last executing test programs: 4.186121614s ago: executing program 3 (id=661): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x51, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x1}, 0x10000, 0x32, 0x43a1bd76, 0x5, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4004) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xffffffc1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) pwrite64(r0, 0x0, 0x0, 0x9000) 3.985996086s ago: executing program 0 (id=664): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x9c, 0x0, @val=0x80}}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_generic(r2, 0x0, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000017c0)=""/130, 0x82}, {0x0}], 0x2}, 0xa1}], 0x1, 0x0, 0x0) 3.881884092s ago: executing program 4 (id=666): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40e00, 0xe, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x6, 0x7ffc1ffb}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x90, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff7}, 0x94) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)}], 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000080)={0x1000, 0x1000, 0xfffffffffffffffe}, 0x10) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ptrace(0x10, r1) symlinkat(0x0, 0xffffffffffffffff, 0x0) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000040)={@loopback, @rand_addr=0x64010100, 0xffffffffffffffff, "1667c48e3a7c3006a7a363924097ffb78f990abcf43ad63aedd8dac061eaad1b", 0x7, 0x9, 0x1, 0x100}, 0x3c) ptrace$setregs(0xd, r1, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r1, 0x0, 0x0) 3.804023366s ago: executing program 4 (id=669): socket$kcm(0x1e, 0x5, 0x0) socket$kcm(0x1e, 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) inotify_init() socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) syz_io_uring_setup(0x111, &(0x7f0000000140)={0x0, 0x0, 0x800, 0x3, 0x1}, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$rds(0x15, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 3.655173975s ago: executing program 4 (id=671): syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000004140)=ANY=[@ANYRES16, @ANYRES64, @ANYRES16, @ANYRES16, @ANYRESDEC, @ANYRES16, @ANYRES16, @ANYBLOB="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", @ANYRESHEX=0x0, @ANYRES32], 0x5, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x45, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xff, 0x30000000000}, 0x0, 0x10000, 0xfffffffe, 0x5, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) memfd_create(&(0x7f0000000700)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xcc\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\xae\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xac\b\x003\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\x06\x00\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xaaw\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10\x04\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a\x9c\xce\xf5|q+\t\x11G\x1c\xe7\x9e\x88\xfb\x96\xbe\v:0', 0x2) syz_io_uring_setup(0x110, &(0x7f0000000340)={0x0, 0x7af7, 0x80, 0x1, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mincore(&(0x7f00006fb000/0x2000)=nil, 0x2000, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x14ae4701}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20004080) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x4000}, 0x40) 3.611259198s ago: executing program 0 (id=672): io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, 0x0, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe000000008500000042000000b700000000000010950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836801ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d09a0a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a504a0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e4a9f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffaf, 0x10, &(0x7f0000000040)}, 0x3c) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./bus\x00', 0x804, &(0x7f0000000540)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@utf8no}, {@shortname_winnt}, {@utf8}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_winnt}, {@shortname_win95}, {@shortname_winnt}, {@uni_xlateno}, {@utf8no}, {@rodir}]}, 0x1, 0x294, &(0x7f0000000640)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfb35, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.754629828s ago: executing program 0 (id=675): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000680)=[@in6={0xa, 0x4e24, 0x2, @private1={0xfc, 0x1, '\x00', 0xfe}, 0xfe}]}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) recvmmsg(r1, 0x0, 0x0, 0x22, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x48040) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_virt_wifi\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0xffffffffffffffff, 0x3, 0x512, 0x1, 0x7fff}}) 2.117982245s ago: executing program 1 (id=677): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = syz_io_uring_setup(0xec2, &(0x7f00000003c0)={0x0, 0x0, 0x100, 0x3}, &(0x7f0000000580)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x95d, 0xfa39, 0xe1, 0x0, 0x0) io_uring_enter(r1, 0xedd, 0x8acb, 0x41, 0x0, 0x0) io_uring_enter(r1, 0x47fa, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000006000000000a3c000000120a09000000000000000000020008030900020073797a310000000008000440000000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 2.066263839s ago: executing program 3 (id=678): socket$netlink(0x10, 0x3, 0x10) memfd_create(0x0, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x63, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x9}}, 0x20) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) rt_sigsuspend(0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x400, 0x2, 0x1, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/19, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, r3, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x404c004) 1.913464138s ago: executing program 4 (id=680): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r0, 0x7) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r1, 0x100) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet(0xa, 0x5, 0x0) listen(r3, 0x1) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) 1.87355881s ago: executing program 1 (id=681): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r3, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x404c084}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1000003, 0x12, 0xffffffffffffffff, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f00000001c0)=0x7, 0x0, 0x4) socket(0x1, 0x803, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc5, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x6c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x84000) 1.8640793s ago: executing program 4 (id=682): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x31}], 0x1}}], 0x1, 0x24008094) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) shutdown(r1, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x3, 0x4, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x4, 0x3, 0x7fffffff, 0x3f8}, 0x0, 0x0) 1.85852658s ago: executing program 1 (id=683): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x60}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.857792601s ago: executing program 0 (id=684): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x9]}, 0x8, 0x80800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.769742616s ago: executing program 3 (id=685): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1e}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x74}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2510"], 0xd0}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.764169806s ago: executing program 1 (id=686): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80042, 0x100) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4000804) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x800) bpf$PROG_LOAD(0x5, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x88000000000007, 0x3) 1.745364037s ago: executing program 3 (id=687): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x40, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x7ff, 0x800003, 0x5, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f0000000000)) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000340), &(0x7f0000000380)) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') 1.301864143s ago: executing program 0 (id=688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x3) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES8=r2], 0x50) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffb}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x2, {0x4e21}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b000000000000005b4df2ff0000"], 0x50) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2d", 0x18, 0xfffffffffffffffd) 891.795818ms ago: executing program 3 (id=689): syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 660.958051ms ago: executing program 2 (id=690): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000780)=0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x8, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x7, 0x14, 0x1}, {0x8, 0x9, 0x2}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c040}, 0x0) 660.756881ms ago: executing program 4 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_int(r0, 0x0, 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r4, &(0x7f0000000200)="000bda8b37dd", 0x6) sendfile(r4, r2, 0x0, 0x40001) sendfile(r4, r3, 0x0, 0x7ffff000) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, 0x0, 0x0) 417.687595ms ago: executing program 0 (id=692): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r1], 0x4}}, 0x0) sendfile(r4, r2, 0x0, 0x100000000) 388.210737ms ago: executing program 1 (id=693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) 341.22666ms ago: executing program 2 (id=694): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x33, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x3, 0x7}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x8, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x4) 265.964314ms ago: executing program 1 (id=695): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) unshare(0x22020600) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) fcntl$setpipe(r1, 0x407, 0x176) vmsplice(r2, 0x0, 0x0, 0xd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffed3) 218.971027ms ago: executing program 2 (id=696): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$netlink(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) accept$nfc_llcp(r1, &(0x7f0000000400), &(0x7f0000000040)=0x60) creat(&(0x7f00000002c0)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r3, 0x0, 0x9, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62cee", 0x0, 0xa1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5, 0x7], &(0x7f0000000380), 0x0, 0x2}}, 0x40) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x74, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc5, 0x8}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x74}, 0x1, 0x0, 0x0, 0x600}, 0x0) 150.241801ms ago: executing program 2 (id=697): mmap(&(0x7f0000249000/0x1000)=nil, 0x1000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$sock_int(r2, 0x1, 0xa, &(0x7f0000000080)=0x4, 0x4) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f0000000380)) read(r0, 0x0, 0x2) 121.972443ms ago: executing program 2 (id=698): r0 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x408, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000140)={0x1, 0x0, 0x1, 0xc, 0x32, &(0x7f00000013c0)}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r0], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f0000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000200000085000000c40000009500000000000000999b89ecde8e40dcbfc4bf67a7bd055dc3cb5998d10279e7b9d1fc23994bba060fd20d6eec69735d64fad6f64d2c88dcfb85594b56332169646d5f4d3d2f71066745f667466f559dcfa9c63874c566b43330d53447242b40424cdffb0dcb618ac00e7e71e345ec303121af720d8315cfd2c7f1778c775d378777da8b8035648027def5858dccb523a3d44d6bd78208436809cf9bcea3a8dee32f033c15320b5a1f07a717ccc23eae842d36899d84911efd087409458d242c7e47be835bf49a6c94ce1c397e9a90802a88cb56d4c39c"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030605000000000000050000000000060500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) getsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') ioctl$TCSETA(0xffffffffffffffff, 