0x8}, {0x7fffffff, 0x9, 0x0, 0xfff, 0x3, 0x10}, {0x80000000, 0x9, 0x8211, 0x800, 0xace, 0xfffffff7}, {0x10000, 0x1e9d, 0xffff8d98, 0xe, 0xfffffffa}, {0x394cf3a4, 0x288, 0x7}, {0x6, 0xf4, 0x9, 0x3, 0x7fff, 0xf}, {0x10001, 0x8, 0x7, 0x2fe, 0x9, 0x4}, {0x7fffffff, 0x1, 0xb, 0x8af, 0x10001, 0xffffff47}, {0x6, 0x6, 0x2, 0x4, 0x0, 0xe}, {0x1, 0x5, 0x9a4, 0x8, 0x8000, 0xfffffbff}, {0x3718, 0x1000000, 0x43, 0x0, 0x46, 0x200}, {0x8, 0x9, 0xffffa3fa, 0x7, 0xcb88, 0x6}, {0x1, 0x4, 0x5, 0x6, 0x2, 0xfffffff9}, {0x5, 0xffffffff, 0x61b, 0x4, 0x4, 0x100}], [{0x4, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x3}, {}, {0x2, 0x1}, {0xac098f8bb5bf767, 0x1}, {0x0, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x1}, {0x4, 0x33b46010c087959a}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x2}, {0x3}, {0xe41e256834d3e794}, {0x2}, {0xdf8910d898f3408a, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0xbbd25ed3eb5771ef}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x4}, {0x3, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x6, 0x1}, {0x5, 0x1}, {}, {}, {0x5}, {0x1}, {0x4}, {0x1}, {0x3}, {}, {}, {0x3, 0xcf7dcf0528e1043}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 3.563278135s ago: executing program 3 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x12, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], &(0x7f0000000740)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x200, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r1, 0x903, 0x650c0}}, 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008040) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0xfffffffffffffdca, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0x4}, {}, {0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x24060050}, 0x8000) 3.562945205s ago: executing program 0 (id=686): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) getgid() socket$packet(0x11, 0x2, 0x300) socket$isdn(0x22, 0x3, 0x24) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$igmp(0x2, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000004000000040"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, &(0x7f0000000280)={{r3}, "0f310fcdecc87e2aae194ae50cf61a50d8fcd71139d56b4210ddc2eea3790b0032a4c97fab70f445a11f9f03d8b509c52d5ab8a4fd7390087dc01c8b0078e8ce050d050bb934609366a0cb0341fc8f66e46093572cd9f553de985739cca1c8786310998c5fa1048f1c1b59399190414011c04bc42baef5e07b2509ae4423458cba46fb954d2d1818ecdfcafda6e9c5f6f09e6951540f2aacf28ab4cb9ff6cc536a8f2eb5a68da3ad007be920bd68f264b98b4a11044fc3d84b49a7537cfe7ca744dac9c48516f1a3c18b3716447b2d0176d5f389a876a133d8806cb5cbbbdbb36dc707ddeb4b2a04de67100c7ee60709a6e2850fac7416cc600817acbe7a0654107a48393a56a076e3c15e304587bb858e8a208651e03432c5ae77b1bc8c465565c61053e253ae193076c6aa72ca90bb40a1fa7c7fca84fc100f24237fd757906e1a7995e4f52fb068ad7b4315bf2e1c9a199cf96ab22511a47fbb850af68bf1db197f8b12476b6b4732f6d3ae2536c0db1a3108b4fe141cf15ff3bdccfc5cef594d9ad262e1d77b247d9414d57051175edf24212b4254b11c816be3ca8b9532d36f5d450df62568476018349297ad7706da0374939e73f6b22d0ef5db915d78d5156d050eab163afa25a6bbfdfd5510eb0fd268858f82cb668c6cc9417b5d20911a1e67928986cc026079b250e8cf61b899ad5b67e54c9e2d7ca0d243e270a0dace80398521934367f56e989d0a841c91d9655d53b702394cec407fe0d1752afb74358dc7c690599dc7e2fc75884a9336bd04e00b0bbebff6b474efc032986a437312526d74e70b6e89a68cad167b78bf47764294b82fc183a6af6e50671d3e4eaae788c2e9ddd32bef65c87c244664edb32bb8617e8a7b490a209a4cba266864a59adc79a843b53b9163cb73d5c18a4912f19745f2ea543c4009948dbd3e572563ebde558cd6bb51e785acdf59f2799266c7891e034a04009f9ae5d65b1011889f6e6315972e8f120c669f851cd16f3820da98b3048b926004d4eadf438a1057e7a41f959ea76fab308912b306724ebefa6b7376bc367857b72b18a81d3c3af0e64e53e90b924c19179d5d3a35472a2b25e0848948f9de8c0f48eb971ab2c9f75a9eea74445bc4c5840285fa0dd3ec00eefede0368f969da0a7cadb8503cb75a3d9af02b35109c2707c1f3d5c83c3f4cc883bec78441481485356406b36b8cf20780b099342e1382e2d6f4f60becabc86e313968f71ca282a3a12254c37aac2afe070d0b1098baf20fb49264dd75660a5f221aa7fda553c45fb4e2a2cb652fa5c2a7d58d75a35301b8841e54bcdad971c15d55917b9d7a3a0d6d8fa36b4bce9311f2dad1896f9136f673490a0c1cec2cb9a81b612ab420ef05ca329be10c2abcd3f23d7a8b80af0ff419a95b305ae8ef7b09cf62ea4fc4f01613549e483846bd1b4078699c247ed86febbeb056944314f45be2f25c014579280c79ee98ad1c40982aef309f83f40432ca45e8ec2a9dd8c9c22479f710c150314e4300572d64061f5690688935fcc953bccd9687b1f550089902d577d33e19c7da04d64668160ecc0109e05ac7a93d821ed36e8bd0fc665765d4689c6d7bffc361b6c56c36e820fdfcf9fff950ba69649f16ab9e56b1692fde1219cacf8f6f66ff75c5fd47b8da1cb18f8e8f0913dc6aec61f81e4325761b053b8dbd3627f9b126d58671fa288459491f3f6e4ec86aa0d5e9b4ead03981bec954595b05b89c5690c00330758092c79622c3a4dfefb152d13d085d6c553cad6b383065dfbcf01989a7679a887f4bda595e5b38a5a1ac76c2f3ae90c2cbac85a55e7bb3a0251e7354c21ac0671ce37a58717a21ec1352e0c89195bf07e63c1b31def4bb31e3f9d91daa8972fd81857ce958c22166bbf1da43014a73a5ec5f7192cd4c9e018cb3f56c65ead2c2a2db9f5c820e68c4ed55b625153a1d70933bef518a52da3954b8856db5ed2055c8560442da18c36032ff02495bc4985836d61edcff62f9622ac4e6125767e755b0ee041f0a472966f796305ad53d013c94805ddb7814cfd71d9912cff21563ab352df7cb9f70bcd0b909d0a51de1731dc297b592b2165b10d06b0cc22aac2f96fa3788ccd564f116f7c851e9f59d799680e0b4e13e2069f8a44f663474086e8c1118e482f8add3b8e1747438de644274fa40a830eadaf8b3e0ae1905665ff95e55dc9f5f76e8ea45d71c91bc5ecf36ac94d68c95b99b2e41db191d136373a2eac3b92f58ac69746b41d7138278dae35aedfc8e4c4c4312e657d1052ee24a83b963079feafc69711ddafc9fb41cbc7f15d69736824fdf0fad3e15613013ade839b12c66de812ad5cf3e8683cb55a217be2d921929bcd22985b1644d4649b3f1fd5f562cae448997f52c7e81b4a8df19dca6b98707f5821b6780be7035301ba5184b618266bbd3db7814a0b7e53d7ee660118d93cb333bde37d07d6b876b89175b3ec093af92ab67157a350b226dc803e00029169be5a03480855ec7c6aff2e531719d91446fce297dd50f3bc72c934b93032c1d2010b5e4fbb1929b4abe505e6af8538ac86f5928c11d818403ba502f32e014a6f3b8d2eda3e22ead51bf8f45b63f5b6dae595e7a1ef32eea5a1bc1e0f727702467881149315c5a61bbea136362a6c856eda784e8b392cd94f9dd720c4e66e9acfe66b00a963b4d5061cedd249cf951efa7fc70cc23001edef3c6d3b4ce76cc5d45d23d5cb8c917a42d54c89f9844aa7c72ebdd38e4778ba84f90bd59dd5dd0e8f9fbe38a24a922eae79f7ba2bbb846150a155d4708bc37e3856f4d8c39533ab20cb8960c2f319a0d6cd25ed3aeb616d06de4f79c1136d2c6c64b04e24e325c9c93118c0d92da6147638a551eb4cf044921e20f072b17b6b89c04b02e7ab2ce780a583fa54716e7de2edd903e81c1fbf8bd90cc869d058238b92b316d2002aee63cdfcb69f92d2944aeb0e9e7296a69e07c58aae8e56b3317a2ef3826c597f33cabcec3561f6d59625f638a4ef10f0bf31d155cc92aa6d1923f1f2c875ea34ff941c7a037c862acd3fa58d6d1622b054823e650f5e1b2cd09af31048ab87285e7a8432bb2a83c1d31416768bd7888a52409af47a99d90dd9a1d0838238c95d2f7c8b5fec390b67cba8a991476bde5fcbbe4636c00652049d607a31e917852efc865ea240b851e1e67f73357873d65ba1834368e654ab6b565630ee91d0140d03f8c3f0e7c4d758418107a3d0241a45e0be11ca88239105b16f043a331c56d570c3ea3fe7687ea87ebe8b8a9c87adb343534dd34b8bae7cdcc1bacc4f0500f54c72cf86e04561b7009a442428dabe1965d79e746e0e42f384cb177b3cae8538004c61c8c2a6d4333fac694d56a97622837ab7af8412c2ea8218ff2af1e511d2d2c04d3f9587bbd421b518f7d977fb22d17699af0625549e7af8e4b8809b177d2f901f5d4f4d80f5f1ec93f76bbc913df334107be49a5d627784d02475fe5e9ad0dad1bf87805f8f19884306c9bc955ecc09f4c9db2565e4a7698fca662dca692fb21946e023cb371aaa5e4c7ba8aca4297c5d5b6480ba3fc112dcae726fd0ac3ffea7193462e625ae2ba2bae8261acbd432b6a78f2f3d91dd4a9cdd41b5f128d5807c4a6cd2b5cfb43b56be55fe90b8361219beb0633bece0d5a3645e21cb48d41eecaea63e954f53a9f7a7f73a766dfc2ac2395803b29e13755a92491bf087d296e05f5d9ba46779bd607956799ed9ca1e7d523b84123fbcffe77c34f1c65da338feb1f4057130cd6ff1f3031df4d16eabdd159975dfdf6fb4682fc9e9a2e986af73404ea8f7f8d965f7732b2731a574e52acddb95f0b27010e01653b52bc4f8b02055eddb6ff3886dbd751386ff1ddca2209e4231ed78b30b7b1b7ca3e184e2d873f846614023245cf6ece098ee2efb6e1728a4fb509bd21dca96f802d0fb2ebdaf0885f8429d53e7895885faea32ecdae321a30d60cfc77ebf24e3b1833a385f8292e09a97094a76dbd4491015ccd71bc73c50ced743202e6d4fc5eb1d9d4e84c45a770255125c540b2bd8348d6ccc1787c30351a9eba5849899781b378a66c01ba9fe3f5c042f2b293ab65351e145f4517872fe9165c67de7a395bd4f0f9da45e54caaa2c90fe488a83f3d2a519b0f11c3a3da2825e02782c3108140331542e32cd5afb2ce079a3d8910a880308c11513e14e819c7cb3f0d13411a05f41f1e6bded64bfc9205ee96e36bfc9d7bf4fb05fb468a0b5e20c7788bf6a2569c1de19d1c615fe161f2dcbf3548377c6c30b7c878a2d9b0fcb1c09057787f8060dbf1abb666625f14288660526539930c43f3f2983a2d36aba12241bff56e495bb1dbe8a7aa2029c8a480a8578d179004f342d296db8467f3e62ca4142020379357ee062a7602bf5f1fd7e7ae8e8728f47099bd038db2142163539028d8bb8d0bd6b7330bc25f9775817483f70bf82d71bbd1d67aad93bd1394ebc086ae0a77c3761b24ece5b38be55911d3c3d9236658521a7630eb806971d76a1acd8b5cf1b89289dafb278c2f1d6080a20236b7e720f5c16579ac11d994065d43621bcfb1fd59fa174717ce2f9063a247a37adb07a29506f38e97186ff86204665a32886278ae83e6253c9d9e17351fe7a9bcd5f06c87dab3f7b4bf5dd75c395fbcd4e26615d628ebcc6231593e931137c309ec9ad8af2d9d8970c66e87163687c58eb7f5e39846f85075f02d6e327cfa92f8645f2625d3e5cccbc9f7b4f85c316022cc30de317b8256fdf0869938b59b721daf0327493960917a2b0c7d80fc81572ebb97dadf4a8a466212dbe960dbe81988875ebbd985e94e3c996b93ec6c67d232232cd1f6b4fa0483560351ba02a90417af664435338fe9f8d328bde740e5d0218bfc3a409f5f1ea011d28f37181cd850d333be790b050a30422be976a9093984ea308e8df77c055ca1d11b87b8f0eec751eec65d9f129e7601e48bf7411d80fe4fcc007ddbeb403939e27edcebaca6985cd9fd88bf47890064c37f3fb8e3f72afd0905ae6b0789a6678d65719ac36f655413f2272866ffb57bf8247ea12479de0ee0b9f61a0c74d56c587476ac19f3c22c32e9de9e423eda804f4d36aa07f0354e007c07c3f0462cac2aea91b8927a979f386195faf32430aded3859c90c14f29d0fdf18f5efc7f4da403503e14ee690c2c8dbced1e2c47398be7c0ba19bdd87d1e20f97c12d946e65620f1395c4f4eac2281f14c84ad689eb4ae97e5f16ca254f43bd333b5d06ecb8324795cfee74574a7f6cd4fea2edd0b43235e2c840f593dedf0975ad16c86ac7b7ad5efaa01431b25beb5f6372299819b46506473f9ff93f1465e1818bf85201e63e9ccb05f6a365a71f1bf30bd7c1a3abb9e8f7b9370289146c8662bb6f162f8223ffe1ba19af121effc714e4b39a7ffb94c2b5fcde3f17526ced3e6f7ecee40c5bc7c5449f55e6b175c0eaa9a38c4465bb78dc074c7c24a5e16dc5c37edc7997846d1e54c4c625bb8857bbbaa4068a838724f074665dfeb40f8981c6555589ec804a918c16008d75bf0db67e5f8d6261566b8ba7dd9d86a56122c62158b4a107f0f906349441e6f808e37c8ef85d66195a6c45f5e6c01aa15a9b961f47c61084829f19d2337928778df794cdd831f835b34416271d30ef255eb65f440500ac9e9311cbe1c97cf199b98f5ffb5262d55ba419c5ccd3385d83519f5a68f67f9b6b6f67b04b564f5f844998716b84cb7abfce7e829b27819fa0e7be7b11ace89332e2"}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0xfc, 0x0, @vifc_lcl_addr=@local, @multicast1}, 0x10) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x49, 0x4) 1.816512172s ago: executing program 0 (id=687): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") lsetxattr$security_ima(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140), &(0x7f0000000f00)=@v2={0x5, 0x1, 0x14, 0x6, 0xd8, "4182b8ffef6512fe103c215d2f4e9fd4c4720e630aeae5f31e8e39364c695cbc37b815ee5cf57c273e461f94838bff7fd9c2e45e8d11b8dfc9846b1a26bab48fd307e34aa8e4e9beba586f99ff32bab3a34b151f665245834bfc405721b0c778724cbd62db766e8f52a16771abb9a66b7a2d2994fbf828cd71515d77fbd9cd00333b1afcff11936e6059cdae77db2558626e5ee4ecc26b87fa03ddafd9ffe343daccc11e6431dfd2853ce9303b26496465832bf138b7b86bec45ef0f1cf42b63472ca5031817669aa5296319142299ba8f8726db719eb338"}, 0xe1, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x53b, &(0x7f0000000b80)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000300), &(0x7f0000000180)='%+9llu \x00'}, 0x20) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x6, 0x8, 0x1, 0x15, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x80, 0x8}}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000780)={{{@in=@private, @in6=@initdev}}, {{@in6=@private1}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x800bf5, 0x2000402) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.815309262s ago: executing program 1 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) socket$inet(0x17f, 0x1, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004081}, 0x14004001) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x545, &(0x7f0000001300)="$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") 1.814826422s ago: executing program 2 (id=689): r0 = socket$netlink(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r4 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x34e}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r3, 0x0, 0x0}) dup3(r4, r2, 0x80000) r7 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 1.807563362s ago: executing program 3 (id=690): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r2, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r3, 0x5408, &(0x7f00000002c0)={0x7f, 0x0, 0x0, 0xb9ff, 0xa, '\x00\x00\x00\x00\x00c\t\x00'}) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)) r4 = syz_open_pts(r3, 0x101000) r5 = dup3(r4, r3, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) 1.683381ms ago: executing program 0 (id=691): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x12, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000001, 0x2010, 0xffffffffffffffff, 0x10000000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/102387, 0x18ff3}, {0x0}], 0x2, 0x0, 0x400) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000340), &(0x7f0000000380)=0x40) socketpair(0x5, 0x3, 0x3, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r4 = memfd_secret(0x0) ftruncate(r4, 0x51a9497) 617.801µs ago: executing program 1 (id=692): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000440)='kmem_cache_free\x00', r0, 0x0, 0x1}, 0x18) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000005c0)={@in6={{0xa, 0x4e22, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}}, 0x0, 0x0, 0x50, 0x0, "0f6acbee67d4f2b1ae6fcedd91994caeae45b8a0f631e285e71cede4a142dbca006826c54245ed0085619209511bb4027544193b4933f228bec063c108329ceaca78ac624781b35b43813d1d73947bee"}, 0xd8) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0x2, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x7fff}, &(0x7f0000000540)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000006c0)={0x0, 0x8, 0x20}, 0xc) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[], 0x34}}, 0x6048800) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x1, 0xff, 0x7}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0xbebc20}, 0x3, 0x4000000, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfff, 0xffffffff, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x1, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000000, 0x3800000, 0x0, 0xfffff30b, 0x0, 0xf5, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x7ff, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0x7, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x2009, 0x3, 0x1, 0x8762, 0x10008e, 0x80000005, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0x8, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffff7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0xb, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x6, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40040, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x7, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0x401, 0x2, 0x8cc5, 0x8, 0x159, 0xfdfffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0xffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x45c}}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x30, r5, 0x1, 0x0, 0x25dfdc01, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x30}}, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000000000c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) 0s ago: executing program 2 (id=693): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x42, 0x61) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r3, &(0x7f0000000040)=ANY=[], 0x41) socket(0x1, 0x4, 0xffffffe1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$pptp(0x18, 0x1, 0x2) kernel console output (not intermixed with test programs): tered promiscuous mode [ 39.225117][ T3321] veth1_vlan: entered promiscuous mode [ 39.250301][ T3321] veth0_macvtap: entered promiscuous mode [ 39.266366][ T3321] veth1_macvtap: entered promiscuous mode [ 39.276088][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.295745][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.319922][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.340403][ T1089] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.354441][ T3322] veth0_vlan: entered promiscuous mode [ 39.371131][ T1089] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.390244][ T3322] veth1_vlan: entered promiscuous mode [ 39.396932][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.396951][ T29] audit: type=1400 audit(1764578127.002:81): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.jg6ePC/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.417396][ T3322] veth0_macvtap: entered promiscuous mode [ 39.433499][ T29] audit: type=1400 audit(1764578127.022:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.452009][ T1089] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.458539][ T29] audit: type=1400 audit(1764578127.022:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.jg6ePC/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.497062][ T29] audit: type=1400 audit(1764578127.022:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.521375][ T29] audit: type=1400 audit(1764578127.022:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.jg6ePC/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.548915][ T29] audit: type=1400 audit(1764578127.032:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.jg6ePC/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.577721][ T29] audit: type=1400 audit(1764578127.032:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.602868][ T29] audit: type=1400 audit(1764578127.072:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.606626][ T3322] veth1_macvtap: entered promiscuous mode [ 39.627663][ T29] audit: type=1400 audit(1764578127.072:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=5176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.648885][ T1089] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.670593][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.691210][ T1089] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.701280][ T1089] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.713394][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.731395][ T1089] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.741067][ T29] audit: type=1400 audit(1764578127.352:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.749932][ T3315] veth0_vlan: entered promiscuous mode [ 39.782655][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.791397][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.813602][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.837219][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.846752][ T3315] veth1_vlan: entered promiscuous mode [ 39.866491][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.876933][ T3488] Zero length message leads to an empty skb [ 39.891871][ T3317] veth0_vlan: entered promiscuous mode [ 39.905707][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.918567][ T3317] veth1_vlan: entered promiscuous mode [ 39.941194][ T3315] veth0_macvtap: entered promiscuous mode [ 39.968244][ T3315] veth1_macvtap: entered promiscuous mode [ 39.995519][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.011603][ T3317] veth0_macvtap: entered promiscuous mode [ 40.045671][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.056151][ T3317] veth1_macvtap: entered promiscuous mode [ 40.065001][ T3492] syzkaller0: entered promiscuous mode [ 40.070507][ T3492] syzkaller0: entered allmulticast mode [ 40.076352][ T3495] loop2: detected capacity change from 0 to 128 [ 40.078512][ T1089] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.083342][ T3495] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.131615][ T1089] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.144374][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.154158][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.181538][ T3495] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.217273][ T145] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.281653][ T3501] syzkaller0: entered promiscuous mode [ 40.287570][ T3501] syzkaller0: entered allmulticast mode [ 40.315065][ T145] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.363503][ T31] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 40.419162][ T3506] loop2: detected capacity change from 0 to 512 [ 40.441795][ T3507] loop4: detected capacity change from 0 to 256 [ 40.464819][ T145] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.477774][ T3506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.491290][ T3506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 40.522533][ T145] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.561052][ T145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.576195][ T3509] veth1_macvtap: left promiscuous mode [ 40.581834][ T3509] macsec0: entered promiscuous mode [ 40.592047][ T145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.648280][ T3506] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.692555][ T3506] EXT4-fs (loop2): 1 truncate cleaned up [ 40.711711][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.719788][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.728006][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.750385][ T3506] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.766282][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.774758][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.783443][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.791296][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.799009][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.806799][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.814771][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 40.852226][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.853106][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 40.944632][ T3523] syzkaller0: entered promiscuous mode [ 40.950874][ T3523] syzkaller0: entered allmulticast mode [ 40.965398][ T3521] fido_id[3521]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.993039][ T3528] syzkaller0: entered promiscuous mode [ 40.998670][ T3528] syzkaller0: entered allmulticast mode [ 41.010963][ T3530] loop0: detected capacity change from 0 to 512 [ 41.019346][ T3523] tipc: Started in network mode [ 41.021219][ T3528] 0: reclassify loop, rule prio 0, protocol 800 [ 41.024870][ T3523] tipc: Node identity 72bfdf740314, cluster identity 4711 [ 41.039384][ T3523] tipc: Enabled bearer , priority 0 [ 41.068750][ T3522] tipc: Resetting bearer [ 41.079648][ T3530] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 41.096869][ T3530] EXT4-fs (loop0): mount failed [ 41.102839][ T3522] tipc: Disabling bearer [ 41.180049][ T3537] syzkaller0: entered promiscuous mode [ 41.186906][ T3537] syzkaller0: entered allmulticast mode [ 41.203978][ T3539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'. [ 41.336418][ T3542] loop0: detected capacity change from 0 to 1024 [ 41.345178][ T3542] ======================================================= [ 41.345178][ T3542] WARNING: The mand mount option has been deprecated and [ 41.345178][ T3542] and is ignored by this kernel. Remove the mand [ 41.345178][ T3542] option from the mount to silence this warning. [ 41.345178][ T3542] ======================================================= [ 41.395018][ T3542] EXT4-fs: inline encryption not supported [ 41.406320][ T3542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.545495][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.603409][ T3547] loop0: detected capacity change from 0 to 512 [ 41.619726][ T3547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.666186][ T3549] tipc: Started in network mode [ 41.673390][ T3549] tipc: Node identity 96888b37443a, cluster identity 4711 [ 41.682025][ T3549] tipc: Enabled bearer , priority 0 [ 41.707145][ T3547] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.722908][ T3549] syzkaller0: entered promiscuous mode [ 41.730840][ T3549] syzkaller0: entered allmulticast mode [ 41.737579][ T3547] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.752035][ T3549] tipc: Resetting bearer [ 41.760527][ T3548] tipc: Resetting bearer [ 41.768564][ T3548] tipc: Disabling bearer [ 41.813915][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.951954][ T3562] syzkaller0: entered promiscuous mode [ 41.958753][ T3562] syzkaller0: entered allmulticast mode [ 42.254361][ T3576] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 42.419051][ T3584] loop1: detected capacity change from 0 to 2048 [ 42.450515][ T3584] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.463667][ T3584] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.537208][ T3596] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.34: bg 0: block 345: padding at end of block bitmap is not set [ 42.551757][ T3596] EXT4-fs (loop1): Remounting filesystem read-only [ 42.567268][ T1089] EXT4-fs warning (device loop1): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 15: ext4_ext_map_blocks returned -30 [ 42.621320][ T3593] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 42.652565][ T3596] syz.1.34 (3596) used greatest stack depth: 10360 bytes left [ 42.671192][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.680918][ T3602] loop2: detected capacity change from 0 to 512 [ 42.691460][ T3602] EXT4-fs: Ignoring removed oldalloc option [ 42.722351][ T3602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.742873][ T3602] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.769199][ T3608] loop4: detected capacity change from 0 to 512 [ 42.777854][ T3608] ext2: Bad value for 'dax' [ 42.790775][ T3602] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.39: bg 0: block 217: padding at end of block bitmap is not set [ 42.834394][ T3602] EXT4-fs (loop2): Remounting filesystem read-only [ 42.856806][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.879220][ T3616] loop4: detected capacity change from 0 to 512 [ 42.897273][ T3616] EXT4-fs: Ignoring removed i_version option [ 42.903399][ T3616] EXT4-fs: Ignoring removed bh option [ 42.922245][ T3618] capability: warning: `syz.2.45' uses deprecated v2 capabilities in a way that may be insecure [ 42.952230][ T3616] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.983924][ T3616] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.051442][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.096379][ T3633] loop4: detected capacity change from 0 to 512 [ 43.109269][ T3633] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 43.137475][ T3633] EXT4-fs (loop4): 1 truncate cleaned up [ 43.151602][ T3633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.168686][ T3626] loop2: detected capacity change from 0 to 512 [ 43.187241][ T3626] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.46: error while reading EA inode 32 err=-116 [ 43.204054][ T3626] EXT4-fs (loop2): Remounting filesystem read-only [ 43.211042][ T3633] loop4: detected capacity change from 512 to 64 [ 43.221651][ T3626] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 43.232486][ T3626] EXT4-fs (loop2): 1 orphan inode deleted [ 43.238767][ T3626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.254201][ T3317] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz-executor: path /8/file2: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 43.276189][ T3317] EXT4-fs (loop4): Remounting filesystem read-only [ 43.304638][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.495683][ T31] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.557989][ T31] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.590644][ T3643] loop1: detected capacity change from 0 to 512 [ 43.608335][ T31] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.626863][ T3643] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.669906][ T31] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.682287][ T3643] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.699377][ T3643] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.737317][ T3643] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.54: iget: bad i_size value: 2533274857506816 [ 43.757885][ T3643] EXT4-fs error (device loop1): ext4_lookup:1787: inode #12: comm syz.1.54: iget: bad i_size value: 2533274857506816 [ 43.802355][ T1089] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.837307][ T31] bridge_slave_1: left allmulticast mode [ 43.843049][ T31] bridge_slave_1: left promiscuous mode [ 43.848864][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.863923][ T31] bridge_slave_0: left allmulticast mode [ 43.870299][ T31] bridge_slave_0: left promiscuous mode [ 43.876672][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.886333][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.915027][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.962585][ T3669] loop0: detected capacity change from 0 to 128 [ 43.981115][ T3672] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 43.997998][ T3669] FAT-fs (loop0): Directory bread(block 162) failed [ 44.012696][ T3669] FAT-fs (loop0): Directory bread(block 163) failed [ 44.024849][ T3669] FAT-fs (loop0): Directory bread(block 164) failed [ 44.032234][ T3669] FAT-fs (loop0): Directory bread(block 165) failed [ 44.039084][ T3669] FAT-fs (loop0): Directory bread(block 166) failed [ 44.046916][ T3669] FAT-fs (loop0): Directory bread(block 167) failed [ 44.054021][ T3669] FAT-fs (loop0): Directory bread(block 168) failed [ 44.072670][ T3669] FAT-fs (loop0): Directory bread(block 169) failed [ 44.084055][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 44.087143][ T3669] FAT-fs (loop0): Directory bread(block 162) failed [ 44.101645][ T3669] FAT-fs (loop0): Directory bread(block 163) failed [ 44.109161][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 44.110049][ T3669] syz.0.58: attempt to access beyond end of device [ 44.110049][ T3669] loop0: rw=3, sector=226, nr_sectors = 6 limit=128 [ 44.133428][ T31] bond0 (unregistering): Released all slaves [ 44.151392][ T3669] syz.0.58: attempt to access beyond end of device [ 44.151392][ T3669] loop0: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 