last executing test programs: 2.181842587s ago: executing program 4 (id=274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r1, 0xffffffffffffffff, 0x0) 2.177325707s ago: executing program 2 (id=275): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r1, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 1.247821307s ago: executing program 4 (id=297): r0 = memfd_create(&(0x7f00000005c0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x3) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) open(0x0, 0x200, 0x81) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) fcntl$addseals(r0, 0x409, 0xb) 1.025789377s ago: executing program 4 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r3}, &(0x7f0000000a00), &(0x7f0000000a40)=r2}, 0x20) 975.592439ms ago: executing program 4 (id=305): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) 718.0888ms ago: executing program 1 (id=312): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) sendto$inet6(r2, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 663.449712ms ago: executing program 1 (id=315): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000500)='neigh_update\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 613.019065ms ago: executing program 1 (id=316): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x1, 0x3, 0x3}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r3, 0xffffffffffffffff, 0x0) 566.990776ms ago: executing program 1 (id=318): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 542.663327ms ago: executing program 0 (id=320): mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@bh}, {@acl}, {@noblock_validity}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x66}}, {@acl}, {@resgid}, {@debug}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x3}}], [], 0x3d}, 0x1, 0x536, &(0x7f0000000740)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 491.02563ms ago: executing program 1 (id=321): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x3f) 392.772804ms ago: executing program 0 (id=322): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000500)="ab", 0x1, 0x11, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) readv(r2, &(0x7f0000000b40)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 283.257609ms ago: executing program 3 (id=324): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000001c0)='skb_copy_datagram_iovec\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdc8}, 0x0) 263.711329ms ago: executing program 3 (id=325): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x1c, r2, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) 262.936579ms ago: executing program 0 (id=335): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2, 0x0, 0x8000000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@'], 0x48) 239.25775ms ago: executing program 0 (id=326): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2b"], 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a310000000009000200", @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) 192.440893ms ago: executing program 3 (id=327): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) 183.706913ms ago: executing program 0 (id=328): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r1 = gettid() r2 = gettid() tkill(r1, 0x12) tkill(r1, 0x1) tkill(r2, 0x14) 150.920114ms ago: executing program 3 (id=329): bpf$MAP_CREATE(0x0, 0x0, 0x50) syslog(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 102.868396ms ago: executing program 0 (id=330): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) 102.690496ms ago: executing program 3 (id=331): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000002000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 82.525167ms ago: executing program 3 (id=332): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) listen(r0, 0x1) readv(r0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/24, 0x18}], 0x1) 0s ago: executing program 1 (id=333): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r0, 0x0, 0x578410e9) sendfile(r2, r0, 0x0, 0x100000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 27.974309][ T29] audit: type=1400 audit(1764526507.562:62): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.997371][ T29] audit: type=1400 audit(1764526507.582:63): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.998342][ T3302] cgroup: Unknown subsys name 'net' [ 28.025244][ T29] audit: type=1400 audit(1764526507.612:64): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.123882][ T3302] cgroup: Unknown subsys name 'cpuset' [ 28.130219][ T3302] cgroup: Unknown subsys name 'rlimit' [ 28.260841][ T29] audit: type=1400 audit(1764526507.842:65): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.284261][ T29] audit: type=1400 audit(1764526507.842:66): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.304816][ T29] audit: type=1400 audit(1764526507.842:67): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.325188][ T29] audit: type=1400 audit(1764526507.842:68): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.345541][ T29] audit: type=1400 audit(1764526507.872:69): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.354724][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.370349][ T29] audit: type=1400 audit(1764526507.872:70): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.402336][ T29] audit: type=1400 audit(1764526507.972:71): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.435584][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.620995][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.711532][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.718670][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.725913][ T3314] bridge_slave_0: entered allmulticast mode [ 29.732333][ T3314] bridge_slave_0: entered promiscuous mode [ 