last executing test programs: 3.702655335s ago: executing program 1 (id=342): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 3.392419845s ago: executing program 1 (id=346): open(0x0, 0x8060, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) getpid() r0 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, 0x0, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xf, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.367676948s ago: executing program 1 (id=348): syz_usb_connect(0x5, 0x2a9, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x2}, 0x6000, 0x0, 0x0, 0x0, 0x4, 0x3}, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xfd}, 0x0, 0x0, 0x1, 0x0, 0x2, 0xff, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x9) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0x8b25714e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3bfffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x91, 0xffff, 0x0, 0x0, 0x0, 0x0, 0xe985}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) accept4(r2, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) 1.972802387s ago: executing program 3 (id=359): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0xfffffffffffffff4}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.918851714s ago: executing program 4 (id=360): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000280)={r3, 0x7, 0x104, 0x7ff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.827896066s ago: executing program 4 (id=361): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) 1.785274831s ago: executing program 3 (id=362): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000bd0000000000006c8d2028f82398fd7d95c1921508ed7788d7c09021c61b6bd00f68cac051f645ec2b68", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x9) r4 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) mount_setattr(r4, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x70, 0x100000}, 0x20) sendmsg$NFT_BATCH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x28}}, 0x4000084) fcntl$notify(r2, 0x402, 0x8000001b) inotify_add_watch(0xffffffffffffffff, 0x0, 0x1070000d6) socket(0x23, 0x1, 0xd6f9) close_range(r2, 0xffffffffffffffff, 0x0) 1.752576235s ago: executing program 3 (id=364): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000380)={0x2, 0x0, @empty}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x1, 0x0, 0x9, 0x0, 0x0, 0x5}, 0x1c) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000008e80)={0x0, 0x0, &(0x7f0000008e40)={&(0x7f0000008dc0)={0x28, 0x1412, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40000c0) listen(r2, 0x2000) socket(0x1e, 0x805, 0x0) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000180)=@random={'security.', '\x00\xf7\xff\xff\x00\x00r\x007\xbcT\r\x82\x95\xd5!H\x16\x95\x00\x8a\xaa\xbd\t\x00\x00\x00\xd5\xe34\x7f\xac\x8e\x90^\x96z^a\xca\xcf;li\x165\x11\x86\x97k*\xbd\rs\xda]q\x9d$\xb8\x91\x9c\xa7OM\xe2\x96T\xeddG\xaa\xf0\x87\f\xe01\xa2\x8b\'*\x0f\xea\xfe\xf1s\xf2wj\xca-&G\xe2^a\x04\x9b\x8c\\'}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000eff427d660b92595dadd13b79f0d199e0000000000b702000014000000b703000000000000850000815664000000bf0900000000000055090100000400009500000000000000bf91000000000000b70200090000000000000000849500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.730098718s ago: executing program 3 (id=365): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) close(0x3) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000200), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0x3, 0x2}) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.725211019s ago: executing program 0 (id=366): socket(0x10, 0x3, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_io_uring_setup(0x88f, &(0x7f00000010c0)={0x0, 0xc941, 0x0, 0x0, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x8, 0x0, r3, 0x80, &(0x7f00000000c0)=@caif=@dgm={0x25, 0x3, 0x3}, 0x0, 0x0, 0x2}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001200000000000000000200100000000000000000000000000003c14141500000000000000000000000000000005040000000a00200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f00000000000000000000000000000000000000000000ffffffffffffffffffffff7f0000000000000000000000000200000000000000000a00000000000000000000008040000000000000000008000000000000000001000000000000004400050000000000000000000000000000000000000004d23c00000000000000ffffffff00"/161], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) 963.609636ms ago: executing program 4 (id=375): syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$eJzs3V1v08gawPHHpYUoR6qODkcIVQWGco5UpBKcBIIirnycSTqQ2JHtoPaKU9EUVaRwRDnSthfLcsPuSrsfgtv9EPuN0N7vXrCynfQtb6zSNgj9f1E7E3vsecaNZurWHgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdh23pK68Vpraji3EviNw7fdrfsWyO1jyYh6Raz4SzIZuZouuvrPw9VX4m9L//02fbcomTjJyP7frvz94eXZmd72IwI+F7t7+y82Op3262kHcnZ+/3Rp+Mqa9kzom4ZT08qEviqXSvbd1Wqoqqauw/Uw0g3lBtqJ/EAtu7dVvlwuKp1b91tereLUdW/hgzsF2y6pR7mmdoLQ9+4+yoXuqqnXjVdLysSr4zIP4g/iYxOpSDsNpba2O+3iuBbEhfKfU6gwrlDBLhTy+UIhX7pfvv/Atmf7FtgnSF+J6X9oMV2n2HsDk5npjv9SFyOetGRN1MCXKxUJxJfGkPVdvfH/33f1yHqPjv+L6aLFq4erF+JvS3I9fXd92Pg/JJbze+3KnuzLC9mQjnSkLa+nHtH5vmqixRMjofhipCFOskR1lygpS0lKYstTWZWqhKKkKkbqoiWUdQklEp18olwJRIsjkfgSiJJlceW2KMlLWcpSFCVacrIuvrTEk5pUxEn2siXbyXEvirKGxXhQKD+0Gdne564thRGtZfzH5E61/wYm8ak3/gMAAAAAgK+Wlfz1PT7/n5NrSa5q6tqedlgAAAAAAOAUJf/5X4yTuTh3TSzO/wEAAAAA+NpYyT12lohk5Uaa2xIruV1q0B8BLkwhRAAAAAAAMKHk///X4ySZA+WGWAfTpXARAAAAAAAAX4kfDmbfHTbHbti8ZP36mwTBnPWuufYvayeZm9fZ6V4K0HdFQFRdsOa7O0mSUprMzrp60cqkhQ4mwfzYTbbkbTeOdId9cVhBMPfHp9RBAN8NDyAjJwO4PCs/yc20zM3NNN3srUlryVZNXedcv/4wL44zPxPptej/L7e/kaT5P3qNeSsj25127tmrzmZyMN7Fe3m3051AsW8exWEH4/KsvEnmW0juuRh45OeSGzG69WYt2drutO2kTidt/0y6+czxGt/Oj6jzvSylpZa6M95mj7c/E9eZzw1rfTeK/IQtfy+30jK3lm+lyYAoCuOiKByNYvCxmDyK4rgoihNGAQDTsjVmFLKODPxDxp1eZkQvtzXutwyrr5a/+utF0qMvp2WWF5KOdXZhQI9uj+vR7QlHt1/6noE0bIyN6/35xKj6Id7gw9B6w3rBig/hhTc7/5Mru3v7d7Z3Np63n7dfFgrFkn3Ptu8XZC5pRjdh7AEADDD+GTtjS1j3xpxV/+PgkoKcPJNX0pFNWUnuNkiuOBi41+yRyxBWxpy1ZpNhMn3Cy8qIs7qLyV0Ovf0WRpY9HkPx7H8QAACco6Ux4/DnjP8rY867j4/lo8+Os0ee1gYAAM6GDj5a2eh7KwhM82m+XM470apWge8+VoGp1LQyXqQDd9Xxalo1Az/yXb8eZ56Yig5V2Go2/SBSVT9QTT80a8n0gar76PdQNxwvMm7YrGsn1Mr1vchxI1Uxoauarf/UTbiqg2TjsKldUzWuExnfU6HfClydUyrU+khBU9FeZKomznqqGZiGE2TUE7/eamhV0aEbmGbkpzvs1WW8qh80kt3mpn2wAQD4Quzu7b/Y6HTar88qc3HaLQQAACcdDtfTjgQAAAAAAAAAAAAAAAAAAAAAAAxz5vf/ncx0HwAgE+9Qzi9mMqMP+Mxp/UzJfDmZsV3H2zPtmACcuT8DAAD///GvUk8=") mbind(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x2, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x8}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x1}, @IFLA_GENEVE_DF={0x5, 0xd, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r3, 0x3, 0x1, 0x8000c62) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000000)) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 868.257429ms ago: executing program 3 (id=377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000840)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x200000, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000140)={0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x8000090}, 0x95) r4 = dup3(r2, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(r4, 0x10f, 0x88) 831.175854ms ago: executing program 0 (id=378): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvtap0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="05030200157e0000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x404c094) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000002100)={@empty, @multicast2, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(r3, &(0x7f0000002400)=[{{&(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000600)="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", 0x8fa}, {&(0x7f0000000480)="6b2dd263c2e4e1b92ce9f92a7189421221652c96fb89e3b22a", 0x19}, {&(0x7f00000004c0)="e621ee674b525bd02df1ce663a8bda21b4017f56307b024e1712786e1bb072af5e0753103d67ae43f0ad779ef603031387d18c305ad86a7973242a3c66a1c637aa67a2ab92ef057c", 0x48}, {&(0x7f0000001600)="7da6c1edb7ee822bf3e0d05628e7c4aeef8a653bed89f469fc4365f72b3abb683ce454bce1e2a6f4b8265ea9c136d19438c7e31022a626358833c5665de5c7c214e8b84da37b2f1d46467b14acbd30703dc2944bfb68e20ec255abe6ae06988acde25c3b62194a86bba2be24ca6e91cb8c6171fcaa19b32bad4ed5fc86cb", 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001a80)="b9896264e72e8a8e43708a80b4e5c75255c7d37cbc2e7bb6b2c33d99fe097eeac4430852d01250e779b5e6399e25514e8023b59c5a125086c445b6973c6fb76aae37629ede19e6ee3ea51e0adb737595d7d1f510a7b98354ed9eb8b436f6a91057863adcfa0a03f5c3af", 0x6a}, {&(0x7f0000001b80)=',\x00\x00\x00\x00', 0x5}, {&(0x7f0000001bc0)="56d7c5a95dcda001b7e61a3ae3faff5f651d275f15b364eebb49ba33cdf46ba21afa9585f69270f283384e8d9caee6184308ed3aaa779fef8298ae0086c09e4b35ec73511ebea4f2acfde5e108c1da5e77878f06e2ae7d70cc4e41d1d05b309bc397a993e5b6013ee3ad60d856df1f5de30c42cc", 0x74}, {&(0x7f0000001c40)="b2986b7c5b2cf1926189c75fd34b5e2f8de7c44418d08cf15f8a6f19a6ec1b634c93fc4bcd123bfdb3f0fbc02b3ee87f46cec14b86d950f2df2176318dc81d06ffe65733d3bb0166316bdfef899c7e32cbea0581fe390b71bfbf5a5567fbdf", 0x5f}], 0x4, &(0x7f0000001d00)=[@ip_retopts={{0x30, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0x1c, 0xf, 0x3, 0x2, [{@private=0xa010101, 0x45f0}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x24}, 0x179e}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x2, [{@broadcast, 0x9}, {@remote, 0x5d28}]}, @generic={0x7, 0x12, "2326b503777d2f53f3c066c598d5d1fa"}, @timestamp={0x44, 0x8, 0x55, 0x0, 0x2, [0xf]}, @cipso={0x86, 0xd, 0x1, [{0x7, 0x5, "a53068"}, {0x2, 0x2}]}, @end, @lsrr={0x83, 0xf, 0x3e, [@local, @loopback, @multicast2]}, @lsrr={0x83, 0x3, 0x57}, @timestamp_prespec={0x44, 0x2c, 0x72, 0x3, 0x6, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x33ad}, {@multicast1, 0x2}, {@local, 0x2}, {@broadcast, 0x2}, {@rand_addr=0x64010102, 0x5}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x150}}, {{0x0, 0x0, &(0x7f00000020c0)=[{0x0}, {0x0}, {&(0x7f0000002000)}], 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="1c00000000000000", @ANYRES32=r4, @ANYBLOB], 0xc8}}, {{&(0x7f0000002280)={0x2, 0x4e24, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002380)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x48}}], 0x4, 0x80) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x300}]}}}}}}}, 0x0) 796.852378ms ago: executing program 0 (id=379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x4e, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x10b}, {0x18, 0x110, 0xc, ')'}], 0x28}, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000000)=[{0x30, 0x0, 0xfd, 0x5ae9}, {0x20, 0x7f, 0x6, 0xfffff00c}, {0x6, 0x0, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r1, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) close(r0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) 779.49318ms ago: executing program 2 (id=380): syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_io_uring_setup(0x12e, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) 748.994624ms ago: executing program 2 (id=381): setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) gettid() write(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mount(&(0x7f00000000c0)=@filename='./cgroup\x00', 0x0, 0x0, 0x1001, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) 727.018497ms ago: executing program 3 (id=382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0xfffffffffffffe42, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r4, &(0x7f00000005c0)="f5", 