last executing test programs: 39.690795421s ago: executing program 0 (id=82): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x3000, 0x442, &(0x7f0000ffa000/0x3000)=nil) r1 = socket(0x18, 0x3, 0x0) connect$unix(r1, &(0x7f00000000c0)=@abs={0x682eb13985c518e6, 0x7}, 0x1c) sendmsg$unix(r1, &(0x7f0000000380)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x3}, 0x8, &(0x7f0000000140)}, 0x4) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x0) mlock(&(0x7f0000003000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) 39.600520692s ago: executing program 0 (id=88): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000540)="5c8d", 0x2}, {&(0x7f00000000c0)="603b21c5457ac583f1c3ef", 0xb}], 0x2}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000005a40)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1}, 0x6}], 0x1, 0x2, 0x0) 39.573576323s ago: executing program 0 (id=90): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="48000000100005070000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0, 0x8}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 39.545849413s ago: executing program 0 (id=93): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x804, &(0x7f0000000440)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT], 0x1, 0x36e, &(0x7f0000000c00)="$eJzs3c9rI2UYwPEnaZpMumyTgygK0ge96GVoq2c1yC6IAZfuRtwVhNntREPGpMyESERsPXkVb/4DgsseFzwsqP9AL97WixdP9iIIuog4Mr/SJJ00aTZL0/b7gTZP8r7PzPvmF88byJuD9776uFn3zLrVkayhkhEReSRSlqwkMtFFXlLsycuX/nz4/PWbt96uVKtXtlSvVm68sqmqq2s/fPJZMe72oCD75Q8OxPht/+n9Zw/+u/FRw9OGp612Ry293f61Y912bN1ueE1T9ZpjW56tjZZnu1F7O2qvO+2dnZ5are3LKzuu7XlqtXratHvaaWvH7an1odVoqWmaenklbbjnmDFDTu3u1pZVmfGEd2bMw7z94/v+Mc2uW7GWRMzikZba3Sc6LgAAsJBG6v9vkhqhLNl+QZmJ1wL5MB5eBgT1fxKH9X+wWDis/++98FPn0rv3V+P6/0E+rf5/9Zcof6j+D84+9/r/u5HrRyuiM2/3JJ0fq/7HYlgbfkX+frhijwX1f/Bq6K/ov3j/3noYUP8DAAAAAAAAAAAAAAAAAAAAAHAWPPL9ku/7peQy+Tv8CkF8Pbl23BeNceaMe/wL8Y4C/ecDzqXrN2+JEX5xL7cq4nzZrXVr0WXcnnRcl5L8Gz4fYtGGE3thowbK8qOz260txwlL4f+KiIojtmxIScpD+WF89a3qlQ2NRPnh+Xe7tUxuJcivSyPM35SSPJWev5man5eXXhzIN6UkP9+RtjiyHb+PJfmfb6i++U51JL8Y9kvz+pN9SAAAAAAAmDtT1YiXz+Xh9W+0fjdN1bT2YC0vg+vzo58P9NfX66nr81zpudzpzh0AAAAAgIvCy3/atBzHdr3e2KAok/oU4qONNOVkwpGDIDdFn6HgYRgsH9dnaWCG0x45H/+CxrTDcL2eTD3mJPirIKl3ZrKF61CTkX6vThkk85+is3HSh8D1siefu+16a8F4dKbpDATJx0bj+si1WY88Lkh2zp3U+Zmvv/17tlNk4l17B5teu29MmGkYZEZu2ZvwpP3D9yeOZzn93eL7WX5kBgAAAMCCSIr+opfc8sbpDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAtortukjQlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAovg/AAD//5h69bA=") open(0x0, 0x0, 0x40) prlimit64(0x0, 0xe, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) madvise(&(0x7f0000ffe000/0x2000)=nil, 0xffffffffdf001fff, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 39.477347824s ago: executing program 0 (id=97): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$pid(0x2, 0x0, 0x4007) 39.266591278s ago: executing program 0 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 39.253072708s ago: executing program 32 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x2, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 35.70777584s ago: executing program 2 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000040)={0x4, 0x5, 0x7, 0x4, 0xf, "03f37fe99f4da288"}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) 35.66357926s ago: executing program 2 (id=189): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 35.62170892s ago: executing program 2 (id=191): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000080)={0x0, 0xd3, 0xfffffff0}) 35.560318791s ago: executing program 2 (id=196): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x8840) 35.032442019s ago: executing program 2 (id=213): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x66, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) 34.758469913s ago: executing program 2 (id=220): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 34.736930584s ago: executing program 33 (id=220): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="09000000070000000000010003"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 12.016219625s ago: executing program 5 (id=859): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 11.937442116s ago: executing program 5 (id=864): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) 11.890754906s ago: executing program 5 (id=867): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000002c0)=[{0x6}]}, 0x10) write$binfmt_misc(r2, &(0x7f0000001280), 0x6) 11.848538617s ago: executing program 5 (id=870): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f00000001c0)={[{@grpquota}, {@jqfmt_vfsv1}, {@minixdf}]}, 0x1, 0x518, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffc, 0x80100000400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47d8780820335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffff000000e8f20000000200", "b73267f0fffffffff2ff00", [0x10000000000004]}) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x511881, 0x96) 11.60767809s ago: executing program 5 (id=876): unshare(0x40020000) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="3400000014000b032bbd7000fcdbdf250a281000", @ANYRES32=r1, @ANYBLOB="080008000604000014000100ff"], 0x34}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, 0x0, 0x25, 0xe, @void}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000808}, 0x0) 11.142644057s ago: executing program 5 (id=889): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x43c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x0, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x8, 0xfffffffc, 0x1000, 0x2, 0x2000000, 0x4, 0x8, 0x3e, 0x80000001, 0x2, 0x2, 0x81, 0x1, 0xf2f, 0x800, 0x2, 0xff, 0x5, 0x4, 0x3, 0x9, 0x3, 0xc8bd487, 0x9, 0x400, 0x8000, 0x0, 0xfff, 0x3, 0x7, 0x7769, 0xb986, 0x1, 0x2, 0x9, 0xfffffffb, 0xb, 0xb3, 0x400, 0x2, 0x7fff, 0x1c, 0x1, 0x0, 0x9, 0x5, 0x3, 0xe203, 0x100, 0x0, 0x1ff, 0x5, 0x7, 0x9, 0x4, 0x7, 0x4, 0x8, 0x5, 0xfff, 0x80000000, 0x400, 0x7, 0xb6d, 0x143a40, 0xa2, 0x1, 0xffffffff, 0x9, 0x5, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x9, 0x6, 0x7, 0x9, 0x8, 0x8, 0x7fffffff, 0x1200, 0x2, 0x0, 0x8000, 0x1, 0xffffffff, 0xc5c, 0x100, 0x56e, 0x5, 0x9d, 0x3, 0xddae, 0x7f, 0x4, 0x1, 0xffff, 0x1, 0x69, 0xb59, 0x800, 0x0, 0x0, 0x8001, 0x9, 0x3, 0x8, 0x200, 0x1, 0x2, 0x101, 0x1, 0x3, 0x9, 0x1000, 0x3, 0x1, 0x4, 0x0, 0x9, 0x4, 0x7170, 0xf2a, 0x4, 0x9, 0x3, 0xffffff01, 0x2, 0x8, 0x7, 0xb, 0x200, 0x6, 0x7, 0x5a7b, 0xffff, 0x7fff, 0x7ff, 0x80, 0x0, 0xae2, 0x8, 0xfffffff7, 0x9, 0x10001, 0x4, 0x7, 0x7, 0x9, 0x7, 0x0, 0x6, 0x0, 0x3, 0x9, 0x0, 0x9, 0x9, 0x8, 0x9, 0x8000, 0xffffff2f, 0x1, 0x2, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x0, 0xffffffff, 0x9, 0x5, 0xffff, 0xfffffffd, 0x40, 0xfb3, 0x0, 0xfffffffe, 0x0, 0x6, 0x74e40f26, 0x153c, 0x20000000, 0x0, 0x3, 0x600, 0x5, 0xfffffff9, 0x40, 0x3000, 0x8, 0x7, 0xe, 0x3, 0x3, 0x32, 0x7, 0x8, 0x4d19, 0x8, 0x343, 0x0, 0x4, 0xf4c3, 0x2, 0x100, 0x80, 0x5805, 0xffffffff, 0x0, 0x9429, 0x8, 0x7fffffff, 0x101, 0x5, 0x8, 0x9, 0x3, 0xffffffff, 0xfff, 0xd, 0xffffff84, 0x7fffffff, 0x216, 0x1ff, 0x90000000, 0x15, 0x1, 0xff, 0x9, 0x0, 0xffffffff, 0xe3f, 0xa3, 0x5, 0xf, 0x5, 0x8, 0x0, 0x1, 0x9138, 0x100, 0xc1cf, 0x600000]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 11.142478927s ago: executing program 34 (id=889): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtfilter={0x43c, 0x28, 0xd27, 0x1004001, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x0, 0x6, 0x4, 0x7, 0x2, 0x4, 0x0, 0x8, 0xfffffffc, 0x1000, 0x2, 0x2000000, 0x4, 0x8, 0x3e, 0x80000001, 0x2, 0x2, 0x81, 0x1, 0xf2f, 0x800, 0x2, 0xff, 0x5, 0x4, 0x3, 0x9, 0x3, 0xc8bd487, 0x9, 0x400, 0x8000, 0x0, 0xfff, 0x3, 0x7, 0x7769, 0xb986, 0x1, 0x2, 0x9, 0xfffffffb, 0xb, 0xb3, 0x400, 0x2, 0x7fff, 0x1c, 0x1, 0x0, 0x9, 0x5, 0x3, 0xe203, 0x100, 0x0, 0x1ff, 0x5, 0x7, 0x9, 0x4, 0x7, 0x4, 0x8, 0x5, 0xfff, 0x80000000, 0x400, 0x7, 0xb6d, 0x143a40, 0xa2, 0x1, 0xffffffff, 0x9, 0x5, 0x7, 0x0, 0x40, 0x7ff, 0x9, 0x9, 0x6, 0x7, 0x9, 0x8, 0x8, 0x7fffffff, 0x1200, 0x2, 0x0, 0x8000, 0x1, 0xffffffff, 0xc5c, 0x100, 0x56e, 0x5, 0x9d, 0x3, 0xddae, 0x7f, 0x4, 0x1, 0xffff, 0x1, 0x69, 0xb59, 0x800, 0x0, 0x0, 0x8001, 0x9, 0x3, 0x8, 0x200, 0x1, 0x2, 0x101, 0x1, 0x3, 0x9, 0x1000, 0x3, 0x1, 0x4, 0x0, 0x9, 0x4, 0x7170, 0xf2a, 0x4, 0x9, 0x3, 0xffffff01, 0x2, 0x8, 0x7, 0xb, 0x200, 0x6, 0x7, 0x5a7b, 0xffff, 0x7fff, 0x7ff, 0x80, 0x0, 0xae2, 0x8, 0xfffffff7, 0x9, 0x10001, 0x4, 0x7, 0x7, 0x9, 0x7, 0x0, 0x6, 0x0, 0x3, 0x9, 0x0, 0x9, 0x9, 0x8, 0x9, 0x8000, 0xffffff2f, 0x1, 0x2, 0x80000001, 0x3, 0x3, 0x7, 0x7, 0x0, 0xffffffff, 0x9, 0x5, 0xffff, 0xfffffffd, 0x40, 0xfb3, 0x0, 0xfffffffe, 0x0, 0x6, 0x74e40f26, 0x153c, 0x20000000, 0x0, 0x3, 0x600, 0x5, 0xfffffff9, 0x40, 0x3000, 0x8, 0x7, 0xe, 0x3, 0x3, 0x32, 0x7, 0x8, 0x4d19, 0x8, 0x343, 0x0, 0x4, 0xf4c3, 0x2, 0x100, 0x80, 0x5805, 0xffffffff, 0x0, 0x9429, 0x8, 0x7fffffff, 0x101, 0x5, 0x8, 0x9, 0x3, 0xffffffff, 0xfff, 0xd, 0xffffff84, 0x7fffffff, 0x216, 0x1ff, 0x90000000, 0x15, 0x1, 0xff, 0x9, 0x0, 0xffffffff, 0xe3f, 0xa3, 0x5, 0xf, 0x5, 0x8, 0x0, 0x1, 0x9138, 0x100, 0xc1cf, 0x600000]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x810}, 0x48c0) 1.750173624s ago: executing program 7 (id=1167): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r3}, 0x10) bind$can_raw(r0, &(0x7f0000000080), 0x10) 1.707288435s ago: executing program 7 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r2, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0xb}], 0x1, 0x0, 0x0) 1.613327206s ago: executing program 3 (id=1172): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x0) sendmmsg$unix(r2, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18}}], 0x1, 0x0) r3 = dup3(r2, r1, 0x0) connect$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 1.492890638s ago: executing program 3 (id=1174): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x6000}], 0x1, 0x0, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x6, 0x6, 0x1, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x40000) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 912.417517ms ago: executing program 1 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r4 = fcntl$dupfd(r0, 0x406, r1) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 869.695877ms ago: executing program 1 (id=1190): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0) 846.584787ms ago: executing program 1 (id=1191): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 834.945757ms ago: executing program 7 (id=1193): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x1, 0x2, 0x100000001, 0xff}) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0xfed7, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) unshare(0x62040200) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vcsn(0x0, 0x3, 0x400100) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1}) 720.302709ms ago: executing program 4 (id=1198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x0, 0x8400, 0x1, 0x0, 0x1}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) 639.245491ms ago: executing program 3 (id=1199): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x4008810, &(0x7f00000004c0)=@ll={0x11, 0x1, 0x0, 0x1, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x401}, 0x11) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 618.222441ms ago: executing program 1 (id=1200): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) 608.127191ms ago: executing program 4 (id=1201): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'hsr0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffe0}, {0xfff3}}}, 0x24}}, 0x44010) 603.318781ms ago: executing program 6 (id=1202): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_elf32(r0, 0x0, 0x966) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x4, 0x4, 0xa0000, 0x5, 0xa0000001, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffe, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0x100a, 0x400045, 0x20, 0x8, 0x5, 0x9, 0x3, 0xe, 0xa, 0x2, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xffffdff8, 0x4, 0x8, 0x1a0055ee, 0x401, 0x1, 0xffff4226, 0x200000, 0x0, 0x22cc, 0xc, 0x4, 0x1, 0x1, 0x800, 0xf9, 0x9, 0x8, 0x2, 0x8, 0x2f, 0x4000006, 0x0, 0x101, 0x9, 0x7, 0xc5, 0x4, 0xffffffff, 0xffffffff, 0x6, 0x5, 0x5, 0x5, 0x2, 0x9b58, 0x0, 0xb, 0x4be, 0x4, 0x100, 0xa, 0xca6, 0x9fa6, 0x7, 0x38, 0x4, 0xb, 0x7, 0x4d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x46, 0x9, 0x3, 0x7, 0x4, 0xc, 0x7, 0x8001, 0x7, 0x7, 0x1902, 0xc3c, 0x3, 0x28000000, 0x4000000, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xd58, 0x5, 0x2, 0x4, 0x2, 0x2, 0x8, 0x8, 0xea, 0x5, 0x45ba, 0x9, 0x864b, 0xfffffffa, 0x7, 0x9, 0x8001, 0x7, 0x81, 0x3, 0x9, 0x7, 0xffffff80, 0x43, 0x8, 0x1, 0x6, 0x5, 0x9, 0x7fffffff, 0x4, 0x324f035, 0x6, 0x0, 0x7c1, 0x136, 0x2, 0x5, 0x1, 0x3ff, 0x4, 0x0, 0x2, 0x10001, 0xfffffffd, 0x5, 0x4, 0x400, 0x101, 0x4, 0x1b, 0xd589, 0xffffff81, 0x0, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd3d, 0x0, 0x5, 0x1, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0xffff, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b6, 0x1, 0x4, 0x9, 0x7, 0x4, 0x8, 0x0, 0x6, 0x8, 0x3, 0x7, 0x6, 0x9, 0x4, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x7ffd, 0xffffff00, 0x894, 0x7, 0x7, 0x6, 0x6, 0x2, 0x9, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000003, 0x7, 0x656, 0x8008, 0x80000001, 0x384, 0x9, 0x58b, 0x80000000, 0xe08, 0x0, 0x1, 0x6, 0x0, 0x9, 0xfff, 0x0, 0x7, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x0, 0x0, 0x5, 0x5e1d, 0x8}, 0x9, 0x8, 0x99}}]}}]}, 0x45c}}, 0x8840) 572.561882ms ago: executing program 3 (id=1203): r0 = gettid() r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$ptp(r1, 0x0, 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) 561.379832ms ago: executing program 7 (id=1204): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x1, 0x83}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 502.601983ms ago: executing program 3 (id=1205): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000140)={@val={0x800e}, @void, @eth={@broadcast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @opaque="6f841fcaf955c253e28c7ab3"}}}}}}, 0x3a) 501.629723ms ago: executing program 6 (id=1206): mkdir(0x0, 0x9c) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 454.634303ms ago: executing program 4 (id=1207): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000035a, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000006800010000000000000000000a000000000000000600070008000000100008800c00010000000a000000000008000500", @ANYRES32=r3], 0x38}}, 0x0) 408.481104ms ago: executing program 6 (id=1208): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000005304"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 349.148355ms ago: executing program 4 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0x4}, {}, {0x3, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x200400d4) 345.916485ms ago: executing program 7 (id=1210): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4b, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 217.869177ms ago: executing program 1 (id=1211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x48, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r4}, 0x18) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x8, 0x0, 0xec95, 0xffffffff, {0x7, 0x1, 0x8000, 0xc, 0xeb, 0xf}, {0x5, 0x2, 0x8, 0x3, 0x101, 0x5c}, 0x5, 0x3, 0x3}}]}]}}]}, 0x74}}, 0x24044094) 187.393607ms ago: executing program 3 (id=1212): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x1000) 186.919717ms ago: executing program 6 (id=1221): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) fcntl$notify(r0, 0x402, 0x8000001f) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x36) close_range(r0, 0xffffffffffffffff, 0x0) 142.852148ms ago: executing program 7 (id=1213): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000680)=ANY=[], 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000000b80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 142.041348ms ago: executing program 6 (id=1214): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7f, &(0x7f0000000940)=0x0) io_submit(r3, 0xfdef, &(0x7f00000002c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)="c3", 0x1}]) vmsplice(r2, &(0x7f0000000cc0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0) 85.024029ms ago: executing program 4 (id=1216): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f0000000080)='%-5lx \x00'}, 0x20) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x2}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) 340.91µs ago: executing program 1 (id=1217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xfffffffd, 0x400, 0x20000008, 0x6, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 0s ago: executing program 4 (id=1218): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@dev, 0x800, 0x0, 0x2, 0x9}, 0x20) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000040)=@dstopts={0x62}, 0x8) mlockall(0x3) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. [ 32.965289][ T29] audit: type=1400 audit(1751699722.049:62): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.966526][ T3295] cgroup: Unknown subsys name 'net' [ 32.988075][ T29] audit: type=1400 audit(1751699722.059:63): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.015533][ T29] audit: type=1400 audit(1751699722.079:64): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.216276][ T3295] cgroup: Unknown subsys name 'cpuset' [ 33.222618][ T3295] cgroup: Unknown subsys name 'rlimit' [ 33.354468][ T29] audit: type=1400 audit(1751699722.439:65): avc: denied { setattr } for pid=3295 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.377799][ T29] audit: type=1400 audit(1751699722.439:66): avc: denied { create } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.398346][ T29] audit: type=1400 audit(1751699722.439:67): avc: denied { write } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.418821][ T29] audit: type=1400 audit(1751699722.439:68): avc: denied { read } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.439293][ T29] audit: type=1400 audit(1751699722.469:69): avc: denied { mounton } for pid=3295 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.448954][ T3299] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.464141][ T29] audit: type=1400 audit(1751699722.469:70): avc: denied { mount } for pid=3295 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.495975][ T29] audit: type=1400 audit(1751699722.569:71): avc: denied { relabelto } for pid=3299 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.538329][ T3295] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.767890][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 34.790324][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 34.810229][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 34.907915][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 34.917077][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.924183][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.931505][ T3305] bridge_slave_0: entered allmulticast mode [ 34.938006][ T3305] bridge_slave_0: entered promiscuous mode [ 34.954058][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.961200][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.968372][ T3306] bridge_slave_0: entered allmulticast mode [ 34.974703][ T3306] bridge_slave_0: entered promiscuous mode [ 34.984477][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.991605][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.998813][ T3305] bridge_slave_1: entered allmulticast mode [ 35.005299][ T3305] bridge_slave_1: entered promiscuous mode [ 35.018988][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.026200][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.033448][ T3306] bridge_slave_1: entered allmulticast mode [ 35.040157][ T3306] bridge_slave_1: entered promiscuous mode [ 35.058589][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.065703][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.072955][ T3310] bridge_slave_0: entered allmulticast mode [ 35.079584][ T3310] bridge_slave_0: entered promiscuous mode [ 35.086512][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.093711][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.100903][ T3310] bridge_slave_1: entered allmulticast mode [ 35.107648][ T3310] bridge_slave_1: entered promiscuous mode [ 35.132175][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.155940][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.166724][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.176172][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 35.185988][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.196261][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.211041][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.248898][ T3310] team0: Port device team_slave_0 added [ 35.268262][ T3305] team0: Port device team_slave_0 added [ 35.278884][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.286022][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.293224][ T3311] bridge_slave_0: entered allmulticast mode [ 35.299675][ T3311] bridge_slave_0: entered promiscuous mode [ 35.306859][ T3310] team0: Port device team_slave_1 added [ 35.312747][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.319884][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.327130][ T3311] bridge_slave_1: entered allmulticast mode [ 35.333697][ T3311] bridge_slave_1: entered promiscuous mode [ 35.345239][ T3306] team0: Port device team_slave_0 added [ 35.351570][ T3305] team0: Port device team_slave_1 added [ 35.380274][ T3306] team0: Port device team_slave_1 added [ 35.396918][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.403904][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.429882][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.454226][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.461276][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.487436][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.498522][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.505532][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.531699][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.543655][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.555498][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.562475][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.588475][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.599640][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.606729][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.632888][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.647686][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.661544][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.668582][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.694668][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.747744][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.754925][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.762292][ T3309] bridge_slave_0: entered allmulticast mode [ 35.768906][ T3309] bridge_slave_0: entered promiscuous mode [ 35.776165][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.783293][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.790487][ T3309] bridge_slave_1: entered allmulticast mode [ 35.797251][ T3309] bridge_slave_1: entered promiscuous mode [ 35.805677][ T3306] hsr_slave_0: entered promiscuous mode [ 35.811676][ T3306] hsr_slave_1: entered promiscuous mode [ 35.820137][ T3310] hsr_slave_0: entered promiscuous mode [ 35.826341][ T3310] hsr_slave_1: entered promiscuous mode [ 35.832276][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.839942][ T3310] Cannot create hsr debugfs directory [ 35.852478][ T3311] team0: Port device team_slave_0 added [ 35.859410][ T3311] team0: Port device team_slave_1 added [ 35.899288][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.919920][ T3305] hsr_slave_0: entered promiscuous mode [ 35.926196][ T3305] hsr_slave_1: entered promiscuous mode [ 35.932069][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.939677][ T3305] Cannot create hsr debugfs directory [ 35.946238][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.968253][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.975293][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.001301][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.025334][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.032467][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.058444][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.094582][ T3309] team0: Port device team_slave_0 added [ 36.101086][ T3309] team0: Port device team_slave_1 added [ 36.147085][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.154089][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.180211][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.209271][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.216306][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.242357][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.262817][ T3311] hsr_slave_0: entered promiscuous mode [ 36.269017][ T3311] hsr_slave_1: entered promiscuous mode [ 36.274915][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.282539][ T3311] Cannot create hsr debugfs directory [ 36.338719][ T3309] hsr_slave_0: entered promiscuous mode [ 36.344889][ T3309] hsr_slave_1: entered promiscuous mode [ 36.350901][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.358546][ T3309] Cannot create hsr debugfs directory [ 36.381227][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.397367][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.417512][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.432676][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.476647][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.495030][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.513456][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.524747][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.566421][ T3306] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.577810][ T3306] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.586787][ T3306] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.604923][ T3306] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.652513][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.662840][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.672773][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.682433][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.702284][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.736292][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.746257][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.760189][ T3309] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.769392][ T3309] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.779508][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.786682][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.797744][ T3309] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.807229][ T3309] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.818918][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.830193][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.837391][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.851588][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.876994][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.884198][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.894293][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.901503][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.931595][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.967520][ T299] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.974632][ T299] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.984912][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.012621][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.029726][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.036874][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.048720][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.061059][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.078326][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.095050][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.102254][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.125382][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.132527][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.144403][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.151549][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.181083][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.188273][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.204227][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.222385][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.260547][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.271064][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.291546][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.397074][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.412320][ T3310] veth0_vlan: entered promiscuous mode [ 37.457997][ T3310] veth1_vlan: entered promiscuous mode [ 37.488779][ T3306] veth0_vlan: entered promiscuous mode [ 37.505662][ T3305] veth0_vlan: entered promiscuous mode [ 37.514267][ T3306] veth1_vlan: entered promiscuous mode [ 37.527576][ T3310] veth0_macvtap: entered promiscuous mode [ 37.536777][ T3305] veth1_vlan: entered promiscuous mode [ 37.545488][ T3310] veth1_macvtap: entered promiscuous mode [ 37.563746][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.584349][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.594331][ T3306] veth0_macvtap: entered promiscuous mode [ 37.607822][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.617519][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.626317][ T3310] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.635159][ T3310] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.643914][ T3310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.661730][ T3305] veth0_macvtap: entered promiscuous mode [ 37.674407][ T3305] veth1_macvtap: entered promiscuous mode [ 37.681410][ T3306] veth1_macvtap: entered promiscuous mode [ 37.703198][ T3311] veth0_vlan: entered promiscuous mode [ 37.713421][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.734782][ T3311] veth1_vlan: entered promiscuous mode [ 37.747809][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.758643][ T3310] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.765203][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.794944][ T3305] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.803903][ T3305] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.812828][ T3305] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.821788][ T3305] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.834356][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.844261][ T3311] veth0_macvtap: entered promiscuous mode [ 37.864903][ T3311] veth1_macvtap: entered promiscuous mode [ 37.874024][ T3306] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.882863][ T3306] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.891727][ T3306] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.900598][ T3306] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.940065][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.949783][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.973739][ T3309] veth0_vlan: entered promiscuous mode [ 37.989951][ T3311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.998871][ T3311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.007808][ T3311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.016638][ T3311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.044555][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 38.044573][ T29] audit: type=1400 audit(1751699727.129:97): avc: denied { create } for pid=3477 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.076099][ T29] audit: type=1400 audit(1751699727.139:98): avc: denied { bind } for pid=3477 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.079768][ T3309] veth1_vlan: entered promiscuous mode [ 38.095212][ T29] audit: type=1400 audit(1751699727.139:99): avc: denied { listen } for pid=3477 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.119946][ T29] audit: type=1400 audit(1751699727.139:100): avc: denied { connect } for pid=3477 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.139532][ T29] audit: type=1400 audit(1751699727.139:101): avc: denied { write } for pid=3477 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.158792][ T29] audit: type=1400 audit(1751699727.139:102): avc: denied { accept } for pid=3477 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.178501][ T29] audit: type=1400 audit(1751699727.139:103): avc: denied { read } for pid=3477 comm="syz.2.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.197650][ T29] audit: type=1400 audit(1751699727.149:104): avc: denied { create } for pid=3479 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 38.218132][ T29] audit: type=1326 audit(1751699727.159:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3479 comm="syz.3.4" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e4b46e929 code=0x0 [ 38.242300][ T29] audit: type=1400 audit(1751699727.199:106): avc: denied { map_create } for pid=3482 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.291646][ T3309] veth0_macvtap: entered promiscuous mode [ 38.310724][ T3309] veth1_macvtap: entered promiscuous mode [ 38.331435][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.354121][ T3491] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 38.366392][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.389986][ T3309] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.399029][ T3309] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.407866][ T3309] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.416682][ T3309] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.746969][ C0] hrtimer: interrupt took 26698 ns [ 39.095248][ T3529] loop4: detected capacity change from 0 to 1024 [ 39.137832][ T3529] ======================================================= [ 39.137832][ T3529] WARNING: The mand mount option has been deprecated and [ 39.137832][ T3529] and is ignored by this kernel. Remove the mand [ 39.137832][ T3529] option from the mount to silence this warning. [ 39.137832][ T3529] ======================================================= [ 39.266940][ T3529] EXT4-fs: Ignoring removed oldalloc option [ 39.315707][ T3529] EXT4-fs: Ignoring removed orlov option [ 39.347233][ T3537] Zero length message leads to an empty skb [ 39.385023][ T3529] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 39.417157][ T3541] netlink: 24 bytes leftover after parsing attributes in process `syz.3.25'. [ 39.441818][ T3529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.513396][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.771092][ T3562] all: renamed from lo (while UP) [ 39.781584][ T3560] loop2: detected capacity change from 0 to 1024 [ 39.836969][ T3560] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 39.848127][ T3560] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 39.863846][ T3560] JBD2: no valid journal superblock found [ 39.869747][ T3560] EXT4-fs (loop2): Could not load journal inode [ 40.079510][ T3586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.44'. [ 40.089213][ T3586] bridge_slave_1: left allmulticast mode [ 40.094927][ T3586] bridge_slave_1: left promiscuous mode [ 40.100970][ T3586] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.109111][ T3586] bridge_slave_0: left allmulticast mode [ 40.114930][ T3586] bridge_slave_0: left promiscuous mode [ 40.120828][ T3586] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.154851][ T3589] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.43'. [ 40.163997][ T3589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.43'. [ 40.380728][ T3591] loop0: detected capacity change from 0 to 128 [ 40.508958][ T3601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.49'. [ 40.538785][ T3603] syz.0.50 uses obsolete (PF_INET,SOCK_PACKET) [ 40.863560][ T3605] netlink: 'syz.4.51': attribute type 12 has an invalid length. [ 40.960379][ T3615] vlan2: entered allmulticast mode [ 40.999909][ T2996] udevd[2996]: worker [3296] terminated by signal 33 (Unknown signal 33) [ 41.002041][ T3617] netlink: 76 bytes leftover after parsing attributes in process `syz.3.56'. [ 41.042215][ T3623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.58'. [ 41.059954][ T3625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.59'. [ 41.068973][ T3625] netlink: 'syz.3.59': attribute type 7 has an invalid length. [ 41.076678][ T3625] netlink: 'syz.3.59': attribute type 8 has an invalid length. [ 41.084448][ T3625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.59'. [ 41.088064][ T3627] netlink: 'syz.4.60': attribute type 1 has an invalid length. [ 41.113373][ T3627] 8021q: VLANs not supported on wg2 [ 41.463627][ T3656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.74'. [ 41.520175][ T3660] sctp: [Deprecated]: syz.4.73 (pid 3660) Use of int in max_burst socket option deprecated. [ 41.520175][ T3660] Use struct sctp_assoc_value instead [ 41.608479][ T3629] syz.1.61 (3629) used greatest stack depth: 10664 bytes left [ 41.618086][ T3666] mmap: syz.0.78 (3666) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.664369][ T3640] syz.1.61 (3640) used greatest stack depth: 10440 bytes left [ 41.809881][ T3694] loop0: detected capacity change from 0 to 128 [ 41.830041][ T3696] loop2: detected capacity change from 0 to 2048 [ 41.872420][ T3701] pim6reg1: entered promiscuous mode [ 41.878116][ T3701] pim6reg1: entered allmulticast mode [ 41.885281][ T3696] Alternate GPT is invalid, using primary GPT. [ 41.891659][ T3696] loop2: p1 p2 p3 [ 41.942674][ T3707] process 'syz.2.99' launched '/dev/fd/6' with NULL argv: empty string added [ 41.992876][ T3712] program syz.1.101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.043294][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.113252][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.123747][ T3722] loop4: detected capacity change from 0 to 512 [ 42.181369][ T3722] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.106: iget: bad extended attribute block 1 [ 42.208873][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.227620][ T3722] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.106: couldn't read orphan inode 15 (err -117) [ 42.241457][ T3722] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.312736][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.328685][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.370295][ T3746] bridge_slave_0: left promiscuous mode [ 42.376143][ T3746] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.395841][ T3746] bridge_slave_1: left allmulticast mode [ 42.401559][ T3746] bridge_slave_1: left promiscuous mode [ 42.407520][ T3746] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.420613][ T3749] loop2: detected capacity change from 0 to 1024 [ 42.449006][ T3746] bond0: (slave bond_slave_0): Releasing backup interface [ 42.460944][ T3746] bond0: (slave bond_slave_1): Releasing backup interface [ 42.473967][ T3749] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.474403][ T3746] team0: Port device team_slave_0 removed [ 42.498826][ T3746] team0: Port device team_slave_1 removed [ 42.505604][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.513150][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.514626][ T3749] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.532172][ T3763] netlink: 'syz.4.113': attribute type 10 has an invalid length. [ 42.544155][ T3746] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.549314][ T3749] EXT4-fs (loop2): shut down requested (1) [ 42.551913][ T3746] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.561213][ T3749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 42.574412][ T3749] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 42.591847][ T3749] SELinux: syz.2.114 (3749) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 42.609145][ T3752] team0: Mode changed to "loadbalance" [ 42.628560][ T3763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.639751][ T3763] team0: Port device bond0 added [ 42.669868][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.675804][ T3768] netlink: 'syz.1.119': attribute type 16 has an invalid length. [ 42.686838][ T3768] netlink: 'syz.1.119': attribute type 17 has an invalid length. [ 42.720654][ T3768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 42.736621][ T12] bridge_slave_1: left allmulticast mode [ 42.742315][ T12] bridge_slave_1: left promiscuous mode [ 42.749267][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.760045][ T12] bridge_slave_0: left allmulticast mode [ 42.765968][ T12] bridge_slave_0: left promiscuous mode [ 42.771708][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.892243][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 42.903580][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 42.913433][ T12] bond0 (unregistering): Released all slaves [ 43.014683][ T12] hsr_slave_0: left promiscuous mode [ 43.030679][ T12] hsr_slave_1: left promiscuous mode [ 43.042881][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.050599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.058831][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.066625][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.080232][ T12] veth1_macvtap: left promiscuous mode [ 43.087381][ T12] veth0_macvtap: left promiscuous mode [ 43.093151][ T12] veth1_vlan: left promiscuous mode [ 43.098729][ T12] veth0_vlan: left promiscuous mode [ 43.179839][ T12] team0 (unregistering): Port device team_slave_1 removed [ 43.191034][ T12] team0 (unregistering): Port device team_slave_0 removed [ 43.284696][ T3725] chnl_net:caif_netlink_parms(): no params data found [ 43.430328][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.437618][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.457728][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 43.457745][ T29] audit: type=1400 audit(1751699732.549:253): avc: denied { load_policy } for pid=3813 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 43.457773][ T3814] SELinux: failed to load policy [ 43.464139][ T3725] bridge_slave_0: entered allmulticast mode [ 43.542162][ T29] audit: type=1400 audit(1751699732.579:254): avc: denied { create } for pid=3816 comm="syz.1.136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 43.563219][ T3725] bridge_slave_0: entered promiscuous mode [ 43.579412][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.586736][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.617852][ T3725] bridge_slave_1: entered allmulticast mode [ 43.629382][ T3725] bridge_slave_1: entered promiscuous mode [ 43.692463][ T3827] syzkaller1: entered promiscuous mode [ 43.698048][ T3827] syzkaller1: entered allmulticast mode [ 43.717182][ T3725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.731484][ T3725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.758995][ T3725] team0: Port device team_slave_0 added [ 43.767908][ T3725] team0: Port device team_slave_1 added [ 43.792228][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.799380][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.825683][ T3725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.851807][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.859112][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.885170][ T3725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.898847][ T3835] wireguard0: entered promiscuous mode [ 43.917665][ T3839] team0 (unregistering): Port device team_slave_0 removed [ 43.927589][ T3839] team0 (unregistering): Port device team_slave_1 removed [ 43.960801][ T3725] hsr_slave_0: entered promiscuous mode [ 43.968153][ T3725] hsr_slave_1: entered promiscuous mode [ 43.974279][ T3725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 43.982202][ T3725] Cannot create hsr debugfs directory [ 44.025235][ T3846] loop1: detected capacity change from 0 to 1024 [ 44.036542][ T3846] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.068362][ T3846] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.146: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 3, max 3(4), depth 0(0) [ 44.071557][ T29] audit: type=1400 audit(1751699733.159:255): avc: denied { connect } for pid=3847 comm="syz.3.147" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.105808][ T3725] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 44.113649][ T29] audit: type=1400 audit(1751699733.199:256): avc: denied { ioctl } for pid=3847 comm="syz.3.147" path="socket:[6304]" dev="sockfs" ino=6304 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 44.118567][ T3846] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.146: Bad quota inode: 3, type: 0 [ 44.138096][ T29] audit: type=1400 audit(1751699733.199:257): avc: denied { write } for pid=3847 comm="syz.3.147" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 44.171222][ T3846] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 44.180962][ T3725] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 44.192840][ T3846] EXT4-fs (loop1): mount failed [ 44.215221][ T3725] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 44.226949][ T3725] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 44.241275][ T3846] program syz.1.146 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 44.253474][ T29] audit: type=1400 audit(1751699733.329:258): avc: denied { write } for pid=3845 comm="syz.1.146" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 44.257159][ T3846] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 44.284703][ T29] audit: type=1400 audit(1751699733.369:259): avc: denied { mounton } for pid=3852 comm="syz.3.149" path="/proc/60/task" dev="proc" ino=5558 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 44.290706][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.314866][ T3725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.328801][ T299] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.356840][ T29] audit: type=1400 audit(1751699733.449:260): avc: denied { relabelfrom } for pid=3864 comm="syz.1.151" name="NETLINK" dev="sockfs" ino=5565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 44.366129][ T3725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 44.381081][ T29] audit: type=1400 audit(1751699733.449:261): avc: denied { relabelto } for pid=3864 comm="syz.1.151" name="NETLINK" dev="sockfs" ino=5565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 44.431631][ T3725] 8021q: adding VLAN 0 to HW filter on device team0 [ 44.447800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.454983][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.482838][ T3871] netlink: 'syz.2.154': attribute type 1 has an invalid length. [ 44.498004][ T1731] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.505201][ T1731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.525308][ T3871] 8021q: adding VLAN 0 to HW filter on device bond1 [ 44.547729][ T3871] bond1: (slave dummy0): making interface the new active one [ 44.556553][ T3871] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 44.642799][ T3725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.709678][ T3898] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 44.724212][ T29] audit: type=1400 audit(1751699733.809:262): avc: denied { name_bind } for pid=3896 comm="syz.4.160" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 44.828123][ T3725] veth0_vlan: entered promiscuous mode [ 44.837585][ T3725] veth1_vlan: entered promiscuous mode [ 44.855150][ T3725] veth0_macvtap: entered promiscuous mode [ 44.863478][ T3725] veth1_macvtap: entered promiscuous mode [ 44.875698][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.889305][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.897722][ T3919] loop4: detected capacity change from 0 to 2048 [ 44.900863][ T3725] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.913097][ T3725] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.921957][ T3725] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.930841][ T3725] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.950692][ T3919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.970961][ T12] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.987252][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 44.999683][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.999683][ T12] [ 45.009459][ T12] EXT4-fs (loop4): Total free blocks count 0 [ 45.015538][ T12] EXT4-fs (loop4): Free/Dirty block details [ 45.021590][ T12] EXT4-fs (loop4): free_blocks=2415919104 [ 45.027401][ T12] EXT4-fs (loop4): dirty_blocks=16 [ 45.032594][ T12] EXT4-fs (loop4): Block reservation details [ 45.038670][ T12] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 45.061411][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.119754][ T3934] loop4: detected capacity change from 0 to 512 [ 45.128762][ T3934] EXT4-fs (loop4): orphan cleanup on readonly fs [ 45.136218][ T3934] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.171: bg 0: block 248: padding at end of block bitmap is not set [ 45.151965][ T3934] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.171: Failed to acquire dquot type 1 [ 45.165344][ T3934] EXT4-fs (loop4): 1 truncate cleaned up [ 45.173112][ T3934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.207156][ T3934] syz.4.171 (3934) used greatest stack depth: 9304 bytes left [ 45.215121][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.234066][ T3940] __nla_validate_parse: 6 callbacks suppressed [ 45.234081][ T3940] netlink: 12 bytes leftover after parsing attributes in process `syz.4.173'. [ 45.257172][ T3940] netlink: 64 bytes leftover after parsing attributes in process `syz.4.173'. [ 45.732848][ T3978] program syz.2.191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.768132][ T3983] netlink: 44 bytes leftover after parsing attributes in process `syz.3.194'. [ 45.777317][ T3983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.194'. [ 45.801125][ T3989] loop2: detected capacity change from 0 to 512 [ 45.821828][ T3989] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.196: casefold flag without casefold feature [ 45.879405][ T3989] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.196: couldn't read orphan inode 15 (err -117) [ 45.943457][ T3989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.003873][ T4007] netlink: 24 bytes leftover after parsing attributes in process `syz.4.204'. [ 46.005759][ T3989] loop2: detected capacity change from 512 to 0 [ 46.024715][ T3989] syz.2.196: attempt to access beyond end of device [ 46.024715][ T3989] loop2: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 46.040271][ T3989] syz.2.196: attempt to access beyond end of device [ 46.040271][ T3989] loop2: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 46.054042][ T3989] syz.2.196: attempt to access beyond end of device [ 46.054042][ T3989] loop2: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 46.083566][ T3989] syz.2.196: attempt to access beyond end of device [ 46.083566][ T3989] loop2: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 46.099332][ T3989] syz.2.196: attempt to access beyond end of device [ 46.099332][ T3989] loop2: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 46.114067][ T3989] syz.2.196: attempt to access beyond end of device [ 46.114067][ T3989] loop2: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 46.130728][ T3989] syz.2.196: attempt to access beyond end of device [ 46.130728][ T3989] loop2: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 46.174719][ T3989] syz.2.196: attempt to access beyond end of device [ 46.174719][ T3989] loop2: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 46.188754][ T3989] syz.2.196: attempt to access beyond end of device [ 46.188754][ T3989] loop2: rw=12288, sector=24, nr_sectors = 2 limit=0 [ 46.204458][ T3989] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4915: inode #29: block 12: comm syz.2.196: unable to read itable block [ 46.218364][ T3989] syz.2.196: attempt to access beyond end of device [ 46.218364][ T3989] loop2: rw=14337, sector=2, nr_sectors = 2 limit=0 [ 46.231586][ T3989] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 46.240106][ T3989] EXT4-fs (loop2): I/O error while writing superblock [ 46.270853][ T4023] netlink: 24 bytes leftover after parsing attributes in process `syz.4.212'. [ 46.292386][ T4023] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 46.313269][ T3310] EXT4-fs warning (device loop2): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 46.335016][ T4028] netlink: 'syz.4.214': attribute type 10 has an invalid length. [ 46.343587][ T4028] ipvlan0: entered allmulticast mode [ 46.345346][ T3438] EXT4-fs error (device loop2): __ext4_get_inode_loc_noinmem:4915: inode #2: block 5: comm kworker/u8:7: unable to read itable block [ 46.348922][ T4028] veth0_vlan: entered allmulticast mode [ 46.369763][ T3438] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 46.370356][ T4028] team0: Device ipvlan0 failed to register rx_handler [ 46.379868][ T3438] EXT4-fs (loop2): I/O error while writing superblock [ 46.396455][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.406267][ T3310] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 46.414559][ T3310] EXT4-fs (loop2): I/O error while writing superblock [ 46.429615][ T4032] netlink: 'syz.4.216': attribute type 1 has an invalid length. [ 46.448030][ T4032] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.470719][ T4032] bond1: (slave veth7): Enslaving as an active interface with a down link [ 46.487693][ T4032] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 46.494900][ T4032] bond1: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 46.590022][ T299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.692152][ T299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.707781][ T4054] 9pnet: p9_errstr2errno: server reported unknown error þLì²¼ O€!Ýë [ 46.789319][ T299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.858194][ T299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.894022][ T4066] netlink: 'syz.1.227': attribute type 1 has an invalid length. [ 46.932222][ T4066] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.983860][ T4066] vlan2: entered allmulticast mode [ 46.989246][ T4066] bond1: entered allmulticast mode [ 47.041370][ T4077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.231'. [ 47.071969][ T299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.082279][ T299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.094134][ T299] bond0 (unregistering): Released all slaves [ 47.105872][ T299] bond1 (unregistering): (slave dummy0): Releasing active interface [ 47.116744][ T299] bond1 (unregistering): Released all slaves [ 47.176250][ T299] hsr_slave_0: left promiscuous mode [ 47.184438][ T299] hsr_slave_1: left promiscuous mode [ 47.192478][ T299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.200286][ T299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.210551][ T299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.218128][ T299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.245016][ T299] veth1_macvtap: left promiscuous mode [ 47.253014][ T299] veth0_macvtap: left promiscuous mode [ 47.259408][ T299] veth1_vlan: left promiscuous mode [ 47.264842][ T299] veth0_vlan: left promiscuous mode [ 47.377284][ T299] team0 (unregistering): Port device team_slave_1 removed [ 47.385220][ T4106] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 47.391804][ T4106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.399578][ T4106] vhci_hcd vhci_hcd.0: Device attached [ 47.407513][ T299] team0 (unregistering): Port device team_slave_0 removed [ 47.433733][ T4113] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 47.440325][ T4113] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 47.448044][ T4113] vhci_hcd vhci_hcd.0: Device attached [ 47.465689][ T4106] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 47.472269][ T4106] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.479988][ T4106] vhci_hcd vhci_hcd.0: Device attached [ 47.491226][ T4106] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 47.493255][ T4045] chnl_net:caif_netlink_parms(): no params data found [ 47.506343][ T4106] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 47.512970][ T4106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.520647][ T4106] vhci_hcd vhci_hcd.0: Device attached [ 47.561859][ T4113] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(14) [ 47.568590][ T4113] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 47.576150][ T4113] vhci_hcd vhci_hcd.0: Device attached [ 47.603041][ T4106] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(13) [ 47.609775][ T4106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.617524][ T4106] vhci_hcd vhci_hcd.0: Device attached [ 47.631605][ T4106] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 47.638345][ T4106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 47.646035][ T4106] vhci_hcd vhci_hcd.0: Device attached [ 47.651576][ T3475] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 47.659529][ T4135] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.248'. [ 47.668799][ T4135] netlink: 24 bytes leftover after parsing attributes in process `syz.3.248'. [ 47.669749][ T4133] vhci_hcd: connection closed [ 47.678064][ T4120] vhci_hcd: connection closed [ 47.683025][ T4118] vhci_hcd: connection closed [ 47.686383][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.699657][ T4045] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.702411][ T4107] vhci_hcd: connection reset by peer [ 47.712469][ T4122] vhci_hcd: connection closed [ 47.712611][ T4131] vhci_hcd: connection closed [ 47.714155][ T4045] bridge_slave_0: entered allmulticast mode [ 47.728868][ T4045] bridge_slave_0: entered promiscuous mode [ 47.729023][ T4114] vhci_hcd: connection closed [ 47.737274][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.737341][ T31] vhci_hcd: stop threads [ 47.742059][ T4045] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.742159][ T4045] bridge_slave_1: entered allmulticast mode [ 47.749256][ T31] vhci_hcd: release socket [ 47.749276][ T31] vhci_hcd: disconnect device [ 47.769576][ T31] vhci_hcd: stop threads [ 47.772318][ T4045] bridge_slave_1: entered promiscuous mode [ 47.776070][ T31] vhci_hcd: release socket [ 47.776087][ T31] vhci_hcd: disconnect device [ 47.803556][ T31] vhci_hcd: stop threads [ 47.807998][ T31] vhci_hcd: release socket [ 47.812506][ T31] vhci_hcd: disconnect device [ 47.818860][ T31] vhci_hcd: stop threads [ 47.819553][ T4045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.823151][ T31] vhci_hcd: release socket [ 47.836785][ T31] vhci_hcd: disconnect device [ 47.838840][ T4045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.842129][ T31] vhci_hcd: stop threads [ 47.855034][ T31] vhci_hcd: release socket [ 47.859599][ T31] vhci_hcd: disconnect device [ 47.866332][ T31] vhci_hcd: stop threads [ 47.870633][ T31] vhci_hcd: release socket [ 47.875138][ T31] vhci_hcd: disconnect device [ 47.880241][ T31] vhci_hcd: stop threads [ 47.884524][ T31] vhci_hcd: release socket [ 47.888998][ T31] vhci_hcd: disconnect device [ 47.895220][ T4045] team0: Port device team_slave_0 added [ 47.902698][ T4045] team0: Port device team_slave_1 added [ 47.922289][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.929362][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.955340][ T4045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.971402][ T4045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.978435][ T4045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.004468][ T4045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.068369][ T4045] hsr_slave_0: entered promiscuous mode [ 48.074641][ T4045] hsr_slave_1: entered promiscuous mode [ 48.087208][ T4045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.100503][ T4045] Cannot create hsr debugfs directory [ 48.153897][ T4149] loop1: detected capacity change from 0 to 164 [ 48.206992][ T4045] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.218737][ T4045] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.230140][ T4045] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.247827][ T4045] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.289568][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.296760][ T4045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.304122][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.311314][ T4045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.336336][ T4162] netlink: 'syz.5.257': attribute type 1 has an invalid length. [ 48.344075][ T4162] netlink: 'syz.5.257': attribute type 4 has an invalid length. [ 48.351832][ T4162] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.257'. [ 48.359679][ T4045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.369810][ T4164] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 48.410183][ T4045] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.467998][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 48.468041][ T29] audit: type=1326 audit(1751699737.559:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.695972][ T29] audit: type=1326 audit(1751699737.589:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.719548][ T29] audit: type=1326 audit(1751699737.589:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.743113][ T29] audit: type=1326 audit(1751699737.589:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.766610][ T29] audit: type=1326 audit(1751699737.589:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.790072][ T29] audit: type=1326 audit(1751699737.589:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.813795][ T29] audit: type=1326 audit(1751699737.589:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.837215][ T29] audit: type=1326 audit(1751699737.589:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.860604][ T29] audit: type=1326 audit(1751699737.589:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.884180][ T29] audit: type=1326 audit(1751699737.589:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4168 comm="syz.5.260" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e20e6e929 code=0x7ffc0000 [ 48.893864][ T4045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.309097][ T4045] veth0_vlan: entered promiscuous mode [ 49.339536][ T4045] veth1_vlan: entered promiscuous mode [ 49.376048][ T4045] veth0_macvtap: entered promiscuous mode [ 49.388315][ T4045] veth1_macvtap: entered promiscuous mode [ 49.410993][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.423668][ T4045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.432339][ T4045] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.441141][ T4045] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.450109][ T4045] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.459012][ T4045] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.478865][ T4224] loop3: detected capacity change from 0 to 1024 [ 49.486760][ T4224] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.499381][ T4224] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.538766][ T4224] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.553937][ T4224] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 10: padding at end of block bitmap is not set [ 49.572479][ T4224] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 49.595720][ T4224] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 49.606869][ T4224] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm +}[@: Freeing blocks not in datazone - block = 0, count = 4096 [ 49.621288][ T4224] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm +}[@: Failed to acquire dquot type 0 [ 49.640854][ T4224] EXT4-fs (loop3): 1 orphan inode deleted [ 49.651767][ T4224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.702344][ T4224] +}[@ (4224) used greatest stack depth: 8824 bytes left [ 50.302398][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.334360][ T4243] netlink: 'syz.3.279': attribute type 1 has an invalid length. [ 50.517112][ T4262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.290'. [ 50.526917][ T4262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.290'. [ 51.553508][ T4321] random: crng reseeded on system resumption [ 51.587573][ T4325] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.603867][ T4328] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.315'. [ 51.613080][ T4328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'. [ 51.649730][ T4332] loop6: detected capacity change from 0 to 2048 [ 51.677368][ T4332] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.695263][ T4338] syz.4.320 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.697118][ T4332] EXT4-fs (loop6): shut down requested (0) [ 51.726174][ T4045] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.846016][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 51.855016][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.322'. [ 51.896567][ T4361] netlink: zone id is out of range [ 51.901785][ T4361] netlink: zone id is out of range [ 51.907060][ T4361] netlink: zone id is out of range [ 51.912192][ T4361] netlink: zone id is out of range [ 51.917366][ T4361] netlink: zone id is out of range [ 52.286670][ T4390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.340'. [ 52.459801][ T4409] xt_hashlimit: max too large, truncated to 1048576 [ 52.516094][ T4411] ALSA: seq fatal error: cannot create timer (-19) [ 52.547032][ T4422] netlink: 'syz.1.355': attribute type 27 has an invalid length. [ 52.586331][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.593602][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.686437][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.708651][ T4422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.725802][ T3475] usb 9-1: enqueue for inactive port 0 [ 52.732557][ T3475] usb 9-1: enqueue for inactive port 0 [ 52.762645][ T4422] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.771764][ T4422] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.780936][ T4422] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.789923][ T4422] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.815754][ T3475] vhci_hcd: vhci_device speed not set [ 52.926124][ T4429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.944605][ T4429] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.981523][ T4429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 53.011068][ T4430] pim6reg1: entered promiscuous mode [ 53.016509][ T4430] pim6reg1: entered allmulticast mode [ 53.163338][ T4462] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.214435][ T4468] -1: renamed from syzkaller0 [ 53.228674][ T4470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.372'. [ 53.248816][ T4473] netlink: 'syz.4.373': attribute type 1 has an invalid length. [ 53.259426][ T4474] netlink: 4 bytes leftover after parsing attributes in process `syz.5.374'. [ 53.264216][ T4473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.314059][ T4477] loop6: detected capacity change from 0 to 512 [ 53.321393][ T4477] EXT4-fs (loop6): blocks per group (95) and clusters per group (32768) inconsistent [ 53.344630][ T4473] bond2: (slave veth9): Enslaving as an active interface with a down link [ 53.357977][ T4478] bond2: (slave dummy0): making interface the new active one [ 53.367454][ T4478] dummy0: entered promiscuous mode [ 53.372719][ T4478] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 53.383597][ T4480] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 53.467035][ T4488] loop5: detected capacity change from 0 to 512 [ 53.475128][ T4488] EXT4-fs (loop5): orphan cleanup on readonly fs [ 53.483292][ T4488] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.381: bg 0: block 248: padding at end of block bitmap is not set [ 53.497658][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 53.497670][ T29] audit: type=1400 audit(1751699742.569:422): avc: denied { listen } for pid=4489 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.517354][ T4488] Quota error (device loop5): write_blk: dquota write failed [ 53.523208][ T29] audit: type=1400 audit(1751699742.569:423): avc: denied { accept } for pid=4489 comm="syz.4.380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 53.530681][ T4488] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 53.530706][ T4488] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.381: Failed to acquire dquot type 1 [ 53.541006][ T4488] EXT4-fs (loop5): 1 truncate cleaned up [ 53.578595][ T4488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.620471][ T4488] netlink: 'syz.5.381': attribute type 10 has an invalid length. [ 53.650586][ T4488] geneve1: entered promiscuous mode [ 53.659842][ T29] audit: type=1326 audit(1751699742.749:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.6.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 53.683302][ T29] audit: type=1326 audit(1751699742.749:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.6.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 53.688798][ T4488] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 53.706617][ T29] audit: type=1326 audit(1751699742.749:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.6.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 53.738556][ T29] audit: type=1326 audit(1751699742.749:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.6.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 53.761917][ T29] audit: type=1326 audit(1751699742.749:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.6.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 53.785275][ T29] audit: type=1326 audit(1751699742.749:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4502 comm="syz.6.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 53.824688][ T3725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.941926][ T4509] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.388'. [ 54.011431][ T4515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4515 comm=syz.5.391 [ 54.030293][ T4517] loop3: detected capacity change from 0 to 1024 [ 54.037845][ T4517] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 54.048880][ T4517] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 54.059857][ T4517] JBD2: no valid journal superblock found [ 54.065679][ T4517] EXT4-fs (loop3): Could not load journal inode [ 54.131434][ T4525] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 54.678644][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.686234][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.694061][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.701624][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.815011][ T4583] netlink: 'syz.5.422': attribute type 4 has an invalid length. [ 54.826875][ T4583] netlink: 'syz.5.422': attribute type 4 has an invalid length. [ 55.167676][ T4621] SELinux: Context Ü is not valid (left unmapped). [ 55.206138][ T4625] capability: warning: `syz.6.440' uses deprecated v2 capabilities in a way that may be insecure [ 55.320936][ T4637] tipc: Started in network mode [ 55.326180][ T4637] tipc: Node identity 02f6688cd08b, cluster identity 4711 [ 55.333486][ T4637] tipc: Enabled bearer , priority 0 [ 55.351759][ T4637] tipc: Disabling bearer [ 55.893818][ T4676] __nla_validate_parse: 11 callbacks suppressed [ 55.893837][ T4676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.464'. [ 55.949804][ T4681] serio: Serial port ptm0 [ 56.059736][ T4692] loop1: detected capacity change from 0 to 128 [ 56.068390][ T4692] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.080982][ T4692] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 56.110688][ T3306] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.144265][ T4698] openvswitch: netlink: Message has 6 unknown bytes. [ 56.203693][ T4710] netlink: 24 bytes leftover after parsing attributes in process `syz.6.478'. [ 56.251673][ T4714] loop1: detected capacity change from 0 to 1024 [ 56.279971][ T4714] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.333240][ T4714] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.480: Allocating blocks 497-513 which overlap fs metadata [ 56.369204][ T4713] EXT4-fs (loop1): pa ffff888106eab0e0: logic 128, phys. 273, len 15 [ 56.377602][ T4713] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 56.415259][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.468574][ T4737] hub 9-0:1.0: USB hub found [ 56.473567][ T4737] hub 9-0:1.0: 8 ports detected [ 56.542740][ T4753] batman_adv: batadv0: Adding interface: dummy0 [ 56.549203][ T4753] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.575571][ T4753] batman_adv: batadv0: Interface activated: dummy0 [ 56.609459][ T4753] batadv0: mtu less than device minimum [ 56.615493][ T4753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.626320][ T4753] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 56.646486][ T4760] dvmrp1: entered allmulticast mode [ 56.679375][ T4765] loop1: detected capacity change from 0 to 1024 [ 56.698053][ T4765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.717709][ T4765] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.500: Allocating blocks 497-513 which overlap fs metadata [ 56.732905][ T4764] EXT4-fs (loop1): pa ffff888106e61000: logic 128, phys. 273, len 15 [ 56.741099][ T4764] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 56.764861][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.838810][ T4781] netlink: 'syz.1.505': attribute type 1 has an invalid length. [ 56.853977][ T4781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.880300][ T4781] bond2: (slave veth7): Enslaving as an active interface with a down link [ 56.900176][ T4781] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 56.917296][ T4781] bond2: (slave batadv1): making interface the new active one [ 56.927350][ T4781] batadv1: entered promiscuous mode [ 56.932769][ T4781] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 57.482901][ T4794] netlink: 24 bytes leftover after parsing attributes in process `syz.5.509'. [ 57.537370][ T4798] bridge: RTM_NEWNEIGH with invalid ether address [ 57.595722][ T4806] netlink: 'syz.5.515': attribute type 1 has an invalid length. [ 57.609677][ T4806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.630750][ T4806] macvlan0: entered promiscuous mode [ 57.636493][ T4806] macvlan0: entered allmulticast mode [ 57.643530][ T4806] bond1: entered promiscuous mode [ 57.649091][ T4806] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 57.665924][ T4806] bond1: left promiscuous mode [ 57.773565][ T4819] netlink: 8 bytes leftover after parsing attributes in process `syz.5.520'. [ 57.889964][ T4829] loop5: detected capacity change from 0 to 512 [ 58.239902][ T4847] loop5: detected capacity change from 0 to 128 [ 58.246838][ T4847] EXT4-fs: Ignoring removed oldalloc option [ 58.254485][ T4847] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 58.268513][ T4847] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.322031][ T3725] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 58.547418][ T4860] netlink: 'syz.6.538': attribute type 10 has an invalid length. [ 58.555252][ T4860] netlink: 55 bytes leftover after parsing attributes in process `syz.6.538'. [ 58.634952][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.541'. [ 58.643892][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.541'. [ 58.653352][ T4867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.541'. [ 58.837156][ T4883] netlink: 40 bytes leftover after parsing attributes in process `syz.6.549'. [ 58.945967][ T4898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.553'. [ 59.000377][ T29] kauditd_printk_skb: 98 callbacks suppressed [ 59.000397][ T29] audit: type=1400 audit(1751699748.089:528): avc: denied { execute_no_trans } for pid=4903 comm="syz.3.556" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 59.098827][ T29] audit: type=1400 audit(1751699748.159:529): avc: denied { read write } for pid=4906 comm="syz.5.559" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.122302][ T29] audit: type=1400 audit(1751699748.159:530): avc: denied { open } for pid=4906 comm="syz.5.559" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.283541][ T29] audit: type=1400 audit(1751699748.369:531): avc: denied { read write } for pid=4923 comm="syz.3.565" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.307108][ T29] audit: type=1400 audit(1751699748.369:532): avc: denied { open } for pid=4923 comm="syz.3.565" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.348589][ T29] audit: type=1400 audit(1751699748.439:533): avc: denied { create } for pid=4923 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.368163][ T29] audit: type=1400 audit(1751699748.439:534): avc: denied { write } for pid=4923 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 59.752276][ T4951] batadv_slave_1: entered promiscuous mode [ 59.761011][ T4951] batadv_slave_1: left promiscuous mode [ 59.878644][ T4969] ALSA: seq fatal error: cannot create timer (-19) [ 59.915490][ T29] audit: type=1400 audit(1751699748.999:535): avc: denied { write } for pid=3475 comm="kworker/0:5" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9124 scontext=system_u:system_r:kernel_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 59.941815][ T4967] netlink: 'syz.6.581': attribute type 16 has an invalid length. [ 59.949757][ T4967] netlink: 'syz.6.581': attribute type 17 has an invalid length. [ 59.961632][ T4967] net_ratelimit: 17 callbacks suppressed [ 59.961650][ T4967] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 60.001656][ T29] audit: type=1326 audit(1751699749.089:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420366e929 code=0x7ffc0000 [ 60.025188][ T29] audit: type=1326 audit(1751699749.089:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4977 comm="syz.4.587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420366e929 code=0x7ffc0000 [ 60.067247][ T4984] loop4: detected capacity change from 0 to 512 [ 60.112263][ T4984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.118112][ T4993] netlink: 'syz.3.594': attribute type 27 has an invalid length. [ 60.145505][ T4984] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.172541][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.182194][ T4990] loop5: detected capacity change from 0 to 8192 [ 60.208323][ T4993] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.215662][ T4993] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.260721][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.270891][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 60.300668][ T4993] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.309931][ T4993] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.318979][ T4993] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.328297][ T4993] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.363463][ T4997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.373921][ T4997] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.986931][ T5035] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 61.113401][ T5051] __nla_validate_parse: 3 callbacks suppressed [ 61.113422][ T5051] netlink: 24 bytes leftover after parsing attributes in process `syz.5.615'. [ 61.140270][ T5051] netlink: 4 bytes leftover after parsing attributes in process `syz.5.615'. [ 61.208011][ T5053] netlink: 'syz.5.617': attribute type 4 has an invalid length. [ 61.362354][ T5066] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.620'. [ 61.371641][ T5066] netlink: 24 bytes leftover after parsing attributes in process `syz.6.620'. [ 61.588401][ T5088] netlink: 'syz.4.633': attribute type 4 has an invalid length. [ 61.638786][ T5090] loop3: detected capacity change from 0 to 8189 [ 61.655163][ T5090] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.712720][ T5091] netlink: 'syz.5.634': attribute type 2 has an invalid length. [ 61.750078][ T5100] pim6reg1: entered promiscuous mode [ 61.756088][ T5100] pim6reg1: entered allmulticast mode [ 61.999497][ T5121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'. [ 62.243317][ T5149] netlink: 'syz.1.659': attribute type 3 has an invalid length. [ 62.309131][ T5159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.664'. [ 62.474973][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.482549][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.490101][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.501241][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.508853][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.516304][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.523787][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.531234][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.538712][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.546201][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.553646][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.561261][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.569073][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.576830][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.584351][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.591965][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.599428][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.606970][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.614423][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.621861][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.629333][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.636858][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.644335][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.651846][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.659365][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.666849][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.674261][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.681709][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.689152][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.696575][ T36] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 62.704770][ T36] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 62.751452][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.672'. [ 62.878636][ T5127] 9pnet_fd: p9_fd_create_tcp (5127): problem connecting socket to 127.0.0.1 [ 62.906573][ T5196] netlink: 8 bytes leftover after parsing attributes in process `syz.4.678'. [ 63.058486][ T5218] netlink: 168 bytes leftover after parsing attributes in process `syz.3.688'. [ 63.145030][ T5222] netlink: 156 bytes leftover after parsing attributes in process `syz.5.690'. [ 63.179518][ T5225] hub 9-0:1.0: USB hub found [ 63.184379][ T5225] hub 9-0:1.0: 8 ports detected [ 63.330029][ T5238] 0·: renamed from hsr_slave_1 [ 63.347901][ T5238] 0·: entered allmulticast mode [ 63.353555][ T5238] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 63.399314][ T5240] loop1: detected capacity change from 0 to 512 [ 63.435956][ T5240] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.448770][ T5240] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.709281][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.959126][ T5276] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 64.043940][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 64.044009][ T29] audit: type=1400 audit(1751699753.129:654): avc: denied { ioctl } for pid=5283 comm="syz.3.716" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.075923][ T5284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.084545][ T5284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.098554][ T5284] loop3: detected capacity change from 0 to 1024 [ 64.105852][ T5284] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.114870][ T5284] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.134994][ T5284] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 64.145304][ T5284] EXT4-fs (loop3): orphan cleanup on readonly fs [ 64.155325][ T5284] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.716: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.169301][ T5284] EXT4-fs (loop3): 1 orphan inode deleted [ 64.175708][ T5284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.190172][ T29] audit: type=1400 audit(1751699753.279:655): avc: denied { getopt } for pid=5283 comm="syz.3.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 64.576169][ T3438] dummy0: left promiscuous mode [ 64.677293][ T29] audit: type=1400 audit(1751699753.769:656): avc: denied { bind } for pid=5303 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.679166][ T5304] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 64.699484][ T29] audit: type=1400 audit(1751699753.769:657): avc: denied { setopt } for pid=5303 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.708287][ T5304] team0: Port device dummy0 added [ 64.753322][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.763060][ T5304] netlink: 'syz.1.724': attribute type 10 has an invalid length. [ 64.772175][ T5304] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 64.781982][ T5306] random: crng reseeded on system resumption [ 64.794315][ T5304] team0: Failed to send options change via netlink (err -105) [ 64.802105][ T5304] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 64.812553][ T5304] team0: Port device dummy0 removed [ 64.821337][ T5304] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.824283][ T5310] netlink: 'syz.5.727': attribute type 1 has an invalid length. [ 64.844517][ T5310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.864192][ T29] audit: type=1326 audit(1751699753.949:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.1.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350b2e929 code=0x7ffc0000 [ 64.887624][ T29] audit: type=1326 audit(1751699753.949:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.1.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9350b2e929 code=0x7ffc0000 [ 64.903297][ T5310] bond2: (slave gretap1): making interface the new active one [ 64.911022][ T29] audit: type=1326 audit(1751699753.949:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.1.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350b2e929 code=0x7ffc0000 [ 64.919392][ T5310] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 64.941766][ T29] audit: type=1326 audit(1751699753.949:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.1.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9350b2e929 code=0x7ffc0000 [ 64.974182][ T29] audit: type=1326 audit(1751699753.949:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.1.