0x560a, &(0x7f0000001040)={0x0, 0x1, 0x4, 0x20, 0x0, "0000e5ff0100"}) 102.442234ms ago: executing program 3 (id=699): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x90) 0s ago: executing program 2 (id=700): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b927, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0x0, 0x1, 0xfc}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) kernel console output (not intermixed with test programs): [ 17.723856][ T29] audit: type=1400 audit(1769058756.275:62): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.745811][ T29] audit: type=1400 audit(1769058756.275:63): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.768362][ T29] audit: type=1400 audit(1769058756.275:64): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.791219][ T29] audit: type=1400 audit(1769058756.275:65): avc: denied { search } for pid=3200 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 17.814144][ T29] audit: type=1400 audit(1769058756.275:66): avc: denied { read open } for pid=3201 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts. [ 23.714108][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 23.714122][ T29] audit: type=1400 audit(1769058762.265:70): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.743156][ T29] audit: type=1400 audit(1769058762.295:71): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.743920][ T3307] cgroup: Unknown subsys name 'net' [ 23.770876][ T29] audit: type=1400 audit(1769058762.325:72): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.923548][ T3307] cgroup: Unknown subsys name 'cpuset' [ 23.929750][ T3307] cgroup: Unknown subsys name 'rlimit' [ 24.098999][ T29] audit: type=1400 audit(1769058762.645:73): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.122275][ T29] audit: type=1400 audit(1769058762.645:74): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.142888][ T29] audit: type=1400 audit(1769058762.645:75): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.147677][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.163509][ T29] audit: type=1400 audit(1769058762.645:76): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.192420][ T29] audit: type=1400 audit(1769058762.655:77): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.196131][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.217460][ T29] audit: type=1400 audit(1769058762.655:78): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.249669][ T29] audit: type=1400 audit(1769058762.665:79): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 25.328204][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 25.366481][ T3328] chnl_net:caif_netlink_parms(): no params data found [ 25.377269][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 25.415034][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 25.436135][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 25.485830][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.492885][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.500752][ T3319] bridge_slave_0: entered allmulticast mode [ 25.507187][ T3319] bridge_slave_0: entered promiscuous mode [ 25.531272][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.538383][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.545637][ T3319] bridge_slave_1: entered allmulticast mode [ 25.552033][ T3319] bridge_slave_1: entered promiscuous mode [ 25.566320][ T3328] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.573409][ T3328] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.580554][ T3328] bridge_slave_0: entered allmulticast mode [ 25.587043][ T3328] bridge_slave_0: entered promiscuous mode [ 25.601672][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.608799][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.615959][ T3318] bridge_slave_0: entered allmulticast mode [ 25.622344][ T3318] bridge_slave_0: entered promiscuous mode [ 25.628965][ T3328] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.636042][ T3328] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.643143][ T3328] bridge_slave_1: entered allmulticast mode [ 25.649582][ T3328] bridge_slave_1: entered promiscuous mode [ 25.664981][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.672100][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.679317][ T3318] bridge_slave_1: entered allmulticast mode [ 25.685663][ T3318] bridge_slave_1: entered promiscuous mode [ 25.700868][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.722683][ T3328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.732736][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.741845][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.748949][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.756097][ T3323] bridge_slave_0: entered allmulticast mode [ 25.762389][ T3323] bridge_slave_0: entered promiscuous mode [ 25.777488][ T3328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.790031][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.797182][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.804342][ T3323] bridge_slave_1: entered allmulticast mode [ 25.810584][ T3323] bridge_slave_1: entered promiscuous mode [ 25.817021][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.824109][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.831643][ T3327] bridge_slave_0: entered allmulticast mode [ 25.838134][ T3327] bridge_slave_0: entered promiscuous mode [ 25.845869][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.866613][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.873790][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.880930][ T3327] bridge_slave_1: entered allmulticast mode [ 25.887271][ T3327] bridge_slave_1: entered promiscuous mode [ 25.894222][ T3319] team0: Port device team_slave_0 added [ 25.900817][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.922220][ T3319] team0: Port device team_slave_1 added [ 25.932719][ T3328] team0: Port device team_slave_0 added [ 25.939666][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.960964][ T3328] team0: Port device team_slave_1 added [ 25.967537][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.977899][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.995749][ T3318] team0: Port device team_slave_0 added [ 26.006165][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.019982][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.027198][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.053086][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.064729][ T3318] team0: Port device team_slave_1 added [ 26.078701][ T3323] team0: Port device team_slave_0 added [ 26.084583][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.091651][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.117696][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.132804][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.139815][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.165803][ T3328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.181108][ T3323] team0: Port device team_slave_1 added [ 26.193528][ T3328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.200475][ T3328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.226413][ T3328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.237648][ T3327] team0: Port device team_slave_0 added [ 26.248389][ T3327] team0: Port device team_slave_1 added [ 26.254326][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.261318][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.287417][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.309917][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.316976][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.343162][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.354641][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.361690][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.388700][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.418211][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.425195][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.451259][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.466182][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.473173][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.499330][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.519483][ T3319] hsr_slave_0: entered promiscuous mode [ 26.525506][ T3319] hsr_slave_1: entered promiscuous mode [ 26.531917][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.538882][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.564997][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.588993][ T3328] hsr_slave_0: entered promiscuous mode [ 26.595045][ T3328] hsr_slave_1: entered promiscuous mode [ 26.601006][ T3328] debugfs: 'hsr0' already exists in 'hsr' [ 26.606743][ T3328] Cannot create hsr debugfs directory [ 26.618500][ T3318] hsr_slave_0: entered promiscuous mode [ 26.624553][ T3318] hsr_slave_1: entered promiscuous mode [ 26.630376][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 26.636113][ T3318] Cannot create hsr debugfs directory [ 26.677022][ T3327] hsr_slave_0: entered promiscuous mode [ 26.683181][ T3327] hsr_slave_1: entered promiscuous mode [ 26.688851][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 26.694630][ T3327] Cannot create hsr debugfs directory [ 26.702009][ T3323] hsr_slave_0: entered promiscuous mode [ 26.708259][ T3323] hsr_slave_1: entered promiscuous mode [ 26.714148][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 26.719853][ T3323] Cannot create hsr debugfs directory [ 26.900400][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.909354][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.919788][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.928561][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.947424][ T3328] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.957171][ T3328] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.966398][ T3328] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.980337][ T3328] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.002701][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.011790][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.021449][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.030054][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.070787][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.080625][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.093070][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.102706][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.135255][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.145806][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.158320][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.169608][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.188748][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.217890][ T3328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.227833][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.243779][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.250830][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.262609][ T3328] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.271125][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.278508][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.294566][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.311366][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.318445][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.327570][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.334706][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.359388][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.375714][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.388803][ T851] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.395865][ T851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.408931][ T851] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.416348][ T851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.442356][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.454628][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.477864][ T344] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.484987][ T344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.511933][ T2505] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.519081][ T2505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.539246][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.564146][ T2505] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.571221][ T2505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.591562][ T3328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.601812][ T2505] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.609119][ T2505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.625569][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.657530][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.781356][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.813860][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.831337][ T3319] veth0_vlan: entered promiscuous mode [ 27.840847][ T3328] veth0_vlan: entered promiscuous mode [ 27.853257][ T3323] veth0_vlan: entered promiscuous mode [ 27.862449][ T3319] veth1_vlan: entered promiscuous mode [ 27.872441][ T3328] veth1_vlan: entered promiscuous mode [ 27.881679][ T3323] veth1_vlan: entered promiscuous mode [ 27.909521][ T3319] veth0_macvtap: entered promiscuous mode [ 27.922016][ T3319] veth1_macvtap: entered promiscuous mode [ 27.944601][ T3323] veth0_macvtap: entered promiscuous mode [ 27.961767][ T3327] veth0_vlan: entered promiscuous mode [ 27.970323][ T3323] veth1_macvtap: entered promiscuous mode [ 27.978860][ T3327] veth1_vlan: entered promiscuous mode [ 27.986740][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.000023][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.014600][ T3328] veth0_macvtap: entered promiscuous mode [ 28.026136][ T2250] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.036756][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.045607][ T3328] veth1_macvtap: entered promiscuous mode [ 28.051913][ T2250] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.065378][ T3318] veth0_vlan: entered promiscuous mode [ 28.071793][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.079920][ T2250] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.090701][ T2250] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.105557][ T2250] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.114562][ T2250] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.123770][ T2250] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.135939][ T2250] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.146803][ T3318] veth1_vlan: entered promiscuous mode [ 28.161806][ T3327] veth0_macvtap: entered promiscuous mode [ 28.183638][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.192852][ T3328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.201519][ T3327] veth1_macvtap: entered promiscuous mode [ 28.201865][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.212492][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.247865][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.260342][ T2505] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.264318][ T3489] ======================================================= [ 28.264318][ T3489] WARNING: The mand mount option has been deprecated and [ 28.264318][ T3489] and is ignored by this kernel. Remove the mand [ 28.264318][ T3489] option from the mount to silence this warning. [ 28.264318][ T3489] ======================================================= [ 28.277758][ T3318] veth0_macvtap: entered promiscuous mode [ 28.315293][ T851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.325376][ T851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.334614][ T3318] veth1_macvtap: entered promiscuous mode [ 28.362581][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.382724][ T851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.402807][ T851] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.426838][ T851] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.437915][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.460012][ T851] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.486287][ T3501] loop0: detected capacity change from 0 to 128 [ 28.500936][ T851] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.527689][ T3501] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 28.543591][ T851] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.570810][ T851] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.580290][ T3511] loop4: detected capacity change from 0 to 128 [ 28.580437][ T3501] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 28.587765][ T3511] vfat: Unknown parameter 'shortn±ô½¥ame' [ 28.624381][ T296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.661508][ T3516] Illegal XDP return value 4294967294 on prog (id 2) dev syz_tun, expect packet loss! [ 28.676053][ T296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.723603][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 28.723617][ T29] audit: type=1400 audit(1769058767.275:142): avc: denied { add_name } for pid=3499 comm="syz.0.7" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 28.750073][ T29] audit: type=1400 audit(1769058767.275:143): avc: denied { create } for pid=3499 comm="syz.0.7" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.771887][ T29] audit: type=1400 audit(1769058767.275:144): avc: denied { write open } for pid=3499 comm="syz.0.7" path="/1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.816186][ T29] audit: type=1400 audit(1769058767.325:145): avc: denied { bind } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.818555][ T3520] loop2: detected capacity change from 0 to 512 [ 28.858404][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 28.859674][ T29] audit: type=1400 audit(1769058767.325:146): avc: denied { setopt } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.886721][ T29] audit: type=1400 audit(1769058767.325:147): avc: denied { write } for pid=3510 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.905862][ T29] audit: type=1400 audit(1769058767.395:148): avc: denied { read } for pid=3499 comm="syz.0.7" name="bus" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 28.974550][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.981855][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.990049][ T3520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.044716][ T29] audit: type=1400 audit(1769058767.595:149): avc: denied { write } for pid=3519 comm="syz.2.11" path="socket:[4009]" dev="sockfs" ino=4009 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 29.063452][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.077579][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.111953][ T296] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.128856][ T296] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.138665][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.138747][ T296] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.157567][ T296] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.209918][ T29] audit: type=1400 audit(1769058767.755:150): avc: denied { write } for pid=3535 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.258309][ T29] audit: type=1400 audit(1769058767.775:151): avc: denied { read } for pid=3535 comm="syz.4.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.389945][ T3550] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.421068][ T3554] loop1: detected capacity change from 0 to 512 [ 29.436873][ T3554] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 29.446051][ T3554] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 29.467594][ T3554] EXT4-fs (loop1): orphan cleanup on readonly fs [ 29.474628][ T3554] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.23: bad orphan inode 15 [ 29.485017][ T3554] ext4_test_bit(bit=14, block=18) = 1 [ 29.490400][ T3554] is_bad_inode(inode)=0 [ 29.494596][ T3554] NEXT_ORPHAN(inode)=1023 [ 29.498932][ T3554] max_ino=32 [ 29.502138][ T3554] i_nlink=0 [ 29.505576][ T3554] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2972: inode #15: comm syz.1.23: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 29.525017][ T3554] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 29.534584][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 29.580994][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.886311][ T3573] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 29.989419][ T3572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 30.006085][ T3572] hsr_slave_1 (unregistering): left promiscuous mode [ 30.226756][ C0] hrtimer: interrupt took 68812 ns [ 30.540779][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 30.570464][ T3594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 30.687832][ T3582] RDS: rds_bind could not find a transport for ::ffff:172.20.20.23, load rds_tcp or rds_rdma? [ 31.164734][ T3606] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.285964][ T3611] loop1: detected capacity change from 0 to 1024 [ 31.316650][ T3611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.362575][ T3621] loop2: detected capacity change from 0 to 2048 [ 31.393215][ T3593] delete_channel: no stack [ 31.477451][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.716177][ T3606] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.777233][ T3606] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.883928][ T3643] loop2: detected capacity change from 0 to 1024 [ 31.904241][ T3643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.944134][ T3606] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.992435][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.088774][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.112437][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.132172][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.153096][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.353284][ T3650] Set syz1 is full, maxelem 65536 reached [ 32.474541][ T3671] process 'syz.4.65' launched '/dev/fd/4' with NULL argv: empty string added [ 32.661776][ T3688] lo speed is unknown, defaulting to 1000 [ 32.667852][ T3688] lo speed is unknown, defaulting to 1000 [ 32.674121][ T3688] lo speed is unknown, defaulting to 1000 [ 32.700642][ T3688] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.712770][ T3688] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.754450][ T3688] lo speed is unknown, defaulting to 1000 [ 32.761545][ T3688] lo speed is unknown, defaulting to 1000 [ 32.768175][ T3688] lo speed is unknown, defaulting to 1000 [ 32.774426][ T3688] lo speed is unknown, defaulting to 1000 [ 32.780463][ T3688] lo speed is unknown, defaulting to 1000 [ 32.786681][ T3688] lo speed is unknown, defaulting to 1000 [ 33.713619][ T3720] Set syz1 is full, maxelem 65536 reached [ 33.816089][ T29] kauditd_printk_skb: 580 callbacks suppressed [ 33.816104][ T29] audit: type=1400 audit(1769058772.365:732): avc: denied { setopt } for pid=3732 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 33.816555][ T3733] Zero length message leads to an empty skb [ 33.891048][ T3733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.82'. [ 33.914382][ T29] audit: type=1400 audit(1769058772.465:733): avc: denied { write } for pid=3732 comm="syz.0.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 34.159125][ T29] audit: type=1400 audit(1769058772.705:734): avc: denied { read write } for pid=3748 comm="syz.3.90" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.182323][ T29] audit: type=1400 audit(1769058772.705:735): avc: denied { open } for pid=3748 comm="syz.3.90" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 34.232472][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.282139][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.322800][ T3755] team0: entered promiscuous mode [ 34.327952][ T3755] team_slave_0: entered promiscuous mode [ 34.333719][ T3755] team_slave_1: entered promiscuous mode [ 34.364410][ T3755] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 34.522561][ T29] audit: type=1400 audit(1769058773.065:736): avc: denied { watch watch_reads } for pid=3760 comm="syz.2.93" path="/29/file0" dev="tmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 34.601227][ T3749] loop3: detected capacity change from 0 to 2048 [ 34.639135][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.067145][ T3785] netlink: 'syz.0.102': attribute type 4 has an invalid length. [ 35.075548][ T3783] random: crng reseeded on system resumption [ 35.109577][ T1039] lo speed is unknown, defaulting to 1000 [ 35.115396][ T1039] syz2: Port: 1 Link DOWN [ 35.124029][ T3787] netlink: 'syz.0.102': attribute type 4 has an invalid length. [ 35.134475][ T3783] netlink: 24 bytes leftover after parsing attributes in process `syz.4.100'. [ 35.169263][ T1039] lo speed is unknown, defaulting to 1000 [ 35.175111][ T1039] syz2: Port: 1 Link ACTIVE [ 35.187707][ T3786] siw: device registration error -23 [ 35.223640][ T3785] syz.0.102 (3785) used greatest stack depth: 10424 bytes left [ 35.233012][ T29] audit: type=1400 audit(1769058773.555:737): avc: denied { connect } for pid=3780 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.252379][ T29] audit: type=1400 audit(1769058773.555:738): avc: denied { setopt } for pid=3780 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.271890][ T29] audit: type=1400 audit(1769058773.555:739): avc: denied { write } for pid=3780 comm="syz.0.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.291184][ T29] audit: type=1400 audit(1769058773.625:740): avc: denied { write } for pid=3777 comm="syz.4.100" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 35.314614][ T29] audit: type=1400 audit(1769058773.625:741): avc: denied { open } for pid=3777 comm="syz.4.100" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 35.400412][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.595762][ T3809] loop0: detected capacity change from 0 to 512 [ 35.617676][ T3809] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.630998][ T3809] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.696610][ T3809] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.727408][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 35.736385][ T3807] netlink: 8 bytes leftover after parsing attributes in process `syz.2.111'. [ 35.745761][ T3809] EXT4-fs (loop0): 1 truncate cleaned up [ 35.756408][ T3809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.797105][ T3815] netlink: 'syz.2.115': attribute type 6 has an invalid length. [ 35.826820][ T3783] loop4: detected capacity change from 0 to 2048 [ 35.853271][ T3312] loop4: p2 < > p4 [ 35.857289][ T3312] loop4: partition table partially beyond EOD, truncated [ 35.864793][ T3312] loop4: p2 start 4278190080 is beyond EOD, truncated [ 35.871714][ T3312] loop4: p4 size 8192 extends beyond EOD, truncated [ 35.884002][ T3783] loop4: p2 < > p4 [ 35.887983][ T3783] loop4: partition table partially beyond EOD, truncated [ 35.896606][ T3783] loop4: p2 start 4278190080 is beyond EOD, truncated [ 35.903688][ T3783] loop4: p4 size 8192 extends beyond EOD, truncated [ 35.966987][ T3823] loop4: detected capacity change from 0 to 256 [ 35.975023][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 35.997625][ T3826] loop1: detected capacity change from 0 to 1024 [ 36.010572][ T3823] FAT-fs (loop4): Directory bread(block 64) failed [ 36.017364][ T3823] FAT-fs (loop4): Directory bread(block 65) failed [ 36.019152][ T3312] udevd[3312]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 36.024280][ T3823] FAT-fs (loop4): Directory bread(block 66) failed [ 36.040534][ T3823] FAT-fs (loop4): Directory bread(block 67) failed [ 36.047423][ T3823] FAT-fs (loop4): Directory bread(block 68) failed [ 36.054398][ T3823] FAT-fs (loop4): Directory bread(block 69) failed [ 36.061249][ T3823] FAT-fs (loop4): Directory bread(block 70) failed [ 36.066105][ T3826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.068291][ T3823] FAT-fs (loop4): Directory bread(block 71) failed [ 36.087040][ T3823] FAT-fs (loop4): Directory bread(block 72) failed [ 36.093740][ T3823] FAT-fs (loop4): Directory bread(block 73) failed [ 36.115700][ T3830] lo speed is unknown, defaulting to 1000 [ 36.224965][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.285083][ T3830] netlink: 764 bytes leftover after parsing attributes in process `syz.3.119'. [ 36.296636][ T3837] netlink: 8 bytes leftover after parsing attributes in process `syz.4.122'. [ 36.428113][ T3848] ip6t_rpfilter: unknown options [ 36.447867][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.551693][ T3856] loop1: detected capacity change from 0 to 2048 [ 36.565610][ T3856] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.684142][ T3856] EXT4-fs (loop1): shut down requested (0) [ 36.690293][ T2250] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.705993][ T2250] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 36.718224][ T2250] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.718224][ T2250] [ 36.728062][ T2250] EXT4-fs (loop1): Total free blocks count 0 [ 36.734128][ T2250] EXT4-fs (loop1): Free/Dirty block details [ 36.740162][ T2250] EXT4-fs (loop1): free_blocks=2415919104 [ 36.746038][ T2250] EXT4-fs (loop1): dirty_blocks=16 [ 36.751154][ T2250] EXT4-fs (loop1): Block reservation details [ 36.757161][ T2250] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 36.803661][ T3866] uprobe: syz.2.132:3866 failed to unregister, leaking uprobe [ 36.832745][ T3868] syzkaller0: entered promiscuous mode [ 36.838353][ T3868] syzkaller0: entered allmulticast mode [ 36.863798][ T3870] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 36.883718][ T3870] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 36.896280][ T3870] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 36.906552][ T3870] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 37.090978][ T3880] syzkaller0: entered promiscuous mode [ 37.096612][ T3880] syzkaller0: entered allmulticast mode [ 37.166190][ T3889] loop2: detected capacity change from 0 to 164 [ 37.181665][ T3889] Symlink component flag not implemented [ 37.190736][ T3889] Symlink component flag not implemented (7) [ 37.199043][ T3891] loop4: detected capacity change from 0 to 2048 [ 37.221111][ T3889] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.234616][ T3891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.374312][ T3903] netlink: 'syz.3.148': attribute type 10 has an invalid length. [ 37.385006][ T3903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.394009][ T3903] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 37.398794][ T3891] EXT4-fs (loop4): shut down requested (0) [ 37.409407][ T2505] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.426786][ T2505] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 37.439417][ T2505] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.439417][ T2505] [ 37.449473][ T2505] EXT4-fs (loop4): Total free blocks count 0 [ 37.455573][ T2505] EXT4-fs (loop4): Free/Dirty block details [ 37.461513][ T2505] EXT4-fs (loop4): free_blocks=2415919104 [ 37.467332][ T2505] EXT4-fs (loop4): dirty_blocks=16 [ 37.472454][ T2505] EXT4-fs (loop4): Block reservation details [ 37.478500][ T2505] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 37.514848][ T3903] syz.3.148 (3903) used greatest stack depth: 10208 bytes left [ 37.713809][ T3923] loop9: detected capacity change from 0 to 7 [ 37.821854][ T3931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.159'. [ 37.828288][ T3925] SELinux: failed to load policy [ 38.815054][ T3966] 9p: Bad value for 'rfdno' [ 38.999749][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 38.999766][ T29] audit: type=1400 audit(1769058777.545:792): avc: denied { bind } for pid=3979 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.026242][ T29] audit: type=1400 audit(1769058777.545:793): avc: denied { setopt } for pid=3979 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.109275][ T29] audit: type=1400 audit(1769058777.655:794): avc: denied { module_request } for pid=3983 comm="syz.1.181" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 39.153328][ T3988] netlink: 24 bytes leftover after parsing attributes in process `syz.2.179'. [ 39.608096][ T3997] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.184'. [ 39.617195][ T3997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.184'. [ 39.626420][ T3993] mmap: syz.1.183 (3993) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 39.695297][ T29] audit: type=1400 audit(1769058778.245:795): avc: denied { create } for pid=3998 comm="syz.1.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 39.730146][ T29] audit: type=1400 audit(1769058778.265:796): avc: denied { ioctl } for pid=3998 comm="syz.1.185" path="socket:[6741]" dev="sockfs" ino=6741 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 39.769487][ T29] audit: type=1400 audit(1769058778.305:797): avc: denied { write } for pid=4000 comm="syz.1.186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 39.944954][ T4013] ref_ctr increment failed for inode: 0x90 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005c380 [ 39.976643][ T29] audit: type=1326 audit(1769058778.525:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 40.000622][ T29] audit: type=1326 audit(1769058778.525:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 40.024077][ T29] audit: type=1326 audit(1769058778.525:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 40.106512][ T29] audit: type=1326 audit(1769058778.525:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4014 comm="syz.1.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 40.187740][ T4025] loop0: detected capacity change from 0 to 1024 [ 40.203366][ T4025] EXT4-fs: Ignoring removed orlov option [ 40.209126][ T4025] EXT4-fs: inline encryption not supported [ 40.235074][ T4025] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.292531][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.402057][ T4035] netlink: 'syz.0.197': attribute type 10 has an invalid length. [ 40.421576][ T4035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.440336][ T4035] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 40.567480][ T4052] loop2: detected capacity change from 0 to 512 [ 40.584258][ T4052] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 40.598978][ T4052] EXT4-fs (loop2): mount failed [ 40.651362][ T4056] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.684558][ T4056] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.735571][ T4056] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.796510][ T4061] bridge_slave_0: left allmulticast mode [ 40.802216][ T4061] bridge_slave_0: left promiscuous mode [ 40.807996][ T4061] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.816010][ T4061] bridge_slave_1: left allmulticast mode [ 40.821834][ T4061] bridge_slave_1: left promiscuous mode [ 40.827643][ T4061] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.836474][ T4061] bond0: (slave bond_slave_0): Releasing backup interface [ 40.845204][ T4061] bond0: (slave bond_slave_1): Releasing backup interface [ 40.854090][ T4061] team0: Port device team_slave_0 removed [ 40.860496][ T4061] team0: Port device team_slave_1 removed [ 40.866666][ T4061] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 40.886146][ T4056] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.925225][ T4061] team0: Mode changed to "activebackup" [ 40.958605][ T4073] netlink: 'syz.2.211': attribute type 10 has an invalid length. [ 40.969587][ T4073] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.985216][ T4073] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 41.010791][ T2250] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.025458][ T4079] lo speed is unknown, defaulting to 1000 [ 41.025478][ T2250] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.050869][ T2250] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.073109][ T2250] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.124997][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'. [ 41.138832][ T4083] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 41.155714][ T4083] team1: entered promiscuous mode [ 41.160783][ T4083] team1: entered allmulticast mode [ 41.218206][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 41.264126][ T4095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.220'. [ 41.274771][ T4095] netlink: 'syz.3.220': attribute type 7 has an invalid length. [ 41.282414][ T4095] netlink: 'syz.3.220': attribute type 8 has an invalid length. [ 41.291144][ T4095] netlink: 4 bytes leftover after parsing attributes in process `syz.3.220'. [ 41.611369][ T4122] loop3: detected capacity change from 0 to 1024 [ 41.621199][ T4122] EXT4-fs: Ignoring removed orlov option [ 41.630235][ T4122] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.775179][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.856895][ T4133] loop3: detected capacity change from 0 to 512 [ 41.874321][ T4133] EXT4-fs: Ignoring removed nobh option [ 41.882747][ T4133] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 41.892336][ T4133] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.233: invalid indirect mapped block 256 (level 1) [ 41.923095][ T4133] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.233: invalid indirect mapped block 2683928664 (level 1) [ 41.937272][ T4133] EXT4-fs (loop3): 1 truncate cleaned up [ 41.943796][ T4133] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.963105][ T4133] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.233: Invalid block bitmap block 3 in block_group 0 [ 41.976623][ T4133] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.233: Invalid block bitmap block 3 in block_group 0 [ 41.991231][ T4133] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.233: Invalid block bitmap block 3 in block_group 0 [ 42.016967][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.049835][ T4142] loop0: detected capacity change from 0 to 736 [ 42.089486][ T4144] loop4: detected capacity change from 0 to 128 [ 42.156912][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.239'. [ 42.186344][ T4146] bridge_slave_1: left allmulticast mode [ 42.192104][ T4146] bridge_slave_1: left promiscuous mode [ 42.197876][ T4146] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.234568][ T4146] bridge_slave_0: left allmulticast mode [ 42.240322][ T4146] bridge_slave_0: left promiscuous mode [ 42.246387][ T4146] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.324332][ T4142] netlink: 32 bytes leftover after parsing attributes in process `syz.0.237'. [ 42.351704][ T4153] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 42.434587][ T4155] lo speed is unknown, defaulting to 1000 [ 42.456434][ T4159] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 42.464175][ T4159] netlink: 668 bytes leftover after parsing attributes in process `syz.2.243'. [ 42.505220][ T4163] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.512497][ T4163] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.565416][ T4163] bridge0: entered allmulticast mode [ 42.612880][ T4163] bridge_slave_1: left allmulticast mode [ 42.618558][ T4163] bridge_slave_1: left promiscuous mode [ 42.624354][ T4163] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.675804][ T4163] bridge_slave_0: left allmulticast mode [ 42.681589][ T4163] bridge_slave_0: left promiscuous mode [ 42.687535][ T4163] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.743060][ T4180] netlink: 'syz.3.251': attribute type 1 has an invalid length. [ 42.770987][ T4180] Unknown options in mask 20 [ 43.024820][ T4203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 43.042135][ T4203] hsr_slave_1 (unregistering): left promiscuous mode [ 43.059678][ T4203] 9pnet_virtio: no channels available for device 127.0.0.1 [ 43.111416][ T4205] netlink: 52 bytes leftover after parsing attributes in process `syz.4.257'. [ 43.329970][ T4211] veth1_to_bond: entered allmulticast mode [ 43.339854][ T4211] veth1_to_bond: left allmulticast mode [ 43.461581][ T4232] lo speed is unknown, defaulting to 1000 [ 43.754642][ T4254] loop4: detected capacity change from 0 to 512 [ 43.840216][ T4260] netlink: 'syz.1.279': attribute type 13 has an invalid length. [ 43.875732][ T4262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.280'. [ 43.964869][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.976638][ T4260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.185018][ T2505] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.212240][ T2505] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.222836][ T2505] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.232809][ T2505] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.361868][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 44.361881][ T29] audit: type=1400 audit(1769058782.905:893): avc: denied { accept } for pid=4271 comm="syz.1.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 44.411992][ T4276] netlink: 'syz.1.284': attribute type 142 has an invalid length. [ 44.607579][ T29] audit: type=1400 audit(1769058783.155:894): avc: denied { mount } for pid=4284 comm="syz.1.289" name="/" dev="ramfs" ino=7960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 44.703650][ T4290] syzkaller0: entered promiscuous mode [ 44.709176][ T4290] syzkaller0: entered allmulticast mode [ 44.723256][ T29] audit: type=1400 audit(1769058783.275:895): avc: denied { relabelfrom } for pid=4289 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.743237][ T29] audit: type=1400 audit(1769058783.275:896): avc: denied { relabelto } for pid=4289 comm="syz.3.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 45.190984][ T4304] lo speed is unknown, defaulting to 1000 [ 45.200286][ T4305] netlink: 'syz.0.296': attribute type 7 has an invalid length. [ 45.207981][ T4305] netlink: 'syz.0.296': attribute type 8 has an invalid length. [ 45.432090][ T4315] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.439793][ T4315] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.481926][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.492466][ T4315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.537388][ T2505] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.604120][ T2505] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.629124][ T2505] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.629696][ T4332] loop3: detected capacity change from 0 to 512 [ 45.655554][ T4332] EXT4-fs: Ignoring removed oldalloc option [ 45.661553][ T4332] EXT4-fs: inline encryption not supported [ 45.674619][ T2505] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.717780][ T4332] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.755852][ T4332] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.307: bg 0: block 64: padding at end of block bitmap is not set [ 45.777657][ T4332] Quota error (device loop3): write_blk: dquota write failed [ 45.794165][ T4332] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 45.814271][ T4332] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.307: Failed to acquire dquot type 0 [ 45.843127][ T4332] EXT4-fs (loop3): 1 truncate cleaned up [ 45.852685][ T4332] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.899363][ T29] audit: type=1400 audit(1769058784.445:897): avc: denied { read write } for pid=4344 comm="syz.0.311" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.945891][ T4332] tipc: Started in network mode [ 45.950991][ T4332] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 45.959299][ T29] audit: type=1400 audit(1769058784.445:898): avc: denied { open } for pid=4344 comm="syz.0.311" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 45.960113][ T4332] tipc: Enabling of bearer rejected, failed to enable media [ 46.073734][ T4332] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.107184][ T4332] syz.3.307 (4332) used greatest stack depth: 9408 bytes left [ 46.299289][ T4359] vlan2: entered allmulticast mode [ 46.299534][ T4361] __nla_validate_parse: 9 callbacks suppressed [ 46.299579][ T4361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.318'. [ 46.304852][ T4359] bridge0: port 3(vlan2) entered blocking state [ 46.311318][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 46.319961][ T4359] bridge0: port 3(vlan2) entered disabled state [ 46.326196][ T4361] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 46.335733][ T4359] vlan2: entered promiscuous mode [ 46.381454][ T4363] netlink: 12 bytes leftover after parsing attributes in process `syz.1.319'. [ 46.398410][ T4363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.458956][ T4363] macvlan2: entered promiscuous mode [ 46.464436][ T4363] macvlan2: entered allmulticast mode [ 46.471401][ T4363] bond1: entered promiscuous mode [ 46.476943][ T4363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 46.484935][ T4363] bond1: left promiscuous mode [ 46.498646][ T4366] syz_tun: entered allmulticast mode [ 46.698355][ T29] audit: type=1400 audit(1769058785.245:899): avc: denied { shutdown } for pid=4369 comm="syz.1.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.188828][ T4384] loop2: detected capacity change from 0 to 512 [ 47.196033][ T4384] EXT4-fs: Ignoring removed oldalloc option [ 47.201983][ T4384] EXT4-fs: inline encryption not supported [ 47.214692][ T4384] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.237304][ T4384] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.327: bg 0: block 64: padding at end of block bitmap is not set [ 47.287661][ T4384] Quota error (device loop2): write_blk: dquota write failed [ 47.306048][ T4384] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.327: Failed to acquire dquot type 0 [ 47.335947][ T4384] EXT4-fs (loop2): 1 truncate cleaned up [ 47.343482][ T4384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.367494][ T4384] tipc: Started in network mode [ 47.372473][ T4384] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 47.394827][ T4384] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 47.403367][ T4384] tipc: Enabled bearer , priority 10 [ 47.449392][ T4384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.470130][ T4384] syz.2.327 (4384) used greatest stack depth: 9168 bytes left [ 47.964385][ T4412] ref_ctr increment failed for inode: 0x1b3 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881000586c0 [ 48.016621][ T4416] syzkaller0: entered promiscuous mode [ 48.022224][ T4416] syzkaller0: entered allmulticast mode [ 48.033718][ T4418] loop4: detected capacity change from 0 to 512 [ 48.040571][ T4418] EXT4-fs: Ignoring removed oldalloc option [ 48.046597][ T4418] EXT4-fs: inline encryption not supported [ 48.057281][ T4418] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 48.075077][ T4418] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.339: bg 0: block 64: padding at end of block bitmap is not set [ 48.089622][ T4418] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.339: Failed to acquire dquot type 0 [ 48.101303][ T4418] EXT4-fs (loop4): 1 truncate cleaned up [ 48.107907][ T4418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.143191][ T4418] tipc: Started in network mode [ 48.148075][ T4418] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 48.157074][ T4418] tipc: Enabling of bearer rejected, failed to enable media [ 48.167713][ T4424] loop2: detected capacity change from 0 to 764 [ 48.185540][ T4418] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.258311][ T4431] syzkaller0: entered promiscuous mode [ 48.264192][ T4431] syzkaller0: entered allmulticast mode [ 48.533183][ T3399] tipc: Node number set to 1 [ 48.608681][ T4452] loop4: detected capacity change from 0 to 1024 [ 48.625190][ T4452] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 48.635597][ T4452] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 48.645790][ T4452] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 48.878956][ T4456] loop4: detected capacity change from 0 to 128 [ 49.116509][ T4460] loop3: detected capacity change from 0 to 1024 [ 49.125968][ T4458] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 49.133968][ T4458] FAT-fs (loop4): Filesystem has been set read-only [ 49.185834][ T4460] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.292238][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.363188][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 49.363204][ T29] audit: type=1326 audit(1769058787.915:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ca5614ad7 code=0x7ffc0000 [ 49.432620][ T29] audit: type=1326 audit(1769058787.945:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ca55bc0d9 code=0x7ffc0000 [ 49.455946][ T29] audit: type=1326 audit(1769058787.945:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ca5614ad7 code=0x7ffc0000 [ 49.463854][ T4470] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 49.479300][ T29] audit: type=1326 audit(1769058787.945:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ca55bc0d9 code=0x7ffc0000 [ 49.479326][ T29] audit: type=1326 audit(1769058787.945:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6ca561acb9 code=0x7ffc0000 [ 49.479347][ T29] audit: type=1326 audit(1769058787.955:1217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ca5614ad7 code=0x7ffc0000 [ 49.479439][ T29] audit: type=1326 audit(1769058787.955:1218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ca55bc0d9 code=0x7ffc0000 [ 49.581973][ T29] audit: type=1326 audit(1769058787.955:1219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f6ca561acb9 code=0x7ffc0000 [ 49.605748][ T29] audit: type=1326 audit(1769058787.965:1220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ca5614ad7 