last executing test programs: 1m52.285748417s ago: executing program 32 (id=518): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2040400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f0005000000deffffffdf25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 1m40.293925105s ago: executing program 33 (id=1072): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001600), 0x109344, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 1m24.492532266s ago: executing program 34 (id=1088): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x1000, &(0x7f0000001dc0)={0x8b, 0x0, 0x80000}, 0x20) 1m10.766006243s ago: executing program 35 (id=2044): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 55.20954364s ago: executing program 0 (id=2678): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x0) 55.086244362s ago: executing program 0 (id=2683): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in=@rand_addr=0x64010101, 0x0, 0xfffe, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffff235b, 0x0, 0x10000000000, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010101, 0x0, 0x6c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0xfc, 0xffdffffc, 0x1000000}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 55.035597507s ago: executing program 0 (id=2685): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x260, 0xffffffff, 0x98, 0x11a8, 0x98, 0xffffffff, 0xffffffff, 0x1240, 0x1240, 0x1240, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@dev, @broadcast, 0x0, 0x0, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x33}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x70bd29, 0x0, {{@in=@multicast1=0xe0000002, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x400}, {0x0, 0x0, 0x101}, 0x0, 0x6e6bb5, 0x0, 0x0, 0x1}}, 0xb8}}, 0x10000000) 54.990223112s ago: executing program 0 (id=2687): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000140), &(0x7f0000000380)=r3}, 0x20) 54.889111331s ago: executing program 0 (id=2693): mkdir(&(0x7f0000000000)='./file0\x00', 0x16e) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 54.830489387s ago: executing program 0 (id=2695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 54.755253495s ago: executing program 7 (id=2696): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x512b, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x400006, 0x20e}, &(0x7f0000000240), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000002c0)=[@ioring_restriction_register_op={0x0, 0x38}], 0x1) 54.673206033s ago: executing program 7 (id=2708): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$nci(r0, 0x0, 0xfffffeea) 54.580044512s ago: executing program 7 (id=2700): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00', 0x7, 0x4, 0x408, 0x110, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@remote, @rand_addr=0x64010100, @loopback, 0x2, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "6d8acaf3daca364aa8985965008e56343c774547e3c05845251c2fca0f1d"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010101, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 54.478196412s ago: executing program 7 (id=2703): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008001000037"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000900000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 54.418101578s ago: executing program 7 (id=2706): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) 54.408352048s ago: executing program 7 (id=2709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x6bc8}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 39.487262373s ago: executing program 36 (id=2695): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) 39.277966744s ago: executing program 37 (id=2709): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x4, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x6bc8}, {&(0x7f00000000c0)=""/160, 0xa0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) 33.362926635s ago: executing program 9 (id=2937): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r2], 0x30}}, 0x94) 33.249255776s ago: executing program 9 (id=2943): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') pwritev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setfsuid(0x0) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x0) 33.10712759s ago: executing program 9 (id=2944): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\b\x00'/19]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 33.009660689s ago: executing program 9 (id=2950): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) pivot_root(&(0x7f0000000040)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00') 32.947599696s ago: executing program 9 (id=2952): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf25e0000001000000000000000000000000ff020000000000000000000000010001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000010000800000000043050000000000000400000000000000ffffffffffffff7f000000000000000001000000000000000000000000000000000000002cbd70000035000002000000500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000060000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 32.19197776s ago: executing program 9 (id=2979): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x13, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 32.180387151s ago: executing program 38 (id=2979): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x63, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x4, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x13, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.713755757s ago: executing program 5 (id=3916): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./bus\x00', 0x1800840, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1, 0x36f, &(0x7f0000000600)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) 4.642783314s ago: executing program 5 (id=3919): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000e43000000018000180140002006e657464657673696d30000000000000080004000600000008000500000000000800030006"], 0x44}}, 0x0) 4.541592084s ago: executing program 5 (id=3930): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffff001}, 0x18) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x301000, 0x800, 0x2, 0x2}, 0x20) 4.390065029s ago: executing program 5 (id=3932): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 4.360799742s ago: executing program 5 (id=3923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) 4.162576171s ago: executing program 5 (id=3927): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000000)=""/56, 0x38) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='map=off,session=0x0000000000000017\x00sbsector=0x0000000100000001,sbsector=0x0000000000000005,session=0x0000000000000062,nojolietAiocharset=cp865,iocharset=cp737,session=0x0000000000000058,showassoc,mode=0xffffffaffffffffe,norock,\x00'], 0xfa, 0x69f, &(0x7f0000000840)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 4.116572136s ago: executing program 39 (id=3927): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, r0, 0x0) read(r1, &(0x7f0000000000)=""/56, 0x38) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB='map=off,session=0x0000000000000017\x00sbsector=0x0000000100000001,sbsector=0x0000000000000005,session=0x0000000000000062,nojolietAiocharset=cp865,iocharset=cp737,session=0x0000000000000058,showassoc,mode=0xffffffaffffffffe,norock,\x00'], 0xfa, 0x69f, &(0x7f0000000840)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) 4.094549538s ago: executing program 2 (id=3933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000380), 0x42000, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.042149523s ago: executing program 2 (id=3935): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.994681528s ago: executing program 2 (id=3936): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000680)='kfree\x00', r2}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x44) 3.937329033s ago: executing program 2 (id=3937): faccessat(0xffffffffffffffff, 0x0, 0x5) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 3.922012355s ago: executing program 2 (id=3938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)={0x28, r3, 0x301, 0x0, 0x0, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x4}}}}}, 0x28}}, 0x40044) 3.742277063s ago: executing program 2 (id=3939): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r2}, &(0x7f0000000f00), &(0x7f0000000f40)=r0, 0x12}, 0x20) 3.712930585s ago: executing program 40 (id=3939): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000f80)={{r2}, &(0x7f0000000f00), &(0x7f0000000f40)=r0, 0x12}, 0x20) 1.874084196s ago: executing program 4 (id=3974): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1}, 0x2}}, 0x10) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) close(r0) 1.780536265s ago: executing program 4 (id=3976): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 1.350869637s ago: executing program 3 (id=3929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 1.342271268s ago: executing program 4 (id=3988): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000006, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 1.307250062s ago: executing program 3 (id=3978): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.234781598s ago: executing program 4 (id=3979): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) 1.168350835s ago: executing program 4 (id=3980): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0xf1) lstat(&(0x7f0000000080)='\x00', &(0x7f00000000c0)) 903.328001ms ago: executing program 4 (id=3981): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) 792.015442ms ago: executing program 3 (id=3982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4000000}, 0x18) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)) 781.979863ms ago: executing program 8 (id=3983): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1c, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(0x0, 0x80000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 751.074166ms ago: executing program 3 (id=3984): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "d57e190d001e6e1d16c1711bbd8adbf65bd846957b378a02340c68117aa1b390", "b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b", "01acae6f69ea1443db8d53af54944d4894a87f20c65bfb8e0c8cfb67", {"38f5e54b3dc7c070b4d66f0f9565df74", "d2653a13d554fee0e7be27c873db314d"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42}, 0xe0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) 729.944128ms ago: executing program 8 (id=3985): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000001dc0)=ANY=[], 0x0) 569.815194ms ago: executing program 1 (id=3993): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x41) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='stack\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 507.276ms ago: executing program 1 (id=3994): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r3, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) 356.722465ms ago: executing program 6 (id=3995): unshare(0x22020400) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="240000003f000500000000000000df25047c0000040000000c0001"], 0x24}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 356.368795ms ago: executing program 1 (id=3996): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x8, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 303.84691ms ago: executing program 6 (id=3997): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x100, 0x0, @empty}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = dup2(r0, r0) write$tun(r2, 0x0, 0x46) 271.450303ms ago: executing program 6 (id=3998): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x635c, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000006080)=@newtfilter={0x149c, 0x2c, 0xd27, 0x8030bd29, 0x2, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x1470, 0x2, [@TCA_FW_ACT={0x4}, @TCA_FW_ACT={0x1468, 0x4, [@m_police={0xc8, 0x3, 0x0, 0x0, {{0xb}, {0x4}, {0x99, 0x6, "fe6d860dd84cbb0f361d847bcdf4f1cca1e189ca63b31409d2acc4a678e75e5969d6bbe5a54ecf29b01ab3b4a3b575873b9ace4b4d426436bc19fe437db796f824b3650f50334b10d4b94e2d7d6c31aea3e06975ef3aaa1770d81ceb777a8a733f87a5fd75c8c7aaaf871120b4486a042df4912b9067f5a70de44db7a118c6fc2718a5996c29d9b0aed950a3b4dd45a3ddb7e37f5a"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_skbedit={0x70, 0x9, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x8000}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x2}, @TCA_SKBEDIT_PTYPE={0x6}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf, 0xf}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_skbmod={0x8c, 0x0, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="584b3d6d9c36"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2, 0x30000006, 0x5, 0x4}, 0x5}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf167}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0xa4, 0x17, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0xd, 0x20000000, 0x5, 0x95}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x4, 0x2, 0x821, 0x6}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x47, 0x5, 0x3, 0x4}, 0xc341}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7, 0x2, 0x9}, 0x1000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_simple={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x6, 0x3, '/\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_police={0x11bc, 0x12, 0x0, 0x0, {{0xb}, {0x1144, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x19c44db1, 0xdcb, 0x1, 0x1, 0x2, 0x1, 0xcd4, 0x7, 0x5, 0x1000, 0x4, 0xfffffffd, 0x1, 0xbb77, 0x1, 0x3, 0x8, 0x2, 0x4, 0xea, 0x2, 0x8b5c, 0x8, 0x34e, 0x8, 0x1, 0x80000001, 0x3, 0x932, 0x7, 0x9, 0x8001, 0x80, 0x2, 0x4, 0x10000, 0x9, 0x200, 0x3, 0x400, 0x4, 0xf, 0x6, 0x1a, 0x5, 0x5, 0x80000000, 0x1bb6, 0x2, 0x9, 0x4, 0x8, 0x6, 0x5, 0x9800, 0x1, 0x356, 0x3, 0x8, 0x1, 0xffffffff, 0xfffffff4, 0x7, 0x6599, 0x4, 0xe931, 0x0, 0x4, 0x5, 0x2, 0x7, 0x1, 0xda, 0x5, 0x75f3c000, 0xa, 0x8c0b, 0x560, 0x7c, 0x100, 0x0, 0xfffffffd, 0x78d7f19a, 0xc, 0x8, 0x7fffffff, 0x3, 0x9, 0x7f, 0x5, 0xffff5c04, 0x8000, 0xdfbe, 0xf6646b3e, 0xffff, 0x2, 0x2e4, 0x400, 0x780f, 0x9, 0x9, 0x9, 0x2, 0x5, 0x4, 0x6, 0x6, 0xd, 0x4, 0xfc, 0x58a6970a, 0x3, 0x1000, 0x12, 0xc, 0x1, 0xff, 0x9, 0x7, 0xe, 0x6, 0x8, 0x7a05cad8, 0x1, 0x84, 0x400, 0xfffffffb, 0x9, 0xe, 0x8, 0x5, 0x4, 0xfffff800, 0x6, 0x7, 0xffffffff, 0x41, 0x6, 0x100, 0xfb67, 0x7, 0xe698, 0x7, 0x4, 0x7, 0x1000, 0xfffffffd, 0x6, 0x9, 0x80000000, 0x0, 0xf, 0xc392, 0xdaa9, 0x7, 0x4, 0x1, 0x9, 0x7fffffff, 0x5d394290, 0x5, 0xd, 0x6, 0x6, 0x200, 0x8, 0x1, 0xa63, 0x5, 0x10001, 0x582, 0x6, 0x6, 0x2, 0x8001, 0x7, 0x8, 0x84c, 0xffff, 0x7, 0xffff, 0x5699, 0xd8fa, 0x7, 0x3, 0x0, 0xb396, 0x7fff, 0x2d3, 0x4, 0x5e73, 0x0, 0x1, 0x18a, 0x3ff, 0x0, 0xc4, 0x2, 0x3ff, 0x3, 0x1ff, 0x8, 0x5fd7000, 0xf3, 0x4, 0x3, 0xd8, 0x1, 0x8, 0x0, 0x8, 0x1, 0xca4a, 0xfffffffe, 0xb, 0x2, 0x3, 0x81, 0x7, 0x6, 0x200, 0x1, 0x39b2, 0x8, 0x1, 0x9, 0x0, 0x9, 0x9, 0x8, 0x4, 0x3, 0x2, 0x446, 0x839, 0x7, 0xea0b, 0x401, 0x1, 0x2, 0xa956, 0x9, 0x7, 0x8, 0x4, 0x1, 0x7f, 0x4d, 0x5, 0xf, 0x800000, 0x35, 0xaa, 0x0, 0x5, 0x4]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x75}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x10}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0x100000000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7ff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x6, 0x6068, 0x1000, 0x80000000, {0x3, 0x1, 0x6, 0xfffa, 0x81, 0x6}, {0xe, 0x1, 0x7f, 0xfffa, 0xdb, 0xffffffff}, 0x6, 0x80, 0x2}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x3, 0xf, 0x0, 0x200, {0x45, 0x1, 0xa, 0x4, 0x7, 0x2}, {0x2, 0x0, 0x4, 0x2000, 0x7, 0x1}, 0x8000, 0x7, 0x3}}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000001, 0xf3, 0x2, 0x9, 0x8, 0x0, 0x1, 0x9, 0x7, 0xff, 0x3c79, 0x3, 0xffffff80, 0xff, 0x5, 0x8001, 0x3ff, 0x2, 0x51, 0x1, 0x1, 0xa729, 0xc, 0xffffff54, 0x4, 0x6, 0x101c, 0x7, 0xfa8, 0x9, 0x8001, 0xd7, 0x7fff, 0x7, 0x3, 0x4, 0x5, 0x401, 0xf906, 0x8, 0x2, 0x1ff, 0x100, 0x8, 0x8, 0x5, 0x3, 0x742, 0x3, 0x8, 0x3, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x8000, 0x200, 0xdcc, 0x1000, 0xc, 0xffffff76, 0xa2e, 0x1000000, 0x4, 0x5, 0xffff, 0x101, 0x13, 0x5, 0x9a, 0x0, 0x4, 0x0, 0x4, 0x7, 0x6, 0x8, 0x10001, 0x1, 0x101, 0x6, 0x4, 0x903, 0x0, 0x2, 0x8e, 0xfffffc01, 0x0, 0x4b, 0x9, 0xfffffffa, 0x7ff, 0x0, 0x4a8, 0x9, 0x4, 0x9, 0x2, 0x4, 0x9, 0x56, 0xfffffffa, 0x6, 0x7, 0x8, 0x3, 0x0, 0x9b4, 0x0, 0x3, 0x101, 0x9, 0x2, 0x100, 0xfff, 0x5, 0x6, 0x1ff, 0x785, 0xc, 0x4, 0x4, 0x200, 0xa, 0xf4, 0xa9, 0xb4, 0x4, 0xfffffffb, 0x32b, 0x80000000, 0x80000001, 0x8, 0x82, 0x3, 0xfffffff8, 0xb865, 0x7, 0x1, 0x7, 0x7, 0x6, 0x4, 