0x1, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) 714.116108ms ago: executing program 2 (id=383): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100004, 0x2, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f0000000080)=r1}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1a, r5, 0x1, 0x8, 0x6, @broadcast}, 0x14) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 682.821732ms ago: executing program 0 (id=384): openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x8e9e, 0x3, 0x1f94) r0 = getpgrp(0x0) syz_pidfd_open(r0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000900, 0x0, 0x0, 0x0) inotify_rm_watch(0xffffffffffffffff, 0x0) execveat(0xffffffffffffffff, 0x0, &(0x7f0000001780), 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fremovexattr(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000001cc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x320) ioperm(0xf, 0x2, 0x3) 651.929056ms ago: executing program 4 (id=385): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f00000011c0)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x6, 0x9, 0xff, 0x0, 0x3, 0xfffffffe, 0x1}}) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) fallocate(r1, 0x40, 0x6, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='page_pool_state_hold\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 639.386948ms ago: executing program 0 (id=386): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(r4) 553.789679ms ago: executing program 4 (id=387): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = timerfd_create(0x1, 0x800) timerfd_settime(r0, 0x3, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f00000003c0), 0x4) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) semctl$IPC_INFO(0x0, 0x1, 0x3, &(0x7f00000004c0)=""/217) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x430000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 523.140463ms ago: executing program 2 (id=388): syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_open_procfs(0x0, 0x0) socket(0x1, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x3}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000101000000000001000000000000", @ANYRES32=r5], 0x20}}, 0x2000c004) close(r2) 247.690519ms ago: executing program 1 (id=389): socket$igmp6(0xa, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) socket$can_raw(0x1d, 0x3, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x19, 0x4, 0x8, 0x27c8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000006c0)=r0}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value=r5}}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9e00", 0x14, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0xfffd, 0x0, 0x3}}}}}}}, 0x0) 188.564196ms ago: executing program 0 (id=390): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x10208, 0x0, 0x2, 0x0, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8000000ffffffff) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000000100)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r3, 0x0, 0x7, 0x100000000000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) 165.803189ms ago: executing program 1 (id=391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r2], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x4c094) r4 = socket(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000480)='kfree\x00', r6, 0x0, 0x2}, 0x18) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x5, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x79}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000045c0)=@newtfilter={0x74, 0x28, 0xd27, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xffff, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffc, 0x8, 0x0, 0x8, 0x80, {0x4, 0x1, 0x0, 0x2, 0x1000, 0x10000}, {0x5, 0x1, 0x6b4a, 0x9, 0xa6, 0x10000}, 0x4, 0x80000001, 0xc6}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x404c0c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x3}, {0x3, 0x1}}}, 0x7f}}, 0x10) 140.644512ms ago: executing program 2 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) sendmsg$NL80211_CMD_GET_WIPHY(r3, 0x0, 0x40) r4 = getpid() sched_setscheduler(r4, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000010900010073797a30000000003c000000090a010400000300000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001e0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002"], 0xc0}}, 0x40000) 66.658932ms ago: executing program 2 (id=393): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x12024, 0x0, 0x9, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) gettid() socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), 0x0}, 0x20) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, 0x0, 0x25, 0x2}, 0x14) 35.625675ms ago: executing program 4 (id=394): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x9000) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x9, 0x40, 0x0, 0x0, 0x0, 0x40005, 0x590, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14c58, 0x4, 0x0, 0x4, 0x8, 0x4ac, 0xb, 0x0, 0x2133, 0x0, 0x100000000000007}, 0x0, 0x4000000000, r0, 0x1) mmap(&(0x7f0000494000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) r3 = socket$inet6(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@private=0xa010100, 0x4e68, 0x0, 0x0, 0x0, 0xa, 0x0, 0x100}, {0x0, 0x4, 0x0, 0x5000007ffffffc, 0x0, 0x9, 0x4, 0x3ff7}, {0x7fffffffffffffff, 0x1000000000, 0x8, 0x1f}, 0x0, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@private=0xa010101, 0x0, 0x32}, 0x2, @in=@broadcast, 0x3505, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e24, 0x2, @empty, 0xfffffffc}, 0x1c) 0s ago: executing program 1 (id=395): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x20080010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000140)="97", 0x1}, {&(0x7f0000002d40)="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", 0x4e4}], 0x2}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) kernel console output (not intermixed with test programs): [ 17.648650][ T29] audit: type=1400 audit(1768525224.171:62): avc: denied { search } for pid=3202 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.670612][ T29] audit: type=1400 audit(1768525224.171:63): avc: denied { search } for pid=3202 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.693250][ T29] audit: type=1400 audit(1768525224.171:64): avc: denied { search } for pid=3202 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.716106][ T29] audit: type=1400 audit(1768525224.171:65): avc: denied { search } for pid=3202 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.739094][ T29] audit: type=1400 audit(1768525224.171:66): avc: denied { read open } for pid=3203 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 22.382518][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 22.382532][ T29] audit: type=1400 audit(1768525228.911:70): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.411618][ T29] audit: type=1400 audit(1768525228.941:71): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.412403][ T3308] cgroup: Unknown subsys name 'net' [ 22.439263][ T29] audit: type=1400 audit(1768525228.971:72): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.570666][ T3308] cgroup: Unknown subsys name 'cpuset' [ 22.576700][ T3308] cgroup: Unknown subsys name 'rlimit' [ 22.765695][ T29] audit: type=1400 audit(1768525229.291:73): avc: denied { setattr } for pid=3308 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.791756][ T29] audit: type=1400 audit(1768525229.291:74): avc: denied { create } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.812331][ T29] audit: type=1400 audit(1768525229.291:75): avc: denied { write } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.818930][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.832742][ T29] audit: type=1400 audit(1768525229.291:76): avc: denied { read } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.861556][ T29] audit: type=1400 audit(1768525229.301:77): avc: denied { mounton } for pid=3308 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.886387][ T29] audit: type=1400 audit(1768525229.301:78): avc: denied { mount } for pid=3308 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.909648][ T29] audit: type=1400 audit(1768525229.311:79): avc: denied { read } for pid=3049 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 22.931117][ T3308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.003842][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.040255][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 24.113022][ T3331] chnl_net:caif_netlink_parms(): no params data found [ 24.131411][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.138551][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.145927][ T3319] bridge_slave_0: entered allmulticast mode [ 24.152419][ T3319] bridge_slave_0: entered promiscuous mode [ 24.161339][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 24.182764][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.189831][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.196965][ T3319] bridge_slave_1: entered allmulticast mode [ 24.203380][ T3319] bridge_slave_1: entered promiscuous mode [ 24.222159][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.229227][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.236402][ T3318] bridge_slave_0: entered allmulticast mode [ 24.242813][ T3318] bridge_slave_0: entered promiscuous mode [ 24.260703][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 24.276342][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.283573][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.290822][ T3318] bridge_slave_1: entered allmulticast mode [ 24.297234][ T3318] bridge_slave_1: entered promiscuous mode [ 24.304484][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.325495][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.362412][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.369554][ T3331] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.376723][ T3331] bridge_slave_0: entered allmulticast mode [ 24.383060][ T3331] bridge_slave_0: entered promiscuous mode [ 24.390285][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.409423][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.416561][ T3331] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.423757][ T3331] bridge_slave_1: entered allmulticast mode [ 24.430183][ T3331] bridge_slave_1: entered promiscuous mode [ 24.437392][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.449912][ T3319] team0: Port device team_slave_0 added [ 24.472066][ T3319] team0: Port device team_slave_1 added [ 24.477879][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.484999][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.492188][ T3325] bridge_slave_0: entered allmulticast mode [ 24.498459][ T3325] bridge_slave_0: entered promiscuous mode [ 24.522061][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.529113][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.536408][ T3325] bridge_slave_1: entered allmulticast mode [ 24.542649][ T3325] bridge_slave_1: entered promiscuous mode [ 24.549846][ T3331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.559548][ T3318] team0: Port device team_slave_0 added [ 24.578646][ T3331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.588619][ T3318] team0: Port device