last executing test programs: 4.228856322s ago: executing program 3 (id=316): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r0, 0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, &(0x7f00000003c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0x1, r2, 0x0, 0x0, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) 3.149421262s ago: executing program 3 (id=319): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf251b8000000600210062ff"], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x20048040) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.posix_acl_default\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r2, r4, 0x25, 0x0, @void}, 0x10) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x1000}) 2.867827688s ago: executing program 3 (id=323): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000340)=ANY=[@ANYBLOB="330000000000980b537b8c00003e418fd58cc222f1bc8240579e68534b104f6f7d22f7d067bb42bf48baf6cb3aca06000000000000"], 0x8) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40004}, [@IFLA_MTU={0x8, 0x4, 0x3f9}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="b8", 0x1}], 0x1}}], 0x2, 0x20040017) close(r4) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000003f00070dfeffffff00000000017c0000040077000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f0000000680)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd28, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x4000) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0x1, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x5000) 2.510389405s ago: executing program 4 (id=328): bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000500), 0x1, 0x523, &(0x7f0000000c00)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) write$binfmt_elf32(r0, &(0x7f0000000900)=ANY=[], 0x58) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000380)={[{@errors_remount}, {@discard}, {@noload}, {@noauto_da_alloc}, {@bsdgroups}, {@jqfmt_vfsv1}, {@abort}, {@data_err_ignore}]}, 0x1, 0x480, &(0x7f0000000bc0)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="28000000130a810100000000000000000200000008000340000000010900010073797a3000000000a936fd1531"], 0x28}}, 0x20004000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 2.398736069s ago: executing program 4 (id=330): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@nogrpid}, {@delalloc}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000c40)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000006, 0x12, r4, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2.117414356s ago: executing program 4 (id=335): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x400) r1 = open$dir(&(0x7f0000000100)='./file1\x00', 0x40000400000002c2, 0x180) lseek(r1, 0xffffffffffffffff, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"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", 0x1000}}, 0x1006) write(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x7d, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x5}, 0x400, 0x10000, 0x9, 0x3, 0xa, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0xfd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000280)={0x1d, r4}, 0x10) close(r3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000084, 0x0, 0x0, 0x0, &(0x7f0000000040)) fremovexattr(0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") 2.095475849s ago: executing program 1 (id=337): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0xe, 0x6, 0x80000000, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x4, 0x9}}) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000380)={0x0, 0x79b1, 0x80, 0x3, 0x20026c}, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(r2, &(0x7f0000000240)=""/123, 0x7b) capset(&(0x7f0000000040)={0x19980330, r1}, &(0x7f0000000080)={0x6, 0xffffffff, 0x2, 0x83, 0x8, 0x4000002}) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x1d, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x100, 0x3, 0x0, 0x3}) 2.08073609s ago: executing program 0 (id=338): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 2.033938617s ago: executing program 4 (id=339): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f0000000240)='asymmetric\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='logon\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x5422) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0x1, 0x0, 0x0, 0x1}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x1004, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a60274fcffffffffffffff14e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028643b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ede1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e008104df635e731a5bfcd942f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd4f6cfdfe756bc00d08e36655c00"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0xff81, 0x3f00, 0x5, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) 2.00947661s ago: executing program 0 (id=340): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.990562972s ago: executing program 1 (id=341): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x200) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000580)=ANY=[], 0x0) 1.945151238s ago: executing program 0 (id=343): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x20080058) setreuid(0x0, 0xee00) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x8002) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r7) 1.944398209s ago: executing program 1 (id=344): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x10, 0x1, 0x400, 0x6, {{0x6, 0x4, 0x0, 0x5, 0x18, 0x66, 0x0, 0x55, 0x4, 0x0, @remote, @remote, {[@generic={0x7, 0x2}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b33, &(0x7f0000000180)={'wlan0\x00'}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r5 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = timerfd_create(0x0, 0x0) readv(r6, &(0x7f00000009c0)=[{&(0x7f0000000200)=""/33, 0x21}], 0x1) 1.912871322s ago: executing program 4 (id=345): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000086bb752d00000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x48) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0x2000000000000016, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x1, 0x106) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[], 0x0) 1.824574784s ago: executing program 2 (id=346): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000001880)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x20040600) quotactl_fd$Q_SYNC(r1, 0xffffffff80000100, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/../file0\x00', 0x2) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300)) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x9) ptrace$cont(0x1f, r0, 0xfcf, 0x9) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, &(0x7f0000000100)={0x8, 0x120, 0xfa00, {0x2, {0x5, 0x0, "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", 0x7, 0x7, 0x4, 0xff, 0x6, 0x47, 0xd}}}, 0x128) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$tmpfs(0x0, 0x0, 0x0, 0x1ac4a4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000280), 0x40, r2}, 0x38) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.823429364s ago: executing program 3 (id=347): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x0, 0x3, 0x3, 0x5, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x10, 0x40, 0xe18}}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x5, &(0x7f0000000740)=@framed={{}, [@map_val={0x18, 0x6, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x80}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', r2, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x41341) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) close_range(r8, 0xffffffffffffffff, 0x0) 1.760077292s ago: executing program 2 (id=348): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x209, 0x640b9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffe}, 0x100010, 0x32, 0x7fff, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_RATE={0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x48, '\x00', r1, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0) 1.755762123s ago: executing program 3 (id=349): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x42718, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x6, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lsm_get_self_attr(0x65, &(0x7f0000000100)={0x0, 0x0, 0xd5, 0xb5, ""/181}, &(0x7f0000000200)=0xd5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180), r2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000d80)={0x20, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r5, &(0x7f00000000c0)={0x2a, 0x1, 0x4000}, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000004220000000000000010fc71696bde0d9bac35f149aa78321838a14b88e180696c29b00b461ef66282ab743be49d8964933133146c7030146d91727e08ba2eeb6eb6c0ece8bea00bb821f36af93c9fb97a0fe199515ee7b0bcc68ad1b3a33dcaa06d30af0a5d9a6f5eae340477e6a30f12", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r6, &(0x7f0000000240), &(0x7f0000000080)=@tcp=r7}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000500)={0x2, 0x3ff, 0x3, 0x772d}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) syz_io_uring_setup(0x3346, &(0x7f0000000180)={0x0, 0x71d9, 0x8, 0x0, 0x330}, &(0x7f0000000100), &(0x7f0000000200)) 1.723800477s ago: executing program 2 (id=350): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) r0 = syz_io_uring_setup(0x5ef9, &(0x7f0000000280)={0x0, 0x3b4f, 0x1, 0x3, 0x14}, &(0x7f0000000240)=0x0, &(0x7f0000000600)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x7dd6, 0x1eab, 0x8, 0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x48) io_uring_enter(r0, 0x0, 0xe876, 0x3, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x8, 0x700, 0x7fff, 0x8, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x7, 0x2f, 0x0, @empty, @empty}}}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r6, 0xc0305302, &(0x7f0000000300)={0x8, 0xd7, 0x1ff, 0x0, 0x5, 0x15d}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.676532603s ago: executing program 0 (id=351): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) 1.675806983s ago: executing program 0 (id=352): r0 = open(&(0x7f0000000280)='./file0\x00', 0x64842, 0x22) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f00000030c0)={0x12, {"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", 0x1000}}, 0x1006) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat2(r0, 0x0, &(0x7f0000000240)={0x200, 0x142, 0x3}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r2, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.063146172s ago: executing program 1 (id=353): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0) ioctl$EVIOCSREP(0xffffffffffffffff, 0x40084503, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000000, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x53, 0x4f3, &(0x7f00000012c0)="$eJzs3F1oXFUeAPD/nXz2a5vd7Xa33e5uut1lwxaTNq02D4JUFHxQECuojyFJS23aSJOCLVWmIPVRCr6Lj7764Kv6UsQnwdf6KEihSF/aCuLInbl3vjKTNJNkxpjfD27mnHtn7jnnnnvunHtO5gawbY2mf5JK+E5E7I2IQvMbRisvD+9fn3l0//pMFEulMz8m5Y89SOOZbDexK4uMFSIK7yW1DXUWr167MD0/P3c5i08sXXxrYvHqtSfOD2drpqaS/g4L1SK9tFwPDr67cOjAC2/cemmmuuc8tfpybJTRGG2VlbL/bnRiPbanLtxxvdF16fmfVtdAuf3vjb5YqfKKXcwZsNlKpVJpqP3mYqnZjWVrgC0rhnudA6A38i/69P43X1p1BAY3p/vRc/dOV26A0nI/zJaIf5VX5uMgA033txtpNCJeL/70UbrEJo1DAADU++J03hNs6v+NVGZGfr5y+5n09Q/ZHMpIRPwxIv4UEX+OiH0R8ZeI2B8Rf42IvzXtvy8iSiukP9oUr6ZfnYQq3N2goraU9v+ezua20qU291UNjfRlsT0ReYd57lh2TMZiYOjs+fm54yuk8eVz337Qblt9/y9d0jzkfcEsH3f7mwboZqeXpjsr7XL3bkQc7K+Vv9L/TfojkupMQBIRByLi4Br2O1IXPv//Tw5VIwON71u9/GWllvNoGzDPVPo44n+V+i9GtfzRMImYNMxPXpw+N3du7tLk1NTJE8dPPTX55MRwzM8dm0jPgmMt0/j6m5svt0t/1fJ/9n3zR54/9fmZrGWtX1r/O+vO/8jnb2vlH0kikup87eLa07j53ftt72k6Pf8Hk1fL4fy+9O3ppaXLxyMGkxeXr5+sfTaPp69RrJR/7Ejz+V9Ot3yNy4/E3yMiPYn/ERH/jModYpr3wxHx74g4skL5v3r2P292Xv7NlZZ/NhrLX6n5hvqvzde3CyTZ3GDDpsFIA30XDt951Obi8Xj1f7IcGsvWtL7+JQ2XiHY5zb/t0jW/rPvoAQAAwNZQiIjddWNJu6NQGB+vjAHti52F+YXFpaNnF65cmk23RYzEQCEf6aqMBw8k+fjnSF18sil+Ihs3/rBvRzk+PrMwP9vTkgO7ym0+KYxHvNZX1/5TP2zMEDPwW+b3WrB9rdT+0078/ltdzAzQVY///X/7nU3NCNB1de2/3S/8ix383xewBbj/B2pWf9CPawZsfSVtGba1NbX/ox4CCL8n/fFKNVzoaU6AbtP/h21p1d/1rytQGmq9aTiWvzmGV95hX3SWjR0t0upJIO1Z9ST1HZ18Kn+aQtv3RGFtOxyKxjWDHdbp2XUejeLlxXP7ayd//myRdR7nUva/8htdg592pZ22CnT9UgQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALApfg0AAP//XhrXwA==") connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000080), &(0x7f00000002c0)=@udp6=r3}, 