29.754792][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.761868][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.769257][ T3314] bridge_slave_1: entered allmulticast mode [ 29.775925][ T3314] bridge_slave_1: entered promiscuous mode [ 29.786486][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.810136][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.827513][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.840757][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.890804][ T3314] team0: Port device team_slave_0 added [ 29.910921][ T3314] team0: Port device team_slave_1 added [ 29.971657][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 29.980756][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.987763][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.013675][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.024928][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.031912][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.057896][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.068696][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.075825][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.083046][ T3313] bridge_slave_0: entered allmulticast mode [ 30.089587][ T3313] bridge_slave_0: entered promiscuous mode [ 30.101041][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.108161][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.115388][ T3319] bridge_slave_0: entered allmulticast mode [ 30.121787][ T3319] bridge_slave_0: entered promiscuous mode [ 30.130819][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.138019][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.145219][ T3319] bridge_slave_1: entered allmulticast mode [ 30.151828][ T3319] bridge_slave_1: entered promiscuous mode [ 30.163435][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.170524][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.177732][ T3313] bridge_slave_1: entered allmulticast mode [ 30.184319][ T3313] bridge_slave_1: entered promiscuous mode [ 30.190639][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 30.235756][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.265215][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.280438][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.301273][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.308486][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.315673][ T3323] bridge_slave_0: entered allmulticast mode [ 30.322026][ T3323] bridge_slave_0: entered promiscuous mode [ 30.329557][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.340873][ T3314] hsr_slave_0: entered promiscuous mode [ 30.347002][ T3314] hsr_slave_1: entered promiscuous mode [ 30.370902][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.378224][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.385420][ T3323] bridge_slave_1: entered allmulticast mode [ 30.391873][ T3323] bridge_slave_1: entered promiscuous mode [ 30.406209][ T3319] team0: Port device team_slave_0 added [ 30.418245][ T3313] team0: Port device team_slave_0 added [ 30.435572][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.445378][ T3319] team0: Port device team_slave_1 added [ 30.452161][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.466917][ T3313] team0: Port device team_slave_1 added [ 30.472750][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.479939][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.487115][ T3320] bridge_slave_0: entered allmulticast mode [ 30.493516][ T3320] bridge_slave_0: entered promiscuous mode [ 30.520115][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.527226][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.534434][ T3320] bridge_slave_1: entered allmulticast mode [ 30.541090][ T3320] bridge_slave_1: entered promiscuous mode [ 30.577318][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.584356][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.610284][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.621736][ T3323] team0: Port device team_slave_0 added [ 30.627914][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.634914][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.660850][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.674112][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.681250][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.707353][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.719445][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.728907][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.735888][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.761872][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.773465][ T3323] team0: Port device team_slave_1 added [ 30.795646][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.821015][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.828015][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.854012][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.865262][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.872243][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.898266][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.924105][ T3320] team0: Port device team_slave_0 added [ 30.952558][ T3313] hsr_slave_0: entered promiscuous mode [ 30.958686][ T3313] hsr_slave_1: entered promiscuous mode [ 30.964558][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 30.970286][ T3313] Cannot create hsr debugfs directory [ 30.976591][ T3320] team0: Port device team_slave_1 added [ 30.992390][ T3319] hsr_slave_0: entered promiscuous mode [ 30.998632][ T3319] hsr_slave_1: entered promiscuous mode [ 31.004526][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 31.010282][ T3319] Cannot create hsr debugfs directory [ 