0x40000000, 0x5, 0x70000000, 0x8, 0x8, 0xe, 0x2, 0x5, 0xc6c, 0x9, 0x10001, 0x3e, 0x6, 0xfffffff8, 0x5, 0x1, 0x40, 0x4, 0x2834, 0x59e37698, 0xcd3d, 0x751, 0x0, 0x5, 0x5, 0xfffffffa, 0x3ff, 0x1, 0x10000004, 0x80000000, 0xfff, 0xffffffff, 0x8, 0x4, 0x9, 0x6, 0xfffffffa, 0x6, 0x66b, 0x5, 0x5, 0x5, 0x8, 0x6, 0xfffffffb, 0x5, 0xc63, 0x80000000, 0xfffffe01, 0xfffffffe, 0x9, 0x4, 0x4, 0x45be, 0x5, 0x2, 0x5, 0x1, 0x5, 0x6, 0x9, 0x2, 0x82, 0x6a, 0x1000, 0x67, 0x3, 0x400, 0x4, 0x3, 0x1, 0x800, 0x3ff, 0x1ff, 0x9, 0x1, 0x8, 0xfffffffa, 0x6, 0x7, 0x5, 0x5, 0x9, 0x7, 0x0, 0x2, 0xff, 0x400, 0xfb, 0x8ee, 0x2, 0x2, 0x22f5e1cb, 0xa11, 0x4, 0x80000000, 0x5, 0x1, 0xffff, 0x5, 0x6, 0x3, 0x1, 0x3, 0x0, 0x7e, 0x9, 0x7, 0x0, 0x80000001, 0x0, 0x4]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x80000000}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe, 0xbd, 0xbb11, 0x10000, 0xfffffffc, 0x7, 0x6, 0x8, 0x800000, 0x9, 0x3, 0x342, 0x3, 0x1, 0x80000000, 0xc, 0xfffffffa, 0x1000, 0x5, 0x7, 0xd, 0x7, 0x0, 0x101, 0xad, 0xffffffff, 0xd5, 0x1, 0x3, 0x10000000, 0x1000, 0xff, 0x8, 0x0, 0x3, 0x40000000, 0x1, 0x3ff, 0x9, 0x43c9, 0x2, 0x3f7, 0x9e52, 0x0, 0x40000000, 0xf2, 0x5, 0x7, 0x7, 0x4, 0x8, 0x9, 0x7, 0xbc1, 0x9, 0x3, 0x8, 0xfffffff7, 0x4e, 0x5, 0xfff, 0x5a6, 0x8, 0x0, 0x3b, 0xffff, 0x7f, 0x7ff, 0x1, 0x5b5b, 0x4, 0x100, 0x8, 0x4, 0x8b, 0x4a, 0x8, 0x7f, 0x1, 0x81, 0x6, 0xa43, 0x9f, 0x4, 0x7, 0xfffffffb, 0x4, 0x1c000000, 0x10000, 0x7ff, 0x7, 0x9, 0x6, 0x5, 0x8, 0x1, 0x10001, 0x8, 0x1, 0x10001, 0x8, 0x3, 0x7, 0x100, 0xd93, 0x0, 0x0, 0x5, 0x1, 0x5, 0xe448, 0x400, 0x8, 0x4, 0xe99, 0x5, 0x61, 0x38527528, 0x6, 0x40, 0x8, 0x1, 0x8, 0x1, 0xda9, 0x9, 0xfffffff7, 0x2, 0x5, 0x8, 0x7, 0x8, 0x7, 0xfffffc01, 0xd78e, 0x21, 0x8000, 0x2, 0x6, 0x4fa4, 0x200, 0x4, 0x4, 0x5, 0x81, 0x4, 0x824, 0x9, 0x4, 0x9, 0x0, 0x1, 0xf3f, 0x2, 0x5, 0x2, 0x8, 0x8, 0x9, 0x8, 0x9, 0x3, 0x1, 0x51, 0x6, 0x3, 0x76, 0x4, 0x1ff, 0xfffffffa, 0x8, 0x2, 0x60, 0x6, 0xff, 0x7dd, 0x0, 0x2, 0xe, 0x9, 0x3, 0x2, 0x73c5, 0x400, 0xe4, 0x8, 0xfffffffb, 0x2, 0x4, 0xfffffff9, 0x1, 0x6, 0x5, 0xe, 0x2c10, 0x5, 0xfffffff9, 0x1ff, 0xe03469b6, 0x9, 0x2, 0x9, 0x1, 0x2, 0x101, 0x2, 0x6, 0x60, 0x340, 0xfffffffc, 0x6, 0x2, 0x5, 0x1, 0x1, 0x0, 0x1, 0x0, 0xb1ba, 0x4f84, 0x7, 0x0, 0x1, 0x3, 0x3, 0x9, 0xc6, 0xe, 0x3, 0x2, 0x1ff, 0x4, 0x5, 0x0, 0x0, 0xad, 0x2, 0x40000, 0x0, 0x4, 0x4, 0x7, 0x3, 0x1, 0x401, 0x8, 0x7, 0xffffffff, 0x4, 0x4, 0x2, 0x8, 0x6, 0x3, 0x1c000, 0xe3f]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6963}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4, 0xe4, 0x34, 0x1, {0x5, 0x1, 0x9, 0x3, 0x80, 0x5}, {0x4, 0x2, 0x200, 0x7, 0x3, 0x200}, 0x0, 0x4, 0x87}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffffd, 0x71bb, 0x401, 0x9, 0xfffffffb, 0x1000, 0x0, 0x1, 0xbd, 0xbd, 0x5, 0x5, 0x577, 0x5, 0x3, 0x7, 0x7ff, 0x40, 0x8000, 0x879, 0x2, 0x8c89, 0x13c9, 0x1, 0x5eac, 0x8, 0x8, 0x4, 0x6, 0x6, 0x1, 0x0, 0xfffffffe, 0x6, 0x1, 0x5, 0x100, 0x1, 0x1, 0x74, 0xa6a8, 0x100, 0x80000001, 0x40, 0x4, 0x9, 0x6dd, 0x0, 0x0, 0x3, 0x21, 0xd842, 0x0, 0x8, 0x4df, 0x10001, 0x10001, 0x7, 0x9, 0x8e, 0xff, 0x2, 0x6, 0x2, 0x80000001, 0xb6e9, 0x1, 0x10000, 0x41, 0x200, 0x9, 0x3, 0xa0000, 0xa, 0x8, 0xfffffffb, 0x6, 0x8, 0x4, 0x2, 0x10, 0xe, 0x661f, 0x5, 0xf3, 0x3, 0xbf, 0x800, 0x7, 0x4001, 0x3ff, 0x3967, 0x4, 0x0, 0xd8b, 0x8, 0x1, 0x9f0, 0xffffff18, 0x100, 0x40, 0x0, 0x7, 0xa, 0x81, 0x200, 0x6, 0x3, 0xffffffff, 0x1000, 0x6, 0x10, 0x9, 0xcd21, 0x81, 0x7ff, 0x8001, 0x6, 0xffff, 0x4, 0x4, 0xfffffffb, 0x4, 0x2, 0x9, 0xa, 0x5, 0x5, 0x3, 0xb, 0x5, 0x8, 0xa21, 0x9, 0x6, 0x10000, 0x5, 0xcce, 0x4, 0x1c00000, 0x1000, 0x10001, 0x4, 0x7, 0x2, 0x80000000, 0x400, 0x400, 0xfffff5c3, 0x8, 0x0, 0x101, 0x4, 0x7, 0x80000001, 0xe, 0x5, 0x9, 0x40, 0x6, 0x9, 0xffffffff, 0x4, 0xfffff800, 0x0, 0xc1e4, 0x9, 0xa0, 0x7, 0xfff, 0x0, 0x10, 0x8, 0x4, 0x800, 0x821, 0x3, 0x40f539ee, 0x7f, 0x4, 0x0, 0x1, 0xb51, 0x2, 0x2, 0x1, 0x7, 0x1, 0x1, 0x434f, 0x4, 0x4, 0xf, 0x6, 0x4, 0xa, 0x1, 0x31ed, 0x4, 0x179, 0x9, 0x5, 0xa, 0x2a, 0x9, 0x6, 0x8, 0x5, 0x4, 0x9, 0x9, 0x2000, 0x5, 0x80000001, 0xa, 0x0, 0x9, 0x3, 0x6, 0x0, 0x0, 0x8, 0x401, 0x6, 0x7fff, 0x9, 0x5, 0x2, 0xfffffff5, 0x8, 0x7, 0x7fff, 0x7, 0xfffff3d2, 0xb2c, 0x1a9, 0x4, 0x0, 0x687, 0x80, 0x80000001, 0xdbe8, 0x8, 0x7188f37f, 0x2, 0x400, 0x90, 0x2, 0x2b6, 0x4b3d, 0xfffffffa, 0x1, 0x3, 0x7ff, 0x5, 0x7]}, @TCA_POLICE_RESULT={0x8, 0x5, 0xf11}]]}, {0x4e, 0x6, "e4513679a2a987fd6afd93f9f7809739a798e4986a9d0d819ddafae5dc53af09b1e1886c21b22c6098cde951cf89def0e9d9956829a518b85ec649294a00d2af006ae2ef4036d37b9fb4"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x149c}}, 0x0) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 233.907677ms ago: executing program 6 (id=3999): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 226.136667ms ago: executing program 1 (id=4000): io_setup(0xb, &(0x7f00000003c0)=0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) writev(0xffffffffffffffff, 0x0, 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_submit(r0, 0x2, &(0x7f0000000a80)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8, 0x9, r2, &(0x7f0000000380)="ba419f8d4fda55572b", 0x9, 0x8, 0x0, 0x0, r2}]) 175.429692ms ago: executing program 6 (id=4001): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000ac0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 146.743945ms ago: executing program 6 (id=4002): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000007c0)=""/128, 0x80}, {&(0x7f0000000940)=""/244, 0xf4}, {&(0x7f0000000ac0)=""/226, 0xe2}], 0x3, &(0x7f0000000e00)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 135.651507ms ago: executing program 8 (id=4003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) 98.20432ms ago: executing program 8 (id=4004): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4, 0x8000001, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f0000000680)="a6f2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754883a1466def15363b17817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3bfe6c9e53371370cb9e0cc880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f040000004ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6072522df3a4c790c53b59207fb21e718080907964669be539791e3e98687ee059853", 0xffffff68, 0x840, 0x0, 0x56) 95.846531ms ago: executing program 1 (id=4005): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r3, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x90) 69.964513ms ago: executing program 3 (id=4006): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 66.309744ms ago: executing program 8 (id=4007): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf25020000000800080008"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 31.496347ms ago: executing program 8 (id=4008): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x1f0519, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbffffffe, 0x1, @perf_config_ext={0xbb, 0x10001}, 0x6025, 0x4005, 0xb, 0x5, 0x2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r2, 0x0) perf_event_open(&(0x7f0000001d00)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0xed1ca, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0xd, 0x8b, 0x0, 0x66, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r2, 0x2) 16.061358ms ago: executing program 1 (id=4009): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) close(r1) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x0) 0s ago: executing program 3 (id=4010): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): [ 91.650272][ T8280] +}[@: attempt to access beyond end of device [ 91.650272][ T8280] loop6: rw=2049, sector=169, nr_sectors = 872 limit=128 [ 91.675447][ T8283] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 91.690976][ T8283] Symlink component flag not implemented [ 91.696685][ T8283] Symlink component flag not implemented [ 91.738649][ T8283] Symlink component flag not implemented (7) [ 91.744868][ T8283] Symlink component flag not implemented (116) [ 91.768054][ T8119] veth0_vlan: entered promiscuous mode [ 91.777078][ T8119] veth1_vlan: entered promiscuous mode [ 91.794424][ T8119] veth0_macvtap: entered promiscuous mode [ 91.797566][ T8300] vhci_hcd vhci_hcd.2: invalid port number 96 [ 91.806429][ T8300] vhci_hcd vhci_hcd.2: default hub control req: 0000 vfffc i0060 l0 [ 91.814774][ T8119] veth1_macvtap: entered promiscuous mode [ 91.833118][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.844668][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.855838][ T37] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.869975][ T37] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.883207][ T37] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.893051][ T37] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.909723][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 91.909740][ T29] audit: type=1400 audit(1768036001.887:2245): avc: denied { mounton } for pid=8119 comm="syz-executor" path="/root/syzkaller.G3vI43/syz-tmp" dev="sda1" ino=2053 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 91.941524][ T29] audit: type=1400 audit(1768036001.887:2246): avc: denied { mount } for pid=8119 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.963804][ T29] audit: type=1400 audit(1768036001.887:2247): avc: denied { mount } for pid=8119 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 91.985985][ T29] audit: type=1400 audit(1768036001.887:2248): avc: denied { mounton } for pid=8119 comm="syz-executor" path="/root/syzkaller.G3vI43/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.014006][ T29] audit: type=1400 audit(1768036001.887:2249): avc: denied { mounton } for pid=8119 comm="syz-executor" path="/root/syzkaller.G3vI43/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=23613 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 92.042724][ T29] audit: type=1400 audit(1768036001.917:2250): avc: denied { mounton } for pid=8119 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 92.066449][ T29] audit: type=1400 audit(1768036001.917:2251): avc: denied { mount } for pid=8119 comm="syz-executor" name="/" dev="gadgetfs" ino=4624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 92.116435][ T8312] openvswitch: netlink: Missing key (keys=40, expected=80) [ 92.143676][ T29] audit: type=1326 audit(1768036002.117:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.8.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 92.167594][ T29] audit: type=1326 audit(1768036002.127:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.8.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 92.191397][ T29] audit: type=1326 audit(1768036002.127:2254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8316 comm="syz.8.2115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 92.261848][ T8325] loop7: detected capacity change from 0 to 16384 [ 92.328752][ T8325] loop7: detected capacity change from 16384 to 16383 [ 92.344623][ T8339] xt_hashlimit: max too large, truncated to 1048576 [ 92.360651][ T8339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.561643][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.640150][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.648639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.669812][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.758125][ T8397] loop0: detected capacity change from 0 to 128 [ 92.818794][ T8397] +}[@: attempt to access beyond end of device [ 92.818794][ T8397] loop0: rw=2049, sector=169, nr_sectors = 872 limit=128 [ 92.976926][ T8436] __nla_validate_parse: 5 callbacks suppressed [ 92.977013][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 92.992713][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 93.025824][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2161'. [ 93.058057][ T8442] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 93.155254][ T8457] loop4: detected capacity change from 0 to 164 [ 93.162882][ T8457] ISOFS: unable to read i-node block [ 93.169000][ T8457] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 93.358033][ T8490] loop0: detected capacity change from 0 to 512 [ 93.365142][ T8490] EXT4-fs: Ignoring removed bh option [ 93.371158][ T8490] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 93.391784][ T8490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.404719][ T8490] ext4 filesystem being mounted at /453/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 93.522166][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.545338][ T8511] loop8: detected capacity change from 0 to 512 [ 93.561286][ T8511] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2191: bg 0: block 248: padding at end of block bitmap is not set [ 93.576365][ T8511] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.2191: Failed to acquire dquot type 1 [ 93.588497][ T8511] EXT4-fs (loop8): 1 truncate cleaned up [ 93.594693][ T8511] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.607875][ T8510] loop0: detected capacity change from 0 to 8192 [ 93.609965][ T8511] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.640994][ T8119] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.790108][ T8533] netlink: 'syz.0.2197': attribute type 3 has an invalid length. [ 93.885436][ T8549] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2204'. [ 94.110308][ T8573] netlink: 'syz.6.2215': attribute type 15 has an invalid length. [ 94.160738][ T8579] loop7: detected capacity change from 0 to 1024 [ 94.180283][ T8579] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.199664][ T8579] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2857: Unable to expand inode 13. Delete some EAs or run e2fsck. [ 94.241751][ T6904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.289466][ T8597] sd 0:0:1:0: device reset [ 94.410573][ T8613] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.435551][ T5891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.459108][ T8611] loop4: p1 p2 p3 p4 [ 94.463268][ T8611] loop4: p1 size 196608 extends beyond EOD, truncated [ 94.470973][ T8611] loop4: p2 start 164919041 is beyond EOD, truncated [ 94.477733][ T8611] loop4: p3 size 66846464 extends beyond EOD, truncated [ 94.485773][ T8611] loop4: p4 size 37048832 extends beyond EOD, truncated [ 94.559021][ C0] net_ratelimit: 9 callbacks suppressed [ 94.559037][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.638688][ T3489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.734622][ T8652] netlink: 332 bytes leftover after parsing attributes in process `syz.7.2242'. [ 94.818397][ T8660] netlink: 'syz.4.2245': attribute type 13 has an invalid length. [ 94.827645][ T8660] gretap0: refused to change device tx_queue_len [ 94.834295][ T8660] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 94.871733][ T8663] SELinux: Context system_u:object is not valid (left unmapped). [ 94.981541][ T8669] wireguard0: entered promiscuous mode [ 94.987790][ T8669] wireguard0: entered allmulticast mode [ 95.097140][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.106744][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.115583][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.124117][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.132677][ T8687] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.142912][ T8686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.149969][ T8689] FAT-fs (loop4): unable to read block(16384) for building NFS inode [ 95.230742][ T8704] EXT4-fs: Ignoring removed nomblk_io_submit option [ 95.240688][ T8704] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 95.254049][ T8704] System zones: 0-1, 3-36 [ 95.255681][ T8708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2262'. [ 95.286160][ T8704] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.315450][ T6904] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.341169][ T8723] netlink: 'syz.7.2266': attribute type 13 has an invalid length. [ 95.357298][ T8723] gretap0: refused to change device tx_queue_len [ 95.365244][ T8723] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 95.501199][ T8749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: none. [ 95.590295][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 95.635118][ T8774] netlink: 'syz.0.2283': attribute type 3 has an invalid length. [ 96.591074][ T3489] IPVS: starting estimator thread 0... [ 96.679287][ T8808] IPVS: using max 2112 ests per chain, 105600 per kthread [ 96.703235][ T8842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2301'. [ 96.728858][ T8844] pim6reg1: entered promiscuous mode [ 96.734416][ T8844] pim6reg1: entered allmulticast mode [ 96.960855][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 96.960873][ T29] audit: type=1400 audit(1768036006.937:2506): avc: denied { compute_member } for pid=8890 comm="syz.7.2322" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.057702][ T29] audit: type=1400 audit(1768036007.027:2507): avc: denied { setopt } for pid=8906 comm="syz.7.