0x20) recvmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) accept4$inet6(r3, 0x0, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 1.058640743s ago: executing program 3 (id=354): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r0, 0x0, 0x0) io_uring_setup(0x21dd, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) writev(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioprio_set$pid(0x2, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000280)={[{@overriderock}, {@mode={'mode', 0x3d, 0xfa}}, {@gid}, {@map_acorn}, {@uid}, {@nocompress}, {@map_off}, {@mode={'mode', 0x3d, 0x20401}}]}, 0xff, 0x544, &(0x7f00000008c0)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") mknod$loop(&(0x7f0000001040)='./file0/file1\x00', 0x400, 0x1) sendmsg$NFC_CMD_FW_DOWNLOAD(r2, 0x0, 0x20004010) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 1.048650154s ago: executing program 2 (id=355): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x284182, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00'}) open_tree(r2, &(0x7f0000000380)='./file0\x00', 0x9000) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100001000000ddffffff00000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000d50900010073797a30000000000800034000000001140000001100"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a3b830000000000000000050000020900010073797a3048a3763414000000110001"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) close_range(r0, 0xffffffffffffffff, 0x0) 963.477405ms ago: executing program 2 (id=356): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x48040) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5, 0x2, {0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@getchain={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x8}, {0x7, 0xf}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x44060}, 0x98) 770.9527ms ago: executing program 0 (id=357): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 661.540545ms ago: executing program 2 (id=358): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x5, 0x6902b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x35, 0x43a1bd76, 0x4, 0x40, 0x6, 0x3, 0x0, 0xfffffffd, 0x0, 0x8}, 0xffffffffffffffff, 0x10, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r0, 0x40046721, &(0x7f0000000680)={r0}) fchdir(r2) r3 = open(0x0, 0x68800, 0x101) rename(&(0x7f0000000000)='./file1\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x44, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4050, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x528, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x40000004, 0xd2, 0x9, 0xc, 0x202, 0x1ff, 0x0, 0x0, 0x0, 0x400000000100007}, 0x0, 0x1, r0, 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 500.923805ms ago: executing program 1 (id=359): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000040) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @remote}}}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, 0x0, &(0x7f0000001740)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x4, 0xa3, 0xa, 0xaef, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x1, 0x7800, 0x4, 0x7}}) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x14, 0x30, 0x12f}, 0x14}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xd7b27) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="141300001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="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"], 0x1314}}, 0x0) 27.156027ms ago: executing program 1 (id=360): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x18050, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x1216, 0x10000, 0x5, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x8c840, 0x1a0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001600)={r1, 0x800, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20, 0x17, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x1]}}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000020}, 0x800) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0x31, 0x0, @val=@tracing={0xffffffffffffffff}}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0xfeffff, 0xf1, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) 0s ago: executing program 4 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x7}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x8000000000000000, 0x7fffffffffffffff, 0x9, 0x5, 0x4, 0xad}}]}}}]}, 0x78}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x6, 0xb}, {0x6, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2001c061}, 0x4008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. [ 34.401504][ T29] audit: type=1400 audit(1768801428.159:62): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.424605][ T29] audit: type=1400 audit(1768801428.179:63): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.427159][ T3306] cgroup: Unknown subsys name 'net' [ 34.452505][ T29] audit: type=1400 audit(1768801428.209:64): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.565405][ T3306] cgroup: Unknown subsys name 'cpuset' [ 34.571774][ T3306] cgroup: Unknown subsys name 'rlimit' [ 34.763294][ T29] audit: type=1400 audit(1768801428.519:65): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.800383][ T29] audit: type=1400 audit(1768801428.529:66): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.820990][ T29] audit: type=1400 audit(1768801428.529:67): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.831892][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 34.841473][ T29] audit: type=1400 audit(1768801428.529:68): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.870311][ T29] audit: type=1400 audit(1768801428.539:69): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.895146][ T29] audit: type=1400 audit(1768801428.539:70): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.916829][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.918933][ T29] audit: type=1400 audit(1768801428.559:71): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 36.755135][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.806032][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 36.866500][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.889291][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.896511][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.903777][ T3318] bridge_slave_0: entered allmulticast mode [ 36.910441][ T3318] bridge_slave_0: entered promiscuous mode [ 36.927708][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 36.936783][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.943926][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.951301][ T3318] bridge_slave_1: entered allmulticast mode [ 36.957953][ T3318] bridge_slave_1: entered promiscuous mode [ 36.972175][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 37.001244][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.008443][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.015608][ T3324] bridge_slave_0: entered allmulticast mode [ 37.022061][ T3324] bridge_slave_0: entered promiscuous mode [ 37.033298][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.040451][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.047686][ T3324] bridge_slave_1: entered allmulticast mode [ 37.054100][ T3324] bridge_slave_1: entered promiscuous mode [ 37.085782][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.109945][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.130415][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.155328][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.171931][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.179083][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.186370][ T3319] bridge_slave_0: entered allmulticast mode [ 37.192834][ T3319] bridge_slave_0: entered promiscuous mode [ 37.209129][ T3318] team0: Port device team_slave_0 added [ 37.219190][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.226359][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.233692][ T3319] bridge_slave_1: entered allmulticast mode [ 37.240122][ T3319] bridge_slave_1: entered promiscuous mode [ 37.256890][ T3318] team0: Port device team_slave_1 added [ 37.271389][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.278542][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.285844][ T3329] bridge_slave_0: entered allmulticast mode [ 37.292316][ T3329] bridge_slave_0: entered promiscuous mode [ 37.299606][ T3324] team0: Port device team_slave_0 added [ 37.310236][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.317521][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.324809][ T3323] bridge_slave_0: entered allmulticast mode [ 37.331160][ T3323] bridge_slave_0: entered promiscuous mode [ 37.342438][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.349585][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.356943][ T3329] bridge_slave_1: entered allmulticast mode [ 37.363513][ T3329] bridge_slave_1: entered promiscuous mode [ 37.370816][ T3324] team0: Port device team_slave_1 added [ 37.380433][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.387567][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.394982][ T3323] bridge_slave_1: entered allmulticast mode [ 37.401419][ T3323] bridge_slave_1: entered promiscuous mode [ 37.409195][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.424655][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.438529][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.445515][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.471498][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.501395][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.508431][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.534434][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.556481][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.566048][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.573017][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.598976][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.614002][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.624213][ T3319] team0: Port device team_slave_0 added [ 37.631166][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.640671][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.647680][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.673613][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.689853][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.700041][ T3319] team0: Port device team_slave_1 added [ 37.716279][ T3329] team0: Port device team_slave_0 added [ 37.723312][ T3329] team0: Port device team_slave_1 added [ 37.775856][ T3323] team0: Port device team_slave_0 added [ 37.781976][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.789030][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.815062][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.826149][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.833122][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.859070][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.875026][ T3318] hsr_slave_0: entered promiscuous mode [ 37.881109][ T3318] hsr_slave_1: entered promiscuous mode [ 37.889461][ T3324] hsr_slave_0: entered promiscuous mode [ 37.895543][ T3324] hsr_slave_1: entered promiscuous mode [ 37.901425][ T3324] debugfs: 'hsr0' already exists in 'hsr' [ 37.907216][ T3324] Cannot create hsr debugfs directory [ 37.913609][ T3323] team0: Port device team_slave_1 added [ 