team_slave_1 added [ 24.598708][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.605850][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.613066][ T3322] bridge_slave_0: entered allmulticast mode [ 24.619492][ T3322] bridge_slave_0: entered promiscuous mode [ 24.626091][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.633057][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.658927][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.682597][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.689721][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.696968][ T3322] bridge_slave_1: entered allmulticast mode [ 24.703423][ T3322] bridge_slave_1: entered promiscuous mode [ 24.710021][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.717002][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.742950][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.754675][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.768961][ T3331] team0: Port device team_slave_0 added [ 24.781822][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.791369][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.798298][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.824170][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.835649][ T3331] team0: Port device team_slave_1 added [ 24.847242][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.861539][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.868478][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.894380][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.909917][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.939535][ T3325] team0: Port device team_slave_0 added [ 24.946023][ T3325] team0: Port device team_slave_1 added [ 24.952342][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.959346][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 24.985370][ T3331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.009251][ T3331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.016358][ T3331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.042376][ T3331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.054013][ T3322] team0: Port device team_slave_0 added [ 25.061507][ T3319] hsr_slave_0: entered promiscuous mode [ 25.067509][ T3319] hsr_slave_1: entered promiscuous mode [ 25.091625][ T3322] team0: Port device team_slave_1 added [ 25.097602][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.104570][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.130625][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.149742][ T3318] hsr_slave_0: entered promiscuous mode [ 25.155713][ T3318] hsr_slave_1: entered promiscuous mode [ 25.161714][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 25.167472][ T3318] Cannot create hsr debugfs directory [ 25.179610][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.186579][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.212560][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.245674][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.252719][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.278686][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.289835][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.296820][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.322729][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.349848][ T3331] hsr_slave_0: entered promiscuous mode [ 25.355787][ T3331] hsr_slave_1: entered promiscuous mode [ 25.361732][ T3331] debugfs: 'hsr0' already exists in 'hsr' [ 25.367450][ T3331] Cannot create hsr debugfs directory [ 25.404523][ T3325] hsr_slave_0: entered promiscuous mode [ 25.410562][ T3325] hsr_slave_1: entered promiscuous mode [ 25.416330][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 25.422113][ T3325] Cannot create hsr debugfs directory [ 25.452252][ T3322] hsr_slave_0: entered promiscuous mode [ 25.458145][ T3322] hsr_slave_1: entered promiscuous mode [ 25.464070][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 25.469784][ T3322] Cannot create hsr debugfs directory [ 25.611201][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.621730][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.634196][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.646404][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.665884][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.674696][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.685823][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.701738][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.719784][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.728940][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.739222][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.752794][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.780605][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.792127][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.806133][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.814817][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.851063][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.865777][ T3331] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.878880][ T3331] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.892069][ T3331] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.904141][ T3331] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.914043][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.929265][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.936342][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.951684][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.958762][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.987631][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.008179][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.024308][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.035528][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.046131][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.053190][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.070953][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.080808][ T401] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.087911][ T401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.098739][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.115476][ T2812] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.122682][ T2812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.136272][ T2812] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.143354][ T2812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.156438][ T2812] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.163493][ T2812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.181789][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.188863][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.209539][ T3331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.225766][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.273964][ T3331] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.293786][ T875] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.300883][ T875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.310313][ T875] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.317400][ T875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.351202][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.376017][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.410654][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.451561][ T3319] veth0_vlan: entered promiscuous mode [ 26.468511][ T3319] veth1_vlan: entered promiscuous mode [ 26.496056][ T3331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.526202][ T3318] veth0_vlan: entered promiscuous mode [ 26.539388][ T3319] veth0_macvtap: entered promiscuous mode [ 26.547064][ T3319] veth1_macvtap: entered promiscuous mode [ 26.555849][ T3318] veth1_vlan: entered promiscuous mode [ 26.584393][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.595610][ T3325] veth0_vlan: entered promiscuous mode [ 26.617205][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.634196][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.643394][ T3325] veth1_vlan: entered promiscuous mode [ 26.651446][ T1828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.662377][ T3318] veth0_macvtap: entered promiscuous mode [ 26.670468][ T1828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.682517][ T1828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.694489][ T3318] veth1_macvtap: entered promiscuous mode [ 26.704857][ T3322] veth0_vlan: entered promiscuous mode [ 26.724930][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.734942][ T3331] veth0_vlan: entered promiscuous mode [ 26.745968][ T3322] veth1_vlan: entered promiscuous mode [ 26.754103][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.757214][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.784294][ T1828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.793928][ T3331] veth1_vlan: entered promiscuous mode [ 26.804248][ T3325] veth0_macvtap: entered promiscuous mode [ 26.819466][ T1828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.835501][ T1828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.846002][ T3488] loop2: detected capacity change from 0 to 128 [ 26.851155][ T3331] veth0_macvtap: entered promiscuous mode [ 26.860371][ T1828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.872928][ T3325] veth1_macvtap: entered promiscuous mode [ 26.883691][ T3331] veth1_macvtap: entered promiscuous mode [ 26.904387][ T3322] veth0_macvtap: entered promiscuous mode [ 26.920557][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.928365][ T3322] veth1_macvtap: entered promiscuous mode [ 26.955861][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.969027][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.980753][ T3331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.989609][ T3496] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 27.009306][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.019358][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.031280][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.040322][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.049192][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.067021][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.085150][ T3500] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 27.096652][ T3500] batman_adv: batadv0: Adding interface: gretap1 [ 27.103094][ T3500] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.128975][ T3500] batman_adv: batadv0: Interface activated: gretap1 [ 27.136205][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.155387][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.169741][ T1828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.209592][ T1828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.219960][ T1828] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.228882][ T1828] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.238039][ T1828] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.249307][ T1828] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.448170][ T3517] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 28.361391][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 28.361411][ T29] audit: type=1400 audit(1768525234.891:152): avc: denied { bind } for pid=3523 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.412116][ T29] audit: type=1400 audit(1768525234.891:153): avc: denied { setopt } for pid=3523 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.432390][ T29] audit: type=1400 audit(1768525234.891:154): avc: denied { create } for pid=3523 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.451723][ T29] audit: type=1400 audit(1768525234.891:155): avc: denied { connect } for pid=3523 comm="syz.1.