31.036087][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.043112][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.069270][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.105170][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.112185][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.138167][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.154315][ T3323] hsr_slave_0: entered promiscuous mode [ 31.160252][ T3323] hsr_slave_1: entered promiscuous mode [ 31.166131][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 31.171854][ T3323] Cannot create hsr debugfs directory [ 31.226896][ T3320] hsr_slave_0: entered promiscuous mode [ 31.233112][ T3320] hsr_slave_1: entered promiscuous mode [ 31.239067][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 31.244823][ T3320] Cannot create hsr debugfs directory [ 31.322870][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.346724][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.364655][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.378050][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.413383][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.423316][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.436007][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.453237][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.475841][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.493219][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.508652][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.517703][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.540267][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.553220][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.562204][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.571266][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.604432][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.611488][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.620760][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.638905][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.652293][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.677003][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.692582][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.701108][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.723042][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.730125][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.740264][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.749934][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.757029][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.767624][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.781463][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.788652][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.797458][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.804589][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.823449][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.830565][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.845298][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.852418][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.902199][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.954255][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.982039][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.995622][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.008676][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.025076][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.039225][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.046389][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.057523][ T575] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.064694][ T575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.074046][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.087846][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.094968][ T575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.103735][ T575] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.110886][ T575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.124718][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.146532][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.157076][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.199937][ T3313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.210404][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.285851][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.354836][ T3314] veth0_vlan: entered promiscuous mode [ 32.377809][ T3314] veth1_vlan: entered promiscuous mode [ 32.391290][ T3319] veth0_vlan: entered promiscuous mode [ 32.408312][ T3319] veth1_vlan: entered promiscuous mode [ 32.415290][ T3323] veth0_vlan: entered promiscuous mode [ 32.434356][ T3314] veth0_macvtap: entered promiscuous mode [ 32.443585][ T3323] veth1_vlan: entered promiscuous mode [ 32.454533][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.462227][ T3314] veth1_macvtap: entered promiscuous mode [ 32.478656][ T3319] veth0_macvtap: entered promiscuous mode [ 32.493777][ T3319] veth1_macvtap: entered promiscuous mode [ 32.500038][ T3320] veth0_vlan: entered promiscuous mode [ 32.513785][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.527497][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.539652][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.549197][ T3323] veth0_macvtap: entered promiscuous mode [ 32.556162][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.565428][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.578106][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.587486][ T3320] veth1_vlan: entered promiscuous mode [ 32.597261][ T3323] veth1_macvtap: entered promiscuous mode [ 32.605314][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.614806][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.633589][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.649256][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.660041][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.670044][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.678966][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.688107][ T3320] veth0_macvtap: entered promiscuous mode [ 32.695836][ T3320] veth1_macvtap: entered promiscuous mode [ 32.709733][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.719725][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.741822][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.750070][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.764481][ T295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.781193][ T295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.815748][ T295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.829842][ T295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.846909][ T295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.883430][ T295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.902226][ T3313] veth0_vlan: entered promiscuous mode [ 32.924208][ T3489] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 32.930146][ T3313] veth1_vlan: entered promiscuous mode [ 32.954747][ T295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.972923][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.996825][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 32.996842][ T29] audit: type=1400 audit(1764526512.582:106): avc: denied { create } for pid=3493 comm="syz.4.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.005940][ T3313] veth0_macvtap: entered promiscuous mode [ 33.042249][ T3313] veth1_macvtap: entered promiscuous mode [ 33.063296][ C1] hrtimer: interrupt took 32462 ns [ 33.075648][ T29] audit: type=1400 audit(1764526512.622:107): avc: denied { tracepoint } for pid=3496 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.095107][ T29] audit: type=1400 audit(1764526512.622:108): avc: denied { write } for pid=3496 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.096324][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.132869][ T29] audit: type=1400 audit(1764526512.712:109): avc: denied { create } for pid=3502 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.145723][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.171069][ T29] audit: type=1400 audit(1764526512.742:110): avc: denied { write } for pid=3502 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.187115][ T295] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.191212][ T29] audit: type=1400 audit(1764526512.742:111): avc: denied { read } for pid=3502 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.224902][ T3504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3504 comm=syz.4.10 [ 33.249522][ T3506] loop3: detected capacity change from 0 to 1024 [ 33.250830][ T295] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.266132][ T3506] ======================================================= [ 33.266132][ T3506] WARNING: The mand mount option has been deprecated and [ 33.266132][ T3506] and is ignored by this kernel. Remove the mand [ 33.266132][ T3506] option from the mount to silence this warning. [ 33.266132][ T3506] ======================================================= [ 33.308513][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.317599][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.326815][ T3506] EXT4-fs: Ignoring removed oldalloc option [ 33.327196][ T3499] loop1: detected capacity change from 0 to 512 [ 33.332948][ T3506] EXT4-fs: Ignoring removed bh option [ 33.338014][ T29] audit: type=1400 audit(1764526512.922:112): avc: denied { create } for pid=3508 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 33.377878][ T29] audit: type=1400 audit(1764526512.962:113): avc: denied { sys_admin } for pid=3508 comm="syz.2.12" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 33.417837][ T3499] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.428793][ T29] audit: type=1400 audit(1764526512.992:114): avc: denied { unmount } for pid=3508 comm="syz.2.12" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 33.440789][ T3506] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.466934][ T29] audit: type=1400 audit(1764526513.052:115): avc: denied { allowed } for pid=3511 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 33.526436][ T3499] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 33.527646][ T3506] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 33.562768][ T3499] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2: bg 0: block 248: padding at end of block bitmap is not set [ 33.622093][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.650307][ T3499] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2: Failed to acquire dquot type 1 [ 33.741102][ T3499] EXT4-fs (loop1): 1 truncate cleaned up [ 33.821831][ T3537] geneve2: entered promiscuous mode [ 33.826106][ T3499] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 33.827217][ T3537] geneve2: entered allmulticast mode [ 33.857893][ T3499] syz.1.2 (3499) used greatest stack depth: 8904 bytes left [ 33.879680][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 33.953425][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 33.962465][ T3548] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 34.019137][ T3554] Illegal XDP return value 4294967294 on prog (id 26) dev syz_tun, expect packet loss! [ 34.083458][ T3558] bridge0: port 3(team0) entered blocking state [ 34.089781][ T3558] bridge0: port 3(team0) entered disabled state [ 34.097331][ T3558] team0: entered allmulticast mode [ 34.102589][ T3558] team_slave_0: entered allmulticast mode [ 34.108531][ T3558] team_slave_1: entered allmulticast mode [ 34.116237][ T3558] team0: entered promiscuous mode [ 34.121342][ T3558] team_slave_0: entered promiscuous mode [ 34.127138][ T3558] team_slave_1: entered promiscuous mode [ 34.133276][ T3558] bridge0: port 3(team0) entered blocking state [ 34.139580][ T3558] bridge0: port 3(team0) entered forwarding state [ 34.322930][ T3578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.345304][ T3581] process 'syz.2.39' launched '/dev/fd/6' with NULL argv: empty string added [ 34.817430][ T3606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3606 comm=syz.0.45 [ 34.941867][ T3615] infiniband syz!: set active [ 34.946778][ T3615] infiniband syz!: added team_slave_0 [ 34.996321][ T3615] RDS/IB: syz!: added [ 35.006212][ T3615] smc: adding ib device syz! with port count 1 [ 35.015262][ T3615] smc: ib device syz! port 1 has no pnetid [ 35.023253][ T3617] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.030515][ T3617] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.076640][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.090276][ T3617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.139218][ T3578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.174799][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.186294][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.215634][ T3578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.230964][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.242774][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.276434][ T3578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.350951][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.377184][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.477947][ T36] kernel write not supported for file bpf-prog (pid: 36 comm: kworker/1:1) [ 35.478627][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.502979][ T37] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.552436][ T3645] loop4: detected capacity change from 0 to 512 [ 35.595729][ T3645] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.617066][ T3645] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.966172][ T3670] netlink: 76 bytes leftover after parsing attributes in process `syz.0.70'. [ 36.186910][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.244300][ T3675] capability: warning: `syz.4.73' uses deprecated v2 capabilities in a way that may be insecure [ 36.373124][ T3682] syz.0.76 uses obsolete (PF_INET,SOCK_PACKET) [ 36.573734][ T3691] netlink: 'syz.4.80': attribute type 1 has an invalid length. [ 37.304835][ T3747] loop0: detected capacity change from 0 to 512 [ 37.370932][ T3747] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.393943][ T3756] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 37.427717][ T3747] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.496859][ T3758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 37.512239][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.546467][ T3758] team0 (unregistering): Port device team_slave_0 removed [ 37.581599][ T3758] team0 (unregistering): Port device team_slave_1 removed [ 38.189458][ T29] kauditd_printk_skb: 920 callbacks suppressed [ 38.189476][ T29] audit: type=1400 audit(1764526517.772:1034): avc: denied { lock } for pid=3792 comm="syz.4.121" path="socket:[6187]" dev="sockfs" ino=6187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 38.244245][ T29] audit: type=1400 audit(1764526517.832:1035): avc: denied { write } for pid=3795 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.269251][ T3787] mmap: syz.2.117 (3787) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 38.299778][ T3798] netlink: 60 bytes leftover after parsing attributes in process `syz.1.122'. [ 38.309133][ T3798] unsupported nlmsg_type 40 [ 38.337170][ T29] audit: type=1400 audit(1764526517.922:1036): avc: denied { mount } for pid=3797 comm="syz.0.123" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 38.381996][ T29] audit: type=1400 audit(1764526517.952:1037): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 38.406327][ T3802] loop0: detected capacity change from 0 to 1024 [ 38.444531][ T3802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 38.465231][ T3802] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.515739][ T29] audit: type=1400 audit(1764526518.102:1038): avc: denied { read append } for pid=3801 comm="syz.0.125" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.538511][ T29] audit: type=1400 audit(1764526518.102:1039): avc: denied { open } for pid=3801 comm="syz.0.125" path="/26/file1/file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 38.587661][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 38.673692][ T29] audit: type=1400 audit(1764526518.262:1040): avc: denied { mount } for pid=3815 comm="+}[@" name="/" dev="ramfs" ino=6208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 38.703700][ T29] audit: type=1400 audit(1764526518.282:1041): avc: denied { create } for pid=3817 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.723164][ T29] audit: type=1400 audit(1764526518.282:1042): avc: denied { bind } for pid=3817 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.742481][ T29] audit: type=1400 audit(1764526518.282:1043): avc: denied { write } for pid=3817 comm="syz.3.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.781578][ T3823] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 38.795602][ T3823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.132'. [ 39.076979][ T3843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 39.212546][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.144'. [ 39.248071][ T3907] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.369270][ T3907] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.442533][ T3909] netlink: 96 bytes leftover after parsing attributes in process `syz.1.145'. [ 39.475432][ T3907] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.635888][ T3907] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.778756][ T3901] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.812351][ T3901] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.843146][ T3866] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.885236][ T3866] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.890796][ T3922] loop1: detected capacity change from 0 to 8192 [ 40.006696][ T3927] loop0: detected capacity change from 0 to 512 [ 40.015815][ T3927] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.153: inode has both inline data and extents flags [ 40.033734][ T3927] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.153: couldn't read orphan inode 15 (err -117) [ 40.178111][ T3938] syz.4.157 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.186488][ T3927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.277813][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.300763][ T3947] loop4: detected capacity change from 0 to 1024 [ 40.313108][ T3949] netlink: 'syz.1.163': attribute type 3 has an invalid length. [ 40.338935][ T3954] loop0: detected capacity change from 0 to 1024 [ 40.346405][ T3947] EXT4-fs: inline encryption not supported [ 40.352371][ T3947] EXT4-fs: Ignoring removed i_version option [ 40.382393][ T3954] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 40.394683][ T3954] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 40.405661][ T3954] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #32: comm syz.0.162: iget: special inode unallocated [ 40.413534][ T3947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.418475][ T3954] EXT4-fs (loop0): Remounting filesystem read-only [ 40.437918][ T3954] EXT4-fs (loop0): no journal found [ 40.443267][ T3954] EXT4-fs (loop0): can't get journal size [ 40.452650][ T3954] EXT4-fs (loop0): filesystem is read-only [ 40.459219][ T3954] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 40.534864][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.663498][ T3983] netlink: 'syz.2.174': attribute type 22 has an invalid length. [ 40.671285][ T3983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.174'. [ 40.685145][ T3989] netlink: 'syz.4.176': attribute type 13 has an invalid length. [ 40.734026][ T3989] bridge0: port 3(team0) entered disabled state [ 40.740450][ T3989] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.747631][ T3989] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.765842][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.781383][ T3991] loop1: detected capacity change from 0 to 1024 [ 40.807665][ T3991] EXT4-fs: Ignoring removed bh option [ 40.813971][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.824751][ T3989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.835009][ T3991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.869540][ T3991] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.177: Allocating blocks 385-513 which overlap fs metadata [ 40.896374][ T3991] EXT4-fs (loop1): pa ffff8881072ee0e0: logic 16, phys. 129, len 24 [ 40.904587][ T3991] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 40.928697][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.949982][ T3883] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.971607][ T3883] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.987866][ T3883] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.006425][ T4006] loop1: detected capacity change from 0 to 1024 [ 41.013527][ T3883] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.022254][ T4006] EXT4-fs: inline encryption not supported [ 41.028757][ T4006] EXT4-fs: Ignoring removed i_version option [ 41.066054][ T4006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.104814][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.136369][ T4023] netlink: 20 bytes leftover after parsing attributes in process `syz.0.188'. [ 41.252177][ T4037] $Hÿ: renamed from bond0 (while UP) [ 41.261698][ T4037] $Hÿ: entered promiscuous mode [ 41.266893][ T4037] bond_slave_0: entered promiscuous mode [ 41.272831][ T4037] bond_slave_1: entered promiscuous mode [ 41.560111][ T4068] netlink: 'syz.1.209': attribute type 1 has an invalid length. [ 41.601514][ T4068] bond0: entered promiscuous mode [ 41.619386][ T4068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.686633][ T4068] bond0: (slave bridge1): making interface the new active one [ 41.694314][ T4068] bridge1: entered promiscuous mode [ 41.743441][ T4068] bridge1: left promiscuous mode [ 43.015535][ T4135] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.074993][ T4135] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.145311][ T4135] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.195905][ T4143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 43.219377][ T4135] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.329657][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 43.329673][ T29] audit: type=1326 audit(1764526522.912:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4141 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fd313a7f749 code=0x7ffc0000 [ 43.426348][ T29] audit: type=1326 audit(1764526522.952:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd313a1b829 code=0x7ffc0000 [ 43.449715][ T29] audit: type=1326 audit(1764526522.952:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313a7f749 code=0x7ffc0000 [ 43.473266][ T29] audit: type=1326 audit(1764526522.952:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4137 comm="syz.1.236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd313a7f749 code=0x7ffc0000 [ 43.508632][ T3855] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.520276][ T3855] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.532262][ T4150] netlink: 28 bytes leftover after parsing attributes in process `syz.1.242'. [ 43.553745][ T4150] netem: change failed [ 43.557946][ T3855] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.669413][ T3855] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.702856][ T29] audit: type=1400 audit(1764526523.282:1210): avc: denied { read } for pid=4155 comm="syz.4.