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350b2e929 code=0x7ffc0000 [ 64.998332][ T29] audit: type=1326 audit(1751699753.949:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5313 comm="syz.1.728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9350b2e929 code=0x7ffc0000 [ 65.024545][ T5310] bond2 (unregistering): (slave gretap1): Releasing active interface [ 65.034252][ T5310] bond2 (unregistering): Released all slaves [ 65.162133][ T5326] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 65.320270][ T5344] netlink: 'syz.1.742': attribute type 27 has an invalid length. [ 65.357749][ T5346] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 65.385337][ T5346] bond3: (slave bridge2): Enslaving as a backup interface with an up link [ 65.417531][ T5344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.425548][ T5344] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.435076][ T5344] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.553756][ T5355] syzkaller0: entered promiscuous mode [ 65.559440][ T5355] syzkaller0: entered allmulticast mode [ 65.710688][ T5378] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5378 comm=syz.5.758 [ 66.351869][ T5424] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 66.395840][ T5424] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.426147][ T5427] macvlan2: entered promiscuous mode [ 66.431537][ T5427] macvlan2: entered allmulticast mode [ 66.442434][ T5429] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.481737][ T5429] __nla_validate_parse: 12 callbacks suppressed [ 66.481755][ T5429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.777'. [ 66.510838][ T5427] bond2: entered promiscuous mode [ 66.551007][ T5427] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 66.573372][ T5427] bond2: left promiscuous mode [ 66.609281][ T5429] vlan2: entered promiscuous mode [ 66.614438][ T5429] syz_tun: entered promiscuous mode [ 66.635247][ T5432] netlink: 'syz.4.778': attribute type 3 has an invalid length. [ 66.684199][ T5439] netlink: 'syz.3.781': attribute type 1 has an invalid length. [ 66.749157][ T5436] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 66.757281][ T5436] netlink: 55 bytes leftover after parsing attributes in process `syz.4.780'. [ 66.757664][ T5439] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.796616][ T5449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.851787][ T5449] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 66.887030][ T5449] bond3: (slave vti0): Error -95 calling set_mac_address [ 67.013870][ T5468] vlan2: entered allmulticast mode [ 67.019158][ T5468] bond0: entered allmulticast mode [ 67.024374][ T5468] bond_slave_0: entered allmulticast mode [ 67.030204][ T5468] bond_slave_1: entered allmulticast mode [ 67.042304][ T5468] dummy0: entered allmulticast mode [ 67.133213][ T5476] infiniband syz!: set down [ 67.137874][ T5476] infiniband syz!: added team_slave_0 [ 67.150679][ T5476] RDS/IB: syz!: added [ 67.156656][ T5476] smc: adding ib device syz! with port count 1 [ 67.163120][ T5476] smc: ib device syz! port 1 has pnetid [ 67.163671][ T5486] $Hÿ: renamed from bond0 (while UP) [ 67.182084][ T5486] $Hÿ: entered promiscuous mode [ 67.187353][ T5486] bond_slave_0: entered promiscuous mode [ 67.193312][ T5486] bond_slave_1: entered promiscuous mode [ 67.270489][ T5494] netlink: 256 bytes leftover after parsing attributes in process `syz.1.804'. [ 67.279564][ T5494] netlink: 72 bytes leftover after parsing attributes in process `syz.1.804'. [ 67.652134][ T5524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.817'. [ 67.710531][ T5529] netlink: 96 bytes leftover after parsing attributes in process `syz.3.820'. [ 67.807222][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'. [ 68.423204][ T5596] netlink: 12 bytes leftover after parsing attributes in process `syz.5.851'. [ 68.479093][ T5588] loop1: detected capacity change from 0 to 8188 [ 68.499933][ T5588] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 68.664798][ T5596] 8021q: adding VLAN 0 to HW filter on device bond2 [ 69.146095][ T5606] tipc: Started in network mode [ 69.151064][ T5606] tipc: Node identity 46b3634e868f, cluster identity 4711 [ 69.158313][ T5606] tipc: Enabled bearer , priority 0 [ 69.188177][ T5606] tipc: Disabling bearer [ 69.344917][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 69.344937][ T29] audit: type=1400 audit(1751699758.429:725): avc: denied { watch watch_reads } for pid=5620 comm="syz.1.860" path="/165/file0" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.403828][ T5630] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.862'. [ 69.413150][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.4.862'. [ 69.512899][ T5645] loop5: detected capacity change from 0 to 512 [ 69.521514][ T5645] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 69.544538][ T5645] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.559111][ T5645] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.606000][ T5645] loop5: detected capacity change from 512 to 0 [ 69.618703][ T5645] bio_check_eod: 14 callbacks suppressed [ 69.618721][ T5645] syz.5.870: attempt to access beyond end of device [ 69.618721][ T5645] loop5: rw=12288, sector=72, nr_sectors = 4 limit=0 [ 69.665790][ T5645] EXT4-fs error (device loop5): ext4_read_inode_bitmap:203: comm syz.5.870: Cannot read inode bitmap - block_group = 0, inode_bitmap = 18 [ 69.680398][ T5645] syz.5.870: attempt to access beyond end of device [ 69.680398][ T5645] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 69.693783][ T5645] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 69.702679][ T5645] EXT4-fs (loop5): I/O error while writing superblock [ 69.723702][ T3725] syz-executor: attempt to access beyond end of device [ 69.723702][ T3725] loop5: rw=12288, sector=12, nr_sectors = 4 limit=0 [ 69.758025][ T29] audit: type=1400 audit(1751699758.849:726): avc: denied { append } for pid=5658 comm="syz.1.875" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 69.783472][ T37] kworker/u8:2: attempt to access beyond end of device [ 69.783472][ T37] loop5: rw=524288, sector=136, nr_sectors = 4 limit=0 [ 69.798975][ T37] kworker/u8:2: attempt to access beyond end of device [ 69.798975][ T37] loop5: rw=524288, sector=144, nr_sectors = 4 limit=0 [ 69.813175][ T37] kworker/u8:2: attempt to access beyond end of device [ 69.813175][ T37] loop5: rw=12288, sector=140, nr_sectors = 4 limit=0 [ 69.828016][ T37] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4915: inode #18: block 35: comm kworker/u8:2: unable to read itable block [ 69.842186][ T37] kworker/u8:2: attempt to access beyond end of device [ 69.842186][ T37] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 69.855893][ T37] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 69.864417][ T37] EXT4-fs (loop5): I/O error while writing superblock [ 69.872773][ T3725] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.883456][ T3725] syz-executor: attempt to access beyond end of device [ 69.883456][ T3725] loop5: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 69.897017][ T3725] Buffer I/O error on dev loop5, logical block 0, lost sync page write [ 69.905381][ T3725] EXT4-fs (loop5): I/O error while writing superblock [ 69.912512][ T5648] kmmpd-loop5: attempt to access beyond end of device [ 69.912512][ T5648] loop5: rw=14337, sector=48, nr_sectors = 4 limit=0 [ 69.925932][ T5648] Buffer I/O error on dev loop5, logical block 12, lost sync page write [ 69.934391][ T29] audit: type=1400 audit(1751699758.999:727): avc: denied { shutdown } for pid=5664 comm="syz.3.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 70.015609][ T5659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.024042][ T5659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.035912][ T5659] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 70.047663][ T5659] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 70.176462][ T110] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.229662][ T110] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.288485][ T110] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.356252][ T110] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.378346][ T5710] bond0: (slave bond_slave_1): Releasing backup interface [ 70.440715][ T110] bridge_slave_1: left allmulticast mode [ 70.446623][ T110] bridge_slave_1: left promiscuous mode [ 70.452496][ T110] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.460513][ T110] bridge_slave_0: left allmulticast mode [ 70.466251][ T110] bridge_slave_0: left promiscuous mode [ 70.471903][ T110] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.528849][ T110] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 70.667830][ T110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.678698][ T110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.688830][ T110] bond0 (unregistering): Released all slaves [ 70.699424][ T110] bond1 (unregistering): Released all slaves [ 70.708941][ T110] bond2 (unregistering): Released all slaves [ 70.800338][ T110] hsr_slave_0: left promiscuous mode [ 70.809999][ T110] hsr_slave_1: left promiscuous mode [ 70.823566][ T110] veth1_macvtap: left promiscuous mode [ 70.829967][ T110] veth0_macvtap: left promiscuous mode [ 70.898635][ T110] team0 (unregistering): Port device team_slave_1 removed [ 70.910668][ T110] team0 (unregistering): Port device team_slave_0 removed [ 70.975543][ T5696] chnl_net:caif_netlink_parms(): no params data found [ 71.035869][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.043008][ T5696] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.050435][ T5696] bridge_slave_0: entered allmulticast mode [ 71.058366][ T5696] bridge_slave_0: entered promiscuous mode [ 71.065623][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.072726][ T5696] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.080174][ T5696] bridge_slave_1: entered allmulticast mode [ 71.089946][ T5696] bridge_slave_1: entered promiscuous mode [ 71.122450][ T5696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.133653][ T5696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.164516][ T5696] team0: Port device team_slave_0 added [ 71.173205][ T5696] team0: Port device team_slave_1 added [ 71.204646][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.211785][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.237817][ T5696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.249545][ T5696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.256702][ T5696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.282796][ T5696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.310664][ T5696] hsr_slave_0: entered promiscuous mode [ 71.317046][ T5696] hsr_slave_1: entered promiscuous mode [ 71.323537][ T5696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.331505][ T5696] Cannot create hsr debugfs directory [ 71.390143][ T29] audit: type=1326 audit(1751699760.479:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420366e929 code=0x7ffc0000 [ 71.417322][ T29] audit: type=1326 audit(1751699760.479:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f420366e929 code=0x7ffc0000 [ 71.440688][ T29] audit: type=1326 audit(1751699760.479:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420366e929 code=0x7ffc0000 [ 71.463995][ T29] audit: type=1326 audit(1751699760.479:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f420366e929 code=0x7ffc0000 [ 71.472412][ T5696] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 71.487460][ T29] audit: type=1326 audit(1751699760.509:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5773 comm="syz.4.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f420366e929 code=0x7ffc0000 [ 71.487498][ T29] audit: type=1400 audit(1751699760.509:733): avc: denied { audit_write } for pid=5773 comm="syz.4.917" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 71.487553][ T29] audit: type=1107 audit(1751699760.509:734): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 71.568316][ T5696] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 71.590084][ T5696] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 71.613627][ T5696] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 71.638521][ T5696] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.645739][ T5696] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.653103][ T5696] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.660369][ T5696] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.694973][ T5696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.709715][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.719205][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.740718][ T5696] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.778024][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.785194][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.801804][ T5797] team0 (unregistering): Port device bond0 removed [ 71.827729][ T299] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.834961][ T299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.847344][ T5807] tipc: Started in network mode [ 71.852297][ T5807] tipc: Node identity ac14140f, cluster identity 4711 [ 71.859835][ T5807] tipc: New replicast peer: 255.255.255.255 [ 71.866051][ T5807] tipc: Enabled bearer , priority 10 [ 71.881800][ T5807] __nla_validate_parse: 1 callbacks suppressed [ 71.881821][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.6.929'. [ 71.897161][ T5807] tipc: Disabling bearer [ 71.908271][ T5696] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.921545][ T5810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.930'. [ 72.044615][ T5696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.251813][ T5696] veth0_vlan: entered promiscuous mode [ 72.262380][ T5696] veth1_vlan: entered promiscuous mode [ 72.283654][ T5696] veth0_macvtap: entered promiscuous mode [ 72.292500][ T5696] veth1_macvtap: entered promiscuous mode [ 72.306255][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.319021][ T5696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.332638][ T5696] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.341658][ T5696] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.350643][ T5696] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.359422][ T5696] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.771416][ T5867] loop7: detected capacity change from 0 to 1024 [ 72.799021][ T5867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.830775][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119a0c000: rx timeout, send abort [ 72.844327][ T5867] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.946: Allocating blocks 449-513 which overlap fs metadata [ 72.863713][ T5867] SELinux: Context @ is not valid (left unmapped). [ 72.870931][ T5867] EXT4-fs (loop7): pa ffff888106e61540: logic 48, phys. 177, len 21 [ 72.879150][ T5867] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 4 [ 72.902044][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.961058][ T5874] ªªªªªª: renamed from vlan0 (while UP) [ 73.013881][ T5879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.951'. [ 73.339169][ C0] vcan0: j1939_tp_rxtimer: 0xffff888119a0c000: abort rx timeout. Force session deactivation [ 73.359473][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz.7.959'. [ 73.494869][ T5913] syzkaller0: entered promiscuous mode [ 73.500553][ T5913] syzkaller0: entered allmulticast mode [ 73.804312][ T5943] loop1: detected capacity change from 0 to 1024 [ 73.981244][ T5962] bridge: RTM_NEWNEIGH with invalid state 0x31 [ 74.184903][ T5986] ip6gre1: entered allmulticast mode [ 74.435464][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.6.995'. [ 74.622472][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 74.622491][ T29] audit: type=1326 audit(1751699763.709:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.654269][ T29] audit: type=1326 audit(1751699763.709:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.677781][ T29] audit: type=1326 audit(1751699763.709:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.701245][ T29] audit: type=1326 audit(1751699763.709:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.724612][ T29] audit: type=1326 audit(1751699763.709:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.748230][ T29] audit: type=1326 audit(1751699763.709:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.771693][ T29] audit: type=1326 audit(1751699763.709:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.795108][ T29] audit: type=1326 audit(1751699763.749:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.818517][ T29] audit: type=1326 audit(1751699763.749:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.844394][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.853540][ T29] audit: type=1326 audit(1751699763.749:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6020 comm="syz.3.1006" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f3e4b46e929 code=0x7ffc0000 [ 74.898081][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 75.205734][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.405084][ T6072] netlink: 'syz.6.1026': attribute type 6 has an invalid length. [ 75.456056][ T6079] netlink: 'syz.1.1031': attribute type 4 has an invalid length. [ 75.489236][ T6082] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1033'. [ 75.552050][ T6092] 9pnet_fd: Insufficient options for proto=fd [ 75.634794][ T6105] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6105 comm=syz.1.1039 [ 75.817001][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1050'. [ 75.847645][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.992589][ T6151] netlink: 'syz.1.1062': attribute type 2 has an invalid length. [ 76.000497][ T6151] netlink: 'syz.1.1062': attribute type 1 has an invalid length. [ 76.008481][ T6151] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1062'. [ 76.020615][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.245933][ T6189] batman_adv: batadv0: Interface deactivated: dummy0 [ 76.252811][ T6189] batman_adv: batadv0: Removing interface: dummy0 [ 76.267609][ T6189] bridge_slave_0: left allmulticast mode [ 76.273344][ T6189] bridge_slave_0: left promiscuous mode [ 76.279254][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.300423][ T6189] bridge_slave_1: left allmulticast mode [ 76.306296][ T6189] bridge_slave_1: left promiscuous mode [ 76.312248][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.326252][ T6189] $Hÿ: (slave bond_slave_0): Releasing backup interface [ 76.335200][ T6189] bond_slave_0: left promiscuous mode [ 76.345787][ T6189] $Hÿ: (slave bond_slave_1): Releasing backup interface [ 76.353780][ T6189] bond_slave_1: left promiscuous mode [ 76.364048][ T6189] team0: Port device team_slave_0 removed [ 76.374023][ T6189] team0: Port device team_slave_1 removed [ 76.382695][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.390452][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.402006][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.409605][ T6189] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.429821][ T6187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 76.513843][ T6210] loop7: detected capacity change from 0 to 128 [ 76.522153][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.523860][ T6210] syz.7.1087: attempt to access beyond end of device [ 76.523860][ T6210] loop7: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 76.528629][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.556902][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.563711][ T6212] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 76.571826][ T6212] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 76.592482][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.611209][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.618532][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.625050][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.631728][ T6212] hsr0 speed is unknown, defaulting to 1000 [ 76.641050][ T6220] netlink: 'syz.6.1092': attribute type 2 has an invalid length. [ 76.649113][ T6220] netlink: 'syz.6.1092': attribute type 1 has an invalid length. [ 76.656948][ T6220] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1092'. [ 76.742458][ T6229] sch_tbf: burst 3298 is lower than device lo mtu (39799) ! [ 76.786417][ T6237] loop1: detected capacity change from 0 to 128 [ 76.795535][ T6237] syz.1.1100: attempt to access beyond end of device [ 76.795535][ T6237] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 76.887817][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.117881][ T6253] netlink: 'syz.4.1106': attribute type 1 has an invalid length. [ 77.141771][ T6253] bond4: entered promiscuous mode [ 77.155539][ T6253] 8021q: adding VLAN 0 to HW filter on device bond4 [ 77.180756][ T6257] __nla_validate_parse: 1 callbacks suppressed [ 77.180853][ T6257] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1106'. [ 77.253082][ T6253] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1106'. [ 77.281135][ T6257] batadv1: entered promiscuous mode [ 77.285861][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.287019][ T6257] batadv1: entered allmulticast mode [ 77.316281][ T6257] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 77.324885][ T6257] bond4: (slave batadv1): making interface the new active one [ 77.333374][ T6257] bond4: (slave batadv1): Enslaving as an active interface with an up link [ 77.347009][ T6253] batadv2: entered promiscuous mode [ 77.352316][ T6253] batadv2: entered allmulticast mode [ 77.370314][ T6253] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 77.379172][ T6253] bond4: (slave batadv2): Enslaving as an active interface with an up link [ 77.431988][ T6280] loop4: detected capacity change from 0 to 128 [ 77.446247][ T6280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.454112][ T6280] FAT-fs (loop4): Filesystem has been set read-only [ 77.463594][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.463594][ T6280] loop4: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 77.479543][ T6280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.487438][ T6280] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 77.498134][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.498134][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.513069][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.513069][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.527311][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.527311][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.540977][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.540977][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.554791][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.554791][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.569219][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.569219][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.582652][ T6280] syz.4.1116: attempt to access beyond end of device [ 77.582652][ T6280] loop4: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 77.619810][ T6286] IPv4: Oversized IP packet from 127.202.26.0 [ 77.927634][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.936260][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.197861][ T6298] netlink: 1276 bytes leftover after parsing attributes in process `syz.6.1123'. [ 78.245822][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.390609][ T6310] netlink: 'syz.3.1128': attribute type 2 has an invalid length. [ 78.398512][ T6310] netlink: 'syz.3.1128': attribute type 1 has an invalid length. [ 78.406358][ T6310] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.1128'. [ 78.801669][ T6334] netlink: 'syz.3.1139': attribute type 12 has an invalid length. [ 79.456220][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1163'. [ 79.465303][ T6388] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1163'. [ 79.514899][ T6390] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1164'. [ 79.571281][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 79.723930][ T6404] loop1: detected capacity change from 0 to 2048 [ 79.750083][ T6404] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 79.877145][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 79.877162][ T29] audit: type=1400 audit(1751699768.969:902): avc: denied { map } for pid=6403 comm="syz.1.1171" path="/241/file2/cgroup.controllers" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 79.925131][ T6410] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.957497][ T6410] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 79.970146][ T6410] EXT4-fs (loop1): This should not happen!! Data will be lost [ 79.970146][ T6410] [ 79.979860][ T6410] EXT4-fs (loop1): Total free blocks count 0 [ 79.985892][ T6410] EXT4-fs (loop1): Free/Dirty block details [ 79.991865][ T6410] EXT4-fs (loop1): free_blocks=2415919104 [ 79.997670][ T6410] EXT4-fs (loop1): dirty_blocks=2208 [ 80.003074][ T6410] EXT4-fs (loop1): Block reservation details [ 80.009233][ T6410] EXT4-fs (loop1): i_reserved_data_blocks=138 [ 80.016702][ T3386] net_ratelimit: 3 callbacks suppressed [ 80.016724][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.106704][ T1731] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 80.139974][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1177'. [ 80.149133][ T6423] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1177'. [ 80.262360][ T6441] loop4: detected capacity change from 0 to 1024 [ 80.287689][ T6441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.400898][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.443298][ T29] audit: type=1400 audit(1751699769.529:903): avc: denied { getopt } for pid=6450 comm="syz.1.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.571355][ T6461] netlink: 'syz.4.1194': attribute type 4 has an invalid length. [ 80.636899][ T6459] hsr0 speed is unknown, defaulting to 1000 [ 80.652814][ T6470] netlink: 'syz.4.1198': attribute type 10 has an invalid length. [ 80.669940][ T6470] geneve1: entered promiscuous mode [ 80.680506][ T6470] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 80.752386][ T6477] hsr_slave_0: left promiscuous mode [ 80.775927][ T6477] hsr_slave_1: left promiscuous mode [ 80.815513][ T6478] 8021q: adding VLAN 0 to HW filter on device bond3 [ 80.823427][ T6480] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 80.858198][ T6488] macvlan2: entered promiscuous mode [ 80.863665][ T6488] macvlan2: entered allmulticast mode [ 80.890612][ T6488] bond3: entered promiscuous mode [ 80.896918][ T6488] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.921515][ T6488] bond3: left promiscuous mode [ 80.944790][ T29] audit: type=1326 audit(1751699770.029:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 80.970530][ T29] audit: type=1326 audit(1751699770.039:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 81.025887][ T29] audit: type=1326 audit(1751699770.089:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 81.049285][ T29] audit: type=1326 audit(1751699770.089:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 81.072780][ T29] audit: type=1326 audit(1751699770.089:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 81.096304][ T29] audit: type=1326 audit(1751699770.089:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 81.119730][ T29] audit: type=1107 audit(1751699770.089:910): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 81.133086][ T29] audit: type=1326 audit(1751699770.089:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6496 comm="syz.6.1208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2afbcfe929 code=0x7ffc0000 [ 81.159879][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.260730][ T6513] SELinux: policydb magic number 0x5f637069 does not match expected magic number 0xf97cff8c [ 81.271132][ T6513] SELinux: failed to load policy [ 81.285827][ T6513] loop7: detected capacity change from 0 to 1024 [ 81.308315][ T6513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.320646][ T6513] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.377185][ T6513] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1213: bg 0: block 393: padding at end of block bitmap is not set [ 81.415180][ T6513] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 260 with error 117 [ 81.427876][ T6513] EXT4-fs (loop7): This should not happen!! Data will be lost [ 81.427876][ T6513] [ 81.593207][ T5696] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.615758][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.640144][ T6519] ================================================================== [ 81.648282][ T6519] BUG: KCSAN: data-race in __ep_eventpoll_poll / wakeup_source_report_event [ 81.656987][ T6519] [ 81.659323][ T6519] write to 0xffff888115a106b8 of 1 bytes by task 6516 on cpu 1: [ 81.666974][ T6519] wakeup_source_report_event+0xd6/0x280 [ 81.672637][ T6519] __pm_stay_awake+0x34/0x70 [ 81.677251][ T6519] ep_poll_callback+0x1f6/0x550 [ 81.682137][ T6519] __wake_up+0x66/0xb0 [ 81.686248][ T6519] unix_dgram_peer_wake_relay+0xd3/0xf0 [ 81.691837][ T6519] __wake_up_sync_key+0x52/0x80 [ 81.696716][ T6519] __unix_dgram_recvmsg+0x3b2/0x840 [ 81.701943][ T6519] unix_dgram_recvmsg+0x81/0x90 [ 81.706827][ T6519] sock_recvmsg_nosec+0x107/0x130 [ 81.711885][ T6519] ____sys_recvmsg+0x26f/0x280 [ 81.716674][ T6519] ___sys_recvmsg+0x11f/0x370 [ 81.721461][ T6519] do_recvmmsg+0x1ef/0x540 [ 81.725900][ T6519] __x64_sys_recvmmsg+0xe5/0x170 [ 81.730861][ T6519] x64_sys_call+0x1c6a/0x2fb0 [ 81.735653][ T6519] do_syscall_64+0xd2/0x200 [ 81.740178][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.746095][ T6519] [ 81.748525][ T6519] read to 0xffff888115a106b8 of 1 bytes by task 6519 on cpu 0: [ 81.756089][ T6519] __ep_eventpoll_poll+0x1de/0x4e0 [ 81.761241][ T6519] ep_try_send_events+0x225/0x8b0 [ 81.766288][ T6519] do_epoll_wait+0x2ac/0x690 [ 81.770907][ T6519] __x64_sys_epoll_wait+0x147/0x180 [ 81.776129][ T6519] x64_sys_call+0x26d9/0x2fb0 [ 81.780833][ T6519] do_syscall_64+0xd2/0x200 [ 81.785359][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.791284][ T6519] [ 81.793623][ T6519] value changed: 0x00 -> 0x01 [ 81.798332][ T6519] [ 81.800673][ T6519] Reported by Kernel Concurrency Sanitizer on: [ 81.806864][ T6519] CPU: 0 UID: 0 PID: 6519 Comm: syz.3.1212 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 81.819328][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 81.829407][ T6519] ================================================================== [ 82.045295][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119c8b800: rx timeout, send abort [ 82.167505][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.553605][ C1] vcan0: j1939_tp_rxtimer: 0xffff888119c8b800: abort rx timeout. Force session deactivation [ 83.217588][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.247515][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.645547][ T3402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.287788][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.337488][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.367722][ T1035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.685558][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.408052][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.805714][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.458006][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.487351][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.527297][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog