last executing test programs: 4.826907553s ago: executing program 4 (id=388): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) request_key(&(0x7f0000000540)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)='\xe3', 0xffffffffffffffff) 4.62212418s ago: executing program 4 (id=389): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 4.181542325s ago: executing program 4 (id=398): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000540), &(0x7f0000000600)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000003080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r5 = dup(r3) sendmsg$qrtr(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="06", 0x1}], 0x1, 0x0, 0x0, 0x30000080}, 0x38) close_range(r2, 0xffffffffffffffff, 0x0) 4.098766472s ago: executing program 4 (id=401): syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000001a00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000100000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x0, 0x0, @buffer={0x2, 0x51, &(0x7f00000000c0)=""/81}, &(0x7f0000000380), 0x0, 0x300, 0x0, 0x0, 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x8000) 3.846864442s ago: executing program 2 (id=405): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000010000000000000000000000850000005300000085000000050000009500000000000000a94be0c51261be6a99fe3d0000a232d5e1f59f18f845f82e9a7bde9e8f4b9197701b547edf612a03f1737d95"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 3.803126605s ago: executing program 4 (id=406): socketpair(0x1, 0x20000000000001, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000780)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x20, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) 2.61843121s ago: executing program 4 (id=411): socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x58, 0x4, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) r3 = getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r5, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r3}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2.6181345s ago: executing program 0 (id=420): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x4}, {0x1, 0x1, 0x0, 0x1}}], 0x8) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 2.604305891s ago: executing program 2 (id=413): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_usb_connect$cdc_ecm(0x3, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109025100010100000309040000ff02020000052406000005240000000d240f01000000000000000000042413050524010208042413000905810320000000000905820220000002000905030208"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) write$UHID_INPUT(r2, &(0x7f0000000000)={0x9, {"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", 0x1000}}, 0xcf8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0xae, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf700382900000000000000000000f9000000000000ff020000000000000000000000000001"], 0x0) r3 = accept4$packet(r2, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001080)=0x14, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x74, r5, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0xa, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}]}, 0x74}}, 0x0) recvfrom$packet(r3, &(0x7f00000010c0)=""/107, 0x6b, 0x40000020, &(0x7f0000001140)={0x11, 0x17, r7, 0x1, 0x5, 0x6, @random="60195820e864"}, 0x14) 2.37732798s ago: executing program 0 (id=415): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa8"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2.265752498s ago: executing program 0 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 2.159299927s ago: executing program 1 (id=419): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000006800e97800000000000400000a0000060000000004000400"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r3 = msgget$private(0x0, 0x790) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) setuid(0xee01) fsmount(0xffffffffffffffff, 0x0, 0xc) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000280)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x0, 0x0, 0x40, 0x2, 0x2, 0x7, 0x10001, 0xfffc, 0x0, 0x40}) 1.990226881s ago: executing program 1 (id=422): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x4, 0x0, 0x3, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r1}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 1.892893549s ago: executing program 2 (id=424): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0700000004000000080200002100000000000000", @ANYRES32], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000e2000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) getpid() perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x58, 0x5}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x5a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x5}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.86631039s ago: executing program 1 (id=426): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r0}, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x9) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000140}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4081}, 0x20004000) 1.809021315s ago: executing program 2 (id=427): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000044000380080001000200000014000200"], 0x58}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000854}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYRES8=r5], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@o_path={0x0, r7}, 0x18) 1.74750585s ago: executing program 0 (id=428): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa4}}, 0x20008844) 1.734651441s ago: executing program 3 (id=429): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x0, &(0x7f0000000380)}) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000300)={[0x3]}, 0x8) faccessat2(r2, &(0x7f0000000000)='\x00', 0x2, 0x1100) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x411}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000240)={'\x00', 0x52d35ce30131f272}) 1.658364037s ago: executing program 1 (id=430): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x80004, 0x10510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10002, 0x0, 0x5, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2000000a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x3, 0xff, 0x5e, 0x54, 0x0, 0x3, 0x89008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, @perf_config_ext={0x10000, 0xfffffffffffffff9}, 0x1a, 0x81, 0x800, 0x6, 0x8, 0x4002}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000780)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b, 0x0, 0x0, 0x0, 0x800}}, 0x120) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x45, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x8000000}, 0x50) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000010180)=@newtfilter={0x88, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x5, 0xd, 0x3, 0x4, 0x13, 0x2, 0x6, 0x7ffffffa, [{0x200, 0x500, 0x3, 0x6}, {0x3, 0x2, 0x8001, 0x10}, {0x0, 0x55, 0xa9, 0x1}]}}, @TCA_U32_INDEV={0x14, 0x8, 'erspan0\x00'}]}}]}, 0x88}}, 0x24040084) 1.399673238s ago: executing program 3 (id=431): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbfe, 0x2, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) r1 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x35, 0x32, 0x39, 0x3, 0x31, 0x30, 0x30, 0x32, 0x32, 0x61, 0x39, 0x30, 0x62, 0x62, 0x33, 0x32]}, &(0x7f00000001c0)={0x0, "6e74bd1e310e6721ec3a73764ebdd39facc59190934cf5ec5f6577b9da0264adc84fd8a3a2f5ff13ba68dc7fdb117462466d59699887b6606d2ee8c07a713b62", 0x2d}, 0x48, r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xa, 0x4, 0x2}, 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r2 = socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x4840) 1.225009612s ago: executing program 3 (id=432): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 864.287171ms ago: executing program 1 (id=433): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x1, &(0x7f00000001c0)=""/1, 0x0, 0x3}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000008c0)={0xa0, 0x6, 0xf00, 0x7ff, 0x0, 0x5, 0x0}) syz_open_dev$usbfs(&(0x7f0000000000), 0xae, 0x202800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x7, 0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RWRITE(r4, &(0x7f0000000040)={0xb}, 0x11000) 791.331956ms ago: executing program 0 (id=434): socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "3c62b8c283856312", "5ed8002558e2bb7174371336dad9ecbd", "868e5b1b", "4c5293d719408a98"}, 0x28) pselect6(0x40, &(0x7f0000000200)={0xef, 0x800, 0xc, 0x2, 0x6, 0x9, 0x6, 0x6}, 0x0, 0x0, 0x0, 0x0) 790.241807ms ago: executing program 2 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000880)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4, 0x0, 0xfffffffff7ffffe9}, 0x18) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0x800, 0x40, &(0x7f0000000040)={0x62, 0xf, 0xfff9, 0xaa, 0x4}, 0x8, 0x0, 0x6, 0x0, 0x4000002, 0x0, 0x0}) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, r7, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r7, {0x0, 0x10}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 712.112003ms ago: executing program 2 (id=436): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r0, 0x0, 0x4, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x80002, 0x187) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendfile(r2, r1, 0x0, 0x7ffff000) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) 710.698703ms ago: executing program 3 (id=437): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x20) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4507}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x50}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$eJzs3cFvI1cZAPBvnDib7GabFDhApZZCi7IVrJ00tI04lCIhOFVClPsSEieK4sRR7LSbqILsX4CEECBxggsXJP4AJLQSF44IqRKcQSoCIdiCBAfoINvjJDjjxFuceNf5/aTZeW/GM9/3vHnjGc/TOIAr69mIeC0i3k/T9IWImMmWF7IpDttT83XvPXh7pTklkaZv/DWJJFvW2VeSzW9km01GxFe/HPGN5HTc+v7B5nK1WtnN6uXG1k65vn9we2Nreb2yXtleXFx4eemVpZeW5gfSzpsR8eoX//i9b//kS6/+4jNv/eHOn299s5nWdLb+ZDse0vhZK9tNL16b7Npg9wMGexQ121PsVKb62+beBeYDAEBvzXP8D0XEJyPihZiJsbNPZwEAAIDHUPr56fh3EpHmm+ixHAAAAHiMFFpjYJNCKRsLMB2FQqnUHsP7kbheqNbqjU+v1fa2V9tjZWejWFjbqFbms7HCs1FMmvWFVvm4/mJXfTEinoyI785MteqllVp1ddhffgAAAMAVcaPr+v8fM+3rfwAAAGDEzA47AQAAAODCuf4HAACA0ef6HwAAAEbaV15/vTmlnd+/Xn1zf2+z9ubt1Up9s7S1t1Jaqe3ulNZrtfXWM/u2zttftVbb+Wxs790tNyr1Rrm+f3Bnq7a33bizEZOX0iAAAADglCc/fv93SUQcfm6qNTVNDDsp4FKMH5WSbJ7T+3//RHv+7iUlBVyKsT5e8+61/OXOE+DxNt69oEdfB0ZPcdgJAEOXnLO+5+CdX2fzTww2HwAAYPDmPpZ///+864GIw8IlpAdcIJ0Yrq6u+//pzLASAS5d6/5/vwN5nCzASCn2NQIQGGX/9/3/c6XpQyUEAAAM3HRrSgql7Ou96SgUSqWIm62fBSgmaxvVynxEPBERv50pXmvWF1pbJn2MEQAAAAAAAAAAAAAAAAAAAAAAAAAAovVU7iRSAAAAYKRFFP6U/LL9LP+5meenu78fmEj+1fpJ4ImIeOuHb3z/7nKjsbvQXP63o+WNH2TLXxzGNxgAAABAt851emv+z2FnAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCoee/B2yudqY+XTw0q7l++EBGzefHHY7I1n4xiRFz/exLjJ7ZLImJsAPEP70XER/PiJ820jkLmxR/Em3BO/JjN3oW8+DcGEB+usvvN489ref2vEM+25vn9bzzif+ofVO/jXxwd/8Z69P+bfcZ46p2flXvGvxfx1Hj+8acTP+kR/7k+43/9awcHvdalP4qY63z+tI54JyMcl8qNrZ1yff/g9sbW8nplvbK9uLjw8tIrSy8tzZfXNqqV7N/cGN95+ufvn9X+67mff0mWTe/2P5+zv7zPpP+8c/fBhzuVw9Pxbz2XE/9XP85ecTp+IYvzqazcXD/XKR+2yyc989PfPHNW+1eP2198mP//W7122u1UR3m63z8dAOAC1PcPNper1cruyBaaV+mPQBoKj2DhWwPdYZqmabNP5ay6HxH97CeJAbe0kJ/PcaHnEWDYRyYAAGDQjk/6h50JAAAAAAAAAAAAAAAAAAAAXF2X8ZS17pjHj0BOBvEIbQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAgfhvAAAA//89e9P5") sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 489.833981ms ago: executing program 3 (id=438): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x8000) socket$inet(0x2, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x80000001}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000020000008500000086000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000258000b80200001800a00010071756f7461000000100002800c0001400000000000000000340001800a0001"], 