44.215874][ T3688] loop0: detected capacity change from 0 to 164 [ 44.225695][ T31] hsr_slave_0: left promiscuous mode [ 44.226192][ T3688] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.239704][ T31] hsr_slave_1: left promiscuous mode [ 44.246025][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.255234][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.267074][ T3688] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 44.285736][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.294095][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.305124][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 44.306186][ T3688] Symlink component flag not implemented [ 44.320431][ T3688] Symlink component flag not implemented [ 44.333829][ T3688] Symlink component flag not implemented (7) [ 44.340065][ T3688] Symlink component flag not implemented (116) [ 44.346614][ T31] veth1_macvtap: left promiscuous mode [ 44.368195][ T31] veth0_macvtap: left promiscuous mode [ 44.375502][ T31] veth1_vlan: left promiscuous mode [ 44.381401][ T31] veth0_vlan: left promiscuous mode [ 44.467177][ T31] team0 (unregistering): Port device team_slave_1 removed [ 44.477959][ T31] team0 (unregistering): Port device team_slave_0 removed [ 44.586538][ T3697] syzkaller0: entered promiscuous mode [ 44.592214][ T3697] syzkaller0: entered allmulticast mode [ 44.657034][ T3640] chnl_net:caif_netlink_parms(): no params data found [ 44.700653][ T3640] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.708155][ T3640] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.715839][ T3640] bridge_slave_0: entered allmulticast mode [ 44.722803][ T3640] bridge_slave_0: entered promiscuous mode [ 44.734574][ T3640] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.742628][ T3640] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.751564][ T3640] bridge_slave_1: entered allmulticast mode [ 44.759202][ T3640] bridge_slave_1: entered promiscuous mode [ 44.783465][ T3719] tipc: Started in network mode [ 44.789296][ T3719] tipc: Node identity dab9ce2be664, cluster identity 4711 [ 44.797221][ T3719] tipc: Enabled bearer , priority 0 [ 44.808387][ T3640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.818019][ T3719] syzkaller0: entered promiscuous mode [ 44.823554][ T3719] syzkaller0: entered allmulticast mode [ 44.835724][ T3640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.852324][ T3719] tipc: Resetting bearer [ 44.866819][ T3640] team0: Port device team_slave_0 added [ 44.873796][ T3716] tipc: Resetting bearer [ 44.881573][ T3716] tipc: Disabling bearer [ 44.891299][ T3640] team0: Port device team_slave_1 added [ 44.909445][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.916884][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.943686][ T3640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.956339][ T3640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.963730][ T3640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 44.990912][ T3640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.046470][ T3640] hsr_slave_0: entered promiscuous mode [ 45.060467][ T3640] hsr_slave_1: entered promiscuous mode [ 45.076576][ T3640] debugfs: 'hsr0' already exists in 'hsr' [ 45.082601][ T3640] Cannot create hsr debugfs directory [ 45.104595][ T29] kauditd_printk_skb: 388 callbacks suppressed [ 45.104613][ T29] audit: type=1400 audit(1764578132.722:476): avc: denied { create } for pid=3726 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.123835][ T3727] 9pnet_virtio: no channels available for device 127.0.0.1 [ 45.142521][ T29] audit: type=1400 audit(1764578132.742:477): avc: denied { create } for pid=3726 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.163247][ T29] audit: type=1400 audit(1764578132.742:478): avc: denied { write } for pid=3726 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.184019][ T29] audit: type=1400 audit(1764578132.742:479): avc: denied { nlmsg_write } for pid=3726 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 45.204602][ T29] audit: type=1400 audit(1764578132.742:480): avc: denied { mounton } for pid=3726 comm="syz.2.66" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 45.205633][ T3727] tipc: Enabled bearer , priority 10 [ 45.381094][ T29] audit: type=1400 audit(1764578133.002:481): avc: denied { wake_alarm } for pid=3744 comm="syz.2.68" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.465914][ T3640] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.473430][ T3749] loop2: detected capacity change from 0 to 1024 [ 45.491404][ T3640] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.521941][ T3640] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.531974][ T3640] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.534237][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.559736][ T3749] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.634131][ T3640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.653054][ T3640] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.669209][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.676464][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.688094][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.695563][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.718391][ T3769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.725104][ T3640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.738804][ T3640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.767281][ T3769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 45.817766][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.847231][ T3497] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.854249][ T3640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.006882][ T3793] netlink: 36 bytes leftover after parsing attributes in process `syz.1.72'. [ 46.056614][ T29] audit: type=1400 audit(1764578133.682:482): avc: denied { write } for pid=3796 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 46.089056][ T3786] loop1: detected capacity change from 0 to 512 [ 46.097598][ T29] audit: type=1400 audit(1764578133.722:483): avc: denied { mounton } for pid=3785 comm="syz.1.72" path="/9/file0" dev="tmpfs" ino=66 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 46.131643][ T3786] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.161989][ T29] audit: type=1400 audit(1764578133.782:484): avc: denied { execute } for pid=3807 comm="syz.0.74" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=5753 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 46.195002][ T3812] loop2: detected capacity change from 0 to 128 [ 46.207464][ T3808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.74'. [ 46.227884][ T3812] syz.2.71: attempt to access beyond end of device [ 46.227884][ T3812] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 46.296184][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.395206][ T29] audit: type=1326 audit(1764578133.962:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3807 comm="syz.0.74" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca92ff749 code=0x7ffc0000 [ 46.457542][ T3786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.524134][ T3482] tipc: Node number set to 1907089268 [ 46.592927][ T3640] veth0_vlan: entered promiscuous mode [ 46.639543][ T3640] veth1_vlan: entered promiscuous mode [ 46.650574][ T3829] loop0: detected capacity change from 0 to 512 [ 46.662635][ T3826] syzkaller0: entered promiscuous mode [ 46.668234][ T3826] syzkaller0: entered allmulticast mode [ 46.687487][ T3829] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 46.707699][ T3829] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 46.728142][ T3829] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.78: bg 0: block 248: padding at end of block bitmap is not set [ 46.745595][ T3829] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.78: Failed to acquire dquot type 1 [ 46.763844][ T3640] veth0_macvtap: entered promiscuous mode [ 46.785543][ T3640] veth1_macvtap: entered promiscuous mode [ 46.792309][ T3829] EXT4-fs (loop0): 1 truncate cleaned up [ 46.801038][ T3829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 46.806563][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.821079][ T3829] syz.0.78 (3829) used greatest stack depth: 8976 bytes left [ 46.840290][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.849728][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 46.918964][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.943478][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.947684][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.80'. [ 46.984964][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.019794][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.130815][ T3843] netlink: 36 bytes leftover after parsing attributes in process `syz.2.82'. [ 47.147959][ T3843] loop2: detected capacity change from 0 to 512 [ 47.270637][ T3843] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.397940][ T3843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.617689][ T3853] loop1: detected capacity change from 0 to 1024 [ 47.660482][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.665876][ T3855] syzkaller0: entered promiscuous mode [ 47.675215][ T3855] syzkaller0: entered allmulticast mode [ 47.691225][ T3853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.818130][ T3853] syzkaller0: entered allmulticast mode [ 47.834791][ T3853] syzkaller0: entered promiscuous mode [ 47.859930][ T3853] syzkaller0 (unregistering): left allmulticast mode [ 47.867021][ T3853] syzkaller0 (unregistering): left promiscuous mode [ 47.887555][ T3863] loop0: detected capacity change from 0 to 512 [ 47.917029][ T3863] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.954310][ T3863] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.968398][ T3863] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.013423][ T3315] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.069896][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.174554][ T3482] hid_parser_main: 22 callbacks suppressed [ 48.174573][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.189065][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.196736][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.204286][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.211978][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.219932][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.227595][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.236017][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.243558][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.251230][ T3482] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 48.261427][ T3482] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 48.385579][ T3883] fido_id[3883]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 48.716384][ T3880] loop1: detected capacity change from 0 to 32768 [ 48.867911][ T3302] loop1: p1 p2 p3 < p5 p6 > [ 48.872709][ T3302] loop1: p1 size 242222080 extends beyond EOD, truncated [ 48.906478][ T3302] loop1: p2 start 4294967295 is beyond EOD, truncated [ 48.948301][ T3880] loop1: p1 p2 p3 < p5 p6 > [ 48.955149][ T3880] loop1: p1 size 242222080 extends beyond EOD, truncated [ 48.963178][ T3880] loop1: p2 start 4294967295 is beyond EOD, truncated [ 48.991285][ T9] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 49.239337][ T3893] syzkaller0: entered promiscuous mode [ 49.245002][ T3893] syzkaller0: entered allmulticast mode [ 49.297472][ T3898] syzkaller0: entered promiscuous mode [ 49.303147][ T3898] syzkaller0: entered allmulticast mode [ 49.314029][ T3655] udevd[3655]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 49.316173][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.326150][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 49.346842][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.399767][ T3302] udevd[3302]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.399800][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.421272][ T3526] udevd[3526]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory [ 49.432575][ T3655] udevd[3655]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory [ 49.508002][ T3903] syzkaller0: entered promiscuous mode [ 49.513641][ T3903] syzkaller0: entered allmulticast mode [ 49.523595][ T3905] process 'syz.1.100' launched '/dev/fd/5' with NULL argv: empty string added [ 49.542515][ T3889] loop3: detected capacity change from 0 to 32768 [ 49.542550][ T3903] tipc: Enabled bearer , priority 0 [ 49.551151][ C1] hrtimer: interrupt took 39569 ns [ 49.561619][ T3902] tipc: Resetting bearer [ 49.570962][ T3902] tipc: Disabling bearer [ 49.595440][ T3309] loop3: p1 p2 p3 < p5 p6 > [ 49.600315][ T3309] loop3: p1 size 242222080 extends beyond EOD, truncated [ 49.609646][ T3309] loop3: p2 start 4294967295 is beyond EOD, truncated [ 49.630911][ T3907] loop2: detected capacity change from 0 to 512 [ 49.652662][ T3889] loop3: p1 p2 p3 < > [ 49.653752][ T3909] syzkaller0: entered promiscuous mode [ 49.657221][ T3889] loop3: p1 size 242222080 extends beyond EOD, [ 49.662449][ T3909] syzkaller0: entered allmulticast mode [ 49.662505][ T3889] truncated [ 49.678998][ T3889] loop3: p2 start 4294967295 is beyond EOD, truncated [ 49.691941][ T3907] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.101: error while reading EA inode 32 err=-116 [ 49.710238][ T3907] EXT4-fs (loop2): Remounting filesystem read-only [ 49.710694][ T3005] loop3: p1 p2 p3 < p5 p6 > [ 49.718304][ T3907] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 49.722386][ T3005] loop3: p1 size 242222080 extends beyond EOD, truncated [ 49.728405][ T3005] loop3: p2 start 4294967295 is beyond EOD, [ 49.739177][ T3907] EXT4-fs (loop2): 1 orphan inode deleted [ 49.739881][ T3005] truncated [ 49.825104][ T3907] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.852767][ T3907] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.873449][ T3915] mmap: syz.3.104 (3915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 49.926953][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 49.930011][ T3655] udevd[3655]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 49.994296][ T3921] syzkaller0: entered promiscuous mode [ 49.999862][ T3921] syzkaller0: entered allmulticast mode [ 50.154143][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 50.154161][ T29] audit: type=1400 audit(1764578137.772:516): avc: denied { setopt } for pid=3927 comm="syz.5.109" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.691482][ T29] audit: type=1326 audit(1764578138.312:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.715345][ T29] audit: type=1326 audit(1764578138.312:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.739170][ T29] audit: type=1326 audit(1764578138.312:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.762780][ T29] audit: type=1326 audit(1764578138.312:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.787844][ T29] audit: type=1326 audit(1764578138.312:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.812198][ T29] audit: type=1326 audit(1764578138.312:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.837580][ T29] audit: type=1326 audit(1764578138.312:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.861373][ T29] audit: type=1326 audit(1764578138.312:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 50.885507][ T29] audit: type=1326 audit(1764578138.312:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3933 comm="syz.1.111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 51.030693][ T3939] loop2: detected capacity change from 0 to 512 [ 51.056624][ T3944] syzkaller0: entered promiscuous mode [ 51.062233][ T3944] syzkaller0: entered allmulticast mode [ 51.084085][ T3939] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.114: error while reading EA inode 32 err=-116 [ 51.096874][ T3939] EXT4-fs (loop2): Remounting filesystem read-only [ 51.103431][ T3939] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 51.114091][ T3939] EXT4-fs (loop2): 1 orphan inode deleted [ 51.120396][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.131343][ T3936] syz.5.112 uses obsolete (PF_INET,SOCK_PACKET) [ 51.140827][ T3939] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.172953][ T3949] smc: net device bond0 applied user defined pnetid SYZ0 [ 51.181149][ T3949] smc: net device bond0 erased user defined pnetid SYZ0 [ 51.479121][ T3968] netlink: 44 bytes leftover after parsing attributes in process `syz.1.124'. [ 51.489500][ T3966] SELinux: failed to load policy [ 51.532577][ T3970] loop2: detected capacity change from 0 to 2048 [ 51.546416][ T3970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.572372][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 51.590929][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.625553][ T3976] syzkaller0: entered promiscuous mode [ 51.631176][ T3976] syzkaller0: entered allmulticast mode [ 51.814557][ T3988] loop1: detected capacity change from 0 to 512 [ 51.817628][ T3989] syzkaller0: entered promiscuous mode [ 51.826559][ T3989] syzkaller0: entered allmulticast mode [ 51.835481][ T3988] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 51.852396][ T3989] netlink: 76 bytes leftover after parsing attributes in process `syz.2.134'. [ 51.870316][ T3988] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 51.883361][ T3988] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.949847][ T3993] syzkaller0: entered promiscuous mode [ 51.955678][ T3993] syzkaller0: entered allmulticast mode [ 52.139006][ T3999] netlink: 'syz.3.137': attribute type 4 has an invalid length. [ 52.377210][ T4003] option changes via remount are deprecated (pid=4000 comm=syz.2.138) [ 52.437899][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 52.452396][ T4007] team1: entered promiscuous mode [ 52.457721][ T4007] team1: entered allmulticast mode [ 52.520443][ T3526] printk: udevd: 7 output lines suppressed due to ratelimiting [ 52.584847][ T4012] loop3: detected capacity change from 0 to 512 [ 52.911354][ T4018] syzkaller0: entered promiscuous mode [ 52.917798][ T4018] syzkaller0: entered allmulticast mode [ 52.924599][ T4016] loop5: detected capacity change from 0 to 2048 [ 52.934650][ T4012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 52.952085][ T4012] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.985966][ T4016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.000077][ T4012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.143'. [ 53.023371][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.044301][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.077517][ T4027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=4027 comm=syz.0.149 [ 53.116776][ T4029] loop3: detected capacity change from 0 to 128 [ 53.133405][ T4029] FAT-fs (loop3): bogus sectors per cluster 0 [ 53.139664][ T4029] FAT-fs (loop3): Can't find a valid FAT filesystem [ 53.167229][ T4029] netlink: 256 bytes leftover after parsing attributes in process `syz.3.148'. [ 53.333636][ T4039] loop3: detected capacity change from 0 to 2048 [ 53.399070][ T4039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.423315][ T4039] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 53.476606][ T3322] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 53.519024][ T3322] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 53.547849][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.551367][ T4045] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 53.573857][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 53.583785][ T4047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.155'. [ 53.589589][ T4045] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.614554][ T4045] macvlan2: entered promiscuous mode [ 53.620097][ T4045] macvlan2: entered allmulticast mode [ 53.626270][ T4051] loop3: detected capacity change from 0 to 2048 [ 53.626287][ T4045] bond1: entered promiscuous mode [ 53.636361][ T4051] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 53.638094][ T4045] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 53.658117][ T4045] team0: Port device macvlan2 added [ 53.664316][ T4047] IPVS: Error connecting to the multicast addr [ 53.682851][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 53.711052][ T4045] bond1: (slave ip6gretap0): making interface the new active one [ 53.719057][ T4045] ip6gretap0: entered promiscuous mode [ 53.726748][ T4045] bond1: (slave ip6gretap0): Enslaving as an active interface with an up link [ 53.741216][ T3482] hid_parser_main: 26 callbacks suppressed [ 53.741235][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.755014][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.762752][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.770223][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.777932][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.785684][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.793242][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.800899][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.808644][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.816086][ T3482] hid-generic 0003:0004:0000.0004: unknown main item tag 0x0 [ 53.826652][ T3482] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 53.846804][ T4061] loop1: detected capacity change from 0 to 2048 [ 53.854168][ T4065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 53.869058][ T4061] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.952884][ T4073] bridge_slave_0: left allmulticast mode [ 53.958686][ T4073] bridge_slave_0: left promiscuous mode [ 53.964418][ T4073] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.996038][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.023633][ T4078] netlink: 'syz.0.161': attribute type 10 has an invalid length. [ 54.032105][ T4078] netlink: 40 bytes leftover after parsing attributes in process `syz.0.161'. [ 54.041193][ T4077] loop5: detected capacity change from 0 to 2048 [ 54.048931][ T4063] loop3: detected capacity change from 0 to 32768 [ 54.080635][ T4073] bridge_slave_1: left allmulticast mode [ 54.089343][ T4073] bridge_slave_1: left promiscuous mode [ 54.095695][ T4073] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.179465][ T4077] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.196099][ T4063] loop3: p1 p2 p3 < p5 p6 > [ 54.200812][ T4063] loop3: p1 size 242222080 extends beyond EOD, truncated [ 54.209020][ T4063] loop3: p2 start 4294967295 is beyond EOD, truncated [ 54.218786][ T4073] bond0: (slave bond_slave_0): Releasing backup interface [ 54.242117][ T4073] bond0: (slave bond_slave_1): Releasing backup interface [ 54.250655][ T4077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.163'. [ 54.265779][ T4073] team0: Port device team_slave_0 removed [ 54.276577][ T4073] team0: Port device team_slave_1 removed [ 54.283489][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.290976][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.302700][ T4073] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.310611][ T4073] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.321020][ T4073] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 54.340568][ T4078] batman_adv: batadv0: Adding interface: veth1_vlan [ 54.347310][ T4078] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.374013][ T4078] batman_adv: batadv0: Interface activated: veth1_vlan [ 54.435256][ T3640] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 54.450389][ T3640] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 54.487697][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.544950][ T4094] tipc: Started in network mode [ 54.550046][ T4094] tipc: Node identity ac14140f, cluster identity 4711 [ 54.567045][ T4094] tipc: New replicast peer: 255.255.255.83 [ 54.573462][ T4094] tipc: Enabled bearer , priority 10 [ 54.606244][ T4098] IPVS: Error connecting to the multicast addr [ 54.638474][ T4101] syzkaller0: entered promiscuous mode [ 54.644267][ T4101] syzkaller0: entered allmulticast mode [ 54.848543][ T4110] loop3: detected capacity change from 0 to 512 [ 54.855624][ T4110] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.866221][ T4113] loop5: detected capacity change from 0 to 128 [ 54.878206][ T4110] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.168: inode has both inline data and extents flags [ 54.892405][ T4110] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.168: couldn't read orphan inode 15 (err -117) [ 54.910380][ T4110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.926449][ T4113] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.940295][ T4113] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 55.017552][ T3640] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.138396][ T4131] gre1: entered allmulticast mode [ 55.468092][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.483342][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 55.483357][ T29] audit: type=1400 audit(1764578143.112:599): avc: denied { connect } for pid=4134 comm="syz.5.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.502960][ T4137] IPVS: Error connecting to the multicast addr [ 55.522627][ T29] audit: type=1400 audit(1764578143.142:600): avc: denied { write } for pid=4134 comm="syz.5.182" path="socket:[7396]" dev="sockfs" ino=7396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 55.588550][ T29] audit: type=1400 audit(1764578143.212:601): avc: denied { write } for pid=4143 comm="syz.3.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 55.590514][ T4144] netlink: zone id is out of range [ 55.613107][ T4144] netlink: zone id is out of range [ 55.618648][ T4144] netlink: zone id is out of range [ 55.623920][ T4144] netlink: zone id is out of range [ 55.629184][ T4144] netlink: zone id is out of range [ 55.634396][ T4144] netlink: zone id is out of range [ 55.639739][ T4144] netlink: zone id is out of range [ 55.645793][ T4146] program syz.0.192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.645867][ T4144] netlink: zone id is out of range [ 55.660498][ T4146] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.694798][ T3403] tipc: Node number set to 2886997007 [ 55.777478][ T4150] syzkaller0: entered promiscuous mode [ 55.783219][ T4150] syzkaller0: entered allmulticast mode [ 55.959906][ T29] audit: type=1400 audit(1764578143.582:602): avc: denied { mount } for pid=4155 comm="syz.1.188" name="/" dev="ramfs" ino=7039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.018690][ T29] audit: type=1326 audit(1764578143.642:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810304f749 code=0x7ffc0000 [ 56.171289][ T4169] tipc: Enabled bearer , priority 0 [ 56.208073][ T4169] syzkaller0: entered promiscuous mode [ 56.213788][ T4169] syzkaller0: entered allmulticast mode [ 56.278526][ T4172] Cannot find set identified by id 0 to match [ 56.325929][ T4169] tipc: Resetting bearer [ 56.410447][ T4168] tipc: Resetting bearer [ 56.461807][ T29] audit: type=1326 audit(1764578143.642:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f810304f749 code=0x7ffc0000 [ 56.485254][ T29] audit: type=1326 audit(1764578143.642:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810304f749 code=0x7ffc0000 [ 56.508951][ T29] audit: type=1326 audit(1764578143.642:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f810304f749 code=0x7ffc0000 [ 56.526888][ T4172] __nla_validate_parse: 10 callbacks suppressed [ 56.526912][ T4172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 56.532111][ T29] audit: type=1326 audit(1764578143.642:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.189" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f810304f749 code=0x7ffc0000 [ 56.532140][ T29] audit: type=1400 audit(1764578144.052:608): avc: denied { create } for pid=4176 comm="syz.0.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 56.590920][ T4172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 56.599845][ T4172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 56.625257][ T4168] tipc: Disabling bearer [ 56.649045][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 56.665925][ T4182] team1: entered promiscuous mode [ 56.671772][ T4182] team1: entered allmulticast mode [ 56.693757][ T10] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 56.727797][ T4188] tipc: Enabled bearer , priority 0 [ 56.735223][ T4188] syzkaller0: entered promiscuous mode [ 56.740713][ T4188] syzkaller0: entered allmulticast mode [ 56.765234][ T4188] tipc: Resetting bearer [ 56.791568][ T4192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 56.928065][ T4203] net_ratelimit: 7 callbacks suppressed [ 56.928082][ T4203] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 57.026274][ T4207] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 57.039523][ T4186] loop5: detected capacity change from 0 to 32768 [ 57.095221][ T4186] loop5: p1 p2 p3 < p5 p6 > [ 57.100030][ T4186] loop5: p1 size 242222080 extends beyond EOD, truncated [ 57.107732][ T4186] loop5: p2 start 4294967295 is beyond EOD, truncated [ 57.760867][ T3403] tipc: Node number set to 1021169195 [ 58.079862][ T4225] netlink: 4 bytes leftover after parsing attributes in process `syz.5.211'. [ 58.094669][ T4225] team1: entered promiscuous mode [ 58.100234][ T4225] team1: entered allmulticast mode [ 58.319188][ T4233] syz.3.214 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 58.461016][ T4238] loop5: detected capacity change from 0 to 512 [ 58.493329][ T4238] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 58.517868][ T4238] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 58.572152][ T4238] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.215: bg 0: block 248: padding at end of block bitmap is not set [ 58.656389][ T4238] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.215: Failed to acquire dquot type 1 [ 58.684960][ T4238] EXT4-fs (loop5): 1 truncate cleaned up [ 58.700545][ T4238] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 59.331812][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.466672][ T4257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.222'. [ 59.488446][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.495934][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 59.654761][ T4257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.662366][ T4257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.823013][ T4272] loop3: detected capacity change from 0 to 1024 [ 59.837796][ T4272] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 59.846393][ T4276] tipc: Enabling of bearer rejected, already enabled [ 60.047766][ T4276] tipc: Resetting bearer [ 60.066758][ T4272] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.223: Invalid block bitmap block 0 in block_group 0 [ 60.141206][ T4272] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.223: Failed to acquire dquot type 0 [ 60.258679][ T4285] tipc: Enabling of bearer rejected, already enabled [ 60.283074][ T4272] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.223: Freeing blocks not in datazone - block = 0, count = 4096 [ 60.327633][ T4284] tipc: Enabled bearer , priority 0 [ 60.352234][ T4285] tipc: Resetting bearer [ 60.373782][ T4284] syzkaller0: entered promiscuous mode [ 60.379379][ T4284] syzkaller0: entered allmulticast mode [ 60.393707][ T4272] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.223: Invalid inode bitmap blk 0 in block_group 0 [ 60.486184][ T4272] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 60.706942][ T4284] tipc: Resetting bearer [ 60.750246][ T4272] EXT4-fs (loop3): 1 orphan inode deleted [ 60.765060][ T4282] tipc: Resetting bearer [ 60.776777][ T4272] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.810579][ T1760] __quota_error: 306 callbacks suppressed [ 60.810595][ T1760] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 60.827148][ T1760] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:7: Failed to release dquot type 0 [ 60.855392][ T4282] tipc: Disabling bearer [ 61.120273][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 61.161508][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.185984][ T29] audit: type=1400 audit(1764578148.812:911): avc: denied { create } for pid=4304 comm="syz.5.