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 97.120038][ T29] audit: type=1400 audit(1768036007.067:2508): avc: denied { ioctl } for pid=8908 comm="syz.7.2328" path="socket:[23437]" dev="sockfs" ino=23437 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.144788][ T29] audit: type=1400 audit(1768036007.067:2509): avc: denied { bind } for pid=8908 comm="syz.7.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.164246][ T29] audit: type=1400 audit(1768036007.067:2510): avc: denied { setopt } for pid=8908 comm="syz.7.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.184100][ T29] audit: type=1400 audit(1768036007.067:2511): avc: denied { write } for pid=8908 comm="syz.7.2328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 97.329786][ T8935] netlink: 332 bytes leftover after parsing attributes in process `syz.8.2333'. [ 97.808231][ T8985] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2356'. [ 97.858175][ T29] audit: type=1326 audit(1768036007.827:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.6.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 97.882774][ T29] audit: type=1326 audit(1768036007.857:2513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.6.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 97.906425][ T29] audit: type=1326 audit(1768036007.857:2514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.6.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 97.930318][ T29] audit: type=1326 audit(1768036007.857:2515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8992 comm="syz.6.2359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 98.277589][ T9028] bridge1: entered promiscuous mode [ 98.283214][ T9028] bridge1: entered allmulticast mode [ 98.518335][ T9043] SELinux: failed to load policy [ 98.717718][ T9059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2389'. [ 98.863377][ T9072] SELinux: failed to load policy [ 99.036434][ T9086] binfmt_misc: register: failed to install interpreter file ./file0 [ 99.144818][ T9093] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9093 comm=syz.0.2403 [ 99.169104][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2403'. [ 99.280368][ T9103] process 'syz.6.2407' launched './file0' with NULL argv: empty string added [ 99.378021][ T9036] syz.8.2379 (9036) used greatest stack depth: 7264 bytes left [ 99.575784][ T9136] net_ratelimit: 14 callbacks suppressed [ 99.575803][ T9136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.601871][ T9145] set_capacity_and_notify: 5 callbacks suppressed [ 99.601891][ T9145] loop6: detected capacity change from 0 to 256 [ 99.634509][ T9136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.665624][ T9136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.679965][ T9136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.688495][ T9136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.744415][ T9135] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.839614][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 99.850761][ T9167] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2431'. [ 99.869510][ T9170] netlink: 'syz.6.2433': attribute type 2 has an invalid length. [ 100.034372][ T9199] netlink: 'syz.6.2447': attribute type 11 has an invalid length. [ 100.042535][ T9199] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2447'. [ 100.097874][ T9203] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 100.140307][ T9205] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2445'. [ 100.255981][ T9220] loop8: detected capacity change from 0 to 128 [ 100.357709][ T9235] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 100.674799][ T9258] netlink: 'syz.7.2471': attribute type 12 has an invalid length. [ 100.683000][ T9258] netlink: 'syz.7.2471': attribute type 29 has an invalid length. [ 100.691024][ T9258] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2471'. [ 100.700213][ T9258] netlink: 43 bytes leftover after parsing attributes in process `syz.7.2471'. [ 100.748019][ T9262] loop6: detected capacity change from 0 to 512 [ 100.755392][ T9264] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.777531][ T9262] EXT4-fs (loop6): invalid inodes per group: 0 [ 100.777531][ T9262] [ 100.839221][ T9270] 9pnet: p9_errstr2errno: server reported unknown error ÿÿ [ 100.881167][ T3422] IPVS: starting estimator thread 0... [ 100.887169][ T3422] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.904549][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2485'. [ 100.922722][ T9292] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2485'. [ 100.959445][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.967692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.975866][ T9290] IPVS: using max 2208 ests per chain, 110400 per kthread [ 101.023267][ T90] Bluetooth: hci0: Frame reassembly failed (-84) [ 101.073717][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2490'. [ 101.083220][ T9307] loop0: detected capacity change from 0 to 8192 [ 101.090206][ T9307] FAT-fs (loop0): bogus logical sector size 516 [ 101.096604][ T9307] FAT-fs (loop0): Can't find a valid FAT filesystem [ 101.181287][ T9335] netlink: 'syz.0.2500': attribute type 21 has an invalid length. [ 101.194707][ T9335] netlink: 'syz.0.2500': attribute type 1 has an invalid length. [ 101.254019][ T9345] binfmt_misc: register: failed to install interpreter file ./file0 [ 101.384321][ T9368] loop0: detected capacity change from 0 to 512 [ 101.407537][ T9368] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2517: invalid block [ 101.424132][ T9368] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2517: invalid indirect mapped block 4294967295 (level 1) [ 101.459787][ T9368] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2517: invalid indirect mapped block 4294967295 (level 1) [ 101.475074][ T9368] EXT4-fs (loop0): 2 truncates cleaned up [ 101.482132][ T9368] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.497742][ T9368] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.019908][ T29] kauditd_printk_skb: 186 callbacks suppressed [ 102.019933][ T29] audit: type=1326 audit(1768036011.997:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40fdf165e7 code=0x7ffc0000 [ 102.091600][ T29] audit: type=1326 audit(1768036012.027:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40fdebb829 code=0x7ffc0000 [ 102.115319][ T29] audit: type=1326 audit(1768036012.027:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f40fdf165e7 code=0x7ffc0000 [ 102.139359][ T29] audit: type=1326 audit(1768036012.027:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f40fdebb829 code=0x7ffc0000 [ 102.163492][ T29] audit: type=1326 audit(1768036012.027:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40fdf1f749 code=0x7ffc0000 [ 102.187991][ T29] audit: type=1326 audit(1768036012.027:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40fdf1f749 code=0x7ffc0000 [ 102.211613][ T29] audit: type=1326 audit(1768036012.027:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f40fdf1f749 code=0x7ffc0000 [ 102.235553][ T29] audit: type=1326 audit(1768036012.027:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40fdf1f749 code=0x7ffc0000 [ 102.259852][ T29] audit: type=1326 audit(1768036012.027:2710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9516 comm="syz.0.2546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40fdf1f749 code=0x7ffc0000 [ 102.659471][ T9533] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 102.702222][ T29] audit: type=1400 audit(1768036012.677:2711): avc: denied { create } for pid=9539 comm="syz.0.2555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.839408][ T9565] netlink: 'syz.4.2564': attribute type 1 has an invalid length. [ 102.881703][ T9572] futex_wake_op: syz.6.2565 tries to shift op by -1; fix this program [ 102.911342][ T9565] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.001672][ T9606] loop7: detected capacity change from 0 to 764 [ 103.038600][ T4944] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 103.038621][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 103.079905][ T9606] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 103.308052][ T9656] loop0: detected capacity change from 0 to 1024 [ 103.325520][ T9656] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.360747][ T9656] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2587: Invalid block bitmap block 0 in block_group 0 [ 103.385743][ T9656] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2587: Failed to acquire dquot type 0 [ 103.397927][ T9656] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.2587: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.412060][ T9656] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.2587: Invalid inode bitmap blk 0 in block_group 0 [ 103.425231][ T9656] EXT4-fs error (device loop0) in ext4_free_inode:361: Corrupt filesystem [ 103.434265][ T9656] EXT4-fs (loop0): 1 orphan inode deleted [ 103.434288][ T1923] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:9: Failed to release dquot type 0 [ 103.441333][ T9656] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.506629][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.703684][ T9694] syzkaller1: entered promiscuous mode [ 103.709290][ T9694] syzkaller1: entered allmulticast mode [ 103.797892][ T9706] loop0: detected capacity change from 0 to 512 [ 103.832250][ T9706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.855457][ T9713] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9713 comm=syz.6.2605 [ 103.870767][ T9706] ext4 filesystem being mounted at /555/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.955098][ T9722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.970818][ T9722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.985180][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.274370][ T9769] __nla_validate_parse: 5 callbacks suppressed [ 104.274514][ T9769] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2628'. [ 104.290533][ T9769] unsupported nlmsg_type 40 [ 104.413768][ T9793] futex_wake_op: syz.7.2636 tries to shift op by 32; fix this program [ 104.602603][ T9824] loop4: detected capacity change from 0 to 128 [ 104.613314][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2649'. [ 104.628179][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2649'. [ 104.743182][ T9841] random: crng reseeded on system resumption [ 104.987473][ T9877] loop8: detected capacity change from 0 to 128 [ 105.378264][ T9910] net_ratelimit: 8 callbacks suppressed [ 105.378284][ T9910] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 105.400611][ T9920] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2685'. [ 105.469755][ T9926] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2688'. [ 105.525760][ T9932] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 105.539555][ T9932] bond1 (unregistering): Released all slaves [ 105.632700][T10003] loop8: detected capacity change from 0 to 128 [ 105.826441][T10014] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 105.868161][T10027] x_tables: duplicate underflow at hook 1 [ 106.028470][T10044] netlink: 'syz.4.2707': attribute type 1 has an invalid length. [ 106.350592][ T3488] IPVS: starting estimator thread 0... [ 106.434710][T10094] random: crng reseeded on system resumption [ 106.449118][T10084] IPVS: using max 2208 ests per chain, 110400 per kthread [ 106.567062][T10105] loop6: detected capacity change from 0 to 256 [ 106.834560][T10124] loop8: detected capacity change from 0 to 1024 [ 106.874746][T10124] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.890662][ T3489] IPVS: starting estimator thread 0... [ 106.956385][T10157] loop4: detected capacity change from 0 to 512 [ 106.976744][ T8119] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.979052][T10141] IPVS: using max 1872 ests per chain, 93600 per kthread [ 107.008840][T10157] EXT4-fs (loop4): too many log groups per flexible block group [ 107.016948][T10157] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 107.029462][T10157] EXT4-fs (loop4): mount failed [ 107.144837][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2744'. [ 107.154509][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2744'. [ 107.163538][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2744'. [ 107.197097][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2744'. [ 107.206702][T10182] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2744'. [ 107.223132][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 107.223152][ T29] audit: type=1326 audit(1768036017.197:2816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.8.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 107.293906][ T29] audit: type=1326 audit(1768036017.227:2817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.8.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 107.317737][ T29] audit: type=1326 audit(1768036017.227:2818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10186 comm="syz.8.2746" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 108.054878][T10204] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10204 comm=syz.6.2751 [ 108.065972][T10205] loop8: detected capacity change from 0 to 512 [ 108.067792][T10204] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=10204 comm=syz.6.2751 [ 108.149131][T10205] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.171115][T10205] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.235124][ T29] audit: type=1326 audit(1768036018.207:2819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.6.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 108.258846][ T29] audit: type=1326 audit(1768036018.207:2820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.6.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 108.282816][ T29] audit: type=1326 audit(1768036018.207:2821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.6.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 108.317949][ T29] audit: type=1326 audit(1768036018.287:2822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.6.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 108.341573][ T29] audit: type=1326 audit(1768036018.287:2823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.6.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 108.365444][ T29] audit: type=1326 audit(1768036018.287:2824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.6.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 108.389266][ T29] audit: type=1326 audit(1768036018.287:2825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10233 comm="syz.6.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 108.418295][ T8119] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.713027][T10257] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 109.143933][ T3489] kernel write not supported for file bpf-prog (pid: 3489 comm: kworker/1:6) [ 109.418988][T10314] __nla_validate_parse: 6 callbacks suppressed [ 109.419041][T10314] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2785'. [ 120.965776][T10335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.995072][T10335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.028753][T10337] syzkaller1: entered promiscuous mode [ 121.034410][T10337] syzkaller1: entered allmulticast mode [ 121.329378][ T9470] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.394827][ T9470] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.407631][T10436] netlink: 'syz.8.2808': attribute type 29 has an invalid length. [ 121.505919][T10352] chnl_net:caif_netlink_parms(): no params data found [ 121.514463][T10521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.521827][T10521] IPv6: NLM_F_CREATE should be set when creating new route [ 121.531372][T10527] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2811'. [ 121.579947][ T9470] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.619828][T10521] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 121.673869][ T9470] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.720182][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2815'. [ 121.729174][T10578] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2815'. [ 121.796664][T10352] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.803913][T10352] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.815822][T10352] bridge_slave_0: entered allmulticast mode [ 121.823174][T10352] bridge_slave_0: entered promiscuous mode [ 121.839335][T10384] chnl_net:caif_netlink_parms(): no params data found [ 121.859780][T10352] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.866982][T10352] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.878312][T10352] bridge_slave_1: entered allmulticast mode [ 121.884881][T10688] netlink: '+}[@': attribute type 10 has an invalid length. [ 121.885771][T10352] bridge_slave_1: entered promiscuous mode [ 121.892413][T10688] netlink: 32 bytes leftover after parsing attributes in process `+}[@'. [ 121.928698][T10688] ipvlan2: entered promiscuous mode [ 121.935500][T10688] bridge0: port 3(ipvlan2) entered blocking state [ 121.942219][T10688] bridge0: port 3(ipvlan2) entered disabled state [ 121.948913][T10688] ipvlan2: entered allmulticast mode [ 121.954513][T10688] bridge0: entered allmulticast mode [ 121.960526][T10688] ipvlan2: left allmulticast mode [ 121.965582][T10688] bridge0: left allmulticast mode [ 121.986688][T10352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.007856][T10352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.054719][T10352] team0: Port device team_slave_0 added [ 122.074332][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 122.074347][ T29] audit: type=1326 audit(1768036032.047:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.108693][ T29] audit: type=1326 audit(1768036032.057:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.112768][T10352] team0: Port device team_slave_1 added [ 122.133031][ T29] audit: type=1326 audit(1768036032.057:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.162398][ T29] audit: type=1326 audit(1768036032.057:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.186117][ T29] audit: type=1326 audit(1768036032.057:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.210527][ T29] audit: type=1326 audit(1768036032.187:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.234269][ T29] audit: type=1326 audit(1768036032.187:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.258570][ T29] audit: type=1326 audit(1768036032.217:2883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.282963][ T29] audit: type=1326 audit(1768036032.217:2884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.306989][ T29] audit: type=1326 audit(1768036032.217:2885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10787 comm="syz.8.2822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 122.417727][ T9470] dvmrp6 (unregistering): left allmulticast mode [ 122.481255][ T9470] bond0 (unregistering): Released all slaves [ 122.493015][T10384] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.500315][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.508298][T10384] bridge_slave_0: entered allmulticast mode [ 122.515682][T10384] bridge_slave_0: entered promiscuous mode [ 122.535866][ T9470] hsr_slave_0: left promiscuous mode [ 122.542072][ T9470] hsr_slave_1: left promiscuous mode [ 122.551485][ T9470] veth1_macvtap: left promiscuous mode [ 122.557201][ T9470] veth0_macvtap: left promiscuous mode [ 122.562892][ T9470] veth1_vlan: left promiscuous mode [ 122.568298][ T9470] veth0_vlan: left promiscuous mode [ 122.632578][T10873] loop8: detected capacity change from 0 to 1024 [ 122.640922][T10873] EXT4-fs: inline encryption not supported [ 122.647150][T10873] EXT4-fs: Ignoring removed orlov option [ 122.654243][T10873] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 122.671378][T10873] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 122.679838][T10873] System zones: 0-1, 3-12 [ 122.686589][T10873] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.728297][ T8119] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.773092][T10352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.780360][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.806536][T10352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.818694][T10384] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.825827][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.834534][T10384] bridge_slave_1: entered allmulticast mode [ 122.845594][T10384] bridge_slave_1: entered promiscuous mode [ 122.858026][T10352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.866695][T10352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 122.893119][T10352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.921075][T10384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.942694][T10384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.961578][T10352] hsr_slave_0: entered promiscuous mode [ 122.968054][T10352] hsr_slave_1: entered promiscuous mode [ 122.975654][T10352] debugfs: 'hsr0' already exists in 'hsr' [ 122.981549][T10352] Cannot create hsr debugfs directory [ 123.001511][T10384] team0: Port device team_slave_0 added [ 123.008355][T10384] team0: Port device team_slave_1 added [ 123.062734][T10384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.069975][T10384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.096309][T10384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.110055][T11006] netlink: 'gtp': attribute type 1 has an invalid length. [ 123.117413][T11006] netlink: 224 bytes leftover after parsing attributes in process `gtp'. [ 123.151575][T10384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.158691][T10384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.185012][T10384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.229448][T11023] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2839'. [ 123.282427][T10384] hsr_slave_0: entered promiscuous mode [ 123.289044][T10384] hsr_slave_1: entered promiscuous mode [ 123.302323][T10384] debugfs: 'hsr0' already exists in 'hsr' [ 123.308108][T10384] Cannot create hsr debugfs directory [ 123.326583][ T9470] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.391008][T11074] loop6: detected capacity change from 0 to 4096 [ 123.406138][T11074] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.425533][T11074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.440934][ T9470] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.499502][ T9470] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.516711][ T5891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.614928][T10352] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 123.658185][ T9470] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.690260][T10352] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 123.716503][T10352] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 123.727096][T10352] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 123.831540][ T9470] bridge_slave_1: left allmulticast mode [ 123.837442][ T9470] bridge_slave_1: left promiscuous mode [ 123.843455][ T9470] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.854819][ T9470] bridge_slave_0: left allmulticast mode [ 123.860642][ T9470] bridge_slave_0: left promiscuous mode [ 123.866639][ T9470] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.062125][ T9470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.077857][ T9470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.102154][ T9470] bond0 (unregistering): Released all slaves [ 124.133615][T10352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.161943][ T9470] hsr_slave_0: left promiscuous mode [ 124.171971][ T9470] hsr_slave_1: left promiscuous mode [ 124.177845][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.185378][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.205002][ T9470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.212557][ T9470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.225693][ T9470] veth1_macvtap: left promiscuous mode [ 124.231845][ T9470] veth0_macvtap: left promiscuous mode [ 124.237618][ T9470] veth1_vlan: left promiscuous mode [ 124.243577][ T9470] veth0_vlan: left promiscuous mode [ 124.345080][ T9470] team0 (unregistering): Port device team_slave_1 removed [ 124.356178][ T9470] team0 (unregistering): Port device team_slave_0 removed [ 124.413300][T10352] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.426006][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.433227][ T9479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.464593][T11223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11223 comm=syz.8.2854 [ 124.464661][T10352] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.464685][T10352] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.504861][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.512363][ T9479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.616399][T10384] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 124.635372][T10384] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 124.663942][T10384] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 124.674659][T10384] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 124.691906][T10352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.721491][T11266] serio: Serial port ttyS3 [ 124.745399][ T9470] IPVS: stop unused estimator thread 0... [ 124.840322][T10384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.866497][T10384] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.888382][T11297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2872'. [ 124.900494][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.909662][ T9479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.951120][T10384] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.961657][T10384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.984913][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.992167][ T9479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.034188][T10352] veth0_vlan: entered promiscuous mode [ 125.044987][T10352] veth1_vlan: entered promiscuous mode [ 125.078285][T10352] veth0_macvtap: entered promiscuous mode [ 125.090528][T10352] veth1_macvtap: entered promiscuous mode [ 125.120762][T10352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.134183][T10352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.153594][ T9479] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.166845][T10384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.175147][ T9479] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.191672][ T9479] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.228423][ T9479] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.337007][ T3584] IPVS: starting estimator thread 0... [ 125.382513][T11352] syzkaller0: entered promiscuous mode [ 125.388163][T11352] syzkaller0: entered allmulticast mode [ 125.428701][T11365] IPVS: using max 2016 ests per chain, 100800 per kthread [ 125.503235][T11383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.515966][T11383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.538665][T10384] veth0_vlan: entered promiscuous mode [ 125.563786][T10384] veth1_vlan: entered promiscuous mode [ 125.602233][T10384] veth0_macvtap: entered promiscuous mode [ 125.611241][T10384] veth1_macvtap: entered promiscuous mode [ 125.639471][T10384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.669395][T10384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.686211][ T9455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.696190][ T9455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.709797][ T9455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.721098][ T9455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.895160][T11416] vhci_hcd vhci_hcd.0: default hub control req: 671e v03f8 i0007 l0 [ 126.006191][T11445] netlink: 'syz.2.2908': attribute type 1 has an invalid length. [ 126.077253][T11451] ieee802154 phy0 wpan0: encryption failed: -126 [ 126.235997][T11474] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2920'. [ 126.367845][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2923'. [ 126.376966][T11480] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2923'. [ 126.470211][T11486] loop8: detected capacity change from 0 to 512 [ 126.486921][T11486] ------------[ cut here ]------------ [ 126.492549][T11486] EA inode 11 i_nlink=2 [ 126.492565][T11486] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.8.2926/11486 [ 126.507736][T11486] Modules linked in: [ 126.511859][T11486] CPU: 1 UID: 0 PID: 11486 Comm: syz.8.2926 Not tainted syzkaller #0 PREEMPT(voluntary) [ 126.522090][T11486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 126.532764][T11486] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 126.539551][T11486] Code: 11 e3 9c ff 4c 8d 2d 5a ee 20 05 49 8d 7e 40 e8 81 6d b8 ff 49 8b 6e 40 4c 89 e7 e8 95 68 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 9c 9c ba 03 66 66 66 2e 0f 1f 84 [ 126.559504][T11486] RSP: 0018:ffffc9000407b5a0 EFLAGS: 00010246 [ 126.565794][T11486] RAX: ffff88811b394c90 RBX: ffff88811a4797b0 RCX: ffffffff81bb1d6b [ 126.573841][T11486] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0bb0 [ 126.581910][T11486] RBP: 000000000000000b R08: 000188811a479763 R09: 0000000000000000 [ 126.589988][T11486] R10: ffffffff88ee5b20 R11: 0000000000000000 R12: ffff88811a479760 [ 126.598093][T11486] R13: ffffffff86dc0bb0 R14: ffff88811a479718 R15: 0000000000000001 [ 126.606213][T11486] FS: 00007fe6d409f6c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 126.615251][T11486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.622005][T11486] CR2: 00007fe6d5622a60 CR3: 0000000117a12000 CR4: 00000000003506f0 [ 126.631003][T11486] DR0: 0000000000007fff DR1: 0000000000000000 DR2: 0000000000000000 [ 126.639166][T11486] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 126.647707][T11486] Call Trace: [ 126.651065][T11486] [ 126.654045][T11486] ext4_xattr_set_entry+0x77f/0x1020 [ 126.659500][T11486] ext4_xattr_ibody_set+0x184/0x3c0 [ 126.664848][T11486] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 126.670863][T11486] __ext4_expand_extra_isize+0x246/0x280 [ 126.676555][T11486] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 126.682284][T11486] ext4_evict_inode+0x7c4/0xd40 [ 126.687380][T11486] ? __pfx_ext4_evict_inode+0x10/0x10 [ 126.692932][T11486] evict+0x2af/0x510 [ 126.696967][T11486] ? __dquot_initialize+0x146/0x7c0 [ 126.702537][T11486] iput+0x4bd/0x650 [ 126.706445][T11486] ext4_process_orphan+0x1a9/0x1c0 [ 126.711732][T11486] ext4_orphan_cleanup+0x6a8/0xa00 [ 126.716921][T11486] ext4_fill_super+0x3411/0x37a0 [ 126.721961][T11486] ? set_blocksize+0x1a8/0x310 [ 126.726782][T11486] ? sb_set_blocksize+0xfc/0x170 [ 126.731898][T11486] ? setup_bdev_super+0x30e/0x370 [ 126.737062][T11486] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.742488][T11486] get_tree_bdev_flags+0x291/0x300 [ 126.747742][T11486] ? __pfx_ext4_fill_super+0x10/0x10 [ 126.753157][T11486] get_tree_bdev+0x1f/0x30 [ 126.757854][T11486] ext4_get_tree+0x1c/0x30 [ 126.762497][T11486] vfs_get_tree+0x57/0x1d0 [ 126.766965][T11486] do_new_mount+0x24d/0x6a0 [ 126.771596][T11486] path_mount+0x4ab/0xb80 [ 126.776110][T11486] ? user_path_at+0xbf/0x130 [ 126.781052][T11486] __se_sys_mount+0x28c/0x2e0 [ 126.785795][T11486] __x64_sys_mount+0x67/0x80 [ 126.790489][T11486] x64_sys_call+0x2cca/0x3000 [ 126.795307][T11486] do_syscall_64+0xca/0x2b0 [ 126.800112][T11486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.806156][T11486] RIP: 0033:0x7fe6d5640eea [ 126.810909][T11486] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.830893][T11486] RSP: 002b:00007fe6d409ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 126.839502][T11486] RAX: ffffffffffffffda RBX: 00007fe6d409eef0 RCX: 00007fe6d5640eea [ 126.847857][T11486] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fe6d409eeb0 [ 126.856024][T11486] RBP: 0000200000000180 R08: 00007fe6d409eef0 R09: 0000000000800700 [ 126.864089][T11486] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 126.872500][T11486] R13: 00007fe6d409eeb0 R14: 000000000000046f R15: 000000000000002c [ 126.880588][T11486] [ 126.883734][T11486] ---[ end trace 0000000000000000 ]--- [ 126.893507][T11486] EXT4-fs error (device loop8): ext4_xattr_inode_iget:441: inode #18: comm syz.8.2926: iget: bad extra_isize 90 (inode size 256) [ 126.907290][T11486] EXT4-fs (loop8): Remounting filesystem read-only [ 126.914039][T11486] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -30) [ 126.923565][T11486] EXT4-fs (loop8): 1 orphan inode deleted [ 126.931464][T11486] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.950022][T11486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.014543][T11503] x_tables: unsorted entry at hook 2 [ 127.102070][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 127.102089][ T29] audit: type=1326 audit(127.085:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11513 comm="syz.6.2938" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f920759f749 code=0x0 [ 127.132769][T11517] netlink: 'syz.9.2937': attribute type 6 has an invalid length. [ 127.193716][ T29] audit: type=1326 audit(127.175:3067): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.9.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257cef749 code=0x7ffc0000 [ 127.231643][ T29] audit: type=1326 audit(127.195:3068): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.9.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=122 compat=0 ip=0x7f7257cef749 code=0x7ffc0000 [ 127.253454][ T29] audit: type=1326 audit(127.195:3069): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.9.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257cef749 code=0x7ffc0000 [ 127.274965][ T29] audit: type=1326 audit(127.195:3070): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.9.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257cef749 code=0x7ffc0000 [ 127.296598][ T29] audit: type=1326 audit(127.195:3071): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.9.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7f7257cef749 code=0x7ffc0000 [ 127.318506][ T29] audit: type=1326 audit(127.195:3072): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.9.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257cef749 code=0x7ffc0000 [ 127.340100][ T29] audit: type=1326 audit(127.195:3073): auid=0 uid=0 gid=0 ses=1 subj=root:sysadm_r:sysadm_t pid=11530 comm="syz.9.2943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7257cef749 code=0x7ffc0000 [ 127.384470][T11536] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2945'. [ 127.521296][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2953'. [ 127.568715][T11549] IPVS: Error connecting to the multicast addr [ 127.700078][ T29] audit: type=1326 audit(127.685:3074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11546 comm="syz.8.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 127.739538][T11556] netlink: 'syz.4.2956': attribute type 1 has an invalid length. [ 127.753418][ T29] audit: type=1326 audit(127.705:3075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11546 comm="syz.8.2951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe6d563f749 code=0x7ffc0000 [ 127.965618][T11576] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2964'. [ 128.118423][T11608] loop2: detected capacity change from 0 to 1024 [ 128.119148][T11610] netlink: 8 bytes leftover after parsing attributes in process `,&#^%'. [ 128.125882][T11608] EXT4-fs: Ignoring removed orlov option [ 128.143431][T11608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.475589][T11624] chnl_net:caif_netlink_parms(): no params data found [ 128.529514][T11624] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.537052][T11624] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.545674][T11624] bridge_slave_0: entered allmulticast mode [ 128.552880][T11624] bridge_slave_0: entered promiscuous mode [ 128.561780][T11624] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.568971][T11624] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.578829][T11624] bridge_slave_1: entered allmulticast mode [ 128.585649][T11624] bridge_slave_1: entered promiscuous mode [ 128.607811][T11624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.618822][T11624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.643287][T11624] team0: Port device team_slave_0 added [ 128.654439][T11624] team0: Port device team_slave_1 added [ 128.680482][T11624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.687919][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.715213][T11624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.753343][T11624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.760623][T11624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.786994][T11624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.843144][T11624] hsr_slave_0: entered promiscuous mode [ 128.867256][T11624] hsr_slave_1: entered promiscuous mode [ 128.887729][T11624] debugfs: 'hsr0' already exists in 'hsr' [ 128.893585][T11624] Cannot create hsr debugfs directory [ 129.045049][T10384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.203400][T11990] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11990 comm=syz.6.2998 [ 129.251558][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3000'. [ 129.426467][T11982] Set syz1 is full, maxelem 65536 reached [ 129.437552][ T9479] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.464804][T11624] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.476638][T11624] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.489588][T11624] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.504703][T11624] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.525293][ T9479] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.588189][T11624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.600290][ T9479] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.626461][T11624] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.637443][ T9475] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.644641][ T9475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.657475][T12041] vlan2: entered allmulticast mode [ 129.663411][T12041] dummy0: entered allmulticast mode [ 129.679778][ T9438] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.687262][ T9438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.697556][ T9479] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.735772][T11624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 129.746379][T11624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.768028][T12049] SELinux: failed to load policy [ 129.875295][ T9479] bridge_slave_1: left allmulticast mode [ 129.881222][ T9479] bridge_slave_1: left promiscuous mode [ 129.887070][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.894322][T12046] syz.8.3011 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 129.905399][T12046] CPU: 1 UID: 0 PID: 12046 Comm: syz.8.3011 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.905445][T12046] Tainted: [W]=WARN [ 129.905453][T12046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.905466][T12046] Call Trace: [ 129.905474][T12046] [ 129.905482][T12046] __dump_stack+0x1d/0x30 [ 129.905552][T12046] dump_stack_lvl+0x95/0xd0 [ 129.905582][T12046] dump_stack+0x15/0x1b [ 129.905653][T12046] dump_header+0x81/0x240 [ 129.905681][T12046] oom_kill_process+0x295/0x350 [ 129.905712][T12046] out_of_memory+0x97b/0xb80 [ 129.905752][T12046] try_charge_memcg+0x610/0xa10 [ 129.905930][T12046] charge_memcg+0x51/0xc0 [ 129.906000][T12046] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 129.906049][T12046] __read_swap_cache_async+0x17b/0x2d0 [ 129.906092][T12046] swap_cluster_readahead+0x262/0x3c0 [ 129.906197][T12046] swapin_readahead+0xde/0x820 [ 129.906232][T12046] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 129.906266][T12046] ? __rcu_read_unlock+0x34/0x70 [ 129.906375][T12046] ? __rcu_read_unlock+0x4f/0x70 [ 129.906401][T12046] ? swap_cache_get_folio+0x277/0x280 [ 129.906440][T12046] do_swap_page+0x2b4/0x21e0 [ 129.906486][T12046] ? __pfx_default_wake_function+0x10/0x10 [ 129.906587][T12046] handle_mm_fault+0x9d8/0x2c60 [ 129.906640][T12046] do_user_addr_fault+0x630/0x1080 [ 129.906813][T12046] exc_page_fault+0x62/0xa0 [ 129.906849][T12046] asm_exc_page_fault+0x26/0x30 [ 129.906871][T12046] RIP: 0033:0x7fe6d5515a1e [ 129.906890][T12046] Code: 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 00 e8 28 c4 ff ff 48 39 eb 75 df 0f 1f 00 8b 05 96 23 38 00 85 c0 0f 8e a3 fd ff ff bd 97 fe ff 49 39 c4 73 a0 48 8d 1d 71 05 38 00 83 3d 76 23 38 [ 129.906914][T12046] RSP: 002b:00007ffed9daf5a0 EFLAGS: 00010202 [ 129.906933][T12046] RAX: 0000000000000001 RBX: 00007fe6d5897da0 RCX: 0000000000000000 [ 129.906947][T12046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055555a6aa808 [ 129.906990][T12046] RBP: 00007fe6d5897da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 129.907007][T12046] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001fdbc [ 129.907024][T12046] R13: 00007ffed9daf690 R14: ffffffffffffffff R15: 00007ffed9daf6b0 [ 129.907093][T12046] [ 129.907102][T12046] memory: usage 307200kB, limit 307200kB, failcnt 1475 [ 130.132142][T12046] memory+swap: usage 274092kB, limit 9007199254740988kB, failcnt 0 [ 130.140379][T12046] kmem: usage 272960kB, limit 9007199254740988kB, failcnt 0 [ 130.147793][T12046] Memory cgroup stats for /syz8: [ 130.148794][ T9479] bridge_slave_0: left allmulticast mode [ 130.150519][T12046] cache 0 [ 130.153786][ T9479] bridge_slave_0: left promiscuous mode [ 130.154075][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.160259][T12046] rss 8192 [ 130.178622][T12046] shmem 0 [ 130.181630][T12046] mapped_file 0 [ 130.185327][T12046] dirty 0 [ 130.188381][T12046] writeback 4096 [ 130.192023][T12046] workingset_refault_anon 74 [ 130.196661][T12046] workingset_refault_file 0 [ 130.201421][T12046] swap 167936 [ 130.204766][T12046] swapcached 24576 [ 130.208549][T12046] pgpgin 15050 [ 130.212048][T12046] pgpgout 15042 [ 130.215549][T12046] pgfault 28453 [ 130.219105][T12046] pgmajfault 49 [ 130.222762][T12046] inactive_anon 4096 [ 130.226756][T12046] active_anon 24576 [ 130.230694][T12046] inactive_file 4096 [ 130.234705][T12046] active_file 0 [ 130.238371][T12046] unevictable 0 [ 130.242166][T12046] hierarchical_memory_limit 314572800 [ 130.247601][T12046] hierarchical_memsw_limit 9223372036854771712 [ 130.253961][T12046] total_cache 0 [ 130.257448][T12046] total_rss 8192 [ 130.261065][T12046] total_shmem 0 [ 130.264554][T12046] total_mapped_file 0 [ 130.268598][T12046] total_dirty 0 [ 130.272076][T12046] total_writeback 4096 [ 130.276256][T12046] total_workingset_refault_anon 74 [ 130.281608][T12046] total_workingset_refault_file 0 [ 130.286685][T12046] total_swap 167936 [ 130.290801][T12046] total_swapcached 24576 [ 130.295145][T12046] total_pgpgin 15050 [ 130.299127][T12046] total_pgpgout 15042 [ 130.303158][T12046] total_pgfault 28453 [ 130.307155][T12046] total_pgmajfault 49 [ 130.311183][T12046] total_inactive_anon 4096 [ 130.315727][T12046] total_active_anon 24576 [ 130.320371][T12046] total_inactive_file 4096 [ 130.324808][T12046] total_active_file 0 [ 130.329025][T12046] total_unevictable 0 [ 130.333036][T12046] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.3011,pid=12046,uid=0 [ 130.348110][T12046] Memory cgroup out of memory: Killed process 12046 (syz.8.3011) total-vm:95884kB, anon-rss:1136kB, file-rss:22316kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 130.417313][ T3422] hid_parser_main: 29 callbacks suppressed [ 130.417331][ T3422] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x4 [ 130.431165][ T3422] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x2 [ 130.443763][ T3422] hid-generic 0000:3000000:0000.0003: unknown main item tag 0x3 [ 130.452864][ T3422] hid-generic 0000:3000000:0000.0003: hidraw0: HID v0.00 Device [sy] on syz0 [ 130.551096][ T9479] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.570182][ T9479] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.589690][ T9479] bond0 (unregistering): Released all slaves [ 130.614090][T11624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.653573][ T9479] hsr_slave_0: left promiscuous mode [ 130.689127][ T9479] hsr_slave_1: left promiscuous mode [ 130.695336][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.702959][ T9479] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.727404][T12116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.736345][ T9479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.744048][ T9479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.755674][ T9479] veth1_macvtap: left promiscuous mode [ 130.761320][ T9479] veth0_macvtap: left promiscuous mode [ 130.766921][ T9479] veth1_vlan: left promiscuous mode [ 130.770272][T12116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.773178][ T9479] veth0_vlan: left promiscuous mode [ 130.862317][ T9479] team0 (unregistering): Port device team_slave_1 removed [ 130.872121][ T9479] team0 (unregistering): Port device team_slave_0 removed [ 131.094613][T11624] veth0_vlan: entered promiscuous mode [ 131.109271][T11624] veth1_vlan: entered promiscuous mode [ 131.120114][T12172] SELinux: failed to load policy [ 131.128250][ T9479] IPVS: stop unused estimator thread 0... [ 131.137501][T11624] veth0_macvtap: entered promiscuous mode [ 131.155545][T11624] veth1_macvtap: entered promiscuous mode [ 131.167140][T11624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.179668][T11624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.206447][ T9463] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.224079][ T9463] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.242587][ T9463] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.252715][ T9463] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.291500][T12185] loop5: detected capacity change from 0 to 1024 [ 131.310085][T12185] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 131.569697][T12202] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=12202 comm=syz.2.3049 [ 131.914994][ T9470] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: comm kworker/u8:56: lblock 0 mapped to illegal pblock 0 (length 6) [ 131.937808][ T9470] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 131.950337][ T9470] EXT4-fs (loop5): This should not happen!! Data will be lost [ 131.950337][ T9470] [ 131.969802][T12225] ALSA: seq fatal error: cannot create timer (-22) [ 131.973032][ T9470] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:56: lblock 8 mapped to illegal pblock 8 (length 8) [ 132.000115][ T9470] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 132.012527][ T9470] EXT4-fs (loop5): This should not happen!! Data will be lost [ 132.012527][ T9470] [ 132.090202][T12235] netlink: 'syz.4.3061': attribute type 29 has an invalid length. [ 132.108449][T11624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 132.132233][T12237] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3062'. [ 132.150091][T12239] netlink: 'syz.2.3063': attribute type 33 has an invalid length. [ 132.157983][T12239] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3063'. [ 132.201131][T12248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3063'. [ 132.213850][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 132.213869][ T29] audit: type=1400 audit(132.194:3179): avc: denied { append } for pid=12244 comm="syz.4.3064" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.243798][T12245] random: crng reseeded on system resumption [ 132.254015][ T29] audit: type=1326 audit(132.204:3180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.277113][ T29] audit: type=1326 audit(132.204:3181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.300246][ T29] audit: type=1326 audit(132.204:3182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.323294][ T29] audit: type=1326 audit(132.204:3183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.331799][T12252] Restarting kernel threads ... [ 132.346356][ T29] audit: type=1326 audit(132.204:3184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.353564][T12252] Done restarting kernel threads. [ 132.374469][ T29] audit: type=1326 audit(132.204:3185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.402504][ T29] audit: type=1326 audit(132.204:3186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.425526][ T29] audit: type=1326 audit(132.204:3187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.448527][ T29] audit: type=1326 audit(132.204:3188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.5.3067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 132.538613][T12269] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 1528. macoff=96 [ 132.741025][T12298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3085'. [ 132.786947][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3087'. [ 132.991957][T12332] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3096'. [ 133.017124][T12330] SELinux: ebitmap: empty map [ 133.022296][T12330] SELinux: failed to load policy [ 133.025611][T12332] netem: change failed [ 133.205313][T12364] smc: net device hsr0 applied user defined pnetid SYZ2 [ 133.230902][T12364] smc: net device hsr0 erased user defined pnetid SYZ2 [ 133.242052][T12368] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3110'. [ 133.294212][T12376] loop6: detected capacity change from 0 to 512 [ 133.320901][T12376] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.350031][T12376] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 