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 43.758635][ T29] audit: type=1400 audit(1764526523.342:1211): avc: denied { watch watch_reads } for pid=4157 comm="syz.1.247" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 43.854779][ T29] audit: type=1326 audit(1764526523.432:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fe2f749 code=0x7ffc0000 [ 43.878185][ T29] audit: type=1326 audit(1764526523.432:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fe2f749 code=0x7ffc0000 [ 43.901554][ T29] audit: type=1326 audit(1764526523.442:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f915fe2f749 code=0x7ffc0000 [ 43.925081][ T29] audit: type=1326 audit(1764526523.442:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4165 comm="syz.0.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f915fe2f749 code=0x7ffc0000 [ 44.469188][ T4210] netlink: 'syz.0.267': attribute type 1 has an invalid length. [ 44.483649][ T4210] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.567642][ T4221] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.591339][ T4220] netlink: 'syz.0.271': attribute type 3 has an invalid length. [ 44.601933][ T4220] netlink: 'syz.0.271': attribute type 3 has an invalid length. [ 44.807418][ T4240] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.856665][ T4240] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.917574][ T4240] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.929433][ T4246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.284'. [ 44.942640][ T4246] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 44.970179][ T4240] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.018388][ T4254] Cannot find add_set index 0 as target [ 45.027962][ T3846] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.073002][ T3846] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.081347][ T3846] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.129268][ T3846] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.363748][ T4274] veth0: entered promiscuous mode [ 45.369292][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 45.389170][ T4274] veth0 (unregistering): left promiscuous mode [ 46.118742][ T4318] netlink: 132 bytes leftover after parsing attributes in process `syz.1.315'. [ 46.124296][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 46.174273][ T4324] sch_fq: defrate 4294967295 ignored. [ 46.187178][ T4320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.314'. [ 46.237083][ T4330] loop0: detected capacity change from 0 to 512 [ 46.252881][ T4330] EXT4-fs: Ignoring removed bh option [ 46.264730][ T4330] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 46.275730][ T4330] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 46.283832][ T4330] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 46.293452][ T4330] EXT4-fs (loop0): orphan cleanup on readonly fs [ 46.299830][ T4330] EXT4-fs error (device loop0): ext4_quota_enable:7132: comm syz.0.320: Bad quota inum: 4294967291, type: 0 [ 46.313204][ T4330] EXT4-fs (loop0): Remounting filesystem read-only [ 46.319788][ T4330] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 46.335244][ T4330] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 46.343178][ T4330] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 46.376319][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.541190][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.326'. [ 46.656264][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 46.666026][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.331'. [ 46.923612][ T4364] ================================================================== [ 46.931751][ T4364] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 46.940401][ T4364] [ 46.942752][ T4364] write to 0xffff888116369468 of 8 bytes by task 4363 on cpu 0: [ 46.950420][ T4364] shmem_file_splice_read+0x470/0x600 [ 46.955837][ T4364] splice_direct_to_actor+0x26f/0x680 [ 46.961238][ T4364] do_splice_direct+0xda/0x150 [ 46.966024][ T4364] do_sendfile+0x380/0x650 [ 46.970475][ T4364] __x64_sys_sendfile64+0x105/0x150 [ 46.975716][ T4364] x64_sys_call+0x2bb4/0x3000 [ 46.980451][ T4364] do_syscall_64+0xd2/0x200 [ 46.985086][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.991107][ T4364] [ 46.993463][ T4364] write to 0xffff888116369468 of 8 bytes by task 4364 on cpu 1: [ 47.001200][ T4364] shmem_file_splice_read+0x470/0x600 [ 47.006612][ T4364] splice_direct_to_actor+0x26f/0x680 [ 47.012017][ T4364] do_splice_direct+0xda/0x150 [ 47.016809][ T4364] do_sendfile+0x380/0x650 [ 47.021266][ T4364] __x64_sys_sendfile64+0x105/0x150 [ 47.026523][ T4364] x64_sys_call+0x2bb4/0x3000 [ 47.031236][ T4364] do_syscall_64+0xd2/0x200 [ 47.035767][ T4364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.041689][ T4364] [ 47.044028][ T4364] value changed: 0x0000000000b62000 -> 0x0000000000b70000 [ 47.051154][ T4364] [ 47.053499][ T4364] Reported by Kernel Concurrency Sanitizer on: [ 47.059683][ T4364] CPU: 1 UID: 0 PID: 4364 Comm: syz.1.333 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.069386][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.079479][ T4364] ================================================================== [ 47.832848][ T3533] Bluetooth: hci0: Opcode 0x1003 failed: -110