code=0x7ffc0000 [ 49.629008][ T29] audit: type=1326 audit(1769058787.965:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4444 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ca55bc0d9 code=0x7ffc0000 [ 49.683397][ T4479] loop0: detected capacity change from 0 to 1024 [ 49.690122][ T4479] EXT4-fs: Ignoring removed orlov option [ 49.695812][ T4479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.748353][ T4479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.895071][ T4496] loop2: detected capacity change from 0 to 256 [ 49.908207][ T4496] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 50.188629][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.198407][ T4496] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 50.206640][ T4496] FAT-fs (loop2): Filesystem has been set read-only [ 50.213803][ T4496] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 50.309782][ T4515] loop4: detected capacity change from 0 to 128 [ 50.356595][ T4516] vlan2: entered allmulticast mode [ 50.361841][ T4516] bridge_slave_0: entered allmulticast mode [ 50.625162][ T4515] syz.4.372: attempt to access beyond end of device [ 50.625162][ T4515] loop4: rw=2049, sector=153, nr_sectors = 424 limit=128 [ 50.669659][ T4524] netlink: 16 bytes leftover after parsing attributes in process `syz.2.373'. [ 50.754360][ T4515] syz.4.372: attempt to access beyond end of device [ 50.754360][ T4515] loop4: rw=2049, sector=585, nr_sectors = 8 limit=128 [ 50.878227][ T4524] loop2: detected capacity change from 0 to 1024 [ 50.886177][ T4515] syz.4.372: attempt to access beyond end of device [ 50.886177][ T4515] loop4: rw=2049, sector=601, nr_sectors = 8 limit=128 [ 50.900431][ T4524] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 50.911364][ T4524] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 50.921642][ T4515] syz.4.372: attempt to access beyond end of device [ 50.921642][ T4515] loop4: rw=2049, sector=617, nr_sectors = 8 limit=128 [ 50.970126][ T4524] JBD2: no valid journal superblock found [ 50.975966][ T4524] EXT4-fs (loop2): Could not load journal inode [ 50.984796][ T4515] syz.4.372: attempt to access beyond end of device [ 50.984796][ T4515] loop4: rw=2049, sector=633, nr_sectors = 8 limit=128 [ 51.008136][ T4515] syz.4.372: attempt to access beyond end of device [ 51.008136][ T4515] loop4: rw=2049, sector=649, nr_sectors = 8 limit=128 [ 51.042369][ T4515] syz.4.372: attempt to access beyond end of device [ 51.042369][ T4515] loop4: rw=2049, sector=665, nr_sectors = 8 limit=128 [ 51.167693][ T4515] syz.4.372: attempt to access beyond end of device [ 51.167693][ T4515] loop4: rw=2049, sector=681, nr_sectors = 8 limit=128 [ 51.198627][ T4515] syz.4.372: attempt to access beyond end of device [ 51.198627][ T4515] loop4: rw=2049, sector=697, nr_sectors = 8 limit=128 [ 51.236621][ T4515] syz.4.372: attempt to access beyond end of device [ 51.236621][ T4515] loop4: rw=2049, sector=713, nr_sectors = 8 limit=128 [ 51.387989][ T4535] loop0: detected capacity change from 0 to 1024 [ 51.474927][ T4535] EXT4-fs: Ignoring removed nobh option [ 51.481071][ T4535] EXT4-fs: Ignoring removed bh option [ 51.521793][ T4535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.698982][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.771904][ T4548] syzkaller0: entered promiscuous mode [ 51.777884][ T4548] syzkaller0: entered allmulticast mode [ 51.922494][ T4529] syz.3.376 (4529) used greatest stack depth: 7384 bytes left [ 52.289253][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 52.298606][ T4561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 52.320107][ T4563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.386'. [ 52.438662][ T4565] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 52.488178][ T4567] loop4: detected capacity change from 0 to 164 [ 52.510108][ T4565] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.606031][ T4567] Unable to read rock-ridge attributes [ 52.648873][ T4565] smc: net device bond0 erased user defined pnetid SYZ0 [ 52.657176][ T4567] Unable to read rock-ridge attributes [ 52.737715][ T4577] macvlan1: entered promiscuous mode [ 52.750378][ T4577] dummy0: entered promiscuous mode [ 52.758667][ T4577] hsr1: Slave A (macvlan1) is not up; please bring it up to get a fully working HSR network [ 52.768828][ T4577] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 52.983523][ T4577] hsr1: entered promiscuous mode [ 52.988601][ T4577] hsr1: entered allmulticast mode [ 52.993743][ T4577] macvlan1: entered allmulticast mode [ 53.003632][ T4577] dummy0: entered allmulticast mode [ 53.185603][ T4579] netlink: 14 bytes leftover after parsing attributes in process `syz.3.391'. [ 53.406883][ T4610] loop2: detected capacity change from 0 to 1024 [ 53.415164][ T4610] ext4: Unknown parameter 'noacl' [ 53.563401][ T4600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.576153][ T4600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.714431][ T4613] lo speed is unknown, defaulting to 1000 [ 53.758255][ T3598] Bluetooth: hci0: sending frame failed (-49) [ 53.765447][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 54.647417][ T4642] loop4: detected capacity change from 0 to 128 [ 54.662619][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 54.662631][ T29] audit: type=1400 audit(1769058793.215:1375): avc: denied { read } for pid=4641 comm="syz.4.413" path="socket:[8888]" dev="sockfs" ino=8888 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 54.773693][ T29] audit: type=1400 audit(1769058793.325:1376): avc: denied { read write } for pid=4645 comm="syz.0.415" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 54.797915][ T29] audit: type=1400 audit(1769058793.325:1377): avc: denied { open } for pid=4645 comm="syz.0.415" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.117227][ T29] audit: type=1326 audit(1769058793.665:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 55.161171][ T29] audit: type=1326 audit(1769058793.685:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 55.184838][ T29] audit: type=1326 audit(1769058793.685:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 55.208315][ T29] audit: type=1326 audit(1769058793.685:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 55.231541][ T29] audit: type=1400 audit(1769058793.685:1382): avc: denied { lock } for pid=4655 comm="syz.1.419" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9741 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.256237][ T29] audit: type=1326 audit(1769058793.685:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 55.280139][ T29] audit: type=1326 audit(1769058793.695:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4655 comm="syz.1.419" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f01beb1acb9 code=0x7ffc0000 [ 55.490008][ T4671] syzkaller0: entered promiscuous mode [ 55.495874][ T4671] syzkaller0: entered allmulticast mode [ 55.845060][ T4695] loop0: detected capacity change from 0 to 128 [ 55.962554][ T4704] capability: warning: `syz.4.436' uses deprecated v2 capabilities in a way that may be insecure [ 56.010192][ T4695] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 56.041392][ T4695] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 56.202240][ T4695] netlink: 16 bytes leftover after parsing attributes in process `syz.0.432'. [ 56.285095][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 56.530370][ T4719] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.578292][ T4719] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.626722][ T4719] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.697782][ T4719] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.733088][ T3506] IPVS: starting estimator thread 0... [ 56.763919][ T4734] netlink: 48 bytes leftover after parsing attributes in process `syz.2.448'. [ 56.813600][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.823387][ T4738] IPVS: using max 2448 ests per chain, 122400 per kthread [ 56.841670][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.848645][ T4742] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 56.895973][ T4742] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.914115][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.922356][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.932178][ T4742] netlink: 28 bytes leftover after parsing attributes in process `syz.2.453'. [ 56.944401][ T4745] loop4: detected capacity change from 0 to 512 [ 56.953322][ T4745] EXT4-fs: inline encryption not supported [ 56.960630][ T4742] bond2: entered promiscuous mode [ 56.965857][ T4742] bond2: entered allmulticast mode [ 56.994266][ T4745] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.995707][ T4742] bond2: (slave dummy0): making interface the new active one [ 57.014329][ T4742] dummy0: entered promiscuous mode [ 57.019653][ T4742] dummy0: entered allmulticast mode [ 57.026045][ T4742] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 57.083580][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.270777][ T4776] netlink: 'syz.2.463': attribute type 1 has an invalid length. [ 57.302184][ T4776] netlink: 28 bytes leftover after parsing attributes in process `syz.2.463'. [ 57.319726][ T4776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.355168][ T4776] 8021q: adding VLAN 0 to HW filter on device bond3 [ 57.375722][ T4776] bond3: (slave geneve2): making interface the new active one [ 57.389704][ T4776] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 57.398453][ T52] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 57.428763][ T52] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 57.465122][ T52] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 57.499474][ T52] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 57.566983][ T4783] syzkaller0: entered promiscuous mode [ 57.572582][ T4783] syzkaller0: entered allmulticast mode [ 57.707503][ T4792] lo speed is unknown, defaulting to 1000 [ 57.991793][ T4797] tipc: Started in network mode [ 57.996751][ T4797] tipc: Node identity fae22c10c11e, cluster identity 4711 [ 58.003948][ T4797] tipc: Enabled bearer , priority 0 [ 58.011721][ T4797] syzkaller0: entered promiscuous mode [ 58.017331][ T4797] syzkaller0: entered allmulticast mode [ 58.028229][ T4797] tipc: Resetting bearer [ 58.035783][ T4796] tipc: Resetting bearer [ 58.042848][ T4796] tipc: Disabling bearer [ 59.067796][ T4819] loop3: detected capacity change from 0 to 128 [ 59.500208][ T4832] syz_tun: entered allmulticast mode [ 59.506838][ T4831] syz_tun: left allmulticast mode [ 59.523341][ T4834] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4834 comm=syz.1.484 [ 59.545731][ T4834] netlink: 'syz.1.484': attribute type 1 has an invalid length. [ 59.578521][ T4834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.606343][ T4834] bond2: (slave dummy0): making interface the new active one [ 59.615193][ T4834] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 59.783547][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 59.792829][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.489'. [ 59.920630][ T4850] lo speed is unknown, defaulting to 1000 [ 60.165364][ T29] kauditd_printk_skb: 384 callbacks suppressed [ 60.165383][ T29] audit: type=1326 audit(1769058798.715:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4857 comm="syz.4.493" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f922435acb9 code=0x0 [ 60.248828][ T4861] syz_tun: entered allmulticast mode [ 60.266910][ T4860] syz_tun: left allmulticast mode [ 60.291039][ T4865] batman_adv: batadv0: Adding interface: ipvlan2 [ 60.297501][ T4865] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 60.323604][ T4865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.334141][ T4865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.347468][ T4866] loop3: detected capacity change from 0 to 512 [ 60.358210][ T29] audit: type=1400 audit(1769058798.835:1770): avc: denied { accept } for pid=4864 comm="syz.3.495" path="socket:[10693]" dev="sockfs" ino=10693 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 60.383191][ T4865] batman_adv: batadv0: Interface activated: ipvlan2 [ 60.646526][ T29] audit: type=1400 audit(1769058799.195:1771): avc: denied { watch watch_reads } for pid=4874 comm="syz.2.498" path="/116/file1" dev="tmpfs" ino=633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 60.874352][ T4878] netlink: 64 bytes leftover after parsing attributes in process `syz.2.499'. [ 61.236549][ T29] audit: type=1400 audit(1769058799.785:1772): avc: denied { mac_admin } for pid=4893 comm="syz.1.503" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.257927][ T4894] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 61.274808][ T4894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.503'. [ 61.284855][ T29] audit: type=1400 audit(1769058799.825:1773): avc: denied { relabelto } for pid=4893 comm="syz.1.503" name="117" dev="tmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 61.311125][ T29] audit: type=1400 audit(1769058799.825:1774): avc: denied { associate } for pid=4893 comm="syz.1.503" name="117" dev="tmpfs" ino=626 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 61.391390][ T4897] netlink: 'syz.1.505': attribute type 39 has an invalid length. [ 61.438768][ T29] audit: type=1400 audit(1769058799.895:1775): avc: denied { add_name } for pid=4893 comm="syz.1.503" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 61.463950][ T29] audit: type=1400 audit(1769058799.895:1776): avc: denied { create } for pid=4893 comm="syz.1.503" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 61.485058][ T29] audit: type=1400 audit(1769058799.895:1777): avc: denied { associate } for pid=4893 comm="syz.1.503" name="file0" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 61.506767][ T29] audit: type=1400 audit(1769058799.905:1778): avc: denied { remove_name } for pid=3318 comm="syz-executor" name="file0" dev="tmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 61.711963][ T4909] loop3: detected capacity change from 0 to 2048 [ 61.728809][ T4909] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.835235][ T4909] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 61.887918][ T4909] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 96 with max blocks 3 with error 28 [ 61.900314][ T4909] EXT4-fs (loop3): This should not happen!! Data will be lost [ 61.900314][ T4909] [ 61.909992][ T4909] EXT4-fs (loop3): Total free blocks count 0 [ 61.916124][ T4909] EXT4-fs (loop3): Free/Dirty block details [ 61.922013][ T4909] EXT4-fs (loop3): free_blocks=2415919504 [ 61.927777][ T4909] EXT4-fs (loop3): dirty_blocks=16 [ 61.933357][ T4909] EXT4-fs (loop3): Block reservation details [ 61.939329][ T4909] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 61.962451][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.967412][ T4916] netlink: 28 bytes leftover after parsing attributes in process `syz.2.511'. [ 62.353108][ T4942] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4942 comm=syz.4.520 [ 63.078577][ T4973] ALSA: seq fatal error: cannot create timer (-22) [ 63.346905][ T5006] syzkaller0: entered promiscuous mode [ 63.352447][ T5006] syzkaller0: entered allmulticast mode [ 63.379530][ T5010] syzkaller0: entered promiscuous mode [ 63.385105][ T5010] syzkaller0: entered allmulticast mode [ 63.776690][ T5060] syzkaller0: entered promiscuous mode [ 63.782218][ T5060] syzkaller0: entered allmulticast mode [ 63.797851][ T5060] tipc: Enabled bearer , priority 0 [ 63.814219][ T5059] tipc: Resetting bearer [ 63.824067][ T5059] tipc: Disabling bearer [ 63.871507][ T5068] syzkaller0: entered promiscuous mode [ 63.877072][ T5068] syzkaller0: entered allmulticast mode [ 64.460707][ T5043] syz.4.534 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 64.474865][ T5043] CPU: 1 UID: 0 PID: 5043 Comm: syz.4.534 Not tainted syzkaller #0 PREEMPT(voluntary) [ 64.474891][ T5043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.474902][ T5043] Call Trace: [ 64.474912][ T5043] [ 64.474920][ T5043] __dump_stack+0x1d/0x30 [ 64.474947][ T5043] dump_stack_lvl+0x95/0xd0 [ 64.475008][ T5043] dump_stack+0x15/0x1b [ 64.475027][ T5043] dump_header+0x80/0x240 [ 64.475046][ T5043] oom_kill_process+0x295/0x350 [ 64.475091][ T5043] out_of_memory+0x97d/0xb80 [ 64.475116][ T5043] try_charge_memcg+0x62e/0xa10 [ 64.475160][ T5043] obj_cgroup_charge_pages+0xa6/0x150 [ 64.475192][ T5043] __memcg_kmem_charge_page+0x9e/0x170 [ 64.475288][ T5043] __alloc_frozen_pages_noprof+0x18a/0x350 [ 64.475317][ T5043] alloc_pages_mpol+0xb3/0x260 [ 64.475414][ T5043] alloc_pages_noprof+0x8f/0x130 [ 64.475488][ T5043] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 64.475591][ T5043] __kvmalloc_node_noprof+0x471/0x680 [ 64.475672][ T5043] ? ip_set_alloc+0x24/0x30 [ 64.475695][ T5043] ? ip_set_alloc+0x24/0x30 [ 64.475722][ T5043] ip_set_alloc+0x24/0x30 [ 64.475768][ T5043] hash_netiface_create+0x282/0x740 [ 64.475794][ T5043] ? __pfx_hash_netiface_create+0x10/0x10 [ 64.475862][ T5043] ip_set_create+0x3cf/0x970 [ 64.475897][ T5043] ? __nla_parse+0x40/0x60 [ 64.475939][ T5043] nfnetlink_rcv_msg+0x509/0x5d0 [ 64.475981][ T5043] netlink_rcv_skb+0x123/0x220 [ 64.476017][ T5043] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 64.476043][ T5043] nfnetlink_rcv+0x167/0x1720 [ 64.476111][ T5043] ? free_frozen_page_commit+0x79/0x3b0 [ 64.476138][ T5043] ? _raw_spin_unlock+0x9/0x30 [ 64.476196][ T5043] ? __free_frozen_pages+0x278/0x4e0 [ 64.476224][ T5043] ? bpf_check+0x9d8c/0xc890 [ 64.476260][ T5043] ? emit_mov_imm64+0x2ca/0x2e0 [ 64.476333][ T5043] ? xas_load+0x413/0x430 [ 64.476461][ T5043] ? visit_groups_merge+0x706/0xfd0 [ 64.476486][ T5043] ? _raw_spin_lock_bh+0x56/0xb0 [ 64.476583][ T5043] ? should_fail_ex+0x30/0x280 [ 64.476623][ T5043] ? selinux_nlmsg_lookup+0x99/0x890 [ 64.476652][ T5043] ? __rcu_read_unlock+0x33/0x70 [ 64.476673][ T5043] ? __netlink_lookup+0x276/0x2b0 [ 64.476739][ T5043] netlink_unicast+0x5c0/0x690 [ 64.476762][ T5043] netlink_sendmsg+0x5c8/0x6f0 [ 64.476790][ T5043] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.476882][ T5043] __sock_sendmsg+0x145/0x170 [ 64.476911][ T5043] ____sys_sendmsg+0x31e/0x4a0 [ 64.476954][ T5043] ___sys_sendmsg+0x195/0x1e0 [ 64.477071][ T5043] __x64_sys_sendmsg+0xd4/0x160 [ 64.477098][ T5043] x64_sys_call+0x17ba/0x3000 [ 64.477229][ T5043] do_syscall_64+0xc0/0x2a0 [ 64.477266][ T5043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.477290][ T5043] RIP: 0033:0x7f922435acb9 [ 64.477314][ T5043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.477335][ T5043] RSP: 002b:00007f9222db7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.477353][ T5043] RAX: ffffffffffffffda RBX: 00007f92245d5fa0 RCX: 00007f922435acb9 [ 64.477370][ T5043] RDX: 0000000000000800 RSI: 0000200000000200 RDI: 0000000000000005 [ 64.477382][ T5043] RBP: 00007f92243c8bf7 R08: 0000000000000000 R09: 0000000000000000 [ 64.477394][ T5043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.477406][ T5043] R13: 00007f92245d6038 R14: 00007f92245d5fa0 R15: 00007ffded4c1878 [ 64.477425][ T5043] [ 64.477435][ T5043] memory: usage 307200kB, limit 307200kB, failcnt 234 [ 64.818043][ T5043] memory+swap: usage 307384kB, limit 9007199254740988kB, failcnt 0 [ 64.826078][ T5043] kmem: usage 306956kB, limit 9007199254740988kB, failcnt 0 [ 64.833429][ T5043] Memory cgroup stats for /syz4: [ 64.833798][ T5043] cache 8192 [ 64.842079][ T5043] rss 16384 [ 64.845215][ T5043] shmem 0 [ 64.848164][ T5043] mapped_file 8192 [ 64.851879][ T5043] dirty 8192 [ 64.855129][ T5043] writeback 0 [ 64.858440][ T5043] workingset_refault_anon 35 [ 64.863039][ T5043] workingset_refault_file 494 [ 64.867738][ T5043] swap 180224 [ 64.871173][ T5043] swapcached 110592 [ 64.875063][ T5043] pgpgin 140924 [ 64.878500][ T5043] pgpgout 140895 [ 64.882019][ T5043] pgfault 95294 [ 64.885499][ T5043] pgmajfault 28 [ 64.888954][ T5043] inactive_anon 90112 [ 64.893055][ T5043] active_anon 20480 [ 64.896863][ T5043] inactive_file 0 [ 64.900493][ T5043] active_file 8192 [ 64.904319][ T5043] unevictable 0 [ 64.907789][ T5043] hierarchical_memory_limit 314572800 [ 64.913181][ T5043] hierarchical_memsw_limit 9223372036854771712 [ 64.919334][ T5043] total_cache 8192 [ 64.923070][ T5043] total_rss 16384 [ 64.926764][ T5043] total_shmem 0 [ 64.930234][ T5043] total_mapped_file 8192 [ 64.934509][ T5043] total_dirty 8192 [ 64.938281][ T5043] total_writeback 0 [ 64.942094][ T5043] total_workingset_refault_anon 35 [ 64.947218][ T5043] total_workingset_refault_file 494 [ 64.952401][ T5043] total_swap 180224 [ 64.956306][ T5043] total_swapcached 110592 [ 64.960619][ T5043] total_pgpgin 140924 [ 64.964604][ T5043] total_pgpgout 140895 [ 64.968663][ T5043] total_pgfault 95294 [ 64.972697][ T5043] total_pgmajfault 28 [ 64.976693][ T5043] total_inactive_anon 90112 [ 64.981177][ T5043] total_active_anon 20480 [ 64.985515][ T5043] total_inactive_file 0 [ 64.989660][ T5043] total_active_file 8192 [ 64.993922][ T5043] total_unevictable 0 [ 64.997889][ T5043] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz4,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.534,pid=5042,uid=0 [ 65.012695][ T5043] Memory cgroup out of memory: Killed process 5042 (syz.4.534) total-vm:94000kB, anon-rss:1332kB, file-rss:22412kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 65.173813][ T5150] tipc: New replicast peer: 255.255.255.255 [ 65.180435][ T5150] tipc: Enabled bearer , priority 10 [ 65.223296][ T5154] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 65.253968][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 65.253981][ T29] audit: type=1400 audit(1769058803.805:1800): avc: denied { associate } for pid=5163 comm="syz.1.555" name="core" scontext=root:object_r:etc_runtime_t tcontext=system_u:object_r:root_t tclass=filesystem permissive=1 [ 65.331575][ T5147] loop3: detected capacity change from 0 to 8192 [ 65.403399][ T5169] loop4: detected capacity change from 0 to 128 [ 65.439689][ T5172] loop0: detected capacity change from 0 to 512 [ 65.484419][ T5172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.491928][ T29] audit: type=1326 audit(1769058804.035:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.508729][ T5172] ext4 filesystem being mounted at /92/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.520376][ T29] audit: type=1326 audit(1769058804.035:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.520405][ T29] audit: type=1326 audit(1769058804.035:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.577405][ T29] audit: type=1326 audit(1769058804.035:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.600743][ T29] audit: type=1326 audit(1769058804.035:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.624147][ T29] audit: type=1326 audit(1769058804.035:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.647501][ T29] audit: type=1326 audit(1769058804.035:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.670854][ T29] audit: type=1326 audit(1769058804.035:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5168 comm="syz.4.558" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 65.699190][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.779336][ T5183] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.883407][ T5189] loop0: detected capacity change from 0 to 1024 [ 65.897195][ T5189] EXT4-fs: Ignoring removed mblk_io_submit option [ 65.922006][ T5189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 65.956163][ T5189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.981246][ T5189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.563'. [ 66.016294][ T29] audit: type=1326 audit(1769058804.565:1809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5194 comm="syz.2.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca561acb9 code=0x7ffc0000 [ 66.076808][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.152259][ T5195] netlink: 'syz.2.564': attribute type 1 has an invalid length. [ 66.213063][ T3534] tipc: Node number set to 1 [ 67.047763][ T5232] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.157749][ T5237] tipc: Enabled bearer , priority 0 [ 67.192212][ T5237] syzkaller0: entered promiscuous mode [ 67.197935][ T5237] syzkaller0: entered allmulticast mode [ 67.234639][ T5237] tipc: Resetting bearer [ 67.252152][ T5236] tipc: Resetting bearer [ 67.268650][ T5236] tipc: Disabling bearer [ 67.308704][ T5242] tipc: Enabled bearer , priority 0 [ 67.329237][ T5242] syzkaller0: entered promiscuous mode [ 67.334785][ T5242] syzkaller0: entered allmulticast mode [ 67.375125][ T5242] tipc: Resetting bearer [ 67.390664][ T5241] tipc: Resetting bearer [ 67.398891][ T5249] netlink: 12 bytes leftover after parsing attributes in process `syz.1.589'. [ 67.418276][ T5241] tipc: Disabling bearer [ 67.445332][ T5252] syzkaller0: entered promiscuous mode [ 67.450901][ T5252] syzkaller0: entered allmulticast mode [ 67.634237][ T5257] netlink: 12 bytes leftover after parsing attributes in process `syz.1.583'. [ 67.702110][ T5257] vlan2: entered promiscuous mode [ 67.707210][ T5257] bond0: entered promiscuous mode [ 67.712237][ T5257] bond_slave_0: entered promiscuous mode [ 67.718075][ T5257] bond_slave_1: entered promiscuous mode [ 68.440806][ T5302] tipc: Enabling of bearer rejected, failed to enable media [ 68.714078][ T5309] loop4: detected capacity change from 0 to 512 [ 68.751492][ T5309] EXT4-fs (loop4): orphan cleanup on readonly fs [ 68.758288][ T5309] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 68.788999][ T5309] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 68.828881][ T5309] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.595: attempt to clear invalid blocks 2 len 1 [ 68.850564][ T5309] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.595: invalid indirect mapped block 1819239214 (level 0) [ 68.873337][ T5309] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.595: invalid indirect mapped block 1819239214 (level 1) [ 68.891047][ T5309] EXT4-fs (loop4): 1 truncate cleaned up [ 68.907496][ T5309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 68.953189][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.268188][ T5400] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5400 comm=syz.0.600 [ 69.338408][ T5400] netlink: 'syz.0.600': attribute type 1 has an invalid length. [ 69.378485][ T5400] 8021q: adding VLAN 0 to HW filter on device bond1 [ 69.450212][ T5400] bond1: (slave dummy0): making interface the new active one [ 69.491987][ T5400] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 69.709796][ T5426] syzkaller0: entered promiscuous mode [ 69.715428][ T5426] syzkaller0: entered allmulticast mode [ 69.807134][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.609'. [ 69.816107][ T5431] netlink: 31 bytes leftover after parsing attributes in process `syz.0.609'. [ 69.825025][ T5431] netlink: 'syz.0.609': attribute type 3 has an invalid length. [ 69.832680][ T5431] netlink: 'syz.0.609': attribute type 2 has an invalid length. [ 69.840342][ T5431] netlink: 31 bytes leftover after parsing attributes in process `syz.0.609'. [ 69.876943][ T5434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.610'. [ 69.885948][ T5434] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 69.890235][ T5317] syz.2.597 (5317) used greatest stack depth: 7048 bytes left [ 69.894930][ T5434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.610'. [ 69.952865][ T5434] netlink: 36 bytes leftover after parsing attributes in process `syz.1.610'. [ 69.963014][ T5436] tipc: Enabled bearer , priority 0 [ 69.970145][ T5436] syzkaller0: entered promiscuous mode [ 69.975713][ T5436] syzkaller0: entered allmulticast mode [ 69.985981][ T5436] tipc: Resetting bearer [ 69.992747][ T5435] tipc: Resetting bearer [ 70.006313][ T5435] tipc: Disabling bearer [ 70.211540][ T5461] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 70.360489][ T5475] netlink: 'syz.1.622': attribute type 10 has an invalid length. [ 70.383165][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.400207][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 70.400223][ T29] audit: type=1326 audit(1769058808.945:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.406056][ T5475] batadv0: entered promiscuous mode [ 70.412955][ T29] audit: type=1326 audit(1769058808.945:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.431681][ T5475] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 70.434999][ T29] audit: type=1326 audit(1769058808.965:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.435025][ T29] audit: type=1326 audit(1769058808.965:1922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.474174][ T5478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.531503][ T5478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.539941][ T29] audit: type=1326 audit(1769058808.985:1923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.563464][ T29] audit: type=1326 audit(1769058808.985:1924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.587143][ T29] audit: type=1326 audit(1769058808.985:1925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.610483][ T29] audit: type=1400 audit(1769058809.055:1926): avc: denied { read } for pid=5479 comm="syz.3.624" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.633561][ T29] audit: type=1400 audit(1769058809.055:1927): avc: denied { open } for pid=5479 comm="syz.3.624" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 70.657090][ T29] audit: type=1326 audit(1769058809.065:1928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5476 comm="syz.4.623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922435acb9 code=0x7ffc0000 [ 70.681026][ T5478] bond0: (slave batadv0): Releasing backup interface [ 70.708032][ T5478] batadv0 (unregistering): left promiscuous mode [ 70.722400][ T5484] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 71.219291][ T5501] __nla_validate_parse: 1 callbacks suppressed [ 71.219310][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 71.234374][ T5501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.632'. [ 71.376401][ T5501] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 71.407350][ T5516] netlink: 12 bytes leftover after parsing attributes in process `syz.4.634'. [ 71.442033][ T5514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 71.455415][ T5514] vlan2: entered promiscuous mode [ 71.460491][ T5514] bond0: entered promiscuous mode [ 71.465568][ T5514] bond_slave_0: entered promiscuous mode [ 71.471260][ T5514] bond_slave_1: entered promiscuous mode [ 71.477870][ T5514] batadv0: entered promiscuous mode [ 71.561622][ T5522] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5522 comm=syz.1.636 [ 71.628589][ T5488] loop3: detected capacity change from 0 to 1024 [ 71.636342][ T5530] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 71.649362][ T5488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 71.666816][ T5488] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 71.675926][ T5488] System zones: 0-1, 3-36 [ 71.692759][ T5488] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.712240][ T5534] netlink: 'syz.4.641': attribute type 10 has an invalid length. [ 71.720827][ T5534] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.728917][ T5534] bond0: (slave team0): Enslaving as an active interface with an up link [ 71.761221][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.833785][ T3505] IPVS: starting estimator thread 0... [ 71.847369][ T5548] loop3: detected capacity change from 0 to 1024 [ 71.855664][ T5548] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 71.865486][ T5548] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 71.880640][ T5548] EXT4-fs (loop3): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 71.890603][ T5548] EXT4-fs error (device loop3): ext4_get_journal_inode:5849: inode #32: comm syz.3.645: iget: special inode unallocated [ 71.894916][ T5551] lo speed is unknown, defaulting to 1000 [ 71.904802][ T5548] EXT4-fs (loop3): no journal found [ 71.914714][ T5548] EXT4-fs (loop3): can't get journal size [ 71.933029][ T5547] IPVS: using max 2208 ests per chain, 110400 per kthread [ 71.941087][ T5548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.083606][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.201615][ T5562] lo speed is unknown, defaulting to 1000 [ 73.083621][ T5595] infiniband : set down [ 73.087929][ T5595] infiniband : added ipvlan0 [ 73.098929][ T5595] RDS/IB: : added [ 73.102780][ T5595] smc: adding ib device  with port count 1 [ 73.108741][ T5595] smc: ib device  port 1 has no pnetid [ 73.272718][ T5604] syzkaller0: entered promiscuous mode [ 73.278388][ T5604] syzkaller0: entered allmulticast mode [ 73.739528][ T5638] loop0: detected capacity change from 0 to 256 [ 73.760366][ T5641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'. [ 73.770101][ T5638] FAT-fs (loop0): codepage cp1251 not found [ 75.412177][ T5664] netlink: 4 bytes leftover after parsing attributes in process `syz.1.677'. [ 75.415457][ T5668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.678'. [ 75.455486][ T5672] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5672 comm=syz.4.680 [ 75.469783][ T5668] team0: No ports can be present during mode change [ 75.587905][ T5683] netlink: 188 bytes leftover after parsing attributes in process `syz.3.685'. [ 76.526518][ T5698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.596514][ T5698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.731813][ T5700] loop4: detected capacity change from 0 to 1024 [ 76.738804][ T5700] EXT4-fs: Ignoring removed oldalloc option [ 76.744877][ T5700] EXT4-fs: Ignoring removed bh option [ 76.835587][ T5700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.837365][ T5702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 76.970699][ T5708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.986878][ T5708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 77.157826][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 77.157842][ T29] audit: type=1400 audit(1769058815.705:2068): avc: denied { accept } for pid=5724 comm="syz.2.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 77.319397][ T29] audit: type=1400 audit(1769058815.865:2069): avc: denied { setattr } for pid=5718 comm="syz.1.695" name="" dev="pipefs" ino=14427 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 77.380049][ T5700] ================================================================== [ 77.388154][ T5700] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 77.396056][ T5700] [ 77.398367][ T5700] write to 0xffff888107a73bd4 of 4 bytes by task 5706 on cpu 1: [ 77.406001][ T5700] xas_set_mark+0x12b/0x140 [ 77.410670][ T5700] __folio_start_writeback+0x17b/0x370 [ 77.416129][ T5700] ext4_bio_write_folio+0x5ad/0x9f0 [ 77.421336][ T5700] mpage_process_page_bufs+0x4a1/0x620 [ 77.426805][ T5700] mpage_prepare_extent_to_map+0x7d4/0xc50 [ 77.432618][ T5700] ext4_do_writepages+0x9f6/0x2800 [ 77.437744][ T5700] ext4_writepages+0x18f/0x320 [ 77.442500][ T5700] do_writepages+0x1c6/0x310 [ 77.447090][ T5700] file_write_and_wait_range+0x178/0x2f0 [ 77.452736][ T5700] generic_buffers_fsync_noflush+0x45/0x130 [ 77.458644][ T5700] ext4_sync_file+0x1aa/0x680 [ 77.463311][ T5700] vfs_fsync_range+0x10d/0x130 [ 77.468074][ T5700] ext4_buffered_write_iter+0x34f/0x3c0 [ 77.473632][ T5700] ext4_file_write_iter+0x380/0xf70 [ 77.478835][ T5700] iter_file_splice_write+0x6bc/0xa80 [ 77.484217][ T5700] direct_splice_actor+0x156/0x2a0 [ 77.489327][ T5700] splice_direct_to_actor+0x311/0x670 [ 77.494696][ T5700] do_splice_direct+0x119/0x1a0 [ 77.499546][ T5700] do_sendfile+0x380/0x650 [ 77.503955][ T5700] __x64_sys_sendfile64+0x105/0x150 [ 77.509154][ T5700] x64_sys_call+0x2db1/0x3000 [ 77.514011][ T5700] do_syscall_64+0xc0/0x2a0 [ 77.518506][ T5700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.524388][ T5700] [ 77.526709][ T5700] read to 0xffff888107a73bd4 of 4 bytes by task 5700 on cpu 0: [ 77.534239][ T5700] __writeback_single_inode+0x201/0x7b0 [ 77.539785][ T5700] writeback_single_inode+0x16d/0x3f0 [ 77.545150][ T5700] sync_inode_metadata+0x6e/0xa0 [ 77.550086][ T5700] generic_buffers_fsync_noflush+0xee/0x130 [ 77.555967][ T5700] ext4_sync_file+0x1aa/0x680 [ 77.560637][ T5700] vfs_fsync_range+0x10d/0x130 [ 77.565388][ T5700] ext4_buffered_write_iter+0x34f/0x3c0 [ 77.571241][ T5700] ext4_file_write_iter+0x380/0xf70 [ 77.576443][ T5700] iter_file_splice_write+0x6bc/0xa80 [ 77.581815][ T5700] direct_splice_actor+0x156/0x2a0 [ 77.586936][ T5700] splice_direct_to_actor+0x311/0x670 [ 77.592312][ T5700] do_splice_direct+0x119/0x1a0 [ 77.597175][ T5700] do_sendfile+0x380/0x650 [ 77.601584][ T5700] __x64_sys_sendfile64+0x105/0x150 [ 77.606773][ T5700] x64_sys_call+0x2db1/0x3000 [ 77.611450][ T5700] do_syscall_64+0xc0/0x2a0 [ 77.615954][ T5700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.621838][ T5700] [ 77.624147][ T5700] value changed: 0x0a000021 -> 0x04000021 [ 77.629851][ T5700] [ 77.632158][ T5700] Reported by Kernel Concurrency Sanitizer on: [ 77.638292][ T5700] CPU: 0 UID: 0 PID: 5700 Comm: syz.4.691 Not tainted syzkaller #0 PREEMPT(voluntary) [ 77.647909][ T5700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 77.657955][ T5700] ================================================================== [ 77.863574][ T3328] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.925914][ T5736] tipc: Enabling of bearer rejected, failed to enable media