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 28.471198][ T29] audit: type=1400 audit(1768525234.901:156): avc: denied { mount } for pid=3526 comm="syz.0.11" name="/" dev="hugetlbfs" ino=4693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 28.493862][ T29] audit: type=1400 audit(1768525234.921:157): avc: denied { create } for pid=3524 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 28.513074][ T29] audit: type=1400 audit(1768525234.921:158): avc: denied { ioctl } for pid=3524 comm="syz.3.12" path="socket:[5193]" dev="sockfs" ino=5193 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 28.537310][ T29] audit: type=1400 audit(1768525234.921:159): avc: denied { write } for pid=3524 comm="syz.3.12" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 28.556375][ T29] audit: type=1400 audit(1768525234.941:160): avc: denied { read append } for pid=3526 comm="syz.0.11" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.579411][ T29] audit: type=1400 audit(1768525234.941:161): avc: denied { open } for pid=3526 comm="syz.0.11" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 28.603464][ T3532] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13'. [ 28.614320][ T3532] hsr_slave_0: left promiscuous mode [ 28.625695][ T3532] hsr_slave_1: left promiscuous mode [ 28.680778][ T3539] Zero length message leads to an empty skb [ 28.793321][ T3501] IPVS: starting estimator thread 0... [ 28.837430][ T3551] syz.1.19: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 28.852020][ T3551] CPU: 1 UID: 0 PID: 3551 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT(voluntary) [ 28.852048][ T3551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 28.852063][ T3551] Call Trace: [ 28.852071][ T3551] [ 28.852137][ T3551] __dump_stack+0x1d/0x30 [ 28.852210][ T3551] dump_stack_lvl+0x95/0xd0 [ 28.852256][ T3551] dump_stack+0x15/0x1b [ 28.852288][ T3551] warn_alloc+0x12b/0x1a0 [ 28.852309][ T3551] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 28.852334][ T3551] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 28.852370][ T3551] __vmalloc_node_range_noprof+0xa0/0x1310 [ 28.852470][ T3551] ? common_lsm_audit+0x1ca/0x230 [ 28.852557][ T3551] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 28.852598][ T3551] ? slow_avc_audit+0x104/0x140 [ 28.852701][ T3551] ? should_fail_ex+0x30/0x280 [ 28.852763][ T3551] ? should_failslab+0x8c/0xb0 [ 28.852787][ T3551] vmalloc_user_noprof+0x7d/0xb0 [ 28.852815][ T3551] ? xskq_create+0x80/0xe0 [ 28.852863][ T3551] xskq_create+0x80/0xe0 [ 28.852879][ T3551] xsk_init_queue+0x95/0xf0 [ 28.852914][ T3551] xsk_setsockopt+0x3f5/0x640 [ 28.853015][ T3551] ? __pfx_xsk_setsockopt+0x10/0x10 [ 28.853044][ T3551] __sys_setsockopt+0x184/0x200 [ 28.853136][ T3551] __x64_sys_setsockopt+0x64/0x80 [ 28.853161][ T3551] x64_sys_call+0x21d5/0x3000 [ 28.853186][ T3551] do_syscall_64+0xca/0x2b0 [ 28.853207][ T3551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 28.853238][ T3551] RIP: 0033:0x7f7ea0d9f749 [ 28.853254][ T3551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.853274][ T3551] RSP: 002b:00007f7e9f7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 28.853357][ T3551] RAX: ffffffffffffffda RBX: 00007f7ea0ff5fa0 RCX: 00007f7ea0d9f749 [ 28.853372][ T3551] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 28.853385][ T3551] RBP: 00007f7ea0e23f91 R08: 0000000000000004 R09: 0000000000000000 [ 28.853399][ T3551] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.853410][ T3551] R13: 00007f7ea0ff6038 R14: 00007f7ea0ff5fa0 R15: 00007ffd49bf3a68 [ 28.853426][ T3551] [ 28.853436][ T3551] Mem-Info: [ 28.930124][ T3547] IPVS: using max 2544 ests per chain, 127200 per kthread [ 28.934763][ T3551] active_anon:6872 inactive_anon:0 isolated_anon:0 [ 28.934763][ T3551] active_file:8157 inactive_file:2229 isolated_file:0 [ 28.934763][ T3551] unevictable:0 dirty:1422 writeback:0 [ 28.934763][ T3551] slab_reclaimable:3114 slab_unreclaimable:14202 [ 28.934763][ T3551] mapped:29517 shmem:639 pagetables:1059 [ 28.934763][ T3551] sec_pagetables:0 bounce:0 [ 28.934763][ T3551] kernel_misc_reclaimable:0 [ 28.934763][ T3551] free:1901144 free_pcp:7360 free_cma:0 [ 28.979664][ T3553] netlink: 'syz.2.20': attribute type 1 has an invalid length. [ 28.982054][ T3551] Node 0 active_anon:28300kB inactive_anon:0kB active_file:32628kB inactive_file:8916kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118880kB dirty:5688kB writeback:0kB shmem:3368kB kernel_stack:3648kB pagetables:4236kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 29.157874][ T3551] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 29.187650][ T3551] lowmem_reserve[]: 0 2880 7859 7859 [ 29.193064][ T3551] Node 0 DMA32 free:2945884kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:3528kB free_cma:0kB [ 29.224627][ T3551] lowmem_reserve[]: 0 0 4978 4978 [ 29.229688][ T3551] Node 0 Normal free:4641232kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41640kB inactive_anon:0kB active_file:32628kB inactive_file:8916kB unevictable:0kB writepending:5688kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:11324kB local_pcp:6616kB free_cma:0kB [ 29.262694][ T3551] lowmem_reserve[]: 0 0 0 0 [ 29.267303][ T3551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 29.279985][ T3551] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945884kB [ 29.296413][ T3551] Node 0 Normal: 476*4kB (UME) 168*8kB (UM) 51*16kB (UME) 30*32kB (M) 8*64kB (UME) 16*128kB (UM) 4*256kB (UM) 4*512kB (M) 3*1024kB (M) 3*2048kB (UME) 1128*4096kB (M) = 4640160kB [ 29.314413][ T3551] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 29.323772][ T3551] 13457 total pagecache pages [ 29.328443][ T3551] 0 pages in swap cache [ 29.332676][ T3551] Free swap = 124996kB [ 29.336823][ T3551] Total swap = 124996kB [ 29.341104][ T3551] 2097051 pages RAM [ 29.344900][ T3551] 0 pages HighMem/MovableOnly [ 29.349603][ T3551] 81272 pages reserved [ 29.467144][ T3568] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.481781][ T3567] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 29.505160][ C1] hrtimer: interrupt took 36854 ns [ 29.564767][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 29.582660][ T3574] netlink: 4 bytes leftover after parsing attributes in process `syz.4.27'. [ 29.640982][ T3582] netlink: 'syz.4.31': attribute type 4 has an invalid length. [ 29.673993][ T3583] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.488265][ T3594] loop1: detected capacity change from 0 to 512 [ 30.494922][ T3594] ext2: Unknown parameter 'uid>00000000000000000000' [ 30.594241][ T3601] loop1: detected capacity change from 0 to 1024 [ 30.612247][ T3601] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=2802c09c, mo2=0002] [ 30.620865][ T3601] System zones: 0-1, 3-12 [ 30.631260][ T3601] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.664910][ T3601] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 30.705128][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.730151][ T3603] bridge0: port 3(gretap0) entered blocking state [ 30.736668][ T3603] bridge0: port 3(gretap0) entered disabled state [ 30.753723][ T3603] gretap0: entered allmulticast mode [ 30.759582][ T3603] gretap0: entered promiscuous mode [ 30.765310][ T3603] bridge0: port 3(gretap0) entered blocking state [ 30.771835][ T3603] bridge0: port 3(gretap0) entered forwarding state [ 30.782079][ T3603] gretap0: left allmulticast mode [ 30.787160][ T3603] gretap0: left promiscuous mode [ 30.792351][ T3603] bridge0: port 3(gretap0) entered disabled state [ 30.818313][ T3613] loop1: detected capacity change from 0 to 256 [ 30.827085][ T3568] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.838804][ T3613] msdos: Bad value for 'uid' [ 30.843473][ T3613] msdos: Bad value for 'uid' [ 30.855184][ T3617] netlink: 'syz.3.42': attribute type 1 has an invalid length. [ 30.886152][ T3617] netlink: 32 bytes leftover after parsing attributes in process `syz.3.42'. [ 30.895259][ T3617] 8021q: VLANs not supported on vxcan0 [ 30.899303][ T3619] loop1: detected capacity change from 0 to 1024 [ 30.910983][ T3619] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.921704][ T3619] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.061263][ T3624] ======================================================= [ 31.061263][ T3624] WARNING: The mand mount option has been deprecated and [ 31.061263][ T3624] and is ignored by this kernel. Remove the mand [ 31.061263][ T3624] option from the mount to silence this warning. [ 31.061263][ T3624] ======================================================= [ 31.134965][ T3568] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.217425][ T3568] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.387470][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.417859][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.530190][ T3583] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.551527][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.567801][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.644519][ T3583] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.758255][ T1039] IPVS: starting estimator thread 0... [ 31.784595][ T3583] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.860307][ T3635] IPVS: using max 2592 ests per chain, 129600 per kthread [ 31.986872][ T41] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.997853][ T3639] lo speed is unknown, defaulting to 1000 [ 32.010179][ T3639] lo speed is unknown, defaulting to 1000 [ 32.021659][ T3639] lo speed is unknown, defaulting to 1000 [ 32.027451][ T41] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.043933][ T3639] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.051991][ T41] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.052727][ T3639] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.077964][ T41] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.099546][ T3639] lo speed is unknown, defaulting to 1000 [ 32.105985][ T3639] lo speed is unknown, defaulting to 1000 [ 32.129867][ T3639] lo speed is unknown, defaulting to 1000 [ 32.138472][ T3639] lo speed is unknown, defaulting to 1000 [ 32.144400][ T3622] syz.1.43 (3622) used greatest stack depth: 7256 bytes left [ 32.145024][ T3639] lo speed is unknown, defaulting to 1000 [ 32.158415][ T3639] lo speed is unknown, defaulting to 1000 [ 32.165529][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.191345][ T3645] loop4: detected capacity change from 0 to 128 [ 32.279099][ T3645] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 32.336508][ T3645] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.401501][ T3322] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.457559][ T3659] loop0: detected capacity change from 0 to 256 [ 32.496652][ T3659] FAT-fs (loop0): codepage cp1251 not found [ 33.268830][ T3681] netlink: 