37.926764][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.933818][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.959902][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.971048][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.978146][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.004134][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.045481][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.052533][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.078582][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.094141][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.101218][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.127271][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.170308][ T3319] hsr_slave_0: entered promiscuous mode [ 38.176423][ T3319] hsr_slave_1: entered promiscuous mode [ 38.182258][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.188083][ T3319] Cannot create hsr debugfs directory [ 38.199069][ T3329] hsr_slave_0: entered promiscuous mode [ 38.205404][ T3329] hsr_slave_1: entered promiscuous mode [ 38.211418][ T3329] debugfs: 'hsr0' already exists in 'hsr' [ 38.217250][ T3329] Cannot create hsr debugfs directory [ 38.272009][ T3323] hsr_slave_0: entered promiscuous mode [ 38.278461][ T3323] hsr_slave_1: entered promiscuous mode [ 38.284340][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 38.290197][ T3323] Cannot create hsr debugfs directory [ 38.441732][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.456206][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.468032][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.481499][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.506487][ T3324] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.517435][ T3324] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.527559][ T3324] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.541565][ T3324] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.574263][ T3329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.583325][ T3329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.595235][ T3329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.608801][ T3329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.649408][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.670125][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.679255][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.688962][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.717937][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.726079][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.735662][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.747571][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.758695][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.779233][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.796002][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.814021][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.823755][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.830994][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.848009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.855127][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.863868][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.870985][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.880306][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.887411][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.937514][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.978086][ T3324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.992521][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.013577][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.039204][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.046429][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.059539][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.073135][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.080373][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.092721][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.104475][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.111600][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.130057][ T176] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.137246][ T176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.157813][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.171736][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.210370][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.223774][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.230918][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.298615][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.305752][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.355499][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.362947][ T3318] veth0_vlan: entered promiscuous mode [ 39.386035][ T3324] veth0_vlan: entered promiscuous mode [ 39.392099][ T3318] veth1_vlan: entered promiscuous mode [ 39.411345][ T3324] veth1_vlan: entered promiscuous mode [ 39.448885][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.463349][ T3318] veth0_macvtap: entered promiscuous mode [ 39.487392][ T3318] veth1_macvtap: entered promiscuous mode [ 39.509672][ T3324] veth0_macvtap: entered promiscuous mode [ 39.524372][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.541025][ T3324] veth1_macvtap: entered promiscuous mode [ 39.548927][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.571004][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.586048][ T1770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.604166][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.613802][ T1770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.636011][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.643686][ T1770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.671036][ T1770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.680378][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 39.680393][ T29] audit: type=1400 audit(1768801433.439:85): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.kXBR52/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.717178][ T1770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.726851][ T29] audit: type=1400 audit(1768801433.469:86): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.748912][ T29] audit: type=1400 audit(1768801433.469:87): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.kXBR52/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.769965][ T1770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.774408][ T29] audit: type=1400 audit(1768801433.469:88): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.804668][ T29] audit: type=1400 audit(1768801433.469:89): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.kXBR52/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.831384][ T29] audit: type=1400 audit(1768801433.469:90): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/root/syzkaller.kXBR52/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.858800][ T29] audit: type=1400 audit(1768801433.469:91): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.878388][ T29] audit: type=1400 audit(1768801433.489:92): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.901146][ T29] audit: type=1400 audit(1768801433.489:93): avc: denied { mount } for pid=3318 comm="syz-executor" name="/" dev="gadgetfs" ino=3869 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.924601][ T1770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.936642][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.955973][ T1770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.960477][ T29] audit: type=1400 audit(1768801433.719:94): avc: denied { read write } for pid=3318 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.002002][ T3319] veth0_vlan: entered promiscuous mode [ 40.027603][ T3319] veth1_vlan: entered promiscuous mode [ 40.062992][ T3329] veth0_vlan: entered promiscuous mode [ 40.074028][ T3323] veth0_vlan: entered promiscuous mode [ 40.084695][ T3494] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.099963][ T3329] veth1_vlan: entered promiscuous mode [ 40.113278][ T3319] veth0_macvtap: entered promiscuous mode [ 40.127859][ T3319] veth1_macvtap: entered promiscuous mode [ 40.138341][ T3323] veth1_vlan: entered promiscuous mode [ 40.170669][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.196776][ T3323] veth0_macvtap: entered promiscuous mode [ 40.205754][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.223541][ T3329] veth0_macvtap: entered promiscuous mode [ 40.227488][ T3498] loop2: detected capacity change from 0 to 512 [ 40.234105][ T3329] veth1_macvtap: entered promiscuous mode [ 40.249673][ T1770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.258902][ T3323] veth1_macvtap: entered promiscuous mode [ 40.268481][ T3498] EXT4-fs error (device loop2): ext4_iget_extra_inode:5073: inode #15: comm syz.2.7: corrupted in-inode xattr: invalid ea_ino [ 40.282056][ T3498] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.7: couldn't read orphan inode 15 (err -117) [ 40.294652][ T3498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.307556][ T1770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.317159][ T1770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.331979][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.353987][ T1770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.363799][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.383999][ T3502] tap0: tun_chr_ioctl cmd 2148553947 [ 40.390204][ T3502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'. [ 40.395136][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.409885][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.419755][ T3324] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.441544][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.464078][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.487463][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.501486][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.533202][ T53] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.566075][ T53] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.620207][ T53] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.670261][ T53] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.738392][ T3519] loop4: detected capacity change from 0 to 512 [ 40.957775][ T3519] loop4: detected capacity change from 0 to 256 [ 41.011203][ T3519] ======================================================= [ 41.011203][ T3519] WARNING: The mand mount option has been deprecated and [ 41.011203][ T3519] and is ignored by this kernel. Remove the mand [ 41.011203][ T3519] option from the mount to silence this warning. [ 41.011203][ T3519] ======================================================= [ 41.299091][ T3533] syz.0.13: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 41.313778][ T3533] CPU: 1 UID: 0 PID: 3533 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(voluntary) [ 41.313813][ T3533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 41.313829][ T3533] Call Trace: [ 41.313842][ T3533] [ 41.313854][ T3533] __dump_stack+0x1d/0x30 [ 41.313938][ T3533] dump_stack_lvl+0x95/0xd0 [ 41.314022][ T3533] dump_stack+0x15/0x1b [ 41.314048][ T3533] warn_alloc+0x145/0x1c0 [ 41.314145][ T3533] __vmalloc_node_range_noprof+0xa0/0x12b0 [ 41.314231][ T3533] ? __futex_wait+0x1fd/0x260 [ 41.314253][ T3533] ? __pfx_futex_wake_mark+0x10/0x10 [ 41.314292][ T3533] ? __rcu_read_unlock+0x4e/0x70 [ 41.314344][ T3533] ? avc_has_perm_noaudit+0xab/0x130 [ 41.314370][ T3533] ? should_fail_ex+0x30/0x280 [ 41.314400][ T3533] ? should_failslab+0x8c/0xb0 [ 41.314512][ T3533] vmalloc_user_noprof+0x7d/0xb0 [ 41.314603][ T3533] ? xskq_create+0x80/0xe0 [ 41.314628][ T3533] xskq_create+0x80/0xe0 [ 41.314685][ T3533] xsk_init_queue+0x91/0xe0 [ 41.314735][ T3533] xsk_setsockopt+0x3f5/0x640 [ 41.314774][ T3533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 41.314846][ T3533] __sys_setsockopt+0x184/0x200 [ 41.314894][ T3533] __x64_sys_setsockopt+0x64/0x80 [ 41.314922][ T3533] x64_sys_call+0x21d5/0x3000 [ 41.315006][ T3533] do_syscall_64+0xc0/0x2a0 [ 41.315048][ T3533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.315071][ T3533] RIP: 0033:0x7fd19839acb9 [ 41.315087][ T3533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 41.315138][ T3533] RSP: 002b:00007fd196df7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 41.315163][ T3533] RAX: ffffffffffffffda RBX: 00007fd198615fa0 RCX: 00007fd19839acb9 [ 41.315180][ T3533] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 41.315242][ T3533] RBP: 00007fd198408bf7 R08: 0000000000000004 R09: 0000000000000000 [ 41.315254][ T3533] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 41.315266][ T3533] R13: 00007fd198616038 R14: 00007fd198615fa0 R15: 00007ffd90cf9aa8 [ 41.315297][ T3533] [ 41.524255][ T3533] Mem-Info: [ 41.527554][ T3533] active_anon:18870 inactive_anon:0 isolated_anon:0 [ 41.527554][ T3533] active_file:17750 inactive_file:2276 isolated_file:0 [ 41.527554][ T3533] unevictable:0 dirty:1428 writeback:0 [ 41.527554][ T3533] slab_reclaimable:3091 slab_unreclaimable:14407 [ 41.527554][ T3533] mapped:39930 shmem:13108 pagetables:1088 [ 41.527554][ T3533] sec_pagetables:0 bounce:0 [ 41.527554][ T3533] kernel_misc_reclaimable:0 [ 41.527554][ T3533] free:1885208 free_pcp:2781 free_cma:0 [ 41.573604][ T3533] Node 0 active_anon:77336kB inactive_anon:0kB active_file:72856kB inactive_file:9104kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:161460kB dirty:5712kB writeback:0kB shmem:54172kB kernel_stack:3632kB pagetables:4352kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 41.601042][ T3533] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 41.631184][ T3533] lowmem_reserve[]: 0 2879 7858 7858 [ 41.636597][ T3533] Node 0 DMA32 free:2945460kB boost:0kB min:4128kB low:7056kB high:9984kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2948988kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 41.667781][ T3533] lowmem_reserve[]: 0 0 4978 4978 [ 41.672914][ T3533] Node 0 Normal free:4571428kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:82440kB inactive_anon:0kB active_file:73088kB inactive_file:9104kB unevictable:0kB writepending:5712kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:7076kB local_pcp:5920kB free_cma:0kB [ 41.705864][ T3533] lowmem_reserve[]: 0 0 0 0 [ 41.710444][ T3533] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 41.723270][ T3533] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 6*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 2*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945460kB [ 41.739668][ T3533] Node 0 Normal: 3*4kB (UME) 1*8kB (M) 1*16kB (U) 3*32kB (UME) 3*64kB (UME) 3*128kB (UME) 2*256kB (UE) 2*512kB (UE) 0*1024kB 2*2048kB (ME) 1114*4096kB (M) = 4569284kB [ 41.756700][ T3533] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 41.766062][ T3533] 35986 total pagecache pages [ 41.770775][ T3533] 0 pages in swap cache [ 41.774997][ T3533] Free swap = 124996kB [ 41.779186][ T3533] Total swap = 124996kB [ 41.783416][ T3533] 2097051 pages RAM [ 41.787510][ T3533] 0 pages HighMem/MovableOnly [ 41.792220][ T3533] 81404 pages reserved [ 41.885499][ T3519] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 41.893487][ T3519] FAT-fs (loop4): Filesystem has been set read-only [ 42.582596][ T3618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19'. [ 42.614786][ C0] vcan0: j1939_session_tx_dat: 0xffff88811b2e9a00: queue data error: -100 [ 42.623469][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 42.631100][ C0] vcan0 (unregistering): j1939_xtp_rx_dpo: no connection found [ 42.638750][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.646606][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.654485][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.662377][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.670291][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.678174][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.686048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.693894][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.701830][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.709703][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.717603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.725479][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.733351][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.741235][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.749126][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.757010][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.764898][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.772761][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.780668][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.788532][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.796472][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.804403][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.812308][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.820179][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.828064][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.835936][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.843815][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.851691][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.859583][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.862110][ T3622] loop3: detected capacity change from 0 to 512 [ 42.867447][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.867514][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.889434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.897316][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.905188][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.913045][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.920920][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.928807][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.936372][ T3622] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.936707][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.951082][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.958956][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.966839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.974722][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.982762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 42.990658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 42.998566][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.005044][ T3622] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 43.006463][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.016233][ T3622] EXT4-fs (loop3): group descriptors corrupted! [ 43.024145][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.038193][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.046071][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.053918][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.061794][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.069658][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.077594][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.087042][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.094996][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.102839][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.110765][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.118633][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.126503][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.134400][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.142299][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.150191][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.158140][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.166017][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.173893][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.181792][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.189656][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.197514][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.205381][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.213227][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.221233][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.229120][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.237010][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.244874][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.252741][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.260636][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.268958][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.276860][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.284739][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.292601][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.300487][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.308357][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.316242][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.324083][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.331966][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.339817][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.347712][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.355575][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.363440][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.371325][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.379206][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.387072][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.394951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.402805][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.410688][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.418561][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.426434][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.434274][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.442165][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.450040][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.457938][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.465796][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.473725][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.481608][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.489490][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.497362][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.505233][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.513087][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.520977][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.529313][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.537208][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.545069][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.552930][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.560796][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.568762][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.576641][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.584512][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.592391][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.600283][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.608177][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.616048][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.623886][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.631951][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.639852][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.647752][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 43.655603][ C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 43.701748][ T3622] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.519642][ T3635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.530955][ T3635] batadv_slave_0: entered promiscuous mode [ 44.651100][ T3639] loop3: detected capacity change from 0 to 8192 [ 44.685663][ T3619] loop4: detected capacity change from 0 to 533 [ 44.701333][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 44.701353][ T29] audit: type=1326 audit(1768801438.459:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.740061][ T3639] loop3: p1 < > p2 < > p3 p4 < > [ 44.745342][ T3639] loop3: partition table partially beyond EOD, truncated [ 44.760841][ T3639] loop3: p1 start 67108864 is beyond EOD, truncated [ 44.768173][ T29] audit: type=1326 audit(1768801438.459:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.791387][ T29] audit: type=1400 audit(1768801438.489:256): avc: denied { create } for pid=3640 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.811303][ T29] audit: type=1326 audit(1768801438.499:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.834666][ T29] audit: type=1326 audit(1768801438.499:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.869585][ T3639] loop3: p3 start 100859904 is beyond EOD, truncated [ 44.882059][ T29] audit: type=1326 audit(1768801438.529:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.905352][ T29] audit: type=1326 audit(1768801438.529:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.928716][ T29] audit: type=1326 audit(1768801438.529:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.952023][ T29] audit: type=1326 audit(1768801438.529:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 44.975223][ T29] audit: type=1326 audit(1768801438.529:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3642 comm="syz.0.27" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 45.209454][ T3657] tipc: Started in network mode [ 45.214464][ T3657] tipc: Node identity 2674ca979c1f, cluster identity 4711 [ 45.221969][ T3657] tipc: Enabled bearer , priority 0 [ 45.231690][ T3311] udevd[3311]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 45.242554][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 45.285770][ T3659] syzkaller0: entered promiscuous mode [ 45.291306][ T3659] syzkaller0: entered allmulticast mode [ 45.358424][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 45.390593][ T3657] tipc: Resetting bearer [ 45.408398][ T3656] tipc: Resetting bearer [ 45.434995][ T3656] tipc: Disabling bearer [ 45.542933][ T3668] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.550281][ T3668] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.636957][ T3668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.704694][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.713919][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.722975][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.731999][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.829781][ T3681] netlink: 'syz.4.39': attribute type 4 has an invalid length. [ 45.837460][ T3681] netlink: 17 bytes leftover after parsing attributes in process `syz.4.39'. [ 45.943398][ T3683] loop1: detected capacity change from 0 to 4096 [ 45.966166][ T3683] EXT4-fs: Ignoring removed mblk_io_submit option [ 45.972900][ T3683] EXT4-fs: test_dummy_encryption option not supported [ 46.124090][ T3693] loop3: detected capacity change from 0 to 2048 [ 46.230929][ T3693] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.254440][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'. [ 46.263361][ T3697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.47'. [ 46.317801][ T3702] loop4: detected capacity change from 0 to 128 [ 46.354192][ T3697] syzkaller0: entered promiscuous mode [ 46.359752][ T3697] syzkaller0: entered allmulticast mode [ 46.395573][ T3703] 0: reclassify loop, rule prio 0, protocol 800 [ 46.478603][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.550746][ T3711] netlink: 'syz.0.52': attribute type 1 has an invalid length. [ 46.564404][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.564404][ T2008] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 46.578432][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.578432][ T2008] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 46.592685][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.592685][ T2008] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 46.606452][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.606452][ T2008] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 46.624287][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.624287][ T2008] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 46.653239][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.653239][ T2008] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 46.667334][ T3711] veth3: entered promiscuous mode [ 46.676283][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.676283][ T2008] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 46.689832][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.689832][ T2008] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 46.703680][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.703680][ T2008] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 46.717212][ T2008] kworker/u8:11: attempt to access beyond end of device [ 46.717212][ T2008] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 46.761807][ T3717] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3717 comm=syz.4.53 [ 46.845179][ T3721] loop0: detected capacity change from 0 to 8192 [ 46.879163][ T3720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.55'. [ 46.892308][ C0] hrtimer: interrupt took 16877 ns [ 46.914344][ T3720] team0: Port device team_slave_1 removed [ 47.490601][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.498120][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.532688][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.540156][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.575745][ T3741] loop0: detected capacity change from 0 to 128 [ 47.595813][ T3741] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.620480][ T3741] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 48.169733][ T3749] netlink: 'syz.3.65': attribute type 15 has an invalid length. [ 48.177554][ T3749] netlink: 25 bytes leftover after parsing attributes in process `syz.3.65'. [ 48.695423][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 48.808606][ T3762] loop2: detected capacity change from 0 to 128 [ 48.843957][ T3762] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.930734][ T3762] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.181664][ T3324] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.317623][ T3785] netlink: 4 bytes leftover after parsing attributes in process `syz.2.76'. [ 49.326726][ T3784] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3784 comm=syz.1.77 [ 49.437073][ T3792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.456739][ T3792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.476406][ T3790] loop3: detected capacity change from 0 to 8192 [ 49.534390][ T3787] infiniband : set down [ 49.538772][ T3787] infiniband : added ipvlan0 [ 49.555762][ T3787] RDS/IB: : added [ 49.559555][ T3787] smc: adding ib device  with port count 1 [ 49.565609][ T3787] smc: ib device  port 1 has no pnetid [ 49.626676][ T3790] Set syz1 is full, maxelem 6117 reached [ 49.650351][ T3799] gretap1: entered promiscuous mode [ 49.706803][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 49.706822][ T29] audit: type=1400 audit(1768801443.469:404): avc: denied { bind } for pid=3800 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.752887][ T29] audit: type=1400 audit(1768801443.469:405): avc: denied { name_bind } for pid=3800 comm="syz.3.83" src=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 49.773363][ T29] audit: type=1400 audit(1768801443.469:406): avc: denied { node_bind } for pid=3800 comm="syz.3.83" src=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 49.793910][ T29] audit: type=1400 audit(1768801443.469:407): avc: denied { setopt } for pid=3800 comm="syz.3.83" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 49.813199][ T29] audit: type=1400 audit(1768801443.469:408): avc: denied { write } for pid=3800 comm="syz.3.83" name="icmp6" dev="proc" ino=4026532593 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 49.862598][ T3787] syz.4.78 (3787) used greatest stack depth: 10520 bytes left [ 49.997375][ T3810] loop4: detected capacity change from 0 to 512 [ 49.998289][ T3810] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.998304][ T3810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 49.999811][ T3810] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.87: corrupted xattr entries [ 49.999900][ T3810] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 50.000093][ T3810] EXT4-fs (loop4): 1 orphan inode deleted [ 50.007604][ T3810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.013174][ T3810] bridge0: port 3(bond0) entered blocking state [ 50.089667][ T3810] bridge0: port 3(bond0) entered disabled state [ 50.096269][ T3810] bond0: entered allmulticast mode [ 50.096311][ T3810] bond_slave_0: entered allmulticast mode [ 50.096324][ T3810] bond_slave_1: entered allmulticast mode [ 50.097662][ T3810] bond0: entered promiscuous mode [ 50.119154][ T3810] bond_slave_0: entered promiscuous mode [ 50.119343][ T3810] bond_slave_1: entered promiscuous mode [ 50.135252][ T3810] bridge0: port 3(bond0) entered blocking state [ 50.135295][ T3810] bridge0: port 3(bond0) entered forwarding state [ 50.147045][ T3813] loop1: detected capacity change from 0 to 2048 [ 50.162396][ T3329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.219603][ T3818] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3818 comm=syz.4.88 [ 50.232725][ T3820] loop0: detected capacity change from 0 to 2048 [ 50.243675][ T3813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.263488][ T3820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.303509][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 50.313806][ T3820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.89'. [ 50.327663][ T3820] hsr_slave_1 (unregistering): left promiscuous mode [ 50.336563][ T29] audit: type=1400 audit(1768801444.099:409): avc: denied { add_name } for pid=3806 comm="syz.1.86" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.357099][ T29] audit: type=1400 audit(1768801444.099:410): avc: denied { create } for pid=3806 comm="syz.1.86" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.377422][ T29] audit: type=1400 audit(1768801444.119:411): avc: denied { read write } for pid=3806 comm="syz.1.86" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.399876][ T29] audit: type=1400 audit(1768801444.119:412): avc: denied { open } for pid=3806 comm="syz.1.86" path="/15/file1/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.432920][ T29] audit: type=1326 audit(1768801444.189:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3823 comm="syz.4.90" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfd06eacb9 code=0x7ffc0000 [ 50.472132][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.560029][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.597540][ T3835] process 'syz.2.95' launched '/dev/fd/8' with NULL argv: empty string added [ 50.644921][ T3837] netlink: 'syz.1.96': attribute type 16 has an invalid length. [ 50.652780][ T3837] netlink: 'syz.1.96': attribute type 17 has an invalid length. [ 50.708582][ T3837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.719396][ T3837] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.736074][ T3839] netlink: 52 bytes leftover after parsing attributes in process `syz.0.94'. [ 50.747938][ T3837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.916645][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 50.957398][ T3848] netlink: 'syz.1.100': attribute type 1 has an invalid length. [ 50.971928][ T3846] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.989333][ T3848] erspan1: entered allmulticast mode [ 51.000863][ T3846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.99'. [ 51.009702][ T3846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.99'. [ 51.020570][ T3841] loop3: detected capacity change from 0 to 8192 [ 51.033429][ T3850] netlink: 4 bytes leftover after parsing attributes in process `syz.1.100'. [ 51.058062][ T3846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.065120][ T3851] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 51.069023][ T3846] bond1: (slave bond0): Enslaving as an active interface with an up link [ 