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.251080][ T29] audit: type=1400 audit(1764578148.842:912): avc: denied { ioctl } for pid=4304 comm="syz.5.233" path="socket:[8291]" dev="sockfs" ino=8291 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 61.276202][ T29] audit: type=1326 audit(1764578148.842:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.5.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18dd8f749 code=0x7ffc0000 [ 61.302718][ T29] audit: type=1326 audit(1764578148.842:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.5.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18dd8f749 code=0x7ffc0000 [ 61.326442][ T29] audit: type=1326 audit(1764578148.842:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.5.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe18dd8f749 code=0x7ffc0000 [ 61.350164][ T29] audit: type=1326 audit(1764578148.842:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.5.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18dd8f749 code=0x7ffc0000 [ 61.374642][ T29] audit: type=1326 audit(1764578148.842:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.5.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe18dd8f749 code=0x7ffc0000 [ 61.398104][ T29] audit: type=1326 audit(1764578148.842:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.5.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe18dd8f749 code=0x7ffc0000 [ 61.422342][ T29] audit: type=1326 audit(1764578148.842:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4304 comm="syz.5.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fe18dd8f749 code=0x7ffc0000 [ 61.519242][ T4307] loop5: detected capacity change from 0 to 512 [ 61.595163][ T4307] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.617981][ T4307] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.672144][ T4315] loop3: detected capacity change from 0 to 1024 [ 61.679313][ T4315] EXT4-fs: Ignoring removed mblk_io_submit option [ 61.686344][ T4315] ext4: Unknown parameter 'appraise' [ 61.695173][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.748635][ T4319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 61.773992][ T4323] loop3: detected capacity change from 0 to 512 [ 61.781913][ T4323] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.791611][ T4321] netlink: 76 bytes leftover after parsing attributes in process `syz.5.237'. [ 61.818298][ T4323] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.832824][ T4323] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.855579][ T4321] 0: reclassify loop, rule prio 0, protocol 800 [ 61.893790][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.907945][ T4331] 0: reclassify loop, rule prio 0, protocol 800 [ 61.933345][ T4333] tipc: Enabling of bearer rejected, already enabled [ 61.949680][ T4335] tipc: Enabled bearer , priority 0 [ 61.957767][ T4335] syzkaller0: entered promiscuous mode [ 61.963444][ T4335] syzkaller0: entered allmulticast mode [ 62.005620][ T4335] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 62.016064][ T4335] tipc: Resetting bearer [ 62.023401][ T4334] tipc: Resetting bearer [ 62.035035][ T4334] tipc: Disabling bearer [ 62.062725][ T4341] 9pnet_fd: Insufficient options for proto=fd [ 62.105444][ T4345] Falling back ldisc for ptm0. [ 62.109580][ T4348] netlink: 'syz.0.246': attribute type 4 has an invalid length. [ 62.185697][ T4353] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.244238][ T4359] tipc: Started in network mode [ 62.249452][ T4359] tipc: Node identity 9675b184a09, cluster identity 4711 [ 62.256742][ T4359] tipc: Enabled bearer , priority 0 [ 62.267437][ T4359] syzkaller0: entered promiscuous mode [ 62.273048][ T4359] syzkaller0: entered allmulticast mode [ 62.280910][ T4351] netlink: 'syz.3.251': attribute type 10 has an invalid length. [ 62.293152][ T4351] team0: Port device dummy0 added [ 62.303538][ T4359] tipc: Resetting bearer [ 62.311360][ T4358] tipc: Resetting bearer [ 62.322765][ T4358] tipc: Disabling bearer [ 62.341043][ T4353] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.398464][ T4361] loop3: detected capacity change from 0 to 1024 [ 62.428374][ T4353] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.451886][ T4361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.487710][ T4361] bridge1: entered promiscuous mode [ 62.493001][ T4361] bridge1: entered allmulticast mode [ 62.507170][ T4361] team0: Port device bridge1 added [ 62.524049][ T4353] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.546211][ T4361] bridge0: port 3(team0) entered blocking state [ 62.552618][ T4361] bridge0: port 3(team0) entered disabled state [ 62.561234][ T4361] team0: entered allmulticast mode [ 62.566568][ T4361] team_slave_0: entered allmulticast mode [ 62.572463][ T4361] team_slave_1: entered allmulticast mode [ 62.578288][ T4361] dummy0: entered allmulticast mode [ 62.585144][ T4361] team0: entered promiscuous mode [ 62.590267][ T4361] team_slave_0: entered promiscuous mode [ 62.596184][ T4361] team_slave_1: entered promiscuous mode [ 62.602862][ T4361] dummy0: entered promiscuous mode [ 62.608676][ T4361] bridge0: port 3(team0) entered blocking state [ 62.615242][ T4361] bridge0: port 3(team0) entered forwarding state [ 62.634631][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.655498][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.664031][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.672393][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.710350][ T4379] random: crng reseeded on system resumption [ 62.738027][ T4379] netlink: 4 bytes leftover after parsing attributes in process `syz.5.261'. [ 62.758920][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.201155][ T4404] tipc: Enabling of bearer rejected, already enabled [ 63.631037][ T4406] Set syz1 is full, maxelem 65536 reached [ 63.638931][ T4414] tipc: Enabled bearer , priority 0 [ 63.646492][ T4414] syzkaller0: entered promiscuous mode [ 63.652430][ T4414] syzkaller0: entered allmulticast mode [ 63.677508][ T4414] tipc: Resetting bearer [ 63.685000][ T4413] tipc: Resetting bearer [ 63.692977][ T4413] tipc: Disabling bearer [ 63.747651][ T4418] loop3: detected capacity change from 0 to 512 [ 63.788330][ T4418] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.827903][ T4419] program syz.2.274 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 63.869743][ T4418] EXT4-fs error (device loop3): ext4_iget_extra_inode:5075: inode #15: comm syz.3.275: corrupted in-inode xattr: invalid ea_ino [ 63.938383][ T4418] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.275: couldn't read orphan inode 15 (err -117) [ 63.974567][ T4433] syzkaller0: left promiscuous mode [ 63.980050][ T4433] syzkaller0: left allmulticast mode [ 64.016315][ T4418] netlink: 8 bytes leftover after parsing attributes in process `syz.3.275'. [ 64.061884][ T4423] SELinux: failed to load policy [ 64.111274][ T4438] netlink: 16 bytes leftover after parsing attributes in process `syz.0.281'. [ 64.165173][ T4439] tipc: Enabled bearer , priority 0 [ 64.173355][ T4439] syzkaller0: entered promiscuous mode [ 64.179562][ T4439] syzkaller0: entered allmulticast mode [ 64.195696][ T4439] tipc: Resetting bearer [ 64.227826][ T4437] tipc: Resetting bearer [ 64.240237][ T4445] loop1: detected capacity change from 0 to 512 [ 64.248988][ T4437] tipc: Disabling bearer [ 64.275503][ T4445] EXT4-fs: Ignoring removed bh option [ 64.385031][ T4445] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 64.394200][ T4445] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 64.425897][ T4454] syzkaller0: entered promiscuous mode [ 64.431437][ T4454] syzkaller0: entered allmulticast mode [ 64.446314][ T4454] tipc: Enabling of bearer rejected, already enabled [ 64.460025][ T4445] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 64.573652][ T4445] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 64.790480][ T4462] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 64.834578][ T4464] netlink: 204 bytes leftover after parsing attributes in process `syz.1.292'. [ 64.844967][ T4464] netlink: 108 bytes leftover after parsing attributes in process `syz.1.292'. [ 64.937017][ T4475] syzkaller0: left promiscuous mode [ 64.942387][ T4475] syzkaller0: left allmulticast mode [ 65.872103][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 65.872122][ T29] audit: type=1400 audit(1764578153.492:974): avc: denied { mount } for pid=4498 comm="syz.0.302" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 65.923372][ T4501] loop3: detected capacity change from 0 to 1024 [ 65.932388][ T29] audit: type=1400 audit(1764578153.562:975): avc: denied { setopt } for pid=4502 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.946161][ T4501] EXT4-fs: Ignoring removed oldalloc option [ 65.957796][ T4501] EXT4-fs: Ignoring removed bh option [ 66.084174][ T4510] loop3: detected capacity change from 0 to 512 [ 66.096142][ T4510] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.124096][ T4510] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 66.143340][ T4510] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.306: bg 0: block 248: padding at end of block bitmap is not set [ 66.145638][ T4515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.307'. [ 66.164712][ T4510] Quota error (device loop3): write_blk: dquota write failed [ 66.175554][ T4510] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 66.186997][ T4510] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.306: Failed to acquire dquot type 1 [ 66.195438][ T4516] netlink: 68 bytes leftover after parsing attributes in process `syz.0.305'. [ 66.209315][ T4510] EXT4-fs (loop3): 1 truncate cleaned up [ 66.249370][ T4510] syz.3.306 (4510) used greatest stack depth: 8904 bytes left [ 66.349195][ T29] audit: type=1400 audit(1764578153.972:976): avc: denied { write } for pid=4519 comm="syz.1.309" path="socket:[8720]" dev="sockfs" ino=8720 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.394925][ T29] audit: type=1400 audit(1764578153.992:977): avc: denied { read } for pid=4519 comm="syz.1.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.580059][ T29] audit: type=1400 audit(1764578154.202:978): avc: denied { create } for pid=4525 comm="syz.1.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 66.612607][ T29] audit: type=1326 audit(1764578154.232:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 66.635933][ T29] audit: type=1326 audit(1764578154.232:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 66.662252][ T29] audit: type=1326 audit(1764578154.292:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4525 comm="syz.1.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a08a1f749 code=0x7ffc0000 [ 67.005692][ T4530] netlink: 'syz.1.312': attribute type 6 has an invalid length. [ 67.013986][ T4530] netlink: 'syz.1.312': attribute type 6 has an invalid length. [ 67.041092][ T4535] loop1: detected capacity change from 0 to 512 [ 67.048023][ T4535] EXT4-fs: Ignoring removed orlov option [ 67.054094][ T4535] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 67.066768][ T4535] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.314: corrupted in-inode xattr: e_value size too large [ 67.081329][ T4535] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.314: couldn't read orphan inode 15 (err -117) [ 67.123335][ T3410] hid_parser_main: 26 callbacks suppressed [ 67.123372][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x4 [ 67.137035][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x2 [ 67.148272][ T3410] hid-generic 0000:3000000:0000.0006: unknown main item tag 0x3 [ 67.164191][ T4540] SELinux: failed to load policy [ 67.169268][ T3410] hid-generic 0000:3000000:0000.0006: hidraw0: HID v0.00 Device [sy] on syz0 [ 67.210093][ T4550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 67.744230][ T4561] lo speed is unknown, defaulting to 1000 [ 67.750252][ T4561] lo speed is unknown, defaulting to 1000 [ 67.756468][ T4561] lo speed is unknown, defaulting to 1000 [ 67.762927][ T4561] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.771112][ T4561] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 67.782391][ T4561] lo speed is unknown, defaulting to 1000 [ 67.788755][ T4561] lo speed is unknown, defaulting to 1000 [ 67.795154][ T4561] lo speed is unknown, defaulting to 1000 [ 67.801416][ T4561] lo speed is unknown, defaulting to 1000 [ 67.809461][ T4561] lo speed is unknown, defaulting to 1000 [ 68.102119][ T4571] loop5: detected capacity change from 0 to 512 [ 68.116070][ T4571] EXT4-fs error (device loop5): ext4_xattr_inode_iget:446: comm syz.5.328: error while reading EA inode 32 err=-116 [ 68.130500][ T4573] @: renamed from hsr0 (while UP) [ 68.152889][ T4578] netlink: 20 bytes leftover after parsing attributes in process `syz.0.330'. [ 68.162060][ T4571] EXT4-fs (loop5): Remounting filesystem read-only [ 68.168839][ T4571] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 68.185829][ T4580] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.331'. [ 68.198086][ T4571] EXT4-fs (loop5): 1 