12 bytes leftover after parsing attributes in process `syz.3.59'. [ 33.302883][ T3681] team0: Port device team_slave_0 removed [ 33.382500][ T29] kauditd_printk_skb: 326 callbacks suppressed [ 33.382515][ T29] audit: type=1326 audit(1768525239.911:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4070f749 code=0x7ffc0000 [ 33.432843][ T3685] loop0: detected capacity change from 0 to 1024 [ 33.434929][ T29] audit: type=1326 audit(1768525239.941:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4070f749 code=0x7ffc0000 [ 33.451725][ T3685] EXT4-fs: inline encryption not supported [ 33.462512][ T29] audit: type=1326 audit(1768525239.941:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4070f749 code=0x7ffc0000 [ 33.462538][ T29] audit: type=1326 audit(1768525239.941:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4070f749 code=0x7ffc0000 [ 33.468504][ T3685] EXT4-fs: Ignoring removed orlov option [ 33.516721][ T3685] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 33.520712][ T29] audit: type=1326 audit(1768525239.941:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b4070f749 code=0x7ffc0000 [ 33.553578][ T29] audit: type=1326 audit(1768525239.941:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9b4070f783 code=0x7ffc0000 [ 33.576872][ T29] audit: type=1326 audit(1768525239.941:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9b4070e1ff code=0x7ffc0000 [ 33.599962][ T29] audit: type=1326 audit(1768525239.951:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9b4070f7d7 code=0x7ffc0000 [ 33.623263][ T29] audit: type=1326 audit(1768525239.961:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9b4070df90 code=0x7ffc0000 [ 33.646538][ T29] audit: type=1326 audit(1768525239.961:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3684 comm="syz.0.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9b4070f34b code=0x7ffc0000 [ 33.714818][ T3685] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 33.731239][ T3685] System zones: 0-1, 3-12 [ 33.739751][ T3685] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.793610][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.919506][ T3702] lo speed is unknown, defaulting to 1000 [ 34.108682][ T3717] loop4: detected capacity change from 0 to 512 [ 34.128330][ T3717] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.137461][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 34.169710][ T3722] netlink: 4 bytes leftover after parsing attributes in process `syz.1.74'. [ 34.180736][ T3717] EXT4-fs: Mount option(s) incompatible with ext2 [ 34.204436][ T3728] loop2: detected capacity change from 0 to 256 [ 34.218572][ T3722] hsr_slave_1 (unregistering): left promiscuous mode [ 34.237650][ T3730] netlink: 8 bytes leftover after parsing attributes in process `syz.0.75'. [ 34.275205][ T3730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 34.286348][ T3730] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.297931][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 34.310735][ T3730] bridge_slave_0 (unregistering): left allmulticast mode [ 34.317877][ T3730] bridge_slave_0 (unregistering): left promiscuous mode [ 34.324883][ T3730] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.349075][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.4.76'. [ 34.370227][ T3724] syz.2.72: attempt to access beyond end of device [ 34.370227][ T3724] loop2: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 34.385877][ T3732] team0: Port device team_slave_0 removed [ 34.401706][ T3724] syz.2.72: attempt to access beyond end of device [ 34.401706][ T3724] loop2: rw=2049, sector=352, nr_sectors = 8 limit=256 [ 34.417457][ T3736] SELinux: policydb string SE Li does not match my string SE Linux [ 34.425949][ T3736] SELinux: failed to load policy [ 34.461296][ T3739] loop3: detected capacity change from 0 to 512 [ 34.476496][ T3739] EXT4-fs (loop3): 1 truncate cleaned up [ 34.483553][ T3739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.776603][ T3747] loop2: detected capacity change from 0 to 1024 [ 34.805631][ T3739] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.79: bg 0: block 465: padding at end of block bitmap is not set [ 34.830140][ T3747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.881942][ T3739] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 117 [ 34.894577][ T3739] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.894577][ T3739] [ 34.916070][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 2048 with error 28 [ 34.928924][ T52] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.928924][ T52] [ 34.938618][ T52] EXT4-fs (loop3): Total free blocks count 0 [ 34.944677][ T52] EXT4-fs (loop3): Free/Dirty block details [ 34.950648][ T52] EXT4-fs (loop3): free_blocks=0 [ 34.955631][ T52] EXT4-fs (loop3): dirty_blocks=4944 [ 34.960945][ T52] EXT4-fs (loop3): Block reservation details [ 35.044126][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.322503][ T3771] netlink: 172 bytes leftover after parsing attributes in process `syz.1.90'. [ 35.365593][ T3775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.92'. [ 35.375625][ T3774] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.387370][ T3775] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.415481][ T3775] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.437590][ T3774] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.528676][ T3774] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.598256][ T3774] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.622580][ T3783] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 35.631085][ T3783] netlink: 'syz.3.95': attribute type 3 has an invalid length. [ 35.668371][ T53] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.696071][ T53] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.696128][ T53] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.696209][ T53] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.724914][ T3787] lo speed is unknown, defaulting to 1000 [ 35.739069][ T3786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 35.807759][ T3786] team0: entered promiscuous mode [ 35.813483][ T3786] team_slave_1: entered promiscuous mode [ 35.831082][ T3786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 35.845350][ T3786] team0: left promiscuous mode [ 35.850719][ T3786] team_slave_1: left promiscuous mode [ 36.049319][ T3791] netlink: 8 bytes leftover after parsing attributes in process `syz.4.98'. [ 36.116413][ T3795] syz.4.100 uses obsolete (PF_INET,SOCK_PACKET) [ 36.308111][ T3805] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 36.358371][ T3809] netlink: 'syz.3.105': attribute type 4 has an invalid length. [ 36.448261][ T3815] netlink: zone id is out of range [ 36.453522][ T3815] netlink: zone id is out of range [ 36.469351][ T3815] netlink: set zone limit has 8 unknown bytes [ 36.573277][ T3818] loop3: detected capacity change from 0 to 512 [ 36.580786][ T3818] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 36.589549][ T3818] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.617766][ T3822] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 36.630720][ T3822] netlink: 'syz.1.109': attribute type 4 has an invalid length. [ 36.664853][ T3824] netlink: 'syz.1.110': attribute type 1 has an invalid length. [ 36.681609][ T3824] erspan1: entered allmulticast mode [ 36.691894][ T3818] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.107: Allocating blocks 41-42 which overlap fs metadata [ 36.706635][ T3818] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.107: Allocating blocks 41-42 which overlap fs metadata [ 36.720751][ T3818] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.107: Failed to acquire dquot type 1 [ 36.733272][ T3818] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 36.748278][ T3818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.107: corrupted inode contents [ 36.760470][ T3818] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #12: comm syz.3.107: mark_inode_dirty error [ 36.772988][ T3818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.107: corrupted inode contents [ 36.787374][ T3818] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.107: mark_inode_dirty error [ 36.799126][ T3818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.107: corrupted inode contents [ 36.811841][ T3818] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 36.820965][ T3818] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #12: comm syz.3.107: corrupted inode contents [ 36.833125][ T3818] EXT4-fs error (device loop3): ext4_truncate:4635: inode #12: comm syz.3.107: mark_inode_dirty error [ 36.844756][ T3818] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 36.853965][ T3818] EXT4-fs (loop3): 1 truncate cleaned up [ 36.886697][ T3818] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.901356][ T3818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.013855][ T3832] loop3: detected capacity change from 0 to 512 [ 37.047646][ T3832] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.060777][ T3832] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.096227][ T3832] EXT4-fs error (device loop3): __ext4_iget:5426: inode #15: block 1803188595: comm syz.3.112: invalid block [ 37.110314][ T3832] EXT4-fs (loop3): Remounting filesystem read-only [ 37.120676][ T3832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.318985][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.540186][ T3845] loop1: detected capacity change from 0 to 32768 [ 38.166875][ T3861] loop2: detected capacity change from 0 to 164 [ 38.229370][ T3864] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.518940][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 38.518952][ T29] audit: type=1400 audit(1768525245.041:824): avc: denied { setopt } for pid=3877 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.578039][ T29] audit: type=1400 audit(1768525245.101:825): avc: denied { bind } for pid=3877 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.600651][ T29] audit: type=1400 audit(1768525245.121:826): avc: denied { write } for pid=3877 comm="syz.3.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.939754][ T29] audit: type=1400 audit(1768525245.461:827): avc: denied { mount } for pid=3949 comm="syz.3.130" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 39.034214][ T29] audit: type=1400 audit(1768525245.521:828): avc: denied { watch } for pid=3949 comm="syz.3.130" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 39.070810][ T29] audit: type=1326 audit(1768525245.601:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 39.122559][ T29] audit: type=1326 audit(1768525245.621:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 39.145877][ T29] audit: type=1326 audit(1768525245.621:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 39.169194][ T29] audit: type=1326 audit(1768525245.621:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 39.192639][ T29] audit: type=1326 audit(1768525245.621:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3973 comm="syz.3.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 39.218878][ T3987] process 'syz.3.134' launched '/dev/fd/6' with NULL argv: empty string added [ 39.259308][ T3993] __nla_validate_parse: 8 callbacks suppressed [ 39.259323][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 39.281405][ T3993] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.334560][ T3993] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.372759][ T3993] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.412849][ T3993] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.468395][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.487959][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.497464][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.506035][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.547471][ T4038] netlink: '+}[@': attribute type 30 has an invalid length. [ 39.768392][ T4056] infiniband syz!: set active [ 39.773157][ T4056] infiniband syz!: added team_slave_0 [ 39.785960][ T4056] RDS/IB: syz!: added [ 39.791810][ T4056] smc: adding ib device syz! with port count 1 [ 39.798318][ T4056] smc: ib device syz! port 1 has no pnetid [ 39.808640][ T4060] netlink: 68 bytes leftover after parsing attributes in process `syz.0.142'. [ 40.015029][ T4064] loop4: detected capacity change from 0 to 512 [ 40.031573][ T4064] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 40.060878][ T4064] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 40.085923][ T4070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.108132][ T4064] EXT4-fs (loop4): 1 truncate cleaned up [ 40.116622][ T4064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.153350][ T4070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.190885][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.226873][ T4070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.305802][ T4090] loop4: detected capacity change from 0 to 1024 [ 40.313077][ T4090] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.319971][ T4090] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.335029][ T4070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.341169][ T4090] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.368273][ T4090] netlink: 8 bytes leftover after parsing attributes in process `syz.4.150'. [ 40.389493][ T2658] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.401564][ T2658] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.420635][ T2658] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.428955][ T2658] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.443554][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.508855][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.155'. [ 40.594910][ T4100] syz.4.156 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 40.718430][ T4102] program syz.4.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.276689][ T4112] netlink: 64 bytes leftover after parsing attributes in process `syz.0.160'. [ 41.439737][ T4116] loop2: detected capacity change from 0 to 128 [ 41.513633][ T4119] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.530611][ T4119] xt_CT: You must specify a L4 protocol and not use inversions on it [ 41.781321][ T4124] netlink: 'syz.2.165': attribute type 12 has an invalid length. [ 41.811043][ T4128] loop3: detected capacity change from 0 to 736 [ 42.128490][ T4130] lo speed is unknown, defaulting to 1000 [ 42.751755][ T4143] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.789943][ T4148] @: renamed from vlan0 (while UP) [ 42.857718][ T4143] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.969310][ T4151] lo speed is unknown, defaulting to 1000 [ 43.001976][ T4143] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.041317][ T4153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.050805][ T4153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.249852][ T4158] raw_sendmsg: syz.4.176 forgot to set AF_INET. Fix it! [ 43.543498][ T29] kauditd_printk_skb: 342 callbacks suppressed [ 43.543511][ T29] audit: type=1326 audit(1768525250.071:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.623718][ T29] audit: type=1326 audit(1768525250.101:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.647214][ T29] audit: type=1326 audit(1768525250.101:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.670663][ T29] audit: type=1326 audit(1768525250.101:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.693968][ T29] audit: type=1326 audit(1768525250.101:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.717359][ T29] audit: type=1326 audit(1768525250.101:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.740663][ T29] audit: type=1326 audit(1768525250.101:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.764021][ T29] audit: type=1326 audit(1768525250.101:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.787333][ T29] audit: type=1326 audit(1768525250.101:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.810613][ T29] audit: type=1326 audit(1768525250.101:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4159 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 43.992707][ T4143] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.057129][ T4166] loop2: detected capacity change from 0 to 4096 [ 44.067267][ T4166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.111144][ T4171] lo speed is unknown, defaulting to 1000 [ 44.478565][ T4173] loop4: detected capacity change from 0 to 128 [ 44.668042][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 44.687445][ T4180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 44.787541][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.812893][ T4182] loop2: detected capacity change from 0 to 1024 [ 44.820277][ T4182] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 44.831376][ T4182] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 44.844163][ T4182] EXT4-fs (loop2): orphan cleanup on readonly fs [ 44.846558][ T53] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.869233][ T4182] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.185: Failed to acquire dquot type 0 [ 44.880531][ T4185] bridge_slave_0: left allmulticast mode [ 44.886285][ T4185] bridge_slave_0: left promiscuous mode [ 44.890772][ T4182] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.185: Failed to acquire dquot type 0 [ 44.892090][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.918902][ T4182] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.185: Freeing blocks not in datazone - block = 0, count = 4096 [ 44.938400][ T4182] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.185: Failed to acquire dquot type 0 [ 44.939159][ T4185] bridge_slave_1: left allmulticast mode [ 44.955411][ T4185] bridge_slave_1: left promiscuous mode [ 44.957083][ T4182] EXT4-fs (loop2): 1 orphan inode deleted [ 44.961163][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.974774][ T4182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.990308][ T4185] bond0: (slave bond_slave_0): Releasing backup interface [ 45.001946][ T4185] bond0: (slave bond_slave_1): Releasing backup interface [ 45.009788][ T4182] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.027739][ T4185] team0: Port device team_slave_1 removed [ 45.034801][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.042364][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.047748][ T4193] netlink: 24 bytes leftover after parsing attributes in process `syz.2.188'. [ 45.059922][ T4185] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.067332][ T4185] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.076438][ T4185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 45.092622][ T53] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.102965][ T4186] team0: Mode changed to "activebackup" [ 45.125628][ T53] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.164055][ T53] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.197082][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.188'. [ 45.223680][ T4199] mmap: syz.4.191 (4199) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.353573][ T4212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.193'. [ 45.362578][ T4212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.193'. [ 45.390403][ T4212] bridge0: port 3(gretap0) entered blocking state [ 45.396877][ T4212] bridge0: port 3(gretap0) entered disabled state [ 45.406736][ T4212] gretap0: entered allmulticast mode [ 45.415336][ T4212] gretap0: entered promiscuous mode [ 45.420986][ T4212] bridge0: port 3(gretap0) entered blocking state [ 45.427524][ T4212] bridge0: port 3(gretap0) entered forwarding state [ 45.440531][ T4212] gretap0: left allmulticast mode [ 45.445607][ T4212] gretap0: left promiscuous mode [ 45.450810][ T4212] bridge0: port 3(gretap0) entered disabled state [ 45.737638][ T4218] syzkaller0: entered allmulticast mode [ 45.746133][ T4218] syzkaller0: entered promiscuous mode [ 45.769809][ T4218] syzkaller0 (unregistering): left allmulticast mode [ 45.776698][ T4218] syzkaller0 (unregistering): left promiscuous mode [ 45.897084][ T4228] netlink: 'syz.1.200': attribute type 13 has an invalid length. [ 45.980557][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.987914][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.031508][ T4228] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.101680][ T1828] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.110489][ T1828] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.118841][ T1828] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.128206][ T1828] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.208295][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 46.248823][ T4240] loop3: detected capacity change from 0 to 1024 [ 46.257676][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.205'. [ 46.366737][ T4250] lo speed is unknown, defaulting to 1000 [ 46.416074][ T4255] lo speed is unknown, defaulting to 1000 [ 46.465264][ T4261] loop1: detected capacity change from 0 to 256 [ 46.490311][ T4261] FAT-fs (loop1): bogus number of FAT sectors [ 46.496496][ T4261] FAT-fs (loop1): Can't find a valid FAT filesystem [ 47.097334][ T4271] loop1: detected capacity change from 0 to 512 [ 47.721491][ T4264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.748749][ T4289] loop1: detected capacity change from 0 to 128 [ 47.750405][ T4264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.769197][ T4287] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=8219 sclass=netlink_xfrm_socket pid=4287 comm=syz.3.220 [ 47.785154][ T4289] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.221'. [ 47.794456][ T4289] netlink: zone id is out of range [ 47.799571][ T4289] netlink: zone id is out of range [ 47.827132][ T4289] netlink: zone id is out of range [ 47.832359][ T4289] netlink: zone id is out of range [ 47.837552][ T4289] netlink: zone id is out of range [ 47.842709][ T4289] netlink: zone id is out of range [ 47.847812][ T4289] netlink: zone id is out of range [ 47.919225][ T4289] netlink: zone id is out of range [ 47.924449][ T4289] netlink: zone id is out of range [ 48.014655][ T4307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.224'. [ 48.061084][ T4309] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 48.129074][ T4314] netlink: 'syz.3.227': attribute type 10 has an invalid length. [ 48.302622][ T4316] loop3: detected capacity change from 0 to 128 [ 48.521456][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.578017][ T4329] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 48.610626][ T4329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.617720][ T29] kauditd_printk_skb: 367 callbacks suppressed [ 48.617741][ T29] audit: type=1326 audit(1768525255.141:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 48.657064][ T29] audit: type=1326 audit(1768525255.141:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4326 comm="syz.1.233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 48.695704][ T4329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.703372][ T4329] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 48.721299][ T4329] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 48.749704][ T4335] veth3: entered promiscuous mode [ 48.756273][ T4335] bond1: (slave veth3): Enslaving as an active interface with a down link [ 48.812354][ T4329] macvlan2: entered promiscuous mode [ 48.817695][ T4329] macvlan2: entered allmulticast mode [ 48.824083][ T4329] bond1: entered promiscuous mode [ 48.829841][ T4329] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 48.837162][ T29] audit: type=1326 audit(1768525255.361:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 48.854258][ T4347] netlink: 'syz.2.237': attribute type 3 has an invalid length. [ 48.868392][ T4334] loop4: detected capacity change from 0 to 512 [ 48.894282][ T4334] msdos: Unknown parameter 'dots(usefree' [ 48.900587][ T4329] bond1: left promiscuous mode [ 48.900934][ T29] audit: type=1326 audit(1768525255.361:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 48.928690][ T29] audit: type=1326 audit(1768525255.361:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 48.951950][ T29] audit: type=1326 audit(1768525255.361:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 48.975291][ T29] audit: type=1326 audit(1768525255.361:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 48.998684][ T29] audit: type=1326 audit(1768525255.361:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 49.022382][ T29] audit: type=1326 audit(1768525255.361:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 49.045770][ T29] audit: type=1326 audit(1768525255.361:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4345 comm="syz.1.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ea0d9f749 code=0x7ffc0000 [ 49.074228][ T4341] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.097730][ T4342] lo speed is unknown, defaulting to 1000 [ 49.143276][ T4347] netlink: 'syz.2.237': attribute type 3 has an invalid length. [ 49.195834][ T4363] loop0: detected capacity change from 0 to 1024 [ 49.207176][ T4363] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.243: bad orphan inode 134217728 [ 49.231199][ T4363] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.231746][ T4341] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.249253][ T4363] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 49.276173][ T4363] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.302162][ T4341] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.314007][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.373284][ T4341] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.512223][ T862] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.539205][ T862] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.615831][ T862] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.690157][ T862] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.889281][ T4380] __nla_validate_parse: 20 callbacks suppressed [ 49.889291][ T4380] netlink: 64 bytes leftover after parsing attributes in process `syz.4.248'. [ 49.947710][ T4388] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.002963][ T4388] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.081598][ T4388] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.132612][ T4388] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.147115][ T4395] vhci_hcd vhci_hcd.2: invalid port number 0 [ 50.191291][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.212968][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.244127][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.253693][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.285460][ T4412] loop1: detected capacity change from 0 to 128 [ 50.467149][ T4420] loop1: detected capacity change from 0 to 512 [ 50.498348][ T4420] EXT4-fs (loop1): 1 orphan inode deleted [ 50.570660][ T31] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:1: Failed to release dquot type 1 [ 50.600428][ T4425] wireguard0: entered promiscuous mode [ 50.605931][ T4425] wireguard0: entered allmulticast mode [ 50.667864][ T4420] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.891485][ T4420] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.918167][ T4431] lo speed is unknown, defaulting to 1000 [ 51.403332][ T4435] netlink: 'syz.4.265': attribute type 30 has an invalid length. [ 51.431104][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.532832][ T4449] ªªªªªª: renamed from wg2 (while UP) [ 52.078669][ T4466] lo speed is unknown, defaulting to 1000 [ 52.351888][ T4469] SELinux: Context system_u:object_r:var_run_t:s0 is not valid (left unmapped). [ 52.445999][ T4471] tipc: Failed to remove unknown binding: 66,1,1/0:2675144338/2675144340 [ 52.773759][ T4475] loop1: detected capacity change from 0 to 512 [ 52.874846][ T4475] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 52.958786][ T4475] EXT4-fs (loop1): orphan cleanup on readonly fs [ 52.998162][ T4485] netlink: 4 bytes leftover after parsing attributes in process `syz.3.279'. [ 53.021756][ T4475] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm wÞ£ÿ: Failed to acquire dquot type 1 [ 53.078033][ T4485] team0 (unregistering): Port device team_slave_1 removed [ 53.128944][ T4475] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm wÞ£ÿ: bg 0: block 40: padding at end of block bitmap is not set [ 53.178543][ T4487] ..@ÿ: renamed from bond_slave_0 (while UP) [ 53.237403][ T4475] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 53.246734][ T4475] EXT4-fs (loop1): 1 truncate cleaned up [ 53.253075][ T4475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.353539][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.484016][ T4496] lo speed is unknown, defaulting to 1000 [ 53.671821][ T4501] lo speed is unknown, defaulting to 1000 [ 53.822301][ T4503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 53.922359][ T29] kauditd_printk_skb: 579 callbacks suppressed [ 53.922371][ T29] audit: type=1400 audit(1768525260.451:2133): avc: denied { setopt } for pid=4506 comm="syz.2.287" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.969145][ T4509] ref_ctr increment failed for inode: 0x173 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88811cd0b600 [ 54.245806][ T4517] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.336415][ T4517] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.482119][ T4517] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.542002][ T4517] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.626476][ T4525] xt_hashlimit: max too large, truncated to 1048576 [ 54.640783][ T4525] xt_CT: You must specify a L4 protocol and not use inversions on it [ 54.720461][ T862] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.744747][ T862] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.782609][ T862] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.820762][ T862] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.425199][ T29] audit: type=1326 audit(1768525261.951:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.448599][ T29] audit: type=1326 audit(1768525261.951:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.472012][ T29] audit: type=1326 audit(1768525261.951:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.495534][ T29] audit: type=1326 audit(1768525261.951:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.518999][ T29] audit: type=1326 audit(1768525261.951:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.542367][ T29] audit: type=1326 audit(1768525261.951:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.565697][ T29] audit: type=1326 audit(1768525261.951:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.589149][ T29] audit: type=1326 audit(1768525261.951:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4532 comm="syz.2.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f070cddf749 code=0x7ffc0000 [ 55.702297][ T4522] net_ratelimit: 20 callbacks suppressed [ 55.702314][ T4522] Set syz1 is full, maxelem 65536 reached [ 55.717611][ T4540] lo speed is unknown, defaulting to 1000 [ 55.735269][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'. [ 55.745559][ T29] audit: type=1326 audit(1768525261.981:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4531 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b4070f749 code=0x7ffc0000 [ 55.782064][ T4544] bridge0: port 3(gretap0) entered blocking state [ 55.788707][ T4544] bridge0: port 3(gretap0) entered disabled state [ 55.820371][ T4544] gretap0: entered allmulticast mode [ 55.827711][ T4544] gretap0: entered promiscuous mode [ 55.840177][ T4547] netlink: 'syz.0.302': attribute type 30 has an invalid length. [ 56.169764][ T4561] lo speed is unknown, defaulting to 1000 [ 56.958376][ T4565] loop0: detected capacity change from 0 to 128 [ 56.972483][ T4567] lo speed is unknown, defaulting to 1000 [ 57.182734][ T4580] loop3: detected capacity change from 0 to 512 [ 57.217355][ T4581] netlink: 20 bytes leftover after parsing attributes in process `syz.0.313'. [ 57.381989][ T4580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.451803][ T4580] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.516783][ T4571] Set syz1 is full, maxelem 65536 reached [ 57.531706][ T4587] SET target dimension over the limit! [ 57.610438][ T4593] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 57.629699][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.634037][ T4589] lo speed is unknown, defaulting to 1000 [ 57.668116][ T4598] netlink: 4 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 57.694630][ T4597] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 57.860830][ T4606] netlink: 64 bytes leftover after parsing attributes in process `syz.3.322'. [ 58.206078][ T4625] lo speed is unknown, defaulting to 1000 [ 58.490121][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 58.626326][ T4628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.329'. [ 58.949322][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 58.949336][ T29] audit: type=1400 audit(1768525265.471:2769): avc: denied { read } for pid=4630 comm="syz.1.330" path="socket:[11187]" dev="sockfs" ino=11187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.084064][ T29] audit: type=1400 audit(1768525265.511:2770): avc: denied { setopt } for pid=4630 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.103733][ T29] audit: type=1400 audit(1768525265.511:2771): avc: denied { accept } for pid=4630 comm="syz.1.