51.087022][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.094318][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.139620][ T3851] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.146898][ T3851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.154269][ T3851] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.161418][ T3851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.202721][ T3851] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 51.220088][ T3846] syz.0.99 (3846) used greatest stack depth: 10456 bytes left [ 51.254673][ T3851] syz.0.99 (3851) used greatest stack depth: 10432 bytes left [ 51.294686][ T3853] loop3: detected capacity change from 0 to 512 [ 51.347283][ T3853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.498649][ T3866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.105'. [ 51.710801][ T3878] Zero length message leads to an empty skb [ 51.792123][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.300027][ T3892] loop1: detected capacity change from 0 to 512 [ 52.396421][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.409198][ T3892] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.615235][ T3872] syz.0.102 (3872) used greatest stack depth: 10040 bytes left [ 52.860511][ T3902] loop3: detected capacity change from 0 to 128 [ 52.869525][ T3855] syz.0.102 (3855) used greatest stack depth: 7296 bytes left [ 52.923977][ T3905] netlink: 'syz.2.118': attribute type 1 has an invalid length. [ 52.946016][ T3905] netlink: 28 bytes leftover after parsing attributes in process `syz.2.118'. [ 52.956483][ T3906] bio_check_eod: 102 callbacks suppressed [ 52.956513][ T3906] syz.3.116: attempt to access beyond end of device [ 52.956513][ T3906] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 52.979040][ T3905] veth1_macvtap: entered allmulticast mode [ 53.064742][ T3906] syz.3.116: attempt to access beyond end of device [ 53.064742][ T3906] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 53.085977][ T3906] syz.3.116: attempt to access beyond end of device [ 53.085977][ T3906] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 53.224216][ T3906] syz.3.116: attempt to access beyond end of device [ 53.224216][ T3906] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 53.237888][ T3906] syz.3.116: attempt to access beyond end of device [ 53.237888][ T3906] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 53.262355][ T3906] syz.3.116: attempt to access beyond end of device [ 53.262355][ T3906] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 53.276083][ T3906] syz.3.116: attempt to access beyond end of device [ 53.276083][ T3906] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 53.289668][ T3906] syz.3.116: attempt to access beyond end of device [ 53.289668][ T3906] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 53.303141][ T3906] syz.3.116: attempt to access beyond end of device [ 53.303141][ T3906] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 53.361602][ T3906] syz.3.116: attempt to access beyond end of device [ 53.361602][ T3906] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 53.865613][ T3920] syz.2.121 uses obsolete (PF_INET,SOCK_PACKET) [ 54.013977][ T3927] veth0: entered promiscuous mode [ 54.021386][ T3928] mmap: syz.0.123 (3928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.055653][ T3927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.124'. [ 54.119681][ T3888] Set syz1 is full, maxelem 65536 reached [ 54.267583][ T3478] IPVS: starting estimator thread 0... [ 54.276117][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.375246][ T3933] IPVS: using max 2208 ests per chain, 110400 per kthread [ 54.402444][ T3925] bond_slave_0: entered promiscuous mode [ 54.409006][ T3925] bond_slave_1: entered promiscuous mode [ 54.461467][ T3925] vlan2: entered promiscuous mode [ 54.467433][ T3925] bond0: entered promiscuous mode [ 54.788547][ T3941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.128'. [ 54.890422][ T3941] loop3: detected capacity change from 0 to 2048 [ 54.926145][ T3947] tipc: Enabling of bearer rejected, failed to enable media [ 54.970200][ T3941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.995624][ T3941] EXT4-fs error (device loop3): ext4_ext_precache:632: inode #2: comm syz.3.128: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 55.071845][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 55.071862][ T29] audit: type=1400 audit(1768801448.829:448): avc: denied { name_connect } for pid=3956 comm="syz.4.131" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 55.103021][ T3941] lo speed is unknown, defaulting to 1000 [ 55.109823][ T3941] lo speed is unknown, defaulting to 1000 [ 55.116002][ T3941] lo speed is unknown, defaulting to 1000 [ 55.157665][ T3941] infiniband syz1: set active [ 55.162440][ T3941] infiniband syz1: added lo [ 55.167046][ T3488] lo speed is unknown, defaulting to 1000 [ 55.188141][ T3941] RDS/IB: syz1: added [ 55.203044][ T3941] smc: adding ib device syz1 with port count 1 [ 55.214659][ T3941] smc: ib device syz1 port 1 has no pnetid [ 55.220916][ T3488] lo speed is unknown, defaulting to 1000 [ 55.236179][ T3941] lo speed is unknown, defaulting to 1000 [ 55.246687][ T3964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.132'. [ 55.297214][ T3928] Illegal XDP return value 4294967274 on prog (id 45) dev N/A, expect packet loss! [ 55.337711][ T3941] lo speed is unknown, defaulting to 1000 [ 55.375571][ T3941] lo speed is unknown, defaulting to 1000 [ 55.421238][ T3941] lo speed is unknown, defaulting to 1000 [ 55.459683][ T3941] lo speed is unknown, defaulting to 1000 [ 55.609550][ T29] audit: type=1400 audit(1768801449.369:449): avc: denied { append } for pid=3968 comm="syz.0.134" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 55.641641][ T3969] loop0: detected capacity change from 0 to 256 [ 55.718291][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.747308][ T29] audit: type=1400 audit(1768801449.509:450): avc: denied { read } for pid=3970 comm="syz.1.136" path="socket:[6566]" dev="sockfs" ino=6566 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 56.179272][ T3974] netlink: 6 bytes leftover after parsing attributes in process `syz.1.136'. [ 56.209028][ T3969] Set syz1 is full, maxelem 65536 reached [ 56.277105][ T3974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.324682][ T29] audit: type=1400 audit(1768801450.079:451): avc: denied { setopt } for pid=3978 comm="syz.3.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 56.380343][ T29] audit: type=1400 audit(1768801450.139:452): avc: denied { getopt } for pid=3983 comm="syz.4.140" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.454770][ T29] audit: type=1400 audit(1768801450.199:453): avc: denied { bind } for pid=3987 comm="syz.4.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.474077][ T29] audit: type=1400 audit(1768801450.199:454): avc: denied { name_bind } for pid=3987 comm="syz.4.142" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 56.495292][ T29] audit: type=1400 audit(1768801450.199:455): avc: denied { node_bind } for pid=3987 comm="syz.4.142" saddr=172.20.20.170 src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 56.563319][ T3991] bond1: invalid ARP target 0.0.0.0 specified for addition [ 56.570640][ T3991] bond1: option arp_ip_target: invalid value (0) [ 56.578196][ T3991] bond1 (unregistering): Released all slaves [ 56.769190][ T3994] syzkaller0: entered promiscuous mode [ 56.774816][ T3994] syzkaller0: entered allmulticast mode [ 56.792151][ T4000] dummy0: entered promiscuous mode [ 56.800405][ T4000] dummy0: left promiscuous mode [ 56.949624][ T4002] ªªªªªª: renamed from hsr0 (while UP) [ 56.958255][ T29] audit: type=1400 audit(1768801450.719:456): avc: denied { read } for pid=4006 comm="syz.0.149" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 56.982388][ T29] audit: type=1400 audit(1768801450.719:457): avc: denied { open } for pid=4006 comm="syz.0.149" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 57.449533][ T4024] 9pnet_virtio: no channels available for device ./bus [ 58.191134][ T4035] loop3: detected capacity change from 0 to 1024 [ 58.211257][ T4035] EXT4-fs: Ignoring removed nobh option [ 58.245594][ T4035] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 58.267395][ T4035] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #11: comm syz.3.157: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 58.291878][ T4035] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.157: couldn't read orphan inode 11 (err -117) [ 58.308678][ T4035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.335234][ T4035] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.157: Invalid block bitmap block 0 in block_group 0 [ 58.365452][ T4035] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.157: Failed to acquire dquot type 0 [ 58.404451][ T3587] EXT4-fs error (device loop3): ext4_release_dquot:7022: comm kworker/u8:15: Failed to release dquot type 0 [ 58.456942][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.646429][ T4045] vlan2: entered promiscuous mode [ 58.941609][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 58.961229][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 58.989060][ T4069] netlink: 'syz.0.163': attribute type 13 has an invalid length. [ 59.065806][ T4080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.166'. [ 59.080179][ T4069] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.087521][ T4069] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.194686][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.224985][ T4069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.294499][ T4092] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4092 comm=syz.2.168 [ 59.343181][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 59.355378][ T4065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.165'. [ 59.364444][ T176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.373716][ T176] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.394675][ T176] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.403637][ T176] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.494291][ T4100] netlink: 'syz.4.172': attribute type 1 has an invalid length. [ 59.526135][ T4100] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.572593][ T4100] bond1: (slave ip6gretap1): making interface the new active one [ 59.599117][ T4106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.620550][ T4100] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 59.666938][ T4104] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.674709][ T4104] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.683878][ T4106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.765758][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.776451][ T4104] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.813071][ T3647] lo speed is unknown, defaulting to 1000 [ 59.818994][ T3647] syz1: Port: 1 Link DOWN [ 59.854878][ T4100] veth1: entered promiscuous mode [ 59.862477][ T4100] bond1: (slave veth1): Enslaving as an active interface with a down link [ 59.873014][ T4110] erspan0: entered allmulticast mode [ 59.883035][ T4110] bond1: (slave erspan0): Enslaving as an active interface with an up link [ 59.892037][ T3571] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.917167][ T3647] lo speed is unknown, defaulting to 1000 [ 59.923137][ T3571] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.034544][ T3571] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.043580][ T3571] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.065264][ T4121] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4121 comm=syz.0.179 [ 60.367044][ T4127] tipc: Enabling of bearer rejected, failed to enable media [ 60.569090][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 60.569109][ T29] audit: type=1400 audit(1768801454.329:500): avc: denied { create } for pid=4139 comm="syz.4.