orphan inode deleted [ 68.204558][ T4580] netlink: zone id is out of range [ 68.210169][ T4580] netlink: zone id is out of range [ 68.220935][ T4580] netlink: zone id is out of range [ 68.230055][ T4580] netlink: zone id is out of range [ 68.278204][ T3403] IPVS: starting estimator thread 0... [ 68.288836][ T4587] netlink: 7 bytes leftover after parsing attributes in process `syz.0.334'. [ 68.314948][ T4587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'. [ 68.391557][ T4580] netlink: set zone limit has 8 unknown bytes [ 68.465263][ T4590] IPVS: using max 2400 ests per chain, 120000 per kthread [ 69.103660][ T4617] IPv6: Can't replace route, no match found [ 69.135163][ T4619] loop5: detected capacity change from 0 to 512 [ 69.142284][ T4619] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 69.168411][ T4619] ext4 filesystem being mounted at /33/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.322788][ T4625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.345'. [ 69.464155][ T4631] netlink: 4 bytes leftover after parsing attributes in process `syz.0.348'. [ 69.903640][ T4646] loop3: detected capacity change from 0 to 512 [ 69.917331][ T4646] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.353: corrupted inode contents [ 69.929462][ T4646] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.353: mark_inode_dirty error [ 70.149409][ T4646] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.353: corrupted inode contents [ 70.184554][ T4646] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.353: mark_inode_dirty error [ 70.347277][ T4646] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.353: Failed to acquire dquot type 0 [ 70.374793][ T4646] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.353: corrupted inode contents [ 70.417634][ T4646] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.353: mark_inode_dirty error [ 70.456671][ T4646] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.353: corrupted inode contents [ 70.507769][ T4646] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.353: mark_inode_dirty error [ 70.557247][ T4646] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.353: corrupted inode contents [ 70.605014][ T4646] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 70.639758][ T4646] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.353: corrupted inode contents [ 70.704994][ T4646] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.353: mark_inode_dirty error [ 70.735042][ T4646] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 70.767466][ T4646] EXT4-fs (loop3): 1 truncate cleaned up [ 70.785118][ T4646] EXT4-fs mount: 14 callbacks suppressed [ 70.785135][ T4646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.842331][ T4646] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.875364][ T29] kauditd_printk_skb: 351 callbacks suppressed [ 70.875382][ T29] audit: type=1326 audit(1764578158.502:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d140ddf90 code=0x7ffc0000 [ 70.922430][ T29] audit: type=1326 audit(1764578158.532:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f6d140de497 code=0x7ffc0000 [ 70.945826][ T29] audit: type=1326 audit(1764578158.532:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6d140ddf90 code=0x7ffc0000 [ 70.971483][ T29] audit: type=1326 audit(1764578158.532:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 70.978847][ T4661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.994843][ T29] audit: type=1326 audit(1764578158.532:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 71.064852][ T4661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.078991][ T29] audit: type=1400 audit(1764578158.582:1336): avc: denied { setopt } for pid=4659 comm="syz.2.357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 71.098414][ T29] audit: type=1326 audit(1764578158.622:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 71.121966][ T29] audit: type=1326 audit(1764578158.622:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 71.145363][ T29] audit: type=1326 audit(1764578158.622:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4645 comm="syz.3.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 71.340362][ T4666] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 71.575867][ T4671] loop1: detected capacity change from 0 to 1024 [ 71.583010][ T4671] EXT4-fs: quotafile must be on filesystem root [ 71.597726][ T4671] loop1: detected capacity change from 0 to 1024 [ 71.633331][ T4671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 71.648214][ T4671] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.738844][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 71.753002][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.794935][ T4683] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.823349][ T4685] netlink: 176 bytes leftover after parsing attributes in process `syz.3.366'. [ 71.832756][ T4685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=4685 comm=syz.3.366 [ 71.847752][ T4685] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=4685 comm=syz.3.366 [ 71.893964][ T4689] netlink: 'syz.3.369': attribute type 10 has an invalid length. [ 71.909827][ T29] audit: type=1400 audit(1764578159.532:1340): avc: denied { write } for pid=4686 comm="syz.5.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.996565][ T4693] syz_tun: entered allmulticast mode [ 72.004117][ T4692] syz_tun: left allmulticast mode [ 72.172974][ T4702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.374'. [ 72.300847][ T4705] Invalid ELF header magic: != ELF [ 72.309813][ T4704] Illegal XDP return value 4294967274 on prog (id 232) dev syz_tun, expect packet loss! [ 72.372991][ T4718] netlink: 92 bytes leftover after parsing attributes in process `syz.0.375'. [ 72.373016][ T4718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.375'. [ 72.436216][ T4724] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.588403][ T4724] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.625107][ T4726] siw: device registration error -23 [ 72.639564][ T4724] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.690866][ T4724] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.742863][ T37] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.759017][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.764264][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.789388][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855577][ T4731] netlink: 'syz.2.380': attribute type 4 has an invalid length. [ 72.855610][ T4731] netlink: 152 bytes leftover after parsing attributes in process `syz.2.380'. [ 72.863106][ T4731] .`: renamed from bond0 (while UP) [ 72.890166][ T4733] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.381'. [ 72.890355][ T4733] netlink: zone id is out of range [ 72.890417][ T4733] netlink: zone id is out of range [ 72.891397][ T4733] netlink: zone id is out of range [ 72.891448][ T4733] netlink: zone id is out of range [ 72.962031][ T4737] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 72.962031][ T4737] The task syz.2.382 (4737) triggered the difference, watch for misbehavior. [ 73.000556][ T4733] netlink: set zone limit has 8 unknown bytes [ 73.015475][ T4739] loop5: detected capacity change from 0 to 1024 [ 73.022504][ T4739] EXT4-fs: Ignoring removed orlov option [ 73.031770][ T4739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.052690][ T4742] program syz.0.384 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.375534][ T4747] ALSA: seq fatal error: cannot create timer (-19) [ 73.924812][ T3657] Bluetooth: hci0: command 0x1003 tx timeout [ 73.930927][ T3497] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.082653][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.364583][ T4767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 74.373976][ T4767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 74.454268][ T4762] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 74.788452][ T4773] lo speed is unknown, defaulting to 1000 [ 74.864241][ T4759] Set syz1 is full, maxelem 65536 reached [ 75.379359][ T4789] hub 2-0:1.0: USB hub found [ 75.384224][ T4789] hub 2-0:1.0: 8 ports detected [ 75.492651][ T4800] loop5: detected capacity change from 0 to 128 [ 75.629788][ T4800] syz.5.404: attempt to access beyond end of device [ 75.629788][ T4800] loop5: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 75.658808][ T4800] syz.5.404: attempt to access beyond end of device [ 75.658808][ T4800] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 75.672403][ T4800] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 75.732810][ T4800] syz.5.404: attempt to access beyond end of device [ 75.732810][ T4800] loop5: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 75.759126][ T4800] syz.5.404: attempt to access beyond end of device [ 75.759126][ T4800] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 75.772614][ T4800] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 75.815383][ T4800] syz.5.404: attempt to access beyond end of device [ 75.815383][ T4800] loop5: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 75.833709][ T4804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.405'. [ 75.873693][ T4800] syz.5.404: attempt to access beyond end of device [ 75.873693][ T4800] loop5: rw=2049, sector=192, nr_sectors = 2 limit=128 [ 75.887276][ T4800] Buffer I/O error on dev loop5, logical block 96, lost async page write [ 75.896612][ T4800] syz.5.404: attempt to access beyond end of device [ 75.896612][ T4800] loop5: rw=2049, sector=194, nr_sectors = 8 limit=128 [ 75.910636][ T4800] syz.5.404: attempt to access beyond end of device [ 75.910636][ T4800] loop5: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 75.924020][ T4800] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 75.942250][ T4800] syz.5.404: attempt to access beyond end of device [ 75.942250][ T4800] loop5: rw=2049, sector=218, nr_sectors = 8 limit=128 [ 75.956336][ T4800] syz.5.404: attempt to access beyond end of device [ 75.956336][ T4800] loop5: rw=2049, sector=224, nr_sectors = 2 limit=128 [ 75.969742][ T4800] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 75.981404][ T4800] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 75.981470][ T29] kauditd_printk_skb: 400 callbacks suppressed [ 75.981485][ T29] audit: type=1400 audit(1764578163.602:1741): avc: denied { map } for pid=4809 comm="syz.1.407" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.029190][ T4810] netlink: 24 bytes leftover after parsing attributes in process `syz.1.407'. [ 76.048611][ T4800] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 76.057468][ T4811] SELinux: policydb magic number 0x67632f2e does not match expected magic number 0xf97cff8c [ 76.074542][ T4800] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 76.083579][ T29] audit: type=1400 audit(1764578163.692:1742): avc: denied { read } for pid=4813 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.104663][ T4811] SELinux: failed to load policy [ 76.124050][ T4800] Buffer I/O error on dev loop5, logical block 120, lost async page write [ 76.135840][ T29] audit: type=1400 audit(1764578163.762:1743): avc: denied { write } for pid=4813 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 76.150319][ T4800] Buffer I/O error on dev loop5, logical block 124, lost async page write [ 76.165053][ T29] audit: type=1400 audit(1764578163.782:1744): avc: denied { watch } for pid=4815 comm="syz.3.408" path="/78/control" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.196509][ T29] audit: type=1400 audit(1764578163.822:1745): avc: denied { firmware_load } for pid=4813 comm="syz.1.409" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 76.435790][ T29] audit: type=1400 audit(1764578164.062:1746): avc: denied { attach_queue } for pid=4813 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 76.507122][ T29] audit: type=1400 audit(1764578164.102:1747): avc: denied { create } for pid=4831 comm="syz.5.414" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.535100][ T4832] SELinux: failed to load policy [ 76.583921][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.591506][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.599008][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.606770][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.610762][ T29] audit: type=1400 audit(1764578164.172:1748): avc: denied { unlink } for pid=3640 comm="syz-executor" name="file0" dev="tmpfs" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 76.614470][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.639064][ T4841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4841 comm=syz.5.417 [ 76.644475][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.657723][ T29] audit: type=1400 audit(1764578164.272:1749): avc: denied { nlmsg_write } for pid=4838 comm="syz.5.