0x118}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000"], 0x0}, 0x94) 372.80985ms ago: executing program 3 (id=439): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x300, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r5, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 298.982016ms ago: executing program 0 (id=440): getpeername$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x20) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$tipc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='qdisc_destroy\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 0s ago: executing program 1 (id=441): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xc0}, 0x94) recvmmsg(r0, &(0x7f0000003d40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socket$inet6(0xa, 0x3, 0x3c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0xfdef) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000300)='cpuset.cpu_exclusive\x00', 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 25.121729][ T29] audit: type=1400 audit(1756226377.916:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.122532][ T3291] cgroup: Unknown subsys name 'net' [ 25.144821][ T29] audit: type=1400 audit(1756226377.916:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.172193][ T29] audit: type=1400 audit(1756226377.946:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.348208][ T3291] cgroup: Unknown subsys name 'cpuset' [ 25.354420][ T3291] cgroup: Unknown subsys name 'rlimit' [ 25.464546][ T29] audit: type=1400 audit(1756226378.256:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.489024][ T29] audit: type=1400 audit(1756226378.256:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.509613][ T29] audit: type=1400 audit(1756226378.256:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.530054][ T29] audit: type=1400 audit(1756226378.256:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.537211][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.550374][ T29] audit: type=1400 audit(1756226378.266:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.583716][ T29] audit: type=1400 audit(1756226378.266:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.607154][ T29] audit: type=1400 audit(1756226378.356:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.653259][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.464949][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 27.531780][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.565212][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.572301][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.579526][ T3303] bridge_slave_0: entered allmulticast mode [ 27.585754][ T3303] bridge_slave_0: entered promiscuous mode [ 27.592496][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.606897][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.614013][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.621109][ T3303] bridge_slave_1: entered allmulticast mode [ 27.627534][ T3303] bridge_slave_1: entered promiscuous mode [ 27.633707][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 27.646861][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 27.681377][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.705024][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.731549][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.738654][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.745859][ T3302] bridge_slave_0: entered allmulticast mode [ 27.752351][ T3302] bridge_slave_0: entered promiscuous mode [ 27.770124][ T3303] team0: Port device team_slave_0 added [ 27.776456][ T3303] team0: Port device team_slave_1 added [ 27.787186][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.794500][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.801624][ T3302] bridge_slave_1: entered allmulticast mode [ 27.808145][ T3302] bridge_slave_1: entered promiscuous mode [ 27.828088][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.835063][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.861031][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.887301][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.894272][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.920396][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.940419][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.947541][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.954649][ T3311] bridge_slave_0: entered allmulticast mode [ 27.961086][ T3311] bridge_slave_0: entered promiscuous mode [ 27.967985][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.975030][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.982229][ T3311] bridge_slave_1: entered allmulticast mode [ 27.988866][ T3311] bridge_slave_1: entered promiscuous mode [ 28.007352][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.016538][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.023669][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.030877][ T3306] bridge_slave_0: entered allmulticast mode [ 28.037196][ T3306] bridge_slave_0: entered promiscuous mode [ 28.043965][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.051143][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.058397][ T3306] bridge_slave_1: entered allmulticast mode [ 28.064952][ T3306] bridge_slave_1: entered promiscuous mode [ 28.081631][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.090999][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.098179][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.105424][ T3308] bridge_slave_0: entered allmulticast mode [ 28.111956][ T3308] bridge_slave_0: entered promiscuous mode [ 28.119554][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.128942][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.135985][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.143185][ T3308] bridge_slave_1: entered allmulticast mode [ 28.149649][ T3308] bridge_slave_1: entered promiscuous mode [ 28.160988][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.200115][ T3303] hsr_slave_0: entered promiscuous mode [ 28.206151][ T3303] hsr_slave_1: entered promiscuous mode [ 28.222775][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.237316][ T3311] team0: Port device team_slave_0 added [ 28.243818][ T3302] team0: Port device team_slave_0 added [ 28.250368][ T3302] team0: Port device team_slave_1 added [ 28.256966][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.267234][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.281556][ T3311] team0: Port device team_slave_1 added [ 28.293130][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.310858][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.317960][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.343879][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.372846][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.379915][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.405931][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.421688][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.428739][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.455444][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.471159][ T3306] team0: Port device team_slave_0 added [ 28.477362][ T3308] team0: Port device team_slave_0 added [ 28.486118][ T3308] team0: Port device team_slave_1 added [ 28.494367][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.501470][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.527554][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.539117][ T3306] team0: Port device team_slave_1 added [ 28.583337][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.590507][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.616834][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.634206][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.641270][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.667344][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.682886][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.690005][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.715901][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.734360][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.741380][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.767411][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.786400][ T3302] hsr_slave_0: entered promiscuous mode [ 28.792453][ T3302] hsr_slave_1: entered promiscuous mode [ 28.798330][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 28.804054][ T3302] Cannot create hsr debugfs directory [ 28.815560][ T3311] hsr_slave_0: entered promiscuous mode [ 28.822330][ T3311] hsr_slave_1: entered promiscuous mode [ 28.828198][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.834002][ T3311] Cannot create hsr debugfs directory [ 28.896881][ T3308] hsr_slave_0: entered promiscuous mode [ 28.903185][ T3308] hsr_slave_1: entered promiscuous mode [ 28.909090][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.914814][ T3308] Cannot create hsr debugfs directory [ 28.925219][ T3306] hsr_slave_0: entered promiscuous mode [ 28.931302][ T3306] hsr_slave_1: entered promiscuous mode [ 28.937178][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 28.943061][ T3306] Cannot create hsr debugfs directory [ 29.032530][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.056600][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.074975][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.085521][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.133699][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.144132][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.152512][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.161112][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.194744][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.206833][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.219649][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.232820][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.244834][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.256189][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.266844][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.276129][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.319322][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.328865][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.337172][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.346501][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.355337][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.374807][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.395553][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.405045][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.412172][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.433111][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.440273][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.466071][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.486470][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.504656][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.513082][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.520149][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.533967][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.542744][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.549826][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.568197][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.582291][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.589400][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.599757][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.607061][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.630175][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.646809][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.663734][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.670835][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.685546][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.692655][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.708096][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.719597][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.757018][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.765613][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.784642][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.799758][ T2724] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.806830][ T2724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.847018][ T2724] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.854212][ T2724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.882016][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.910373][ T3308] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.920891][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.946340][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.045593][ T3302] veth0_vlan: entered promiscuous mode [ 30.081706][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.091094][ T3302] veth1_vlan: entered promiscuous mode [ 30.099721][ T3303] veth0_vlan: entered promiscuous mode [ 30.122810][ T3311] veth0_vlan: entered promiscuous mode [ 30.132892][ T3303] veth1_vlan: entered promiscuous mode [ 30.140861][ T3306] veth0_vlan: entered promiscuous mode [ 30.154669][ T3303] veth0_macvtap: entered promiscuous mode [ 30.164170][ T3302] veth0_macvtap: entered promiscuous mode [ 30.176828][ T3311] veth1_vlan: entered promiscuous mode [ 30.183986][ T3302] veth1_macvtap: entered promiscuous mode [ 30.191724][ T3303] veth1_macvtap: entered promiscuous mode [ 30.198734][ T3306] veth1_vlan: entered promiscuous mode [ 30.211042][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.223605][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.237301][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.252679][ T3311] veth0_macvtap: entered promiscuous mode [ 30.262090][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.272205][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.286773][ T3306] veth0_macvtap: entered promiscuous mode [ 30.297843][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.308798][ T3311] veth1_macvtap: entered promiscuous mode [ 30.317051][ T3306] veth1_macvtap: entered promiscuous mode [ 30.325152][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.342052][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.352449][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.361823][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.373680][ T3308] veth0_vlan: entered promiscuous mode [ 30.381710][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.390478][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.403654][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.403710][ T29] audit: type=1400 audit(1756226383.196:81): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.f02a6o/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.404304][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.416104][ T29] audit: type=1400 audit(1756226383.206:82): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.438622][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.441342][ T29] audit: type=1400 audit(1756226383.206:83): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.f02a6o/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.467204][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.470577][ T29] audit: type=1400 audit(1756226383.206:84): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.510373][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.524964][ T29] audit: type=1400 audit(1756226383.206:85): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.f02a6o/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.558973][ T29] audit: type=1400 audit(1756226383.206:86): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/root/syzkaller.f02a6o/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.586482][ T29] audit: type=1400 audit(1756226383.206:87): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.607911][ T29] audit: type=1400 audit(1756226383.296:88): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.630833][ T29] audit: type=1400 audit(1756226383.296:89): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="gadgetfs" ino=3817 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.632614][ T3308] veth1_vlan: entered promiscuous mode [ 30.660942][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.683602][ T29] audit: type=1400 audit(1756226383.476:90): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.683879][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.742526][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.762222][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.772762][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.805913][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.824606][ T3308] veth0_macvtap: entered promiscuous mode [ 30.831249][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.871489][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.880887][ T3308] veth1_macvtap: entered promiscuous mode [ 30.901048][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.945131][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.960165][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.969998][ T3457] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.043841][ T3494] netlink: 5 bytes leftover after parsing attributes in process `syz.2.6'. [ 31.079176][ T3494] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 31.105458][ T3497] loop0: detected capacity change from 0 to 2048 [ 31.116626][ T3494] 0ªî{X¹¦: entered allmulticast mode [ 31.122821][ T3494] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 31.139146][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.149421][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.157015][ T3497] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.164945][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.186630][ T3497] openvswitch: netlink: Message has 6 unknown bytes. [ 31.242502][ T3503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.251190][ T3503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.718487][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.744081][ T3515] loop2: detected capacity change from 0 to 512 [ 31.753144][ T3515] EXT4-fs: Ignoring removed mblk_io_submit option [ 31.780957][ T3515] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.794190][ T3515] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.806368][ T3515] EXT4-fs (loop2): 1 truncate cleaned up [ 31.847104][ T3515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.083499][ T3511] Set syz1 is full, maxelem 65536 reached [ 32.222305][ T3511] syz.3.11 (3511) used greatest stack depth: 10904 bytes left [ 32.601205][ T3515] syz.2.13 (3515) used greatest stack depth: 10664 bytes left [ 32.622120][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.676917][ T3532] tipc: Started in network mode [ 32.682011][ T3532] tipc: Node identity 86a311edf9db, cluster identity 4711 [ 32.689395][ T3532] tipc: Enabled bearer , priority 0 [ 32.696835][ T3536] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 32.709729][ T3457] tipc: Resetting bearer [ 32.716056][ T3531] tipc: Resetting bearer [ 32.732971][ T3531] tipc: Disabling bearer [ 32.833859][ T3546] netlink: 'syz.0.26': attribute type 10 has an invalid length. [ 32.841764][ T3542] loop4: detected capacity change from 0 to 8192 [ 32.847132][ T3549] bond_slave_0: entered promiscuous mode [ 32.853803][ T3549] bond_slave_1: entered promiscuous mode [ 32.860493][ T3549] vlan2: entered promiscuous mode [ 32.865598][ T3549] bond0: entered promiscuous mode [ 32.877068][ T3546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.886454][ T3546] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 32.899354][ T3542] loop4: p1 p2 p3 p4 [ 32.909468][ T3542] loop4: p2 start 151000334 is beyond EOD, truncated [ 32.916185][ T3542] loop4: p3 start 331777 is beyond EOD, truncated [ 32.922725][ T3542] loop4: p4 size 263168 extends beyond EOD, truncated [ 32.922991][ T3546] syz.0.26 (3546) used greatest stack depth: 10088 bytes left [ 32.960035][ C1] hrtimer: interrupt took 46722 ns [ 33.423422][ T3581] veth0_to_team: entered promiscuous mode [ 33.424450][ T3579] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 33.429305][ T3581] veth0_to_team: entered allmulticast mode [ 33.436440][ T3579] IPv6: NLM_F_CREATE should be set when creating new route [ 33.455228][ T3581] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 33.495085][ T3579] lo: entered allmulticast mode [ 33.502755][ T3579] tunl0: entered allmulticast mode [ 33.510024][ T3579] gre0: entered allmulticast mode [ 33.521090][ T3579] gretap0: entered allmulticast mode [ 33.532713][ T3579] erspan0: entered allmulticast mode [ 33.540623][ T3579] ip_vti0: entered allmulticast mode [ 33.547282][ T3579] ip6_vti0: entered allmulticast mode [ 33.554899][ T3579] sit0: entered allmulticast mode [ 33.563691][ T3579] ip6tnl0: entered allmulticast mode [ 33.572960][ T3579] ip6gre0: entered allmulticast mode [ 33.581226][ T3579] syz_tun: entered allmulticast mode [ 33.588795][ T3579] ip6gretap0: entered allmulticast mode [ 33.596033][ T3579] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.603459][ T3579] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.612010][ T3579] bridge0: entered allmulticast mode [ 33.619304][ T3579] vcan0: entered allmulticast mode [ 33.625241][ T3579] bond0: entered allmulticast mode [ 33.630548][ T3579] bond_slave_0: entered allmulticast mode [ 33.636395][ T3579] bond_slave_1: entered allmulticast mode [ 33.645656][ T3579] team0: entered allmulticast mode [ 33.650836][ T3579] team_slave_0: entered allmulticast mode [ 33.656735][ T3579] team_slave_1: entered allmulticast mode [ 33.664635][ T3579] dummy0: entered allmulticast mode [ 33.671582][ T3579] nlmon0: entered allmulticast mode [ 33.678310][ T3579] caif0: entered allmulticast mode [ 33.683777][ T3579] batadv0: entered allmulticast mode [ 33.692368][ T3579] vxcan0: entered allmulticast mode [ 33.698838][ T3579] vxcan1: entered allmulticast mode [ 33.704940][ T3579] veth0: entered allmulticast mode [ 33.711991][ T3579] veth1: entered allmulticast mode [ 33.766990][ T3579] wg0: entered allmulticast mode [ 33.773848][ T3579] wg1: entered allmulticast mode [ 33.781672][ T3579] wg2: entered allmulticast mode [ 33.788377][ T3579] veth0_to_bridge: entered allmulticast mode [ 33.799632][ T3579] veth1_to_bridge: entered allmulticast mode [ 33.809880][ T3579] veth0_to_bond: entered allmulticast mode [ 33.820041][ T3579] veth1_to_bond: entered allmulticast mode [ 33.828431][ T3579] veth0_to_team: entered allmulticast mode [ 33.849590][ T3579] veth1_to_team: entered allmulticast mode [ 33.859398][ T3579] veth0_to_batadv: entered allmulticast mode [ 33.866630][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.874626][ T3579] batadv_slave_0: entered allmulticast mode [ 33.883670][ T3579] veth1_to_batadv: entered allmulticast mode [ 33.891973][ T3579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.900185][ T3579] batadv_slave_1: entered allmulticast mode [ 33.907219][ T3579] xfrm0: entered allmulticast mode [ 33.913658][ T3579] veth0_to_hsr: entered allmulticast mode [ 33.921297][ T3579] hsr_slave_0: entered allmulticast mode [ 33.927970][ T3579] veth1_to_hsr: entered allmulticast mode [ 33.934804][ T3579] hsr_slave_1: entered allmulticast mode [ 33.941844][ T3579] hsr0: entered allmulticast mode [ 33.947808][ T3579] veth1_virt_wifi: entered allmulticast mode [ 33.954756][ T3579] veth0_virt_wifi: entered allmulticast mode [ 33.965010][ T3579] veth1_vlan: entered allmulticast mode [ 33.972265][ T3579] veth0_vlan: entered allmulticast mode [ 33.983249][ T3591] loop2: detected capacity change from 0 to 1024 [ 33.990023][ T3591] EXT4-fs: Ignoring removed orlov option [ 33.990432][ T3579] vlan0: entered allmulticast mode [ 34.000996][ T3579] vlan1: entered allmulticast mode [ 34.027715][ T3579] macvlan0: entered allmulticast mode [ 34.034570][ T3579] macvlan1: entered allmulticast mode [ 34.045776][ T3594] loop4: detected capacity change from 0 to 512 [ 34.050149][ T3579] ipvlan0: entered allmulticast mode [ 34.057096][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.058363][ T3579] ipvlan1: entered allmulticast mode [ 34.075604][ T3579] veth1_macvtap: entered allmulticast mode [ 34.083466][ T3579] veth0_macvtap: entered allmulticast mode [ 34.084562][ T3594] ======================================================= [ 34.084562][ T3594] WARNING: The mand mount option has been deprecated and [ 34.084562][ T3594] and is ignored by this kernel. Remove the mand [ 34.084562][ T3594] option from the mount to silence this warning. [ 34.084562][ T3594] ======================================================= [ 34.124681][ T3594] EXT4-fs: Ignoring removed bh option [ 34.130252][ T3594] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.144785][ T3594] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 34.155060][ T3579] macvtap0: entered allmulticast mode [ 34.161884][ T3579] macsec0: entered allmulticast mode [ 34.169172][ T3579] geneve0: entered allmulticast mode [ 34.175023][ T3594] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 34.183365][ T3594] EXT4-fs (loop4): orphan cleanup on readonly fs [ 34.192009][ T3579] geneve1: entered allmulticast mode [ 34.197916][ T3594] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.44: Failed to acquire dquot type 1 [ 34.211465][ T3579] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 34.219119][ T3594] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.44: Invalid block bitmap block 0 in block_group 0 [ 34.232591][ T3579] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 34.233034][ T3594] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.44: Invalid block bitmap block 0 in block_group 0 [ 34.254013][ T3579] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 34.266200][ T3594] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.44: Invalid block bitmap block 0 in block_group 0 [ 34.280529][ T3579] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 34.288364][ T3594] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.44: Failed to acquire dquot type 1 [ 34.309115][ T12] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.321046][ T3600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.334431][ T3594] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.44: Failed to acquire dquot type 1 [ 34.342348][ T12] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.428563][ T3594] EXT4-fs (loop4): 1 orphan inode deleted [ 34.473522][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.489250][ T3600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.502349][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.573704][ T3600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.653235][ T3600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.729973][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.751030][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.759489][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.769054][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.778461][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 34.848201][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.048224][ T3623] loop2: detected capacity change from 0 to 1024 [ 35.057126][ T3623] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.149100][ T3594] syz.4.44 (3594) used greatest stack depth: 9072 bytes left [ 35.167811][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.199821][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.266978][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.314442][ T3632] netlink: 88 bytes leftover after parsing attributes in process `syz.1.52'. [ 35.332070][ T3634] sch_fq: defrate 4294967295 ignored. [ 35.367026][ T3636] loop4: detected capacity change from 0 to 512 [ 35.375901][ T3638] netlink: 204 bytes leftover after parsing attributes in process `syz.0.58'. [ 35.407751][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 35.407769][ T29] audit: type=1326 audit(1756226388.264:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.474751][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.509082][ T29] audit: type=1326 audit(1756226388.294:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.532403][ T29] audit: type=1326 audit(1756226388.294:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5008c5d69f code=0x7ffc0000 [ 35.555619][ T29] audit: type=1326 audit(1756226388.294:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.578941][ T29] audit: type=1326 audit(1756226388.294:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.580118][ T3636] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.602474][ T29] audit: type=1326 audit(1756226388.294:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.616717][ T3644] netlink: 14 bytes leftover after parsing attributes in process `syz.0.59'. [ 35.636348][ T29] audit: type=1326 audit(1756226388.294:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.668670][ T29] audit: type=1326 audit(1756226388.294:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.692171][ T29] audit: type=1326 audit(1756226388.294:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.715641][ T29] audit: type=1326 audit(1756226388.294:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3639 comm="syz.2.55" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5008c5ebe9 code=0x7ffc0000 [ 35.823364][ T3644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.908709][ T3644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.933560][ T3636] netlink: 12 bytes leftover after parsing attributes in process `syz.4.57'. [ 35.953038][ T3644] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 35.998623][ T3644] bond0 (unregistering): Released all slaves [ 36.128186][ T3653] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.223362][ T3653] Zero length message leads to an empty skb [ 36.349032][ T3658] netlink: 'syz.3.64': attribute type 3 has an invalid length. [ 36.359652][ T3658] netlink: 'syz.3.64': attribute type 3 has an invalid length. [ 36.372258][ T3656] netlink: 'syz.0.63': attribute type 30 has an invalid length. [ 36.384776][ T3636] Set syz1 is full, maxelem 65536 reached [ 36.401162][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.803876][ T3669] netlink: 'syz.4.70': attribute type 10 has an invalid length. [ 36.814645][ T3669] team0: Port device dummy0 added [ 36.825482][ T3669] netlink: 'syz.4.70': attribute type 10 has an invalid length. [ 36.838870][ T3669] team0: Port device dummy0 removed [ 36.856310][ T3669] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 37.172342][ T3696] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 37.193240][ T3695] loop1: detected capacity change from 0 to 1024 [ 37.220552][ T3695] EXT4-fs: Ignoring removed orlov option [ 37.244858][ T3698] vlan2: entered allmulticast mode [ 37.250228][ T3698] veth1_to_team: entered allmulticast mode [ 37.511565][ T3695] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.850697][ T3708] loop4: detected capacity change from 0 to 2048 [ 37.909324][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.000894][ T3708] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.066800][ T3708] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1025 with max blocks 1 with error 28 [ 38.079329][ T3708] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.079329][ T3708] [ 38.089034][ T3708] EXT4-fs (loop4): Total free blocks count 0 [ 38.095016][ T3708] EXT4-fs (loop4): Free/Dirty block details [ 38.100940][ T3708] EXT4-fs (loop4): free_blocks=2415919104 [ 38.106723][ T3708] EXT4-fs (loop4): dirty_blocks=32 [ 38.111860][ T3708] EXT4-fs (loop4): Block reservation details [ 38.117876][ T3708] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 38.220453][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.264131][ T3731] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 28 [ 38.568326][ T3786] loop4: detected capacity change from 0 to 256 [ 38.576826][ T3786] vfat: Unknown parameter 'nnnumtail' [ 38.988832][ T3800] loop0: detected capacity change from 0 to 128 [ 39.021463][ T3799] loop1: detected capacity change from 0 to 1024 [ 39.041285][ T3800] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (18424!=39978) [ 39.051030][ T3800] EXT4-fs (loop0): group descriptors corrupted! [ 39.117010][ T3799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.153576][ T3799] netlink: 'syz.1.91': attribute type 10 has an invalid length. [ 39.154304][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 39.170186][ T3799] ipvlan0: entered allmulticast mode [ 39.175500][ T3799] veth0_vlan: entered allmulticast mode [ 39.201415][ T3799] team0: Device ipvlan0 failed to register rx_handler [ 39.212714][ T3804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 39.263215][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.385199][ T3817] loop4: detected capacity change from 0 to 512 [ 39.394552][ T3817] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.421861][ T3821] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 39.424081][ T3817] EXT4-fs (loop4): 1 truncate cleaned up [ 39.436813][ T3817] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.449379][ T3821] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 39.532412][ T3827] capability: warning: `syz.0.103' uses deprecated v2 capabilities in a way that may be insecure [ 39.550147][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.569805][ T3830] sch_fq: defrate 4294967295 ignored. [ 39.572834][ T3827] program syz.0.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.617623][ T3837] syz_tun: entered allmulticast mode [ 39.625813][ T3836] syz_tun: left allmulticast mode [ 39.674702][ T3842] loop0: detected capacity change from 0 to 512 [ 39.719468][ T3842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.732879][ T3842] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.811581][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.961930][ T3860] bridge_slave_0: left allmulticast mode [ 39.967673][ T3860] bridge_slave_0: left promiscuous mode [ 39.973372][ T3860] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.983983][ T3860] bridge_slave_1: left allmulticast mode [ 39.989767][ T3860] bridge_slave_1: left promiscuous mode [ 39.995506][ T3860] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.007656][ T3861] netlink: 84 bytes leftover after parsing attributes in process `syz.0.111'. [ 40.030048][ T3860] team0: Port device team_slave_0 removed [ 40.040290][ T3860] team0: Port device team_slave_1 removed [ 40.054237][ T3860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.061701][ T3860] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.071722][ T3860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.079310][ T3860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.103813][ T3861] team0: Mode changed to "broadcast" [ 40.191304][ T3865] futex_wake_op: syz.3.110 tries to shift op by 144; fix this program [ 40.276933][ T3869] loop1: detected capacity change from 0 to 512 [ 40.290675][ T3869] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.113: casefold flag without casefold feature [ 40.309779][ T3869] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.113: couldn't read orphan inode 15 (err -117) [ 40.322960][ T3869] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.404517][ T3872] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.471990][ T3872] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.516527][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 40.516544][ T29] audit: type=1326 audit(1756226393.364:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.548179][ T29] audit: type=1326 audit(1756226393.364:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.571690][ T29] audit: type=1326 audit(1756226393.364:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.595197][ T29] audit: type=1326 audit(1756226393.364:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.619439][ T29] audit: type=1326 audit(1756226393.364:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.642746][ T29] audit: type=1326 audit(1756226393.364:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.666106][ T29] audit: type=1326 audit(1756226393.384:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.689480][ T29] audit: type=1326 audit(1756226393.384:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.713348][ T29] audit: type=1326 audit(1756226393.384:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.736709][ T29] audit: type=1326 audit(1756226393.384:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe007deebe9 code=0x7ffc0000 [ 40.762519][ T3872] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.824114][ T3872] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.074120][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.097077][ T3757] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.130231][ T3757] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.155660][ T3757] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.224905][ T3880] process 'syz.0.118' launched './file0' with NULL argv: empty string added [ 41.272782][ T3757] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.739353][ T3894] loop2: detected capacity change from 0 to 128 [ 41.784414][ T3892] tipc: Started in network mode [ 41.789469][ T3892] tipc: Node identity ac141413, cluster identity 4711 [ 41.809792][ T3897] loop4: detected capacity change from 0 to 512 [ 41.819432][ T3892] tipc: New replicast peer: 10.1.1.2 [ 41.824900][ T3892] tipc: Enabled bearer , priority 10 [ 41.846461][ T3897] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.123: bad orphan inode 15 [ 41.860546][ T3897] ext4_test_bit(bit=14, block=18) = 1 [ 41.865950][ T3897] is_bad_inode(inode)=0 [ 41.870164][ T3897] NEXT_ORPHAN(inode)=1023 [ 41.874582][ T3897] max_ino=32 [ 41.877814][ T3897] i_nlink=0 [ 41.883208][ T3897] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.123: corrupted xattr block 19: invalid header [ 41.898800][ T3897] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 41.990668][ T3897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 42.058857][ T3897] ext4 filesystem being mounted at /22/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 42.156534][ T3897] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 3: comm syz.4.123: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 42.202240][ T3897] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 3: comm syz.4.123: bad entry in directory: rec_len is smaller than minimal - offset=60, inode=458767, rec_len=0, size=4096 fake=0 [ 42.271060][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 42.334067][ T3916] veth0: entered promiscuous mode [ 42.352756][ T3916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 42.817603][ T2957] tipc: Node number set to 2886997011 [ 43.898502][ T3955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.060709][ T3955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.204595][ T3959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 44.274051][ T3955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.430863][ T3955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.491610][ T3972] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.148'. [ 44.500955][ T3972] netlink: zone id is out of range [ 44.506153][ T3972] netlink: zone id is out of range [ 44.511376][ T3972] netlink: zone id is out of range [ 44.516594][ T3972] netlink: zone id is out of range [ 44.521766][ T3972] netlink: zone id is out of range [ 44.530389][ T3972] netlink: del zone limit has 8 unknown bytes [ 44.552148][ T3972] netlink: 20 bytes leftover after parsing attributes in process `syz.3.148'. [ 44.613204][ T41] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.634722][ T3979] bridge0: port 3(batadv1) entered blocking state [ 44.641447][ T3979] bridge0: port 3(batadv1) entered disabled state [ 44.649845][ T3979] batadv1: entered allmulticast mode [ 44.656016][ T3979] batadv1: entered promiscuous mode [ 44.669037][ T41] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.684083][ T41] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.694899][ T41] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.952335][ T3995] ------------[ cut here ]------------ [ 44.957992][ T3995] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0)(1) [ 44.982447][ T3995] WARNING: CPU: 1 PID: 3995 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 44.993116][ T3995] Modules linked in: [ 44.997106][ T3995] CPU: 1 UID: 0 PID: 3995 Comm: syz.3.157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.006892][ T3995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 45.016992][ T3995] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 45.023313][ T3995] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 92 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 45.043119][ T3995] RSP: 0018:ffffc9000fbcb440 EFLAGS: 00010292 [ 45.049239][ T3995] RAX: 53157f083060b000 RBX: ffff88811a0c61a8 RCX: 0000000000080000 [ 45.057471][ T3995] RDX: ffffc90004c9b000 RSI: 00000000000103a8 RDI: 00000000000103a9 [ 45.065664][ T3995] RBP: fffffffe00000030 R08: 0001c9000fbcb27f R09: 0000000000000000 [ 45.073691][ T3995] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a0c6168 [ 45.081764][ T3995] R13: ffff88811d2a8000 R14: ffff88811d2a8000 R15: ffff88811a0c61a0 [ 45.089804][ T3995] FS: 00007f2e21a3f6c0(0000) GS:ffff8882aef43000(0000) knlGS:0000000000000000 [ 45.098848][ T3995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.105588][ T3995] CR2: 0000200000004000 CR3: 000000011abbe000 CR4: 00000000003506f0 [ 45.113680][ T3995] Call Trace: [ 45.117023][ T3995] [ 45.120080][ T3995] reg_set_min_max+0x215/0x260 [ 45.124870][ T3995] check_cond_jmp_op+0x1080/0x16e0 [ 45.130201][ T3995] do_check+0x332a/0x7a10 [ 45.134648][ T3995] do_check_common+0xc3a/0x12a0 [ 45.139572][ T3995] bpf_check+0x942b/0xd9e0 [ 45.139680][ T3457] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 45.144182][ T3995] ? __rcu_read_unlock+0x4f/0x70 [ 45.144213][ T3995] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 45.153483][ T3457] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 45.158414][ T3995] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 45.179193][ T3995] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 45.185117][ T3995] ? pcpu_block_refresh_hint+0x10b/0x170 [ 45.190843][ T3995] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 45.196925][ T3995] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 45.203830][ T3995] ? css_rstat_updated+0xb7/0x240 [ 45.209252][ T3995] ? __rcu_read_unlock+0x4f/0x70 [ 45.214234][ T3995] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 45.220106][ T3995] ? should_fail_ex+0x30/0x280 [ 45.224884][ T3995] ? selinux_bpf_prog_load+0x36/0xf0 [ 45.230245][ T3995] ? should_failslab+0x8c/0xb0 [ 45.235025][ T3995] ? __kmalloc_cache_noprof+0x189/0x320 [ 45.240675][ T3995] ? selinux_bpf_prog_load+0xbf/0xf0 [ 45.246042][ T3995] ? security_bpf_prog_load+0x2c/0xa0 [ 45.251475][ T3995] bpf_prog_load+0xedd/0x1070 [ 45.256607][ T3995] ? security_bpf+0x2b/0x90 [ 45.261333][ T3995] __sys_bpf+0x462/0x7b0 [ 45.265704][ T3995] __x64_sys_bpf+0x41/0x50 [ 45.270176][ T3995] x64_sys_call+0x2aea/0x2ff0 [ 45.274883][ T3995] do_syscall_64+0xd2/0x200 [ 45.279706][ T3995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 45.286002][ T3995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.291783][ T3995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.297713][ T3995] RIP: 0033:0x7f2e22fdebe9 [ 45.302220][ T3995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.321909][ T3995] RSP: 002b:00007f2e21a3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 45.330369][ T3995] RAX: ffffffffffffffda RBX: 00007f2e23205fa0 RCX: 00007f2e22fdebe9 [ 45.338371][ T3995] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 45.346355][ T3995] RBP: 00007f2e23061e19 R08: 0000000000000000 R09: 0000000000000000 [ 45.354491][ T3995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.362599][ T3995] R13: 00007f2e23206038 R14: 00007f2e23205fa0 R15: 00007ffdfd4063d8 [ 45.370619][ T3995] [ 45.373695][ T3995] ---[ end trace 0000000000000000 ]--- [ 45.412312][ T3997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.158'. [ 45.421986][ T3997] veth0_macvtap: left promiscuous mode [ 45.462897][ T3999] netlink: 256 bytes leftover after parsing attributes in process `syz.4.156'. [ 45.513086][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 45.521968][ T4006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'. [ 45.562884][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 45.562900][ T29] audit: type=1326 audit(1756226398.414:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.592499][ T29] audit: type=1326 audit(1756226398.414:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.615968][ T29] audit: type=1326 audit(1756226398.414:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.679037][ T29] audit: type=1326 audit(1756226398.514:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.702441][ T29] audit: type=1326 audit(1756226398.514:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.726195][ T29] audit: type=1326 audit(1756226398.514:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.749419][ T29] audit: type=1326 audit(1756226398.514:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.772910][ T29] audit: type=1326 audit(1756226398.514:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.796674][ T29] audit: type=1326 audit(1756226398.514:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 45.820099][ T29] audit: type=1326 audit(1756226398.514:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4007 comm="syz.1.160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7487caebe9 code=0x7ffc0000 [ 46.029741][ T4031] tipc: Started in network mode [ 46.034856][ T4031] tipc: Node identity ac141413, cluster identity 4711 [ 46.042204][ T4031] tipc: New replicast peer: 10.1.1.2 [ 46.047620][ T4031] tipc: Enabled bearer , priority 10 [ 46.120845][ T4037] netlink: 28 bytes leftover after parsing attributes in process `syz.0.168'. [ 46.167561][ T4041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.169'. [ 46.271981][ T4047] loop0: detected capacity change from 0 to 2048 [ 46.327956][ T3787] loop0: p1 < > p4 [ 46.332680][ T3787] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.344676][ T4047] loop0: p1 < > p4 [ 46.352238][ T4047] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.390407][ T2994] loop0: p1 < > p4 [ 46.395177][ T2994] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.412922][ T4047] IPVS: stopping master sync thread 4056 ... [ 46.420139][ T4056] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 37748736, id = 0 [ 46.506267][ T4058] loop0: detected capacity change from 0 to 128 [ 46.538645][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 46.558851][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 46.576663][ T4062] bridge_slave_0: left allmulticast mode [ 46.582406][ T4062] bridge_slave_0: left promiscuous mode [ 46.588317][ T4062] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.618873][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 46.636740][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 46.648233][ T4062] bridge_slave_1: left allmulticast mode [ 46.653933][ T4062] bridge_slave_1: left promiscuous mode [ 46.659839][ T4062] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.688511][ T4062] bond0: (slave bond_slave_0): Releasing backup interface [ 46.703054][ T4062] bond0: (slave bond_slave_1): Releasing backup interface [ 46.729788][ T4062] team0: Port device team_slave_0 removed [ 46.749254][ T4062] team0: Port device team_slave_1 removed [ 46.756335][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.763956][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.799214][ T4062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.806661][ T4062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.850179][ T4058] tipc: New replicast peer: 10.1.1.2 [ 46.855548][ T4058] tipc: Enabled bearer , priority 10 [ 47.057535][ T10] tipc: Node number set to 2886997011 [ 47.982428][ T36] tipc: Node number set to 2138575341 [ 48.420048][ T4149] __nla_validate_parse: 3 callbacks suppressed [ 48.420075][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.187'. [ 48.560326][ T4149] syz_tun: entered promiscuous mode [ 48.579732][ T4149] macvtap1: entered promiscuous mode [ 48.585124][ T4149] macvtap1: entered allmulticast mode [ 48.590550][ T4149] syz_tun: entered allmulticast mode [ 48.851787][ T4169] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 48.873884][ T4166] netlink: 24 bytes leftover after parsing attributes in process `syz.0.196'. [ 48.888658][ T4169] bond0: (slave dummy0): Releasing backup interface [ 48.897919][ T4169] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 48.906741][ T4169] team0: Failed to send options change via netlink (err -105) [ 48.914394][ T4169] team0: Port device dummy0 added [ 48.952969][ T4169] netlink: 'syz.4.197': attribute type 10 has an invalid length. [ 48.973569][ T4166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.196'. [ 49.016813][ T4169] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.033629][ T4169] team0: Failed to send options change via netlink (err -105) [ 49.042542][ T4169] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 49.052761][ T4180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4180 comm=syz.2.202 [ 49.079158][ T4169] team0: Port device dummy0 removed [ 49.085686][ T4180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 49.105625][ T4169] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 49.133003][ T4182] netlink: 'syz.3.203': attribute type 1 has an invalid length. [ 49.152739][ T4180] loop2: detected capacity change from 0 to 512 [ 49.167243][ T4187] loop4: detected capacity change from 0 to 256 [ 49.172957][ T4182] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.300943][ T4182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.203'. [ 49.350042][ T4182] bond1 (unregistering): Released all slaves [ 49.552897][ T4205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 49.561899][ T4207] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 49.582133][ T4205] loop4: detected capacity change from 0 to 512 [ 49.600663][ T4205] ext4: Unknown parameter 'euid<00000000000000000000' [ 49.686411][ T4212] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 49.844090][ T4218] tipc: Started in network mode [ 49.849165][ T4218] tipc: Node identity ae52e6f7931b, cluster identity 4711 [ 49.849339][ T4218] tipc: Enabled bearer , priority 0 [ 49.870561][ T4222] netlink: 52 bytes leftover after parsing attributes in process `syz.0.217'. [ 49.897739][ T4217] tipc: Resetting bearer [ 49.914916][ T4217] tipc: Disabling bearer [ 49.929674][ T4226] bridge0: entered promiscuous mode [ 49.939434][ T4226] macsec1: entered promiscuous mode [ 49.957682][ T4226] bridge0: port 1(macsec1) entered blocking state [ 49.964228][ T4226] bridge0: port 1(macsec1) entered disabled state [ 49.978010][ T4226] macsec1: entered allmulticast mode [ 49.983350][ T4226] bridge0: entered allmulticast mode [ 50.000325][ T4226] macsec1: left allmulticast mode [ 50.005416][ T4226] bridge0: left allmulticast mode [ 50.024055][ T4226] bridge0: left promiscuous mode [ 50.052238][ T4231] netlink: 'syz.4.221': attribute type 1 has an invalid length. [ 50.101906][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.221'. [ 50.118220][ T4231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.129767][ T4233] bond1 (unregistering): Released all slaves [ 50.169813][ T4225] loop2: detected capacity change from 0 to 32768 [ 50.207886][ T3787] loop2: p1 p2 p3 < p5 p6 > [ 50.212686][ T3787] loop2: p1 size 242222080 extends beyond EOD, truncated [ 50.238691][ T3787] loop2: p2 start 4294967295 is beyond EOD, truncated [ 50.261178][ T4225] loop2: p1 p2 p3 < p5 p6 > [ 50.268227][ T4225] loop2: p1 size 242222080 extends beyond EOD, truncated [ 50.300478][ T4225] loop2: p2 start 4294967295 is beyond EOD, truncated [ 50.605756][ T3649] udevd[3649]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory [ 50.607393][ T3296] udevd[3296]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory [ 50.627013][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 50.733050][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 51.538678][ T4259] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 51.545245][ T4259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.552830][ T4259] vhci_hcd vhci_hcd.0: Device attached [ 51.579953][ T4259] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 51.586582][ T4259] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 51.594402][ T4259] vhci_hcd vhci_hcd.0: Device attached [ 51.643261][ T4259] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 51.649895][ T4259] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 51.657603][ T4259] vhci_hcd vhci_hcd.0: Device attached [ 51.671905][ T4259] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 51.687157][ T4259] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 51.693806][ T4259] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.701528][ T4259] vhci_hcd vhci_hcd.0: Device attached [ 51.726838][ T4259] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 51.733596][ T4259] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 51.741312][ T4259] vhci_hcd vhci_hcd.0: Device attached [ 51.828931][ T23] usb 1-1: new low-speed USB device number 2 using vhci_hcd [ 51.871158][ T4285] netlink: 24 bytes leftover after parsing attributes in process `syz.4.237'. [ 51.883228][ T4259] netlink: 204 bytes leftover after parsing attributes in process `syz.0.230'. [ 51.903295][ T4274] vhci_hcd: connection closed [ 51.903423][ T4268] vhci_hcd: connection closed [ 51.903475][ T4261] vhci_hcd: connection reset by peer [ 51.909564][ T4264] vhci_hcd: connection closed [ 51.913165][ T389] vhci_hcd: stop threads [ 51.922735][ T4272] vhci_hcd: connection closed [ 51.922938][ T389] vhci_hcd: release socket [ 51.936323][ T389] vhci_hcd: disconnect device [ 51.966330][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 51.966345][ T29] audit: type=1326 audit(1756226404.814:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 51.987686][ T389] vhci_hcd: stop threads [ 52.000454][ T389] vhci_hcd: release socket [ 52.004990][ T389] vhci_hcd: disconnect device [ 52.012198][ T29] audit: type=1326 audit(1756226404.844:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.035591][ T29] audit: type=1326 audit(1756226404.844:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.058941][ T29] audit: type=1326 audit(1756226404.844:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.082283][ T29] audit: type=1326 audit(1756226404.844:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.105665][ T389] vhci_hcd: stop threads [ 52.105627][ T29] audit: type=1326 audit(1756226404.844:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.105687][ T29] audit: type=1326 audit(1756226404.844:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.109977][ T389] vhci_hcd: release socket [ 52.133260][ T29] audit: type=1326 audit(1756226404.844:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.156644][ T389] vhci_hcd: disconnect device [ 52.161083][ T29] audit: type=1326 audit(1756226404.844:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.161110][ T29] audit: type=1326 audit(1756226404.844:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4290 comm="syz.3.240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 52.272928][ T4297] lo speed is unknown, defaulting to 1000 [ 52.278969][ T4297] lo speed is unknown, defaulting to 1000 [ 52.285195][ T4297] lo speed is unknown, defaulting to 1000 [ 52.291983][ T389] vhci_hcd: stop threads [ 52.296419][ T389] vhci_hcd: release socket [ 52.300947][ T389] vhci_hcd: disconnect device [ 52.306227][ T4297] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 52.317793][ T389] vhci_hcd: stop threads [ 52.322151][ T389] vhci_hcd: release socket [ 52.326595][ T389] vhci_hcd: disconnect device [ 52.327877][ T4297] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 52.347303][ T4297] lo speed is unknown, defaulting to 1000 [ 52.353657][ T4297] lo speed is unknown, defaulting to 1000 [ 52.361288][ T4297] lo speed is unknown, defaulting to 1000 [ 52.367725][ T4297] lo speed is unknown, defaulting to 1000 [ 52.391213][ T4297] lo speed is unknown, defaulting to 1000 [ 52.411509][ T4302] loop2: detected capacity change from 0 to 128 [ 52.434231][ T4302] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.455229][ T4302] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 52.472346][ T4302] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.496254][ T4308] IPVS: Error joining to the multicast group [ 52.505896][ T4306] tipc: Started in network mode [ 52.510849][ T4306] tipc: Node identity 3a7b58e9b38, cluster identity 4711 [ 52.517943][ T4306] tipc: Enabled bearer , priority 0 [ 52.525365][ T4311] netlink: 'syz.4.247': attribute type 30 has an invalid length. [ 52.533421][ T4304] tipc: Resetting bearer [ 52.572096][ T4304] tipc: Disabling bearer [ 52.585584][ T4134] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.596776][ T4134] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.607217][ T4134] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.627887][ T4134] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 52.629979][ T4317] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.762094][ T4328] tipc: New replicast peer: 255.255.255.255 [ 52.768169][ T4328] tipc: Enabled bearer , priority 10 [ 52.855722][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.866295][ T4332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.954145][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 52.964566][ T4332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.015704][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.026270][ T4332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.085375][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 53.095921][ T4332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.173174][ T389] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.181495][ T389] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.196681][ T389] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.205131][ T389] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.216054][ T389] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.224406][ T389] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.234093][ T389] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.242386][ T389] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.393494][ T4346] tipc: Enabled bearer , priority 0 [ 53.401211][ T4345] tipc: Resetting bearer [ 53.415387][ T4345] tipc: Disabling bearer [ 53.587161][ T4362] __nla_validate_parse: 6 callbacks suppressed [ 53.587180][ T4362] netlink: 24 bytes leftover after parsing attributes in process `syz.2.267'. [ 53.737183][ T4371] netlink: 'syz.1.272': attribute type 4 has an invalid length. [ 53.760554][ T4371] netlink: 'syz.1.272': attribute type 4 has an invalid length. [ 53.834354][ T4375] netlink: 8 bytes leftover after parsing attributes in process `syz.1.274'. [ 53.851513][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.274'. [ 53.887647][ T3383] tipc: Node number set to 2314950889 [ 54.115080][ T4386] netlink: 'syz.1.278': attribute type 1 has an invalid length. [ 54.134142][ T4386] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 54.146027][ T4386] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 54.186146][ T4390] gretap1: entered promiscuous mode [ 54.195788][ T4390] bond1: (slave gretap1): making interface the new active one [ 54.204406][ T4390] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 54.229344][ T4392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 54.229868][ T4386] macvlan2: entered promiscuous mode [ 54.243961][ T4386] macvlan2: entered allmulticast mode [ 54.249795][ T4386] bond1: entered promiscuous mode [ 54.255238][ T4386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 54.266782][ T4386] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 54.279409][ T4386] bond1: left promiscuous mode [ 54.406987][ T4451] loop2: detected capacity change from 0 to 512 [ 54.420718][ T4451] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.438204][ T4451] ext4: Unknown parameter 'fsname' [ 54.535997][ T4458] loop2: detected capacity change from 0 to 512 [ 54.540167][ T4456] loop1: detected capacity change from 0 to 2048 [ 54.575043][ T4456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.636896][ T4459] tipc: Enabled bearer , priority 0 [ 54.661958][ T4458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.676029][ T4457] tipc: Resetting bearer [ 54.734171][ T4458] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.982865][ T4457] tipc: Disabling bearer [ 55.240352][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.294402][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.378737][ T4479] loop2: detected capacity change from 0 to 1024 [ 55.393950][ T4479] EXT4-fs: Ignoring removed orlov option [ 55.416996][ T4479] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.490044][ T4491] siw: device registration error -23 [ 55.563810][ T4495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.621333][ T4495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.692349][ T4495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.742585][ T4495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.845832][ T4417] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.855733][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.860249][ T3773] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.880245][ T3773] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.898845][ T3773] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.984214][ T4507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.300'. [ 55.993296][ T4507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.300'. [ 56.002266][ T4507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.300'. [ 56.015644][ T4507] netlink: 36 bytes leftover after parsing attributes in process `syz.0.300'. [ 56.278545][ T4509] lo speed is unknown, defaulting to 1000 [ 56.758757][ T4527] siw: device registration error -23 [ 56.771460][ T4525] loop1: detected capacity change from 0 to 512 [ 56.778633][ T4525] EXT4-fs: Ignoring removed bh option [ 56.784143][ T4525] EXT4-fs: Ignoring removed mblk_io_submit option [ 56.796115][ T4525] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 56.812768][ T4525] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 56.821941][ T4525] EXT4-fs (loop1): orphan cleanup on readonly fs [ 56.829660][ T4525] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.318: Failed to acquire dquot type 1 [ 56.841312][ T4525] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.318: Invalid block bitmap block 0 in block_group 0 [ 56.858858][ T4525] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.318: Invalid block bitmap block 0 in block_group 0 [ 56.873256][ T4525] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.318: Invalid block bitmap block 0 in block_group 0 [ 56.888535][ T23] usb 1-1: enqueue for inactive port 0 [ 56.894170][ T23] usb 1-1: enqueue for inactive port 0 [ 56.904977][ T4525] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.318: Failed to acquire dquot type 1 [ 56.923356][ T4525] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.318: Failed to acquire dquot type 1 [ 56.937355][ T4525] EXT4-fs (loop1): 1 orphan inode deleted [ 56.967708][ T23] vhci_hcd: vhci_device speed not set [ 56.979687][ T4525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 56.988306][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 56.988322][ T29] audit: type=1326 audit(1756226409.844:1645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.011659][ T4525] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.318'. [ 57.064053][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.077867][ T29] audit: type=1326 audit(1756226409.884:1646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.101375][ T29] audit: type=1326 audit(1756226409.884:1647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.125140][ T29] audit: type=1326 audit(1756226409.884:1648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.148616][ T29] audit: type=1326 audit(1756226409.884:1649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.172201][ T29] audit: type=1326 audit(1756226409.884:1650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.195670][ T29] audit: type=1326 audit(1756226409.884:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.219197][ T29] audit: type=1326 audit(1756226409.884:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.242507][ T29] audit: type=1326 audit(1756226409.884:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.265837][ T29] audit: type=1326 audit(1756226409.884:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.3.311" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e22fdebe9 code=0x7ffc0000 [ 57.425059][ T4546] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 57.659036][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.675469][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.696078][ T4556] syz.0.317 uses obsolete (PF_INET,SOCK_PACKET) [ 58.387205][ T4627] siw: device registration error -23 [ 58.399408][ T4628] tipc: Enabling of bearer rejected, failed to enable media [ 58.635855][ T4677] lo speed is unknown, defaulting to 1000 [ 58.937760][ T4703] serio: Serial port ptm0 [ 59.287971][ T4721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.333'. [ 59.834396][ T4729] lo speed is unknown, defaulting to 1000 [ 59.876374][ T4730] loop0: detected capacity change from 0 to 512 [ 59.921325][ T4730] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.938642][ T4730] EXT4-fs (loop0): mount failed [ 60.156676][ T4747] SELinux: Context @ is not valid (left unmapped). [ 60.231580][ T4751] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.300008][ T4751] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.360104][ T4751] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.439800][ T4751] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.632069][ T4416] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.686307][ T4416] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.744378][ T4416] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.851331][ T4416] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.369289][ T4773] pim6reg1: entered promiscuous mode [ 61.374714][ T4773] pim6reg1: entered allmulticast mode [ 61.464757][ T4777] loop4: detected capacity change from 0 to 1024 [ 61.466673][ T4781] netlink: 'syz.3.348': attribute type 1 has an invalid length. [ 61.505402][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.517736][ T4777] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.531445][ T4777] netlink: '+}[@': attribute type 4 has an invalid length. [ 61.541222][ T2957] lo speed is unknown, defaulting to 1000 [ 61.547051][ T2957] syz0: Port: 1 Link DOWN [ 61.573250][ T4781] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 61.584740][ T4781] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 61.600576][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.619373][ T4791] gretap1: entered promiscuous mode [ 61.626664][ T4791] bond1: (slave gretap1): making interface the new active one [ 61.636114][ T4791] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 61.654555][ T4791] macvlan2: entered promiscuous mode [ 61.660020][ T4791] macvlan2: entered allmulticast mode [ 61.666081][ T4791] bond1: entered promiscuous mode [ 61.671513][ T4791] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.691857][ T4791] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 61.711025][ T4791] bond1: left promiscuous mode [ 62.368174][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 62.368194][ T29] audit: type=1400 audit(1756226415.224:1734): avc: denied { create } for pid=4812 comm="syz.4.363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.229799][ T4829] netlink: 132 bytes leftover after parsing attributes in process `syz.4.368'. [ 63.338574][ T4831] syzkaller0: entered promiscuous mode [ 63.344088][ T4831] syzkaller0: entered allmulticast mode [ 63.504450][ T29] audit: type=1400 audit(1756226416.344:1735): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.528726][ T29] audit: type=1400 audit(1756226416.344:1736): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.581599][ T4842] loop1: detected capacity change from 0 to 1024 [ 63.618026][ T29] audit: type=1400 audit(1756226416.354:1737): avc: denied { write } for pid=4836 comm="syz.0.