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 60.711649][ T29] audit: type=1400 audit(1768801454.359:501): avc: denied { ioctl } for pid=4139 comm="syz.4.184" path="socket:[6786]" dev="sockfs" ino=6786 ioctlcmd=0x4943 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 61.375625][ T29] audit: type=1400 audit(1768801455.139:502): avc: denied { name_bind } for pid=4160 comm="syz.0.190" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.431728][ T29] audit: type=1400 audit(1768801455.139:503): avc: denied { read } for pid=4160 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 61.576148][ T4171] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 61.632132][ T29] audit: type=1400 audit(1768801455.289:504): avc: denied { write } for pid=4167 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.651454][ T29] audit: type=1400 audit(1768801455.309:505): avc: denied { rename } for pid=4166 comm="syz.0.193" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.673763][ T29] audit: type=1400 audit(1768801455.309:506): avc: denied { unlink } for pid=4166 comm="syz.0.193" name="file0" dev="tmpfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.696157][ T29] audit: type=1400 audit(1768801455.389:507): avc: denied { ioctl } for pid=4167 comm="syz.4.192" path="socket:[6062]" dev="sockfs" ino=6062 ioctlcmd=0x9421 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.720596][ T29] audit: type=1400 audit(1768801455.389:508): avc: denied { read } for pid=4167 comm="syz.4.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 62.256952][ T4190] netlink: 188 bytes leftover after parsing attributes in process `syz.1.198'. [ 62.315718][ T4196] syzkaller0: entered promiscuous mode [ 62.321271][ T4196] syzkaller0: entered allmulticast mode [ 62.768649][ T4203] lo speed is unknown, defaulting to 1000 [ 64.160642][ T29] audit: type=1400 audit(1768801457.919:509): avc: denied { write } for pid=4214 comm="syz.0.206" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 64.286163][ T4208] lo speed is unknown, defaulting to 1000 [ 64.414902][ T4219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.207'. [ 64.424017][ T4219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.207'. [ 64.433136][ T4219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.207'. [ 64.450753][ T4219] netlink: 36 bytes leftover after parsing attributes in process `syz.4.207'. [ 64.524605][ T4223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.209'. [ 64.968933][ T4254] netlink: 16 bytes leftover after parsing attributes in process `syz.3.217'. [ 64.983528][ T4255] netlink: 'syz.2.218': attribute type 4 has an invalid length. [ 64.991413][ T4255] netlink: 152 bytes leftover after parsing attributes in process `syz.2.218'. [ 65.005676][ T4255] .`: renamed from bond0 (while UP) [ 65.046590][ T4257] loop3: detected capacity change from 0 to 1024 [ 65.053449][ T4257] EXT4-fs: Ignoring removed orlov option [ 65.064372][ T4257] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.080605][ T4257] netlink: 388 bytes leftover after parsing attributes in process `syz.3.219'. [ 65.188896][ T4266] ------------[ cut here ]------------ [ 65.194457][ T4266] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0xffffdfcd, 0xffffffffffffdfcc] s64=[0x80000000ffffdfcd, 0x7fffffffffffdfcc] u32=[0xffffdfcd, 0xffffdfcc] s32=[0xffffdfcd, 0xffffdfcc] var_off=(0xffffdfcc, 0xffffffff00000000) [ 65.219234][ T4266] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x15b/0x660, CPU#1: syz.2.221/4266 [ 65.230174][ T4266] Modules linked in: [ 65.234110][ T4266] CPU: 1 UID: 0 PID: 4266 Comm: syz.2.221 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.243832][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.253957][ T4266] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 65.260381][ T4266] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 65.280141][ T4266] RSP: 0018:ffffc900013573a0 EFLAGS: 00010246 [ 65.286276][ T4266] RAX: ffff88811a7a3c10 RBX: 00000000ffffdfcc RCX: 00000000ffffdfcd [ 65.294309][ T4266] RDX: ffffffff867fcb7d RSI: ffffffff866c6e11 RDI: ffffffff86fb6fe0 [ 65.302368][ T4266] RBP: ffff88811a4c3a70 R08: ffffffffffffdfcc R09: 80000000ffffdfcd [ 65.310415][ T4266] R10: 00000000000000d0 R11: 0000000000000002 R12: ffff88811a4c3a30 [ 65.318516][ T4266] R13: 00000000ffffdfcc R14: ffff88811a4c3a7c R15: ffff88811a4c3a68 [ 65.326542][ T4266] FS: 00007fb4663076c0(0000) GS:ffff8882aec79000(0000) knlGS:0000000000000000 [ 65.335540][ T4266] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 65.342158][ T4266] CR2: 00007fd196dd6d58 CR3: 000000011b1b8000 CR4: 00000000003506f0 [ 65.350226][ T4266] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 65.358277][ T4266] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 65.366343][ T4266] Call Trace: [ 65.369705][ T4266] [ 65.372731][ T4266] reg_set_min_max+0x1c8/0x260 [ 65.377591][ T4266] check_cond_jmp_op+0x13bd/0x1a80 [ 65.382779][ T4266] do_check+0x3356/0x8250 [ 65.387223][ T4266] do_check_common+0xccf/0x1300 [ 65.392131][ T4266] bpf_check+0x2f85/0xc890 [ 65.396710][ T4266] ? __alloc_frozen_pages_noprof+0x18a/0x350 [ 65.402863][ T4266] ? __vmap_pages_range_noflush+0xb9c/0xcc0 [ 65.408832][ T4266] ? pcpu_block_update+0x24e/0x3b0 [ 65.414171][ T4266] ? pcpu_block_refresh_hint+0x157/0x170 [ 65.419988][ T4266] ? pcpu_block_update_hint_alloc+0x640/0x660 [ 65.426474][ T4266] ? css_rstat_updated+0xbb/0x280 [ 65.431803][ T4266] ? mod_memcg_state+0x182/0x260 [ 65.436909][ T4266] ? __rcu_read_unlock+0x4e/0x70 [ 65.441887][ T4266] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 65.447789][ T4266] ? pcpu_alloc_noprof+0xd18/0x1210 [ 65.453070][ T4266] ? should_fail_ex+0x30/0x280 [ 65.458391][ T4266] ? __kmalloc_noprof+0x2a3/0x580 [ 65.463548][ T4266] ? security_bpf_prog_load+0x60/0x140 [ 65.469211][ T4266] ? selinux_bpf_prog_load+0xac/0xd0 [ 65.474632][ T4266] ? security_bpf_prog_load+0x9e/0x140 [ 65.480149][ T4266] bpf_prog_load+0xf76/0x1140 [ 65.484933][ T4266] ? security_bpf+0x2b/0x90 [ 65.489491][ T4266] __sys_bpf+0x469/0x7b0 [ 65.493792][ T4266] __x64_sys_bpf+0x41/0x50 [ 65.498340][ T4266] x64_sys_call+0x28e1/0x3000 [ 65.503101][ T4266] do_syscall_64+0xc0/0x2a0 [ 65.507680][ T4266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.513683][ T4266] RIP: 0033:0x7fb4678aacb9 [ 65.518207][ T4266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.537897][ T4266] RSP: 002b:00007fb466307028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 65.546384][ T4266] RAX: ffffffffffffffda RBX: 00007fb467b25fa0 RCX: 00007fb4678aacb9 [ 65.554397][ T4266] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 65.562450][ T4266] RBP: 00007fb467918bf7 R08: 0000000000000000 R09: 0000000000000000 [ 65.570497][ T4266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.578562][ T4266] R13: 00007fb467b26038 R14: 00007fb467b25fa0 R15: 00007ffe1f3602f8 [ 65.586607][ T4266] [ 65.589730][ T4266] ---[ end trace 0000000000000000 ]--- [ 65.611745][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.675648][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 65.675720][ T29] audit: type=1400 audit(1768801459.429:559): avc: denied { create } for pid=4275 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.712443][ T4277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.224'. [ 65.794750][ T29] audit: type=1400 audit(1768801459.459:560): avc: denied { getopt } for pid=4275 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 65.814245][ T29] audit: type=1400 audit(1768801459.459:561): avc: denied { getopt } for pid=4275 comm="syz.1.224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.998076][ T4303] syz_tun: entered allmulticast mode [ 66.007407][ T4303] syz_tun (unregistering): left allmulticast mode [ 66.101963][ T29] audit: type=1400 audit(1768801459.839:562): avc: denied { unmount } for pid=4300 comm="syz.2.232" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 66.125518][ T4305] lo speed is unknown, defaulting to 1000 [ 66.143939][ T4307] loop3: detected capacity change from 0 to 2048 [ 66.276160][ T4307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.382236][ T29] audit: type=1400 audit(1768801460.139:563): avc: denied { sqpoll } for pid=4293 comm="syz.1.230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.609355][ T29] audit: type=1400 audit(1768801460.369:564): avc: denied { wake_alarm } for pid=4330 comm="syz.4.240" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 66.671376][ T4304] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 66.705155][ T4304] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 160 with max blocks 16 with error 28 [ 66.719317][ T4304] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.719317][ T4304] [ 66.730168][ T4304] EXT4-fs (loop3): Total free blocks count 0 [ 66.736811][ T4304] EXT4-fs (loop3): Free/Dirty block details [ 66.742754][ T4304] EXT4-fs (loop3): free_blocks=2415919504 [ 66.748585][ T4304] EXT4-fs (loop3): dirty_blocks=16 [ 66.753748][ T4304] EXT4-fs (loop3): Block reservation details [ 66.759836][ T4304] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 66.809250][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.902342][ T29] audit: type=1400 audit(1768801460.659:565): avc: denied { write } for pid=4337 comm="syz.2.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.204086][ T4355] netlink: 'syz.0.242': attribute type 3 has an invalid length. [ 67.300579][ T4358] loop1: detected capacity change from 0 to 164 [ 67.330911][ T4358] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.369829][ T4358] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 67.392740][ T4358] Symlink component flag not implemented [ 67.398524][ T4358] Symlink component flag not implemented [ 67.404673][ T29] audit: type=1400 audit(1768801461.119:566): avc: denied { mount } for pid=4356 comm="syz.1.248" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.422013][ T4358] Symlink component flag not implemented (7) [ 67.433082][ T4358] Symlink component flag not implemented (116) [ 67.505157][ T29] audit: type=1400 audit(1768801461.249:567): avc: denied { connect } for pid=4356 comm="syz.1.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.544509][ T29] audit: type=1400 audit(1768801461.299:568): avc: denied { unmount } for pid=3323 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 67.567244][ T4360] __nla_validate_parse: 3 callbacks suppressed [ 67.567265][ T4360] netlink: 28 bytes leftover after parsing attributes in process `syz.2.249'. [ 67.611724][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'. [ 67.646070][ T4362] bridge_slave_0: left allmulticast mode [ 67.651814][ T4362] bridge_slave_0: left promiscuous mode [ 67.657666][ T4362] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.697112][ T4362] bridge_slave_1: left allmulticast mode [ 67.702831][ T4362] bridge_slave_1: left promiscuous mode [ 67.708658][ T4362] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.726828][ T4362] bond0: (slave bond_slave_0): Releasing backup interface [ 67.736129][ T4362] bond0: (slave bond_slave_1): Releasing backup interface [ 67.746130][ T4362] team0: Port device team_slave_0 removed [ 67.756370][ T4362] team0: Port device team_slave_1 removed [ 67.766732][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.785273][ T4362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.805696][ T4362] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 67.873835][ T4374] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 67.900737][ T4374] bond1: (slave bridge1): making interface the new active one [ 67.909835][ T4374] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 67.930053][ T4374] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 67.946214][ T4374] macvlan2: entered promiscuous mode [ 67.951590][ T4374] macvlan2: entered allmulticast mode [ 67.957846][ T4374] bond1: entered promiscuous mode [ 67.962909][ T4374] bridge1: entered promiscuous mode [ 67.978823][ T4374] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 68.021589][ T4374] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 68.072369][ T4374] bond1: left promiscuous mode [ 68.077261][ T4374] bridge1: left promiscuous mode [ 68.232591][ T4382] netlink: 'syz.1.258': attribute type 1 has an invalid length. [ 68.240604][ T4346] Set syz1 is full, maxelem 6117 reached [ 68.374265][ T4333] syz.4.243 (4333) used greatest stack depth: 7048 bytes left [ 68.486326][ T4392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.493698][ T4392] IPv6: NLM_F_CREATE should be set when creating new route [ 68.500984][ T4392] IPv6: NLM_F_CREATE should be set when creating new route [ 68.549607][ T4392] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 68.601814][ T4400] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.260' sets config #-1 [ 68.634998][ T4401] bridge0: port 3(bond0) entered disabled state [ 68.641399][ T4401] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.646629][ T4404] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 68.646629][ T4404] The task syz.3.262 (4404) triggered the difference, watch for misbehavior. [ 68.649021][ T4401] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.706168][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.716957][ T4401] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.762829][ T52] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.789233][ T52] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.802724][ T4409] xt_connbytes: Forcing CT accounting to be enabled [ 68.808739][ T52] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.827730][ T52] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.990785][ T4431] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4431 comm=syz.2.271 [ 69.213248][ T4441] lo speed is unknown, defaulting to 1000 [ 69.365149][ T4438] Set syz1 is full, maxelem 65536 reached [ 69.607312][ T4464] loop3: detected capacity change from 0 to 128 [ 69.634437][ T4464] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 69.664961][ T4464] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.089053][ T4477] netlink: 20 bytes leftover after parsing attributes in process `syz.0.284'. [ 70.194034][ T4479] 9p: Bad value for 'source' [ 70.201059][ T4479] tipc: Enabling of bearer rejected, failed to enable media [ 70.265278][ T4482] netlink: 'syz.1.287': attribute type 21 has an invalid length. [ 70.273330][ T4482] netlink: 'syz.1.287': attribute type 1 has an invalid length. [ 70.281054][ T4482] netlink: 132 bytes leftover after parsing attributes in process `syz.1.287'. [ 70.333833][ T3319] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.647330][ T4513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 70.786205][ T4520] 9p: Bad value for 'wfdno' [ 70.807699][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 70.807718][ T29] audit: type=1400 audit(1768801464.569:950): avc: denied { create } for pid=4521 comm="syz.4.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 70.902893][ T29] audit: type=1326 audit(1768801464.659:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4524 comm="syz.1.303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8f047cacb9 code=0x0 [ 70.950922][ T29] audit: type=1400 audit(1768801464.709:952): avc: denied { read } for pid=4524 comm="syz.1.303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 71.225572][ T4536] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'. [ 71.246745][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 71.799823][ T4545] lo speed is unknown, defaulting to 1000 [ 72.435650][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 72.535091][ T4558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 73.562839][ T29] audit: type=1400 audit(1768801467.309:953): avc: denied { write } for pid=4567 comm="syz.4.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 73.976226][ T4578] loop1: detected capacity change from 0 to 1024 [ 74.005984][ T4578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.010623][ T4586] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001158 ! [ 74.038193][ T4586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.321'. [ 74.059130][ T29] audit: type=1400 audit(1768801467.819:954): avc: denied { write } for pid=4582 comm="syz.3.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 74.059906][ T4583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.323'. [ 74.098308][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.109284][ T29] audit: type=1326 audit(1768801467.869:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 74.158406][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.167982][ T29] audit: type=1326 audit(1768801467.899:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 74.191313][ T29] audit: type=1326 audit(1768801467.899:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 74.214767][ T29] audit: type=1326 audit(1768801467.899:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 74.226972][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.238173][ T29] audit: type=1326 audit(1768801467.899:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4580 comm="syz.0.322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd19839acb9 code=0x7ffc0000 [ 74.246419][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.369905][ T4583] infiniband syz2: set down [ 74.374486][ T4583] infiniband syz2: added ip6_vti0 [ 74.379622][ T3488] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.389494][ T4596] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 74.403532][ T4594] loop1: detected capacity change from 0 to 8192 [ 74.420518][ T4583] RDS/IB: syz2: added [ 74.426798][ T4583] smc: adding ib device syz2 with port count 1 [ 74.433233][ T4583] smc: ib device syz2 port 1 has no pnetid [ 74.439751][ T3488] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.446536][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.328'. [ 74.455835][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.544960][ T4594] netlink: 'syz.1.326': attribute type 49 has an invalid length. [ 74.556148][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.564842][ T4605] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: 1 [ 74.573640][ T4605] ref_ctr increment failed for inode: 0x1d0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810005af40 [ 74.632820][ T4614] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32761, delta: -1 [ 74.641719][ T4614] ref_ctr decrement failed for inode: 0x1d0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88810005af40 [ 74.690490][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.693478][ T4614] uprobe: syz.4.330:4614 failed to unregister, leaking uprobe [ 74.717197][ T4616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.331'. [ 74.734440][ T4618] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.332'. [ 74.747843][ T4618] No such timeout policy "syz1" [ 74.770685][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.849256][ T4583] ip6_vti0 speed is unknown, defaulting to 1000 [ 74.866782][ T4631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 74.880756][ T4632] capability: warning: `syz.1.337' uses 32-bit capabilities (legacy support in use) [ 74.988460][ T4643] rdma_rxe: rxe_newlink: failed to add lo [ 75.060389][ T4647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4647 comm=syz.0.343 [ 75.128951][ T4656] hub 8-0:1.0: USB hub found [ 75.133706][ T4656] hub 8-0:1.0: 8 ports detected [ 75.189415][ T4662] bridge_slave_0: left allmulticast mode [ 75.195326][ T4662] bridge_slave_0: left promiscuous mode [ 75.201099][ T4662] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.386090][ T4676] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 75.505340][ T4662] bridge_slave_1: left allmulticast mode [ 75.511043][ T4662] bridge_slave_1: left promiscuous mode [ 75.516824][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.536860][ T4662] bond0: (slave bond_slave_0): Releasing backup interface [ 75.544335][ T4662] bond_slave_0: left promiscuous mode [ 75.551261][ T4662] bond0: (slave bond_slave_1): Releasing backup interface [ 75.564462][ T4662] bond_slave_1: left promiscuous mode [ 75.571160][ T4662] team0: Port device team_slave_0 removed [ 75.578067][ T4662] team0: Port device team_slave_1 removed [ 75.584216][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.592100][ T4662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.600047][ T4662] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 75.879854][ T4682] loop1: detected capacity change from 0 to 512 [ 75.905874][ T4682] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 75.924188][ T4684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 75.952614][ T4682] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.353: invalid indirect mapped block 4294967295 (level 1) [ 76.004586][ T29] kauditd_printk_skb: 114 callbacks suppressed [ 76.004608][ T29] audit: type=1400 audit(1768801725.753:1074): avc: denied { mount } for pid=4680 comm="syz.3.354" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.043325][ T4682] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.353: invalid indirect mapped block 4294967295 (level 1) [ 76.114691][ T4682] EXT4-fs (loop1): 2 truncates cleaned up [ 76.121056][ T4682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.145491][ T4701] loop3: detected capacity change from 0 to 164 [ 76.160846][ T4690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.356'. [ 76.274655][ T29] audit: type=1400 audit(1768801726.013:1075): avc: denied { mount } for pid=4708 comm="syz.2.358" name="/" dev="ramfs" ino=8062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 76.372935][ T3323] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.439093][ T4712] netlink: 8 bytes leftover after parsing attributes in process `syz.0.357'. [ 76.591197][ T29] audit: type=1400 audit(1768801726.203:1076): avc: denied { firmware_load } for pid=4704 comm="syz.0.357" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 76.993815][ T4709] ================================================================== [ 77.002010][ T4709] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 77.010127][ T4709] [ 77.012475][ T4709] write to 0xffff8881040140a8 of 8 bytes by task 4713 on cpu 0: [ 77.020119][ T4709] filemap_splice_read+0x523/0x780 [ 77.025261][ T4709] splice_direct_to_actor+0x26e/0x670 [ 77.030664][ T4709] do_splice_direct+0x119/0x1a0 [ 77.035540][ T4709] do_sendfile+0x380/0x650 [ 77.039991][ T4709] __x64_sys_sendfile64+0x105/0x150 [ 77.045232][ T4709] x64_sys_call+0x2db1/0x3000 [ 77.049939][ T4709] do_syscall_64+0xc0/0x2a0 [ 77.054471][ T4709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.060407][ T4709] [ 77.062765][ T4709] write to 0xffff8881040140a8 of 8 bytes by task 4709 on cpu 1: [ 77.070432][ T4709] filemap_splice_read+0x523/0x780 [ 77.075583][ T4709] splice_direct_to_actor+0x26e/0x670 [ 77.080988][ T4709] do_splice_direct+0x119/0x1a0 [ 77.085865][ T4709] do_sendfile+0x380/0x650 [ 77.090325][ T4709] __x64_sys_sendfile64+0x105/0x150 [ 77.095572][ T4709] x64_sys_call+0x2db1/0x3000 [ 77.100301][ T4709] do_syscall_64+0xc0/0x2a0 [ 77.104865][ T4709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.110795][ T4709] [ 77.113149][ T4709] value changed: 0x0000000000001fb7 -> 0x0000000000001fbd [ 77.120275][ T4709] [ 77.122626][ T4709] Reported by Kernel Concurrency Sanitizer on: [ 77.128821][ T4709] CPU: 1 UID: 0 PID: 4709 Comm: syz.2.358 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 77.140062][ T4709] Tainted: [W]=WARN [ 77.143895][ T4709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.154002][ T4709] ================================================================== [ 77.256507][ T4724] netlink: 'syz.1.362': attribute type 1 has an invalid length. [ 77.298049][ T4724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.350787][ T4724] 8021q: adding VLAN 0 to HW filter on device bond3 [ 77.368757][ T4724] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 77.389724][ T4724] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 77.395759][ T29] audit: type=1400 audit(1768801727.143:1077): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 77.428020][ T4728] gretap2: entered promiscuous mode [ 77.439265][ T4728] bond3: (slave gretap2): making interface the new active one [ 77.451732][ T4728] bond3: (slave gretap2): Enslaving as an active interface with an up link