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 76.664254][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.664278][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.664298][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.664353][ T36] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 76.722087][ T4840] loop3: detected capacity change from 0 to 512 [ 76.738174][ T4841] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=4841 comm=syz.5.417 [ 76.751546][ T36] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 76.775576][ T4840] EXT4-fs (loop3): too many log groups per flexible block group [ 76.783299][ T4840] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 76.805711][ T4840] EXT4-fs (loop3): mount failed [ 76.846288][ T4849] geneve2: entered promiscuous mode [ 76.851654][ T4849] geneve2: entered allmulticast mode [ 76.864859][ T12] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.876588][ T12] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.894830][ T12] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 76.918872][ T12] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.015022][ T4856] @: renamed from hsr0 (while UP) [ 77.061051][ T29] audit: type=1400 audit(1764578164.652:1750): avc: denied { append } for pid=4855 comm="+}[@" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 77.168567][ T4865] syzkaller0: entered promiscuous mode [ 77.174213][ T4865] syzkaller0: entered allmulticast mode [ 77.244449][ T3170] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 77.559779][ T4901] netlink: 16 bytes leftover after parsing attributes in process `syz.1.437'. [ 77.616839][ T4907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 77.627908][ T4907] netlink: 'syz.1.441': attribute type 12 has an invalid length. [ 77.951537][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 77.960914][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.068700][ T4921] lo speed is unknown, defaulting to 1000 [ 78.638903][ T4929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.446'. [ 78.715992][ T4931] loop5: detected capacity change from 0 to 7 [ 78.723907][ T4931] loop5: unable to read partition table [ 78.729708][ T4931] loop_reread_partitions: partition scan of loop5 (被xڬdGݡ [ 78.729708][ T4931] ) failed (rc=-5) [ 78.744501][ T4931] xt_recent: Unsupported userspace flags (000000b1) [ 78.974866][ T10] hid-generic 0003:0004:0000.0009: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 79.250614][ T4945] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.309346][ T4945] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.379696][ T4945] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.438297][ T4945] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.513168][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.545898][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.559957][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.594790][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.622380][ T4960] loop5: detected capacity change from 0 to 1024 [ 79.651535][ T4960] EXT4-fs: Ignoring removed orlov option [ 79.661567][ T4960] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.951722][ T4970] netlink: 'syz.1.458': attribute type 4 has an invalid length. [ 80.294338][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.344430][ T4989] SELinux: Context system_u:object_r:systemd_notify_exec_t:s0 is not valid (left unmapped). [ 80.375986][ T4991] 0: reclassify loop, rule prio 0, protocol 800 [ 80.397923][ T4989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 80.417584][ T4989] bond0: (slave bond1): Enslaving as an active interface with an up link [ 80.622817][ T4996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.465'. [ 80.744863][ T5003] lo speed is unknown, defaulting to 1000 [ 80.803903][ T5005] loop3: detected capacity change from 0 to 512 [ 81.113433][ T5005] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.122228][ T5005] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.142086][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 81.142100][ T29] audit: type=1326 audit(1764578168.762:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca92ff749 code=0x7ffc0000 [ 81.239495][ T5005] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.467: Allocating blocks 41-42 which overlap fs metadata [ 81.253846][ T5005] Quota error (device loop3): write_blk: dquota write failed [ 81.261285][ T5005] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 81.270393][ T5005] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.467: Allocating blocks 41-42 which overlap fs metadata [ 81.284743][ T5005] Quota error (device loop3): write_blk: dquota write failed [ 81.292182][ T5005] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 81.302157][ T5005] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.467: Failed to acquire dquot type 1 [ 81.314001][ T5005] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 81.328473][ T5005] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.467: corrupted inode contents [ 81.415227][ T5009] loop5: detected capacity change from 0 to 512 [ 81.422308][ T5001] lo speed is unknown, defaulting to 1000 [ 81.434658][ T29] audit: type=1326 audit(1764578168.792:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcca92ff749 code=0x7ffc0000 [ 81.457940][ T29] audit: type=1326 audit(1764578168.792:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca92ff749 code=0x7ffc0000 [ 81.481390][ T29] audit: type=1326 audit(1764578168.792:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca92ff749 code=0x7ffc0000 [ 81.504733][ T29] audit: type=1326 audit(1764578168.792:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcca92ff749 code=0x7ffc0000 [ 81.528163][ T29] audit: type=1326 audit(1764578168.792:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5000 comm="syz.0.466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcca92ff749 code=0x7ffc0000 [ 81.687302][ T5009] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.769485][ T5009] : renamed from vlan1 (while UP) [ 82.003190][ T5021] netlink: 19 bytes leftover after parsing attributes in process `syz.2.472'. [ 82.149594][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.158765][ T5005] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #12: comm syz.3.467: mark_inode_dirty error [ 82.170314][ T5005] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.467: corrupted inode contents [ 82.182602][ T5005] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.467: mark_inode_dirty error [ 82.193961][ T5005] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.467: corrupted inode contents [ 82.207065][ T5005] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 82.215853][ T5005] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #12: comm syz.3.467: corrupted inode contents [ 82.227994][ T5005] EXT4-fs error (device loop3): ext4_truncate:4637: inode #12: comm syz.3.467: mark_inode_dirty error [ 82.239228][ T5005] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 82.255002][ T5005] EXT4-fs (loop3): 1 truncate cleaned up [ 82.261161][ T5005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.335017][ T5027] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8) [ 82.341599][ T5027] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 82.349384][ T5027] vhci_hcd vhci_hcd.0: Device attached [ 82.454239][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.598543][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 82.710279][ T5037] netlink: 'syz.1.476': attribute type 1 has an invalid length. [ 82.718140][ T5037] netlink: 224 bytes leftover after parsing attributes in process `syz.1.476'. [ 82.862535][ T5028] vhci_hcd: connection closed [ 82.862770][ T31] vhci_hcd: stop threads [ 82.871844][ T31] vhci_hcd: release socket [ 82.876329][ T31] vhci_hcd: disconnect device [ 83.069359][ T5047] loop5: detected capacity change from 0 to 1024 [ 83.105238][ T5047] EXT4-fs: Ignoring removed orlov option [ 83.166887][ T5047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.874084][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.0.487'. [ 84.247676][ T3640] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.339973][ T5091] tipc: Enabled bearer , priority 0 [ 84.350473][ T5091] syzkaller0: entered promiscuous mode [ 84.356126][ T5091] syzkaller0: entered allmulticast mode [ 84.370516][ T5091] tipc: Resetting bearer [ 84.395288][ T5090] tipc: Resetting bearer [ 84.406118][ T5090] tipc: Disabling bearer [ 84.655519][ T3497] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 84.662011][ T3657] Bluetooth: hci0: command 0x1003 tx timeout [ 85.374422][ T1760] Bluetooth: hci0: Frame reassembly failed (-84) [ 85.409237][ T5126] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 85.417507][ T5126] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 85.595502][ T5137] syzkaller0: entered promiscuous mode [ 85.601053][ T5137] syzkaller0: entered allmulticast mode [ 85.691102][ T44] Bluetooth: hci1: sending frame failed (-49) [ 85.697368][ T3497] Bluetooth: hci1: Opcode 0x1003 failed: -49 [ 86.071626][ T5143] netlink: 14 bytes leftover after parsing attributes in process `syz.0.513'. [ 86.081114][ T5143] hsr_slave_0: left promiscuous mode [ 86.087218][ T5143] hsr_slave_1: left promiscuous mode [ 86.248896][ T29] kauditd_printk_skb: 501 callbacks suppressed [ 86.248910][ T29] audit: type=1400 audit(1764578173.872:2376): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 86.283731][ T29] audit: type=1400 audit(1764578173.902:2377): avc: denied { map_create } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.303215][ T29] audit: type=1400 audit(1764578173.922:2378): avc: denied { prog_load } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.322361][ T29] audit: type=1400 audit(1764578173.922:2379): avc: denied { prog_load } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.341973][ T29] audit: type=1400 audit(1764578173.962:2380): avc: denied { create } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 86.362513][ T29] audit: type=1400 audit(1764578173.962:2381): avc: denied { map_create } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.362556][ T29] audit: type=1400 audit(1764578173.962:2382): avc: denied { prog_load } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.394846][ T29] audit: type=1400 audit(1764578174.012:2383): avc: denied { prog_load } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 86.422399][ T29] audit: type=1400 audit(1764578174.012:2384): avc: denied { create } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 86.442841][ T29] audit: type=1400 audit(1764578174.012:2385): avc: denied { create } for pid=5144 comm="syz.3.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 86.552085][ T5149] lo speed is unknown, defaulting to 1000 [ 86.890594][ T5163] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5163 comm=syz.0.521 [ 86.931478][ T5165] lo speed is unknown, defaulting to 1000 [ 86.969158][ T5167] netlink: 20 bytes leftover after parsing attributes in process `syz.0.523'. [ 87.202244][ T5174] netlink: 16 bytes leftover after parsing attributes in process `syz.2.526'. [ 87.445576][ T3497] Bluetooth: hci0: command 0x1003 tx timeout [ 87.451681][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 87.531027][ T5179] lo speed is unknown, defaulting to 1000 [ 89.243605][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 90.323028][ T5206] lo speed is unknown, defaulting to 1000 [ 90.492666][ T5216] lo speed is unknown, defaulting to 1000 [ 91.258626][ T29] kauditd_printk_skb: 503 callbacks suppressed [ 91.258642][ T29] audit: type=1326 audit(1764578178.882:2889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d140d65e7 code=0x7ffc0000 [ 91.314933][ T29] audit: type=1326 audit(1764578178.892:2890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d1407b829 code=0x7ffc0000 [ 91.338228][ T29] audit: type=1326 audit(1764578178.892:2891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 91.361681][ T29] audit: type=1326 audit(1764578178.912:2892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d140d65e7 code=0x7ffc0000 [ 91.384989][ T29] audit: type=1326 audit(1764578178.912:2893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d1407b829 code=0x7ffc0000 [ 91.408411][ T29] audit: type=1326 audit(1764578178.912:2894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 91.431750][ T29] audit: type=1326 audit(1764578178.912:2895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d140d65e7 code=0x7ffc0000 [ 91.455066][ T29] audit: type=1326 audit(1764578178.912:2896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6d1407b829 code=0x7ffc0000 [ 91.478357][ T29] audit: type=1326 audit(1764578178.912:2897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f6d140df749 code=0x7ffc0000 [ 91.501780][ T29] audit: type=1326 audit(1764578178.922:2898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5233 comm="syz.3.548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6d140d65e7 code=0x7ffc0000 [ 92.064633][ T5258] lo speed is unknown, defaulting to 1000 [ 92.165398][ T5271] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 92.218113][ T5276] syzkaller0: entered promiscuous mode [ 92.223646][ T5276] syzkaller0: entered allmulticast mode [ 93.004203][ T5307] syzkaller0: entered promiscuous mode [ 93.009774][ T5307] syzkaller0: entered allmulticast mode [ 93.025408][ T5308] netlink: 'syz.2.579': attribute type 13 has an invalid length. [ 93.069435][ T5308] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.076760][ T5308] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.190708][ T5308] bond1: left promiscuous mode [ 93.195622][ T5308] ip6gretap0: left promiscuous mode [ 93.231891][ T1089] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.253786][ T1089] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.263097][ T1089] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.282032][ T1089] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.610003][ T5339] netlink: 'syz.1.591': attribute type 12 has an invalid length. [ 95.519479][ T5348] syzkaller0: entered promiscuous mode [ 95.525075][ T5348] syzkaller0: entered allmulticast mode [ 95.577367][ T5357] netlink: 44 bytes leftover after parsing attributes in process `syz.0.602'. [ 95.593957][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 95.606813][ T37] Bluetooth: hci1: Frame reassembly failed (-84) [ 96.743093][ T29] kauditd_printk_skb: 604 callbacks suppressed [ 96.743108][ T29] audit: type=1400 audit(1764578184.362:3503): avc: denied { read write } for pid=3322 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 96.755610][ T5372] netlink: 'syz.3.608': attribute type 13 has an invalid length. [ 96.806618][ T29] audit: type=1400 audit(1764578184.382:3504): avc: denied { create } for pid=5371 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 96.826166][ T29] audit: type=1400 audit(1764578184.382:3505): avc: denied { map_create } for pid=5371 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.845246][ T29] audit: type=1400 audit(1764578184.382:3506): avc: denied { prog_load } for pid=5371 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.864228][ T29] audit: type=1400 audit(1764578184.382:3507): avc: denied { create } for pid=5371 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 96.884801][ T29] audit: type=1400 audit(1764578184.382:3508): avc: denied { create } for pid=5371 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 96.904214][ T29] audit: type=1400 audit(1764578184.382:3509): avc: denied { prog_load } for pid=5371 comm="syz.3.608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.923396][ T29] audit: type=1400 audit(1764578184.452:3510): avc: denied { map_create } for pid=5373 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.942522][ T29] audit: type=1400 audit(1764578184.452:3511): avc: denied { prog_load } for pid=5373 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 96.961671][ T29] audit: type=1400 audit(1764578184.552:3512): avc: denied { create } for pid=5373 comm="syz.1.609" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 96.989205][ T5372] bridge0: port 3(team0) entered disabled state [ 96.995598][ T5372] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.002897][ T5372] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.050479][ T5372] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.061264][ T5372] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.123878][ T1089] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.142007][ T1089] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.161188][ T1089] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.178917][ T1089] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.238743][ T5384] netlink: 'syz.3.613': attribute type 10 has an invalid length. [ 97.246615][ T5384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.613'. [ 97.255943][ T5384] veth1_vlan: left promiscuous mode [ 97.261966][ T5384] batman_adv: batadv0: Adding interface: veth1_vlan [ 97.268644][ T5384] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.294425][ T5384] batman_adv: batadv0: Interface activated: veth1_vlan [ 97.604765][ T3657] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.611078][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 97.685096][ T3497] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 98.004423][ T5402] netlink: 'syz.1.624': attribute type 13 has an invalid length. [ 98.054109][ T5402] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.061334][ T5402] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.102794][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.113022][ T5402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.145721][ T5406] bridge0: entered promiscuous mode [ 98.161173][ T5406] macsec1: entered promiscuous mode [ 98.172286][ T1089] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.185249][ T1089] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.206564][ T1089] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.220310][ T1089] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.467336][ T36] lo speed is unknown, defaulting to 1000 [ 98.473171][ T36] syz0: Port: 1 Link DOWN [ 98.543845][ T5415] lo speed is unknown, defaulting to 1000 [ 98.651793][ T5432] lo speed is unknown, defaulting to 1000 [ 99.109213][ T5440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.636'. [ 100.617149][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.627102][ T12] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.685972][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.695925][ T12] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.746084][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.756055][ T12] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.806026][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.815955][ T12] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 100.878743][ T12] bridge_slave_1: left allmulticast mode [ 100.884426][ T12] bridge_slave_1: left promiscuous mode [ 100.890215][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.904569][ T12] bridge_slave_0: left allmulticast mode [ 100.910372][ T12] bridge_slave_0: left promiscuous mode [ 100.916225][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.979328][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.989209][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.999121][ T12] bond0 (unregistering): (slave bond1): Releasing backup interface [ 101.007513][ T12] bond0 (unregistering): Released all slaves [ 101.015892][ T12] bond1 (unregistering): Released all slaves [ 101.067666][ T12] tipc: Disabling bearer [ 101.072737][ T12] tipc: Left network mode [ 101.080468][ T12] hsr_slave_0: left promiscuous mode [ 101.086160][ T12] hsr_slave_1: left promiscuous mode [ 101.091816][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.099230][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.106953][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.114419][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.124958][ T12] veth1_macvtap: left promiscuous mode [ 101.130442][ T12] veth0_macvtap: left promiscuous mode [ 101.136108][ T12] veth1_vlan: left promiscuous mode [ 101.141316][ T12] veth0_vlan: left promiscuous mode [ 101.205794][ T12] team0 (unregistering): Port device team_slave_1 removed [ 101.215584][ T12] team0 (unregistering): Port device team_slave_0 removed [ 101.487482][ T12] IPVS: stop unused estimator thread 0... [ 102.035889][ T29] kauditd_printk_skb: 854 callbacks suppressed [ 102.035906][ T29] audit: type=1400 audit(1764578189.652:4367): avc: denied { execmem } for pid=5484 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 102.064007][ T29] audit: type=1400 audit(1764578189.692:4368): avc: denied { create } for pid=5485 comm="syz.0.651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 102.096707][ T29] audit: type=1400 audit(1764578189.692:4369): avc: denied { execmem } for pid=5488 comm="syz.3.654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 102.115916][ T29] audit: type=1400 audit(1764578189.712:4370): avc: denied { allowed } for pid=5487 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 102.135194][ T29] audit: type=1400 audit(1764578189.712:4371): avc: denied { map_create } for pid=5486 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.154263][ T29] audit: type=1400 audit(1764578189.712:4372): avc: denied { create } for pid=5487 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 102.157092][ T5493] lo speed is unknown, defaulting to 1000 [ 102.173700][ T29] audit: type=1400 audit(1764578189.712:4373): avc: denied { prog_load } for pid=5486 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.173727][ T29] audit: type=1400 audit(1764578189.712:4374): avc: denied { prog_load } for pid=5486 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.217460][ T29] audit: type=1400 audit(1764578189.712:4376): avc: denied { create } for pid=5487 comm="syz.1.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 102.236873][ T29] audit: type=1400 audit(1764578189.712:4375): avc: denied { prog_load } for pid=5486 comm="syz.2.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 102.333291][ T5491] lo speed is unknown, defaulting to 1000 [ 105.546865][ T5517] bridge1: entered promiscuous mode [ 105.552137][ T5517] bridge1: entered allmulticast mode [ 105.558588][ T5517] team0: Port device bridge1 added [ 107.849546][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 107.849565][ T29] audit: type=1400 audit(1764578195.472:4495): avc: denied { execmem } for pid=5533 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 107.875284][ T29] audit: type=1400 audit(1764578195.472:4496): avc: denied { open } for pid=5536 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 107.895317][ T29] audit: type=1400 audit(1764578195.472:4497): avc: denied { map_create } for pid=5536 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.914422][ T29] audit: type=1400 audit(1764578195.472:4498): avc: denied { create } for pid=5536 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 107.934013][ T29] audit: type=1400 audit(1764578195.472:4499): avc: denied { prog_load } for pid=5536 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.953009][ T29] audit: type=1400 audit(1764578195.482:4500): avc: denied { prog_load } for pid=5536 comm="syz.3.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 107.962633][ T5542] lo speed is unknown, defaulting to 1000 [ 107.971991][ T29] audit: type=1400 audit(1764578195.502:4501): avc: denied { create } for pid=5535 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 107.972022][ T29] audit: type=1400 audit(1764578195.502:4502): avc: denied { execmem } for pid=5535 comm="syz.1.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 108.017232][ T29] audit: type=1400 audit(1764578195.522:4503): avc: denied { create } for pid=5539 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 108.037908][ T29] audit: type=1400 audit(1764578195.522:4504): avc: denied { prog_load } for pid=5539 comm="syz.0.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 109.924739][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 109.925174][ T3497] Bluetooth: hci0: command 0x1003 tx timeout [ 112.234965][ T5569] lo speed is unknown, defaulting to 1000 [ 113.760701][ T29] kauditd_printk_skb: 595 callbacks suppressed [ 113.760721][ T29] audit: type=1400 audit(1764578201.382:5100): avc: denied { execmem } for pid=5573 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 113.835541][ T29] audit: type=1400 audit(1764578201.382:5101): avc: denied { create } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 113.855305][ T29] audit: type=1400 audit(1764578201.382:5102): avc: denied { create } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 113.874974][ T29] audit: type=1400 audit(1764578201.382:5103): avc: denied { create } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=0 [ 113.894523][ T29] audit: type=1400 audit(1764578201.382:5104): avc: denied { prog_load } for pid=5579 comm="syz.2.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.913746][ T29] audit: type=1400 audit(1764578201.392:5105): avc: denied { create } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 113.933257][ T29] audit: type=1400 audit(1764578201.392:5106): avc: denied { create } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 113.941037][ T5582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 113.952947][ T29] audit: type=1400 audit(1764578201.392:5107): avc: denied { map_create } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.980782][ T29] audit: type=1400 audit(1764578201.392:5108): avc: denied { prog_load } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 113.999796][ T29] audit: type=1400 audit(1764578201.392:5109): avc: denied { create } for pid=5576 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 115.557549][ T5589] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 115.564634][ T5589] batman_adv: batadv0: Removing interface: veth1_vlan [ 117.974775][ T5598] ================================================================== [ 117.982924][ T5598] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 117.991305][ T5598] [ 117.993648][ T5598] write to 0xffff88811a2d9834 of 4 bytes by task 5603 on cpu 0: [ 118.001293][ T5598] inode_update_timestamps+0x147/0x270 [ 118.006780][ T5598] file_update_time+0x20e/0x2b0 [ 118.011659][ T5598] shmem_file_write_iter+0x9c/0xf0 [ 118.016805][ T5598] iter_file_splice_write+0x666/0xa60 [ 118.022192][ T5598] direct_splice_actor+0x156/0x2a0 [ 118.027324][ T5598] splice_direct_to_actor+0x312/0x680 [ 118.032722][ T5598] do_splice_direct+0xda/0x150 [ 118.037505][ T5598] do_sendfile+0x380/0x650 [ 118.041942][ T5598] __x64_sys_sendfile64+0x105/0x150 [ 118.047165][ T5598] x64_sys_call+0x2bb4/0x3000 [ 118.051856][ T5598] do_syscall_64+0xd2/0x200 [ 118.056378][ T5598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.062294][ T5598] [ 118.064638][ T5598] read to 0xffff88811a2d9834 of 4 bytes by task 5598 on cpu 1: [ 118.072199][ T5598] atime_needs_update+0x2a8/0x3e0 [ 118.077263][ T5598] touch_atime+0x4a/0x340 [ 118.081630][ T5598] shmem_file_splice_read+0x5b1/0x600 [ 118.087018][ T5598] splice_direct_to_actor+0x26f/0x680 [ 118.092414][ T5598] do_splice_direct+0xda/0x150 [ 118.097200][ T5598] do_sendfile+0x380/0x650 [ 118.101648][ T5598] __x64_sys_sendfile64+0x105/0x150 [ 118.106875][ T5598] x64_sys_call+0x2bb4/0x3000 [ 118.111564][ T5598] do_syscall_64+0xd2/0x200 [ 118.116092][ T5598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.122007][ T5598] [ 118.124343][ T5598] value changed: 0x235785ef -> 0x23f01c6f [ 118.130071][ T5598] [ 118.132410][ T5598] Reported by Kernel Concurrency Sanitizer on: [ 118.138586][ T5598] CPU: 1 UID: 0 PID: 5598 Comm: syz.2.693 Not tainted syzkaller #0 PREEMPT(voluntary) [ 118.148251][ T5598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 118.158325][ T5598] ================================================================== [ 119.221351][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 119.221367][ T29] audit: type=1400 audit(1764578206.842:5202): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[830]" dev="pipefs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 119.288377][ T29] audit: type=1400 audit(1764578206.842:5203): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[830]" dev="pipefs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 119.311534][ T29] audit: type=1400 audit(1764578206.842:5204): avc: denied { write } for pid=3306 comm="syz-executor" path="pipe:[830]" dev="pipefs" ino=830 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=0 [ 119.334647][ T29] audit: type=1400 audit(1764578206.862:5205): avc: denied { map_create } for pid=5606 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.353810][ T29] audit: type=1400 audit(1764578206.862:5206): avc: denied { read write } for pid=5606 comm="syz.3.696" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 119.377367][ T29] audit: type=1400 audit(1764578206.862:5207): avc: denied { read } for pid=5606 comm="syz.3.696" dev="nsfs" ino=4026532865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 119.398555][ T29] audit: type=1400 audit(1764578206.862:5208): avc: denied { create } for pid=5606 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 119.419009][ T29] audit: type=1400 audit(1764578206.862:5209): avc: denied { prog_load } for pid=5606 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.437995][ T29] audit: type=1400 audit(1764578206.862:5210): avc: denied { allowed } for pid=5606 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 119.457278][ T29] audit: type=1400 audit(1764578206.862:5211): avc: denied { map_create } for pid=5606 comm="syz.3.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.677603][ T12] bridge_slave_1: left allmulticast mode [ 119.683290][ T12] bridge_slave_1: left promiscuous mode [ 119.689038][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.696772][ T12] bridge_slave_0: left allmulticast mode [ 119.702490][ T12] bridge_slave_0: left promiscuous mode [ 119.708146][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.776977][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.787225][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.796347][ T12] bond0 (unregistering): Released all slaves [ 119.826273][ T12] tipc: Left network mode [ 119.831640][ T12] hsr_slave_0: left promiscuous mode [ 119.837385][ T12] hsr_slave_1: left promiscuous mode [ 119.843083][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.850579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.869816][ T12] team0 (unregistering): Port device team_slave_1 removed [ 119.879010][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.368703][ T12] team0: left allmulticast mode [ 120.373665][ T12] team_slave_0: left allmulticast mode [ 120.379306][ T12] team_slave_1: left allmulticast mode [ 120.384997][ T12] dummy0: left allmulticast mode [ 120.389950][ T12] team0: left promiscuous mode [ 120.394840][ T12] team_slave_0: left promiscuous mode [ 120.400336][ T12] team_slave_1: left promiscuous mode [ 120.405795][ T12] dummy0: left promiscuous mode [ 120.411022][ T12] bridge0: port 3(team0) entered disabled state [ 120.417994][ T12] bridge_slave_1: left allmulticast mode [ 120.423677][ T12] bridge_slave_1: left promiscuous mode [ 120.429448][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.437216][ T12] bridge_slave_0: left allmulticast mode [ 120.442927][ T12] bridge_slave_0: left promiscuous mode [ 120.448642][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.516327][ T12] team0: Port device bridge1 removed [ 120.586497][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.595899][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.604918][ T12] bond0 (unregistering): Released all slaves [ 120.655927][ T12] tipc: Left network mode [ 120.662784][ T12] hsr_slave_0: left promiscuous mode [ 120.668383][ T12] hsr_slave_1: left promiscuous mode [ 120.673897][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.681468][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.688942][ T12] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 120.696089][ T12] batman_adv: batadv0: Removing interface: veth1_vlan [ 120.727474][ T12] team0 (unregistering): Port device team_slave_1 removed [ 120.736946][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.762675][ T12] team0 (unregistering): Port device dummy0 removed