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.123344][ T29] audit: type=1400 audit(1768525265.551:2772): avc: denied { ioctl } for pid=4633 comm="syz.1.331" path="/69/file0" dev="tmpfs" ino=383 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.176883][ T4634] SELinux: failed to load policy [ 59.228204][ T29] audit: type=1326 audit(1768525265.741:2773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 59.251721][ T29] audit: type=1326 audit(1768525265.741:2774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 59.275051][ T29] audit: type=1326 audit(1768525265.741:2775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 59.298677][ T29] audit: type=1326 audit(1768525265.741:2776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 59.322007][ T29] audit: type=1326 audit(1768525265.741:2777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 59.345356][ T29] audit: type=1326 audit(1768525265.741:2778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4637 comm="syz.3.334" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19d27df749 code=0x7ffc0000 [ 59.378166][ T4636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 59.387466][ T4636] netlink: 'syz.2.332': attribute type 30 has an invalid length. [ 59.406062][ T4642] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 59.521878][ T4640] loop3: detected capacity change from 0 to 8192 [ 59.551969][ T4640] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 59.562603][ T1828] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.571783][ T4647] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.631140][ T1828] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.658796][ T1828] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.692260][ T4647] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.711068][ T4653] netlink: 20 bytes leftover after parsing attributes in process `syz.1.338'. [ 59.728869][ T1828] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.784695][ T4657] infiniband syb2: RDMA CMA: cma_listen_on_dev, error -98 [ 59.813337][ T4647] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.832088][ T4661] netlink: 'syz.2.341': attribute type 1 has an invalid length. [ 59.863698][ T4664] netlink: 12 bytes leftover after parsing attributes in process `syz.1.342'. [ 59.867091][ T4661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.883040][ T4657] lo speed is unknown, defaulting to 1000 [ 59.897070][ T4647] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.931387][ T4668] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 59.943902][ T4664] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 59.958332][ T4668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.970218][ T4668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 59.980507][ T875] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 59.992059][ T4664] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 60.003610][ T4664] bond1 (unregistering): Released all slaves [ 60.018780][ T4661] bond1: (slave gretap2): making interface the new active one [ 60.027539][ T4661] bond1: (slave gretap2): Enslaving as an active interface with an up link [ 60.036412][ T875] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 60.148123][ T4674] lo: entered promiscuous mode [ 60.152988][ T4674] lo: entered allmulticast mode [ 60.200281][ T4674] tunl0: entered promiscuous mode [ 60.205562][ T4674] tunl0: entered allmulticast mode [ 60.211994][ T4674] gre0: entered promiscuous mode [ 60.216960][ T4674] gre0: entered allmulticast mode [ 60.223222][ T4674] gretap0: entered promiscuous mode [ 60.228523][ T4674] gretap0: entered allmulticast mode [ 60.235230][ T4674] erspan0: entered promiscuous mode [ 60.240589][ T4674] erspan0: entered allmulticast mode [ 60.247728][ T4674] ip_vti0: entered promiscuous mode [ 60.253011][ T4674] ip_vti0: entered allmulticast mode [ 60.259990][ T4674] ip6_vti0: entered promiscuous mode [ 60.265355][ T4674] ip6_vti0: entered allmulticast mode [ 60.272944][ T4674] sit0: entered promiscuous mode [ 60.277907][ T4674] sit0: entered allmulticast mode [ 60.284230][ T4674] ip6tnl0: entered promiscuous mode [ 60.289539][ T4674] ip6tnl0: entered allmulticast mode [ 60.296565][ T4674] ip6gre0: entered promiscuous mode [ 60.301881][ T4674] ip6gre0: entered allmulticast mode [ 60.308098][ T4674] syz_tun: entered promiscuous mode [ 60.313330][ T4674] syz_tun: entered allmulticast mode [ 60.320327][ T4674] ip6gretap0: entered promiscuous mode [ 60.325867][ T4674] ip6gretap0: entered allmulticast mode [ 60.333111][ T4674] bridge0: entered promiscuous mode [ 60.338342][ T4674] bridge0: entered allmulticast mode [ 60.344608][ T4674] vcan0: entered promiscuous mode [ 60.349638][ T4674] vcan0: entered allmulticast mode [ 60.356176][ T4674] bond0: entered promiscuous mode [ 60.361279][ T4674] bond_slave_0: entered promiscuous mode [ 60.366983][ T4674] bond_slave_1: entered promiscuous mode [ 60.372794][ T4674] bond0: entered allmulticast mode [ 60.377981][ T4674] bond_slave_0: entered allmulticast mode [ 60.383733][ T4674] bond_slave_1: entered allmulticast mode [ 60.390937][ T4674] dummy0: entered promiscuous mode [ 60.396082][ T4674] dummy0: entered allmulticast mode [ 60.402169][ T4674] nlmon0: entered promiscuous mode [ 60.407313][ T4674] nlmon0: entered allmulticast mode [ 60.413780][ T4674] caif0: entered promiscuous mode [ 60.418807][ T4674] caif0: entered allmulticast mode [ 60.424144][ T4674] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.463544][ T4682] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 60.474754][ T4687] bridge0: entered promiscuous mode [ 60.484506][ T4686] macvlan2: entered promiscuous mode [ 60.489826][ T4686] macvlan2: entered allmulticast mode [ 60.499020][ T4686] bond1: entered promiscuous mode [ 60.504179][ T4686] bridge1: entered promiscuous mode [ 60.514518][ T4686] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.522646][ T4686] bond1: left promiscuous mode [ 60.527434][ T4686] bridge1: left promiscuous mode [ 60.538240][ T4689] bridge_slave_1: left allmulticast mode [ 60.544066][ T4689] bridge_slave_1: left promiscuous mode [ 60.549733][ T4689] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.558130][ T4689] bridge_slave_0: left allmulticast mode [ 60.563923][ T4689] bridge_slave_0: left promiscuous mode [ 60.569603][ T4689] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.704275][ T1828] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.730575][ T1828] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.758282][ T1828] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.777730][ T1828] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.603694][ T4719] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 61.627441][ T4719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.640993][ T4722] __nla_validate_parse: 3 callbacks suppressed [ 61.641043][ T4722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.360'. [ 61.657358][ T4719] 8021q: adding VLAN 0 to HW filter on device bond2 [ 61.664883][ T4719] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.676444][ T4719] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 61.692579][ T4722] team1: entered promiscuous mode [ 61.697639][ T4722] team1: entered allmulticast mode [ 61.703087][ T4722] 8021q: adding VLAN 0 to HW filter on device team1 [ 62.346271][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.371'. [ 62.363835][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 62.609207][ T4874] loop4: detected capacity change from 0 to 164 [ 62.636851][ T4874] ISOFS: unable to read i-node block [ 62.656398][ T4874] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 62.694323][ T4874] netlink: 'syz.4.375': attribute type 1 has an invalid length. [ 62.708674][ T4874] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.732325][ T4882] netlink: 20 bytes leftover after parsing attributes in process `+}[@'. [ 62.761543][ T4874] bond1: (slave geneve2): making interface the new active one [ 62.780957][ T4874] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 62.816996][ T4903] VFS: Mount too revealing [ 62.847883][ T4906] loop3: detected capacity change from 0 to 1024 [ 62.869583][ T4906] EXT4-fs: Ignoring removed orlov option [ 62.938441][ T4906] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.961619][ T4919] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.032817][ T4919] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.091978][ T4919] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.173343][ T4919] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.234861][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.338204][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.363724][ T875] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.391273][ T4936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 63.402864][ T875] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.465335][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.1.391'. [ 63.591079][ T4927] ================================================================== [ 63.599197][ T4927] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 63.607282][ T4927] [ 63.609614][ T4927] write to 0xffff888107a95894 of 4 bytes by task 4906 on cpu 0: [ 63.617246][ T4927] xas_set_mark+0x12b/0x140 [ 63.621772][ T4927] __folio_start_writeback+0x155/0x340 [ 63.627255][ T4927] ext4_bio_write_folio+0x5ad/0x9f0 [ 63.632483][ T4927] mpage_process_page_bufs+0x4a1/0x620 [ 63.637950][ T4927] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 63.643769][ T4927] ext4_do_writepages+0x9f6/0x27e0 [ 63.648899][ T4927] ext4_writepages+0x179/0x300 [ 63.653667][ T4927] do_writepages+0x1c6/0x310 [ 63.658275][ T4927] file_write_and_wait_range+0x156/0x2c0 [ 63.663925][ T4927] generic_buffers_fsync_noflush+0x45/0x130 [ 63.669833][ T4927] ext4_sync_file+0x1ab/0x690 [ 63.674517][ T4927] vfs_fsync_range+0x10d/0x130 [ 63.679322][ T4927] ext4_buffered_write_iter+0x34f/0x3c0 [ 63.684888][ T4927] ext4_file_write_iter+0x387/0xf60 [ 63.690105][ T4927] iter_file_splice_write+0x66b/0xa20 [ 63.695568][ T4927] direct_splice_actor+0x156/0x2a0 [ 63.700682][ T4927] splice_direct_to_actor+0x312/0x680 [ 63.706059][ T4927] do_splice_direct+0xda/0x150 [ 63.710831][ T4927] do_sendfile+0x380/0x650 [ 63.715264][ T4927] __x64_sys_sendfile64+0x105/0x150 [ 63.720483][ T4927] x64_sys_call+0x2db1/0x3000 [ 63.725167][ T4927] do_syscall_64+0xca/0x2b0 [ 63.729664][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.735553][ T4927] [ 63.737887][ T4927] read to 0xffff888107a95894 of 4 bytes by task 4927 on cpu 1: [ 63.745427][ T4927] file_write_and_wait_range+0x10e/0x2c0 [ 63.751065][ T4927] generic_buffers_fsync_noflush+0x45/0x130 [ 63.756972][ T4927] ext4_sync_file+0x1ab/0x690 [ 63.761651][ T4927] vfs_fsync_range+0x10d/0x130 [ 63.766429][ T4927] ext4_buffered_write_iter+0x34f/0x3c0 [ 63.771995][ T4927] ext4_file_write_iter+0x387/0xf60 [ 63.777220][ T4927] iter_file_splice_write+0x66b/0xa20 [ 63.782593][ T4927] direct_splice_actor+0x156/0x2a0 [ 63.787707][ T4927] splice_direct_to_actor+0x312/0x680 [ 63.793089][ T4927] do_splice_direct+0xda/0x150 [ 63.797860][ T4927] do_sendfile+0x380/0x650 [ 63.802297][ T4927] __x64_sys_sendfile64+0x105/0x150 [ 63.807508][ T4927] x64_sys_call+0x2db1/0x3000 [ 63.812188][ T4927] do_syscall_64+0xca/0x2b0 [ 63.816680][ T4927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.822565][ T4927] [ 63.824876][ T4927] value changed: 0x0a000021 -> 0x04000021 [ 63.830575][ T4927] [ 63.832881][ T4927] Reported by Kernel Concurrency Sanitizer on: [ 63.839015][ T4927] CPU: 1 UID: 0 PID: 4927 Comm: syz.3.382 Not tainted syzkaller #0 PREEMPT(voluntary) [ 63.848635][ T4927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 63.858677][ T4927] ================================================================== [ 64.096458][ T3331] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.