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.637876][ T29] audit: type=1400 audit(1756226416.394:1738): avc: denied { map_create } for pid=4824 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.644412][ T4842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.657031][ T29] audit: type=1400 audit(1756226416.394:1739): avc: denied { bpf } for pid=4824 comm="syz.3.366" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.684706][ T29] audit: type=1400 audit(1756226416.394:1740): avc: denied { map_read map_write } for pid=4824 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.704490][ T29] audit: type=1400 audit(1756226416.394:1741): avc: denied { prog_load } for pid=4824 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.723779][ T29] audit: type=1400 audit(1756226416.394:1742): avc: denied { perfmon } for pid=4824 comm="syz.3.366" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.744599][ T29] audit: type=1400 audit(1756226416.394:1743): avc: denied { prog_run } for pid=4824 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 63.788572][ T4842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.899454][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.494349][ T4859] cgroup: Unknown subsys name '¬§@﬽æì¦4*oäÂÒ£hÓîºoþüíUÜ' [ 64.594748][ T4862] loop1: detected capacity change from 0 to 2048 [ 64.651198][ T4862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.684367][ T4859] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 64.739550][ T4870] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 64.747337][ T4870] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.381'. [ 64.766756][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.776867][ T4869] delete_channel: no stack [ 64.847437][ T4874] netlink: 20 bytes leftover after parsing attributes in process `syz.3.383'. [ 64.867906][ T4877] lo speed is unknown, defaulting to 1000 [ 65.235978][ T4892] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.246123][ T4892] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.283281][ T4898] netlink: 8 bytes leftover after parsing attributes in process `syz.1.391'. [ 65.301640][ T4892] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.311479][ T4892] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.349404][ T4892] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.359589][ T4892] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.411373][ T4892] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 65.421249][ T4892] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.476874][ T4906] lo speed is unknown, defaulting to 1000 [ 65.497425][ T4433] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.505770][ T4433] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.577635][ T4406] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.585935][ T4406] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.626876][ T4406] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.635197][ T4406] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.691944][ T4406] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.700324][ T4406] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.771902][ T4923] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 65.825761][ T4923] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.906084][ T4930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.404'. [ 65.922046][ T4923] bond1: (slave ip6erspan0): making interface the new active one [ 65.948939][ T4923] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 65.963204][ T4930] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 66.074251][ T4933] syzkaller0: entered promiscuous mode [ 66.079846][ T4933] syzkaller0: entered allmulticast mode [ 66.460413][ T4945] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4945 comm=syz.3.409 [ 66.530780][ T3410] Process accounting resumed [ 67.234365][ T4951] netlink: 'syz.0.420': attribute type 1 has an invalid length. [ 67.247666][ T4955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.267166][ T4955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.276915][ T4951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.286766][ T4956] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.296863][ T4956] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.336982][ T4951] bond0: (slave veth3): Enslaving as an active interface with a down link [ 67.351788][ T4956] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.361694][ T4956] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.376734][ T4951] vlan2: entered allmulticast mode [ 67.382074][ T4951] veth0_to_bond: entered allmulticast mode [ 67.389991][ T4951] veth0_to_bond: entered promiscuous mode [ 67.396075][ T4951] veth0_to_bond: left promiscuous mode [ 67.402929][ T4951] bond0: (slave vlan2): Enslaving as an active interface with a down link [ 67.422153][ T4965] netlink: 36 bytes leftover after parsing attributes in process `syz.1.414'. [ 67.433055][ T4956] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.442871][ T4956] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.461975][ T4970] netlink: 'syz.0.415': attribute type 4 has an invalid length. [ 67.497618][ T4970] netlink: 'syz.0.415': attribute type 4 has an invalid length. [ 67.509162][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 67.509179][ T29] audit: type=1400 audit(1756226420.364:2141): avc: denied { write } for pid=4971 comm="syz.1.416" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 67.511961][ T4972] netlink: 80 bytes leftover after parsing attributes in process `syz.1.416'. [ 67.548956][ T4956] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 67.559093][ T4956] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.590986][ T4975] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.660484][ T4975] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.703864][ T4980] loop1: detected capacity change from 0 to 512 [ 67.712414][ T4975] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.739965][ T4980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.752695][ T4980] ext4 filesystem being mounted at /76/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.766518][ T29] audit: type=1400 audit(1756226420.624:2142): avc: denied { add_name } for pid=4979 comm="syz.1.419" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.787251][ T29] audit: type=1400 audit(1756226420.624:2143): avc: denied { create } for pid=4979 comm="syz.1.419" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 67.807564][ T29] audit: type=1400 audit(1756226420.624:2144): avc: denied { read write } for pid=4979 comm="syz.1.419" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.830231][ T29] audit: type=1400 audit(1756226420.624:2145): avc: denied { open } for pid=4979 comm="syz.1.419" path="/76/file2/file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.857286][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.869174][ T4975] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.926719][ T4430] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.945282][ T4430] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.961417][ T4992] mmap: syz.2.424 (4992) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.963791][ T4430] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.994933][ T4430] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.003536][ T29] audit: type=1400 audit(1756226420.844:2146): avc: denied { accept } for pid=4994 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.023084][ T29] audit: type=1400 audit(1756226420.844:2147): avc: denied { read } for pid=4994 comm="syz.3.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.056584][ T5000] netlink: 36 bytes leftover after parsing attributes in process `syz.2.427'. [ 68.068442][ T5000] lo speed is unknown, defaulting to 1000 [ 68.074793][ T5000] lo speed is unknown, defaulting to 1000 [ 68.082325][ T5000] lo speed is unknown, defaulting to 1000 [ 68.132841][ T5000] infiniband syz2: set active [ 68.137656][ T5000] infiniband syz2: added lo [ 68.142295][ T10] lo speed is unknown, defaulting to 1000 [ 68.181809][ T5000] RDS/IB: syz2: added [ 68.193752][ T5000] smc: adding ib device syz2 with port count 1 [ 68.200266][ T5000] smc: ib device syz2 port 1 has pnetid [ 68.206335][ T10] lo speed is unknown, defaulting to 1000 [ 68.216708][ T5000] lo speed is unknown, defaulting to 1000 [ 68.224500][ T29] audit: type=1400 audit(1756226421.074:2148): avc: denied { read write } for pid=5009 comm="syz.1.430" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.248312][ T29] audit: type=1400 audit(1756226421.074:2149): avc: denied { open } for pid=5009 comm="syz.1.430" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 68.254524][ T5000] lo speed is unknown, defaulting to 1000 [ 68.357662][ T5000] lo speed is unknown, defaulting to 1000 [ 68.375221][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.382731][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.390234][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.461224][ T29] audit: type=1400 audit(1756226421.294:2150): avc: denied { create } for pid=5013 comm="syz.3.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 68.530906][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.538432][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.545872][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.553296][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.560724][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.568235][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.575619][ T10] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 68.701534][ T5000] lo speed is unknown, defaulting to 1000 [ 68.784655][ T10] hid-generic 0000:0000:0000.0001: hidraw0: HID v8.00 Device [syz0] on syz0 [ 68.942313][ T5000] lo speed is unknown, defaulting to 1000 [ 68.943503][ T5018] fido_id[5018]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 69.011318][ T5021] vhci_hcd: invalid port number 255 [ 69.065370][ T5026] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 69.080832][ T5026] hsr_slave_1 (unregistering): left promiscuous mode [ 69.149276][ T5031] lo speed is unknown, defaulting to 1000 [ 69.155570][ T5031] lo speed is unknown, defaulting to 1000 [ 69.193056][ T5033] loop2: detected capacity change from 0 to 128 [ 69.367452][ T5038] netlink: 'syz.3.438': attribute type 4 has an invalid length. [ 69.377005][ T5038] netlink: 'syz.3.438': attribute type 4 has an invalid length. [ 69.414439][ T5038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.438'. [ 69.423612][ T5038] netlink: 36 bytes leftover after parsing attributes in process `syz.3.438'. [ 69.877505][ T5036] ================================================================== [ 69.885629][ T5036] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 69.893887][ T5036] [ 69.896225][ T5036] write to 0xffff88810458b6a8 of 8 bytes by task 5033 on cpu 1: [ 69.903953][ T5036] filemap_splice_read+0x4f4/0x740 [ 69.909093][ T5036] splice_direct_to_actor+0x26f/0x680 [ 69.914486][ T5036] do_splice_direct+0xda/0x150 [ 69.919264][ T5036] do_sendfile+0x380/0x650 [ 69.923797][ T5036] __x64_sys_sendfile64+0x105/0x150 [ 69.929029][ T5036] x64_sys_call+0x2bb0/0x2ff0 [ 69.933727][ T5036] do_syscall_64+0xd2/0x200 [ 69.938950][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.944862][ T5036] [ 69.947200][ T5036] write to 0xffff88810458b6a8 of 8 bytes by task 5036 on cpu 0: [ 69.954846][ T5036] filemap_splice_read+0x4f4/0x740 [ 69.960224][ T5036] splice_direct_to_actor+0x26f/0x680 [ 69.965622][ T5036] do_splice_direct+0xda/0x150 [ 69.970405][ T5036] do_sendfile+0x380/0x650 [ 69.974868][ T5036] __x64_sys_sendfile64+0x105/0x150 [ 69.980115][ T5036] x64_sys_call+0x2bb0/0x2ff0 [ 69.984850][ T5036] do_syscall_64+0xd2/0x200 [ 69.989385][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.995333][ T5036] [ 69.997671][ T5036] value changed: 0x0000000000000989 -> 0x000000000000098a [ 70.004810][ T5036] [ 70.007131][ T5036] Reported by Kernel Concurrency Sanitizer on: [ 70.013299][ T5036] CPU: 0 UID: 0 PID: 5036 Comm: syz.2.436 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 70.024682][ T5036] Tainted: [W]=WARN [ 70.028502][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 70.038567][ T5036] ================================================================== [ 70.263883][ T4405] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.272261][ T4405] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.283567][ T4405] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.291788][ T4405] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.302823][ T4405] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.311184][ T4405] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.322530][ T4405] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 70.330919][ T4405] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0