133.358462][T12386] atomic_op ffff88814d2d7d28 conn xmit_atomic 0000000000000000 [ 133.365728][T12376] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 133.384423][T12376] EXT4-fs (loop6): This should not happen!! Data will be lost [ 133.384423][T12376] [ 133.394231][T12376] EXT4-fs (loop6): Total free blocks count 0 [ 133.400328][T12376] EXT4-fs (loop6): Free/Dirty block details [ 133.406274][T12376] EXT4-fs (loop6): free_blocks=65280 [ 133.411631][T12376] EXT4-fs (loop6): dirty_blocks=1 [ 133.416837][T12376] EXT4-fs (loop6): Block reservation details [ 133.422881][T12376] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 133.446066][ T5891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.530533][T12406] hub 9-0:1.0: USB hub found [ 133.535280][T12406] hub 9-0:1.0: 8 ports detected [ 133.552837][T12409] loop2: detected capacity change from 0 to 1024 [ 133.570493][T12409] EXT4-fs: Ignoring removed bh option [ 133.592045][T12409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.610054][T12409] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 3) [ 133.624700][T12409] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 133.637149][T12409] EXT4-fs (loop2): This should not happen!! Data will be lost [ 133.637149][T12409] [ 133.650381][T12409] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.669937][T12409] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.686718][T12425] atomic_op ffff88814d2d7d28 conn xmit_atomic 0000000000000000 [ 133.695167][T12409] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.719259][T12409] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.745793][T12429] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3133'. [ 133.775730][T12409] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.797373][T12408] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.811971][T12409] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.844232][T12409] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.849587][T12431] loop6: detected capacity change from 0 to 512 [ 133.867482][T12408] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3126: lblock 3 mapped to illegal pblock 3 (length 1) [ 133.886885][T12431] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.994400][ T5891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.091577][T12447] hub 9-0:1.0: USB hub found [ 134.096742][T12447] hub 9-0:1.0: 8 ports detected [ 134.245470][T12457] hub 6-0:1.0: USB hub found [ 134.250961][T12457] hub 6-0:1.0: 8 ports detected [ 134.419360][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3149'. [ 134.477367][T12473] program syz.4.3150 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.493406][ T9454] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 134.505912][ T9454] EXT4-fs (loop2): This should not happen!! Data will be lost [ 134.505912][ T9454] [ 134.519012][T10384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 134.605350][T12490] loop8: detected capacity change from 0 to 512 [ 134.649551][T12490] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.770069][ T8119] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.900703][T12519] netlink: 'syz.4.3169': attribute type 10 has an invalid length. [ 134.908850][T12519] netlink: 125828 bytes leftover after parsing attributes in process `syz.4.3169'. [ 135.051164][T12548] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3181'. [ 135.064729][T12550] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3179'. [ 135.163066][T12575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3189'. [ 135.239278][T12584] loop4: detected capacity change from 0 to 512 [ 135.246647][T12584] EXT4-fs: Ignoring removed i_version option [ 135.252886][T12584] EXT4-fs: Ignoring removed bh option [ 135.274601][T12584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.309898][T12595] batadv1: entered promiscuous mode [ 135.388256][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.557565][T12630] loop2: detected capacity change from 0 to 512 [ 135.565012][T12630] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.582528][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.598082][T12630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.614511][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.698951][T10384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.856209][T12648] netlink: 'syz.2.3212': attribute type 10 has an invalid length. [ 136.195158][T12660] loop4: detected capacity change from 0 to 1024 [ 136.225097][T12660] EXT4-fs: Ignoring removed bh option [ 136.283348][T12660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 136.342419][T12660] EXT4-fs error (device loop4): ext4_map_blocks:825: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 3) [ 136.399183][T12660] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 136.411756][T12660] EXT4-fs (loop4): This should not happen!! Data will be lost [ 136.411756][T12660] [ 136.431579][T12660] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.446432][T12660] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.468881][T12660] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.487498][T12659] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.501964][T12660] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.518418][T12659] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.548932][T12698] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 136.549737][T12660] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.569134][T12698] SELinux: failed to load policy [ 136.577355][T12659] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.603441][T12660] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #15: block 3: comm syz.4.3217: lblock 3 mapped to illegal pblock 3 (length 1) [ 136.651447][T12701] netlink: 'syz.5.3228': attribute type 4 has an invalid length. [ 136.670870][T12701] netlink: 'syz.5.3228': attribute type 4 has an invalid length. [ 136.690577][T12704] hsr0: entered promiscuous mode [ 136.708623][T12704] macvtap1: entered promiscuous mode [ 136.714066][T12704] macvtap1: entered allmulticast mode [ 136.719638][T12704] hsr0: entered allmulticast mode [ 136.724790][T12704] hsr_slave_0: entered allmulticast mode [ 136.730504][T12704] hsr_slave_1: entered allmulticast mode [ 136.758445][T12704] hsr0: left allmulticast mode [ 136.763377][T12704] hsr_slave_0: left allmulticast mode [ 136.768852][T12704] hsr_slave_1: left allmulticast mode [ 136.891865][T12731] loop2: detected capacity change from 0 to 512 [ 136.902620][T12731] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 136.912216][ T3488] kernel write not supported for file /vcs (pid: 3488 comm: kworker/0:7) [ 136.921990][T12731] EXT4-fs (loop2): invalid journal inode [ 136.927755][T12731] EXT4-fs (loop2): can't get journal size [ 136.963542][T12731] EXT4-fs (loop2): 1 truncate cleaned up [ 137.020344][T12738] loop8: detected capacity change from 0 to 128 [ 137.020842][T12731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.148693][T12736] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 137.161163][T12736] EXT4-fs (loop4): This should not happen!! Data will be lost [ 137.161163][T12736] [ 137.189485][T10384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.219982][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 137.287346][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 137.287364][ T29] audit: type=1400 audit(137.264:3306): avc: denied { create } for pid=12755 comm="syz.6.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.358578][ T29] audit: type=1400 audit(137.294:3307): avc: denied { bind } for pid=12755 comm="syz.6.3247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 137.399207][T12763] netlink: 'syz.4.3250': attribute type 29 has an invalid length. [ 137.440928][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.440928][T12736] loop8: rw=1, sector=145, nr_sectors = 16 limit=128 [ 137.462954][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.462954][T12736] loop8: rw=1, sector=169, nr_sectors = 8 limit=128 [ 137.477170][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.477170][T12736] loop8: rw=1, sector=185, nr_sectors = 8 limit=128 [ 137.490847][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.490847][T12736] loop8: rw=1, sector=201, nr_sectors = 8 limit=128 [ 137.504616][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.504616][T12736] loop8: rw=1, sector=217, nr_sectors = 8 limit=128 [ 137.528846][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.528846][T12736] loop8: rw=1, sector=233, nr_sectors = 8 limit=128 [ 137.552652][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.552652][T12736] loop8: rw=1, sector=249, nr_sectors = 8 limit=128 [ 137.579623][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.579623][T12736] loop8: rw=1, sector=265, nr_sectors = 8 limit=128 [ 137.613831][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.613831][T12736] loop8: rw=1, sector=281, nr_sectors = 8 limit=128 [ 137.629994][T12736] kworker/u8:70: attempt to access beyond end of device [ 137.629994][T12736] loop8: rw=1, sector=297, nr_sectors = 8 limit=128 [ 137.649384][T12777] loop6: detected capacity change from 0 to 512 [ 137.665469][T12777] EXT4-fs: Ignoring removed i_version option [ 137.671663][T12777] EXT4-fs: Ignoring removed bh option [ 137.691498][T12777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.823958][T12800] __nla_validate_parse: 2 callbacks suppressed [ 137.823978][T12800] netlink: 135040 bytes leftover after parsing attributes in process `gtp'. [ 137.897260][ T5891] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.087736][T12825] netlink: 'syz.6.3271': attribute type 10 has an invalid length. [ 138.119542][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.126822][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.150942][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.158216][T12825] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.165637][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.172768][T12825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.192493][T12825] team0: Port device bridge0 added [ 138.211599][T12829] IPVS: stopping master sync thread 12834 ... [ 138.270175][T12839] EXT4-fs: Ignoring removed orlov option [ 138.275992][T12839] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.296162][T12844] sctp: [Deprecated]: syz.4.3279 (pid 12844) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.296162][T12844] Use struct sctp_sack_info instead [ 138.336800][T12839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.359247][ T29] audit: type=1326 audit(138.334:3308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.8.3281" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6d563f749 code=0x0 [ 138.434333][T10384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.544936][ T29] audit: type=1326 audit(138.524:3309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.4.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 138.568549][ T29] audit: type=1326 audit(138.524:3310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.4.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 138.591899][ T29] audit: type=1326 audit(138.524:3311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.4.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 138.630256][ T29] audit: type=1326 audit(138.554:3312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12882 comm="syz.4.3293" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 138.662208][T12885] netlink: 'syz.5.3294': attribute type 1 has an invalid length. [ 138.697286][T12885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.729433][T12924] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 138.854692][T12938] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 138.863099][T12938] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 139.127601][T12952] SELinux: failed to load policy [ 139.152462][ T29] audit: type=1326 audit(139.134:3313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5660adf749 code=0x7ffc0000 [ 139.179382][ T29] audit: type=1326 audit(139.134:3314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5660adf749 code=0x7ffc0000 [ 139.202651][ T29] audit: type=1326 audit(139.164:3315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12954 comm="syz.2.3309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5660adf749 code=0x7ffc0000 [ 139.246391][T12971] set_capacity_and_notify: 1 callbacks suppressed [ 139.246410][T12971] loop6: detected capacity change from 0 to 512 [ 139.268048][T12986] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 139.307216][T12990] loop8: detected capacity change from 0 to 512 [ 139.329972][T12990] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 139.345611][T12993] bridge0: port 3(ipvlan2) entered blocking state [ 139.352202][T12993] bridge0: port 3(ipvlan2) entered disabled state [ 139.360597][T12993] ipvlan2: entered allmulticast mode [ 139.365951][T12993] bridge0: entered allmulticast mode [ 139.373704][T12993] ipvlan2: left allmulticast mode [ 139.378800][T12993] bridge0: left allmulticast mode [ 139.385336][T12990] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.483802][ T8119] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.633075][T13017] xt_hashlimit: max too large, truncated to 1048576 [ 139.655574][T13018] hsr0: entered promiscuous mode [ 139.720221][T13018] macvtap1: entered promiscuous mode [ 139.725743][T13018] macvtap1: entered allmulticast mode [ 139.731260][T13018] hsr0: entered allmulticast mode [ 139.736312][T13018] hsr_slave_0: entered allmulticast mode [ 139.742028][T13018] hsr_slave_1: entered allmulticast mode [ 139.751054][T13018] hsr0: left allmulticast mode [ 139.755879][T13018] hsr_slave_0: left allmulticast mode [ 139.761344][T13018] hsr_slave_1: left allmulticast mode [ 139.875930][T13043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=13043 comm=syz.6.3329 [ 139.903911][T13046] netlink: 'syz.8.3333': attribute type 13 has an invalid length. [ 139.985353][T13046] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.992629][T13046] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.069189][T13046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.084123][T13046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.104316][T13046] hsr0: left promiscuous mode [ 140.195321][ T9467] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.219197][ T9467] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.232474][ T9467] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.264386][ T9467] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.613358][T13083] loop4: detected capacity change from 0 to 256 [ 140.763939][T13093] loop4: detected capacity change from 0 to 512 [ 140.800624][T13093] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 140.828962][T13093] EXT4-fs (loop4): orphan cleanup on readonly fs [ 140.874958][T13093] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.3352: Failed to acquire dquot type 1 [ 140.942651][T13093] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3352: bg 0: block 40: padding at end of block bitmap is not set [ 140.978443][T13093] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 140.988908][T13093] EXT4-fs (loop4): 1 truncate cleaned up [ 140.998450][T13093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.025833][T13093] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.034607][T13107] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.3356'. [ 141.280745][T13137] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 141.440339][T13146] netlink: 'syz.2.3372': attribute type 1 has an invalid length. [ 141.612702][T13163] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 141.629793][T13167] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3382'. [ 141.649653][T13167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.666048][T13167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.941250][T13200] netlink: 'syz.5.3390': attribute type 3 has an invalid length. [ 141.964148][T13200] netlink: 'syz.5.3390': attribute type 3 has an invalid length. [ 142.004818][T13209] lo speed is unknown, defaulting to 1000 [ 142.014638][T13209] lo speed is unknown, defaulting to 1000 [ 142.020828][T13209] lo speed is unknown, defaulting to 1000 [ 142.061588][T13211] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.3396'. [ 142.100165][T13209] infiniband syz1: set active [ 142.105000][T13209] infiniband syz1: added lo [ 142.110416][ T3488] lo speed is unknown, defaulting to 1000 [ 142.130950][T13209] RDS/IB: syz1: added [ 142.135001][T13209] smc: adding ib device syz1 with port count 1 [ 142.141575][T13209] smc: ib device syz1 port 1 has no pnetid [ 142.147780][ T3488] lo speed is unknown, defaulting to 1000 [ 142.153913][T13209] lo speed is unknown, defaulting to 1000 [ 142.160949][T13213] loop4: detected capacity change from 0 to 2048 [ 142.179454][T13220] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3408'. [ 142.191104][T13220] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.198723][T13220] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.239940][T13213] loop4: p3 p4 < > [ 142.243947][T13213] loop4: p3 size 861184 extends beyond EOD, truncated [ 142.251437][T13220] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.258991][T13220] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.278793][T13209] lo speed is unknown, defaulting to 1000 [ 142.321928][T13209] lo speed is unknown, defaulting to 1000 [ 142.363165][T13237] lo speed is unknown, defaulting to 1000 [ 142.405376][T13248] netlink: 'syz.2.3406': attribute type 13 has an invalid length. [ 142.465070][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.472401][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.523664][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.535012][T13248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.552047][T13248] hsr0: left promiscuous mode [ 142.605658][T13209] lo speed is unknown, defaulting to 1000 [ 142.614583][T11156] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.652157][T11156] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.698646][T11156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.728588][T11156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.742680][T13209] lo speed is unknown, defaulting to 1000 [ 143.010614][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3418'. [ 143.019782][T13300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3418'. [ 143.029075][T13300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3418'. [ 143.039238][T13300] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3418'. [ 143.109423][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 143.109500][ T29] audit: type=1326 audit(143.094:3418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.6.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 143.139745][ T29] audit: type=1326 audit(143.094:3419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.6.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 143.162998][ T29] audit: type=1326 audit(143.094:3420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.6.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 143.186177][ T29] audit: type=1326 audit(143.094:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.6.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 143.209277][ T29] audit: type=1326 audit(143.094:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.6.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 143.232397][ T29] audit: type=1326 audit(143.094:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.6.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 143.255465][ T29] audit: type=1326 audit(143.094:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13307 comm="syz.6.3422" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f920759f749 code=0x7ffc0000 [ 143.279032][ T29] audit: type=1326 audit(143.124:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.4.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 143.302023][ T29] audit: type=1326 audit(143.124:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.4.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 143.325037][ T29] audit: type=1326 audit(143.124:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13309 comm="syz.4.3421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 143.500370][T13332] random: crng reseeded on system resumption [ 143.540830][T13328] SELinux: ebitmap start bit (8192) is beyond the end of the bitmap (1472) [ 143.550208][T13328] SELinux: failed to load policy [ 143.573818][T13341] sd 0:0:1:0: device reset [ 143.624807][T13350] netlink: 76 bytes leftover after parsing attributes in process `syz.8.3442'. [ 143.760343][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3452'. [ 143.769405][T13378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3452'. [ 143.778587][T13378] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3452'. [ 143.787944][T13378] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3452'. [ 143.845028][T13388] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3457'. [ 144.028148][T13416] SELinux: failed to load policy [ 144.262002][T13439] netlink: 'syz.6.3471': attribute type 29 has an invalid length. [ 144.718325][T13467] sd 0:0:1:0: device reset [ 144.769548][T13475] sd 0:0:1:0: device reset [ 144.842555][T13485] can0: slcan on ttyS3. [ 144.888821][T13485] can0 (unregistered): slcan off ttyS3. [ 144.895055][T13499] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 144.940686][T13505] netlink: 'syz.2.3499': attribute type 1 has an invalid length. [ 144.975463][T13509] sd 0:0:1:0: device reset [ 145.310042][T13549] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 145.375036][T13565] loop4: detected capacity change from 0 to 512 [ 145.394035][T13565] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.412573][T13569] loop5: detected capacity change from 0 to 1024 [ 145.426525][T13565] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3524: corrupted xattr block 6: invalid header [ 145.440326][T13565] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 145.450339][T13565] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3524: corrupted xattr block 6: invalid header [ 145.469227][ T9466] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.475578][T13569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.487594][ T9466] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.503303][T13565] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 145.507041][ T9466] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.521649][ T9466] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.531834][T13565] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3524: corrupted xattr block 6: invalid header [ 145.563937][T13588] netlink: 'syz.6.3530': attribute type 3 has an invalid length. [ 145.564646][T13565] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 145.581160][T13565] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3524: corrupted xattr block 6: invalid header [ 145.583223][T11624] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.599402][T13565] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 145.623193][T13590] hub 9-0:1.0: USB hub found [ 145.628308][T13590] hub 9-0:1.0: 8 ports detected [ 145.648999][T13565] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3524: corrupted xattr block 6: invalid header [ 145.696686][T13565] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=12 [ 145.718026][T13565] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #12: comm syz.4.3524: corrupted xattr block 6: invalid header [ 145.762616][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.801498][T13620] SELinux: policydb table sizes (0,538976256) do not match mine (8,7) [ 145.811764][T13620] SELinux: failed to load policy [ 145.832168][T13626] loop8: detected capacity change from 0 to 256 [ 145.881972][T13622] SELinux: failed to load policy [ 146.036675][T13635] lo speed is unknown, defaulting to 1000 [ 146.427638][T13742] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 146.462573][T13744] loop6: detected capacity change from 0 to 256 [ 146.700161][T13780] loop4: detected capacity change from 0 to 256 [ 147.160388][T13821] netlink: 'syz.5.3602': attribute type 298 has an invalid length. [ 147.306825][T13833] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 147.338936][T13841] sd 0:0:1:0: device reset [ 147.471127][T13856] autofs4:pid:13856:validate_dev_ioctl: path string terminator missing for cmd(0xc0189374) [ 147.668377][T13881] lo speed is unknown, defaulting to 1000 [ 148.119213][T13947] __nla_validate_parse: 21 callbacks suppressed [ 148.119227][T13947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3641'. [ 148.174509][ T29] kauditd_printk_skb: 112 callbacks suppressed [ 148.174524][ T29] audit: type=1400 audit(148.154:3540): avc: denied { relabelfrom } for pid=13952 comm="syz.8.3642" name="NETLINK" dev="sockfs" ino=36302 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.214750][ T29] audit: type=1400 audit(148.164:3541): avc: denied { relabelto } for pid=13952 comm="syz.8.3642" name="NETLINK" dev="sockfs" ino=36302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 148.244980][T13957] lo speed is unknown, defaulting to 1000 [ 148.251084][T13959] loop4: detected capacity change from 0 to 1024 [ 148.263249][T13959] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 148.274504][T13959] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 148.312520][ T3488] kernel write not supported for file bpf-prog (pid: 3488 comm: kworker/0:7) [ 148.331334][T13959] JBD2: no valid journal superblock found [ 148.337217][T13959] EXT4-fs (loop4): Could not load journal inode [ 148.377538][ T29] audit: type=1400 audit(148.344:3542): avc: denied { read } for pid=13983 comm="syz.2.3650" path="socket:[36909]" dev="sockfs" ino=36909 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 148.434027][ T29] audit: type=1326 audit(148.414:3543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.5.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 148.457096][ T29] audit: type=1326 audit(148.414:3544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.5.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 148.484975][ T29] audit: type=1326 audit(148.414:3545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.5.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 148.508133][ T29] audit: type=1326 audit(148.414:3546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.5.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 148.531155][ T29] audit: type=1326 audit(148.454:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13993 comm="syz.5.3652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 148.617595][T14010] SELinux: failed to load policy [ 148.674018][T14012] SELinux: ebitmap: truncated map [ 148.698538][T14012] SELinux: failed to load policy [ 148.773634][T14029] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3665'. [ 148.797297][ T29] audit: type=1326 audit(148.774:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14025 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 148.858760][ T29] audit: type=1326 audit(148.774:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14025 comm="syz.5.3662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 148.970068][ T3778] kernel write not supported for file bpf-prog (pid: 3778 comm: kworker/1:9) [ 149.150740][T14072] xt_hashlimit: size too large, truncated to 1048576 [ 149.414640][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3694'. [ 149.415529][ T3489] kernel write not supported for file bpf-prog (pid: 3489 comm: kworker/1:6) [ 149.602874][T14139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3706'. [ 149.640439][T14139] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 149.676409][T14148] sd 0:0:1:0: device reset [ 149.750466][T14154] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3713'. [ 149.780530][T14154] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3713'. [ 149.891586][T14162] lo speed is unknown, defaulting to 1000 [ 149.932342][T14175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3720'. [ 149.952345][T14175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3720'. [ 150.410035][T14210] loop6: detected capacity change from 0 to 128 [ 150.469185][T14210] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 150.526948][ T5891] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 150.566034][T14226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3733'. [ 150.588773][T14226] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 150.706660][T14255] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 150.715009][T14255] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 150.861596][ T3781] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 150.881749][ T3781] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 150.933397][T14291] veth1_to_bond: entered allmulticast mode [ 150.942647][T14291] veth1_to_bond: left allmulticast mode [ 150.974971][T14295] netlink: 'syz.2.3756': attribute type 298 has an invalid length. [ 151.087481][T14307] lo speed is unknown, defaulting to 1000 [ 151.121321][T14316] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3762'. [ 151.134119][T14313] sit0: entered promiscuous mode [ 151.161120][T14313] netlink: 'syz.5.3763': attribute type 1 has an invalid length. [ 151.310407][T14354] macvtap0: refused to change device tx_queue_len [ 151.381474][T14369] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 151.389823][T14369] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 151.420202][T14371] sit0: entered promiscuous mode [ 151.425315][T14371] netlink: 'syz.4.3779': attribute type 1 has an invalid length. [ 152.136535][T14432] IPVS: Error connecting to the multicast addr [ 152.554183][T14462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.587945][T14461] infiniband syz2: set down [ 152.592618][T14461] infiniband syz2: added bond0 [ 152.704191][T14461] RDS/IB: syz2: added [ 152.716093][T14461] smc: adding ib device syz2 with port count 1 [ 152.738411][T14461] smc: ib device syz2 port 1 has no pnetid [ 152.983628][T14519] openvswitch: netlink: Missing key (keys=40, expected=100) [ 153.249242][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 153.249276][ T29] audit: type=1326 audit(153.234:3603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.347884][ T29] audit: type=1326 audit(153.264:3604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.371067][ T29] audit: type=1326 audit(153.264:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.394051][ T29] audit: type=1326 audit(153.264:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.417405][ T29] audit: type=1326 audit(153.264:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.441038][ T29] audit: type=1326 audit(153.264:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.464176][ T29] audit: type=1326 audit(153.264:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.487289][ T29] audit: type=1326 audit(153.264:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.511023][ T29] audit: type=1326 audit(153.274:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.534169][ T29] audit: type=1326 audit(153.274:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14535 comm="syz.5.3833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38ea60f749 code=0x7ffc0000 [ 153.710446][T14565] __nla_validate_parse: 6 callbacks suppressed [ 153.710466][T14565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3847'. [ 153.955846][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3860'. [ 154.711711][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3874'. [ 154.836704][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3881'. [ 154.846942][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3881'. [ 154.856414][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3881'. [ 154.865955][T14652] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3881'. [ 155.009958][T14661] netlink: 'syz.6.3885': attribute type 1 has an invalid length. [ 155.084956][T14667] netlink: 'syz.5.3888': attribute type 7 has an invalid length. [ 155.226251][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3894'. [ 155.237486][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3894'. [ 155.340139][T14703] loop8: detected capacity change from 0 to 256 [ 155.347498][T14703] vfat: Unknown parameter 'uni_x~ate' [ 155.365110][T14698] lo speed is unknown, defaulting to 1000 [ 155.631196][T14752] IPVS: Error connecting to the multicast addr [ 156.548358][T14800] lo speed is unknown, defaulting to 1000 [ 156.894675][T14912] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3941'. [ 156.926140][T14800] chnl_net:caif_netlink_parms(): no params data found [ 157.046535][ T9447] bridge_slave_1: left allmulticast mode [ 157.052416][ T9447] bridge_slave_1: left promiscuous mode [ 157.058241][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.069632][ T9447] bridge_slave_0: left allmulticast mode [ 157.075412][ T9447] bridge_slave_0: left promiscuous mode [ 157.081150][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.161543][ T9447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.171462][ T9447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.180812][ T9447] bond0 (unregistering): Released all slaves [ 157.189811][T14800] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.196953][T14800] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.204420][T14800] bridge_slave_0: entered allmulticast mode [ 157.211113][T14800] bridge_slave_0: entered promiscuous mode [ 157.217937][T14848] lo speed is unknown, defaulting to 1000 [ 157.245124][T14800] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.252390][T14800] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.266755][T14800] bridge_slave_1: entered allmulticast mode [ 157.276851][T14800] bridge_slave_1: entered promiscuous mode [ 157.351805][T14800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.371423][T15021] lo speed is unknown, defaulting to 1000 [ 157.392402][T14800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.442730][ T9447] hsr_slave_0: left promiscuous mode [ 157.449781][ T9447] hsr_slave_1: left promiscuous mode [ 157.455652][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.464032][ T9447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.500856][ T9447] team0 (unregistering): Port device team_slave_1 removed [ 157.511491][ T9447] team0 (unregistering): Port device team_slave_0 removed [ 157.551411][T14800] team0: Port device team_slave_0 added [ 157.558151][T14800] team0: Port device team_slave_1 added [ 157.609514][T14800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.616688][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.643167][T14800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.676003][T14800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.689586][T14800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 157.715950][T14800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.818804][T14848] chnl_net:caif_netlink_parms(): no params data found [ 157.891194][T14800] hsr_slave_0: entered promiscuous mode [ 157.901478][T14800] hsr_slave_1: entered promiscuous mode [ 157.912263][T14800] debugfs: 'hsr0' already exists in 'hsr' [ 157.918101][T14800] Cannot create hsr debugfs directory [ 157.998232][T14848] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.005405][T14848] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.013961][T14848] bridge_slave_0: entered allmulticast mode [ 158.020707][T14848] bridge_slave_0: entered promiscuous mode [ 158.078024][T14848] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.085368][T14848] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.092867][T14848] bridge_slave_1: entered allmulticast mode [ 158.100024][T14848] bridge_slave_1: entered promiscuous mode [ 158.146366][T14848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.180375][T14848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.223055][T14848] team0: Port device team_slave_0 added [ 158.230287][T14848] team0: Port device team_slave_1 added [ 158.260698][T14848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.267979][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.294534][T14848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.306041][T14848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.313225][T14848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.339230][T14848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.380157][T14848] hsr_slave_0: entered promiscuous mode [ 158.386441][T14848] hsr_slave_1: entered promiscuous mode [ 158.392480][T14848] debugfs: 'hsr0' already exists in 'hsr' [ 158.398307][T14848] Cannot create hsr debugfs directory [ 158.483067][T14800] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.497287][T14800] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.509893][T14800] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.521372][T14800] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.565534][T14800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.577957][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 158.578041][ T29] audit: type=1400 audit(158.554:3683): avc: denied { connect } for pid=15589 comm="syz.4.3974" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 158.582514][T14800] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.620516][ T9460] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.627808][ T9460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.645571][T11156] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.653090][T11156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.725793][T14848] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 158.736092][T14848] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 158.745733][T14848] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 158.755578][T14848] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 158.777526][T14800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.814542][T14848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.828871][T14848] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.839706][T11156] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.847155][T11156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.860202][ T90] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.867580][ T90] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.914176][T14800] veth0_vlan: entered promiscuous mode [ 158.924439][T14800] veth1_vlan: entered promiscuous mode [ 158.942991][T14800] veth0_macvtap: entered promiscuous mode [ 158.950970][T14800] veth1_macvtap: entered promiscuous mode [ 158.963176][T14800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.978419][T14800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.990946][ T9460] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.003835][ T9460] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.015625][ T9460] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.032486][T14848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.041612][ T9460] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.154326][T14848] veth0_vlan: entered promiscuous mode [ 159.174504][T14848] veth1_vlan: entered promiscuous mode [ 159.202444][T14848] veth0_macvtap: entered promiscuous mode [ 159.212819][ T29] audit: type=1400 audit(159.194:3684): avc: denied { getopt } for pid=15652 comm="syz.4.3979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 159.242512][T14848] veth1_macvtap: entered promiscuous mode [ 159.291317][T14848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.299158][ T29] audit: type=1326 audit(159.254:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.322303][ T29] audit: type=1326 audit(159.254:3686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.345841][ T29] audit: type=1326 audit(159.254:3687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.369059][ T29] audit: type=1326 audit(159.254:3688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.392171][ T29] audit: type=1326 audit(159.254:3689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.415452][ T29] audit: type=1326 audit(159.254:3690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.438619][ T29] audit: type=1326 audit(159.254:3691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.461603][ T29] audit: type=1326 audit(159.254:3692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15654 comm="syz.4.3980" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbc37af749 code=0x7ffc0000 [ 159.527354][T14848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.543956][ T9447] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.561894][ T9447] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.587680][ T9447] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.622061][ T9447] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.076140][T15689] netlink: 'syz.6.3995': attribute type 1 has an invalid length. [ 160.077820][T15690] netlink: 'syz.1.3996': attribute type 10 has an invalid length. [ 160.115381][T15690] team0: Port device dummy0 added [ 160.444913][ T9530] ================================================================== [ 160.453057][ T9530] BUG: KCSAN: data-race in copy_process / free_pid [ 160.459604][ T9530] [ 160.461945][ T9530] read-write to 0xffffffff86860008 of 4 bytes by task 15729 on cpu 0: [ 160.470112][ T9530] free_pid+0xb9/0x1d0 [ 160.474221][ T9530] free_pids+0x7a/0xb0 [ 160.478429][ T9530] release_task+0x9a7/0xb60 [ 160.483077][ T9530] do_exit+0xd4d/0x1590 [ 160.487271][ T9530] call_usermodehelper_exec_async+0x247/0x250 [ 160.493470][ T9530] ret_from_fork+0x149/0x290 [ 160.498095][ T9530] ret_from_fork_asm+0x1a/0x30 [ 160.502983][ T9530] [ 160.505320][ T9530] read to 0xffffffff86860008 of 4 bytes by task 9530 on cpu 1: [ 160.512963][ T9530] copy_process+0x16d4/0x1ef0 [ 160.517669][ T9530] kernel_clone+0x16c/0x5c0 [ 160.522200][ T9530] user_mode_thread+0x7d/0xb0 [ 160.526897][ T9530] call_usermodehelper_exec_work+0x41/0x160 [ 160.532837][ T9530] process_scheduled_works+0x4ce/0x9d0 [ 160.538323][ T9530] worker_thread+0x582/0x770 [ 160.542944][ T9530] kthread+0x489/0x510 [ 160.547044][ T9530] ret_from_fork+0x149/0x290 [ 160.551705][ T9530] ret_from_fork_asm+0x1a/0x30 [ 160.556589][ T9530] [ 160.558939][ T9530] value changed: 0x80000136 -> 0x80000135 [ 160.564672][ T9530] [ 160.567015][ T9530] Reported by Kernel Concurrency Sanitizer on: [ 160.573218][ T9530] CPU: 1 UID: 0 PID: 9530 Comm: kworker/u8:68 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 160.584965][ T9530] Tainted: [W]=WARN [ 160.588787][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 160.598872][ T9530] Workqueue: events_unbound call_usermodehelper_exec_work [ 160.606188][ T9530] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 160.685792][T15718] bond1: entered promiscuous mode [ 160.691094][T15718] bond1: entered allmulticast mode [ 160.708789][T15718] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.395488][ T9530] bridge_slave_1: left allmulticast mode [ 161.401296][ T9530] bridge_slave_1: left promiscuous mode [ 161.407099][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.414878][ T9530] bridge_slave_0: left allmulticast mode [ 161.420675][ T9530] bridge_slave_0: left promiscuous mode [ 161.426422][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.621026][ T9530] bond0 (unregistering): Released all slaves [ 161.629953][ T9530] bond1 (unregistering): Released all slaves [ 161.730193][ T9441] smc: removing ib device syz2 [ 161.735329][ T9530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.744885][ T9530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.754082][ T9530] bond0 (unregistering): Released all slaves [ 161.929644][ T9530] tipc: Disabling bearer [ 161.935124][ T9530] tipc: Left network mode [ 161.976124][ T9530] hsr_slave_0: left promiscuous mode [ 161.982617][ T9530] hsr_slave_1: left promiscuous mode [ 161.990185][ T9530] hsr_slave_0: left promiscuous mode [ 161.996112][ T9530] hsr_slave_1: left promiscuous mode [ 162.061942][ T9424] smc: removing ib device syz1 [ 162.111083][ T9530] team0 (unregistering): Port device team_slave_1 removed [ 162.122784][ T9530] team0 (unregistering): Port device team_slave_0 removed [ 162.178734][ T3584] lo speed is unknown, defaulting to 1000 [ 162.184710][ T3584] syz1: Port: 1 Link DOWN [ 162.613801][ T9530] IPVS: stop unused estimator thread 0... [ 162.620027][ T9530] IPVS: stop unused estimator thread 0... [ 162.663385][ T9530] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.601422][ T9530] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.672175][ T9530] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.811066][ T9530] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.905017][ T9530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.915581][ T9530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.951530][ T9530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 163.961877][ T9530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.011549][ T9530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.022153][ T9530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.071370][ T9530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 164.083015][ T9530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.163556][ T9530] bridge_slave_1: left allmulticast mode [ 164.169753][ T9530] bridge_slave_1: left promiscuous mode [ 164.175651][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.183667][ T9530] bridge_slave_0: left allmulticast mode [ 164.189377][ T9530] bridge_slave_0: left promiscuous mode [ 164.195031][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.203242][ T9530] bridge_slave_1: left allmulticast mode [ 164.209038][ T9530] bridge_slave_1: left promiscuous mode [ 164.214837][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.222662][ T9530] bridge_slave_0: left allmulticast mode [ 164.228301][ T9530] bridge_slave_0: left promiscuous mode [ 164.234167][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.340652][ T9530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.350844][ T9530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.360528][ T9530] bond0 (unregistering): Released all slaves [ 164.387317][ T9530] team0: Port device bridge0 removed [ 164.460822][ T9530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.470629][ T9530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.480305][ T9530] bond0 (unregistering): Released all slaves [ 164.489221][ T9530] bond1 (unregistering): Released all slaves [ 164.515670][ T9530] hsr_slave_0: left promiscuous mode [ 164.521631][ T9530] hsr_slave_1: left promiscuous mode [ 164.527404][ T9530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.534850][ T9530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.542804][ T9530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.550362][ T9530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.560632][ T9530] hsr_slave_0: left promiscuous mode [ 164.566356][ T9530] hsr_slave_1: left promiscuous mode [ 164.572077][ T9530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.579508][ T9530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.592238][ T9530] veth1_macvtap: left promiscuous mode [ 164.597728][ T9530] veth0_macvtap: left promiscuous mode [ 164.603353][ T9530] veth1_vlan: left promiscuous mode [ 164.608635][ T9530] veth0_vlan: left promiscuous mode [ 164.614465][ T9530] veth1_macvtap: left promiscuous mode [ 164.619997][ T9530] veth0_macvtap: left promiscuous mode [ 164.625538][ T9530] veth1_vlan: left promiscuous mode [ 164.630912][ T9530] veth0_vlan: left promiscuous mode [ 164.732277][ T9530] team0 (unregistering): Port device team_slave_1 removed [ 164.742716][ T9530] team0 (unregistering): Port device team_slave_0 removed [ 164.770139][ T9530] team0 (unregistering): Port device dummy0 removed [ 164.807716][ T9530] team0 (unregistering): Port device team_slave_1 removed [ 164.817727][ T9530] team0 (unregistering): Port device team_slave_0 removed [ 165.313881][ T9530] IPVS: stop unused estimator thread 0... [ 165.383170][ T9530] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.431550][ T9530] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.491691][ T9530] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.531581][ T9530] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.593186][ T9530] bridge_slave_1: left allmulticast mode [ 165.598981][ T9530] bridge_slave_1: left promiscuous mode [ 165.604812][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.612884][ T9530] bridge_slave_0: left allmulticast mode [ 165.618604][ T9530] bridge_slave_0: left promiscuous mode [ 165.624370][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.701035][ T9530] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.711009][ T9530] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.720782][ T9530] bond0 (unregistering): Released all slaves [ 165.729678][ T9530] bond1 (unregistering): Released all slaves [ 165.793560][ T9530] hsr_slave_0: left promiscuous mode [ 165.799481][ T9530] hsr_slave_1: left promiscuous mode [ 165.805036][ T9530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.812715][ T9530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.820424][ T9530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.828316][ T9530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.838333][ T9530] veth1_macvtap: left promiscuous mode [ 165.844602][ T9530] veth0_macvtap: left promiscuous mode [ 165.850366][ T9530] veth1_vlan: left promiscuous mode [ 165.855678][ T9530] veth0_vlan: left promiscuous mode [ 165.920723][ T9530] team0 (unregistering): Port device team_slave_1 removed [ 165.931095][ T9530] team0 (unregistering): Port device team_slave_0 removed