last executing test programs: 5.292256402s ago: executing program 1 (id=312): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000280), 0x400000000000180, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r5}, 0x10) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) 4.391175011s ago: executing program 1 (id=322): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0x10040a4, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x7, {"a2e3ad21ed0d52f91b5d520987f70e06d038e7ff7fc6e5539b0d47078b089b3907356d090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e470dea05918b41243513f000800000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3e3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572298522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14d9fdb8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a19000000000000006f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d44400009a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc01008cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c16c02ed4b5d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6b14effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b51028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6815d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3c115c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc248850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4649820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948998cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2fd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff8f0104000000000000df72279fdb0d2b9e936e5a983c12fded79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d3700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa6e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3fec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) unshare(0x62040200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x56}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 4.036185733s ago: executing program 4 (id=325): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, 0x0, 0x4) socket$inet(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x90000005}) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x3a664c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 3.872315667s ago: executing program 2 (id=327): getpid() syz_pidfd_open(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r2, 0x1) syz_open_dev$sg(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r3 = socket(0x10, 0x2, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) recvmmsg(r3, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001880)}, 0x80000001}], 0x2, 0x2, 0x0) 3.758375067s ago: executing program 1 (id=328): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$procfs(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/consoles\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') getdents(r2, &(0x7f0000000f40)=""/243, 0xf3) 3.681280155s ago: executing program 4 (id=329): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f00000008c0)=""/242, 0xf2}], 0x1}, 0xdf5c}], 0x2, 0x10020, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.596839032s ago: executing program 2 (id=331): socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x26000400) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8040) 3.552039106s ago: executing program 1 (id=333): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x81}, 0x18) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d53031a741e59ce9161166be63370ed0cec74053630accc", 0x3b}], 0x1) 3.352065523s ago: executing program 4 (id=336): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) socket$netlink(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r4 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) r6 = syz_open_procfs$userns(0x0, &(0x7f0000000400)) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r6}]}, 0x38}}, 0x804) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000180)="480000001400190d7ebdeb75fd0d9c562c84d8c033aae421962ea6ff3cd3c461ebe430a2ed7a80ffe0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6", 0x48}], 0x1) 2.348498962s ago: executing program 2 (id=341): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00'}) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000040)=0x10040a4, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x4, 0x2, 0x1}}) bpf$PROG_BIND_MAP(0x1c, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) unshare(0x62040200) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x56}, 0x20) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 2.348182922s ago: executing program 4 (id=342): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x80000001, 0x3, 0x3}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x1a, 0x0, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.172859368s ago: executing program 4 (id=344): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7cf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0xc, &(0x7f0000000600)=ANY=[@ANYRES16=0x0, @ANYRES16=r1], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, r1, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r3, 0x0, 0x1034}, 0x18) getresgid(&(0x7f0000003340), &(0x7f0000003380), &(0x7f00000033c0)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) pipe2$watch_queue(&(0x7f0000000640), 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) 2.110020053s ago: executing program 4 (id=345): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x8}, 0x18) r3 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000008c0)=0x9) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e000000040000000c000000feffffff02040000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r7, r8, 0x6, 0x0, @void}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r9, r7, 0x4}, 0x5) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000", @ANYRES8=r1, @ANYRESOCT=r6], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kmem_cache_free\x00', r10, 0x0, 0x8000}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file2\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='mpol=interleave,mpol=local']) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x3000010, &(0x7f0000000340)={[{@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x512, &(0x7f0000000380)="$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") setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 2.029127971s ago: executing program 2 (id=346): write$eventfd(0xffffffffffffffff, &(0x7f0000000080)=0xffffffff00000000, 0x8) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x4}) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3, 0x14, 0x64, 0x0, 0x0, 0x4, 0x0, @empty, @local}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000a004) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) setgroups(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x603f) 1.895831493s ago: executing program 2 (id=348): socketpair(0x1, 0x100000005, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x0, 0x111, 0x4b4, 0x1e0, 0xd4feffff, 0x2f8, 0x20a, 0x278, 0x2f8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x73, 0xe}, 0x0, 0x198, 0x1e0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x2, 0x4, 0x3, 0x0, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x8, {0x2}}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [0xff], 'veth1_to_hsr\x00', 'veth0_to_bond\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, 'wlan1\x00', {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00007abdbadc0a0486eaca6979e217430000000300000000000000458f535a48d3ea6d0cb073bbc738777f"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70300000088b00085", @ANYRES64], 0x0, 0x1000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'syztnl1\x00', 0x0}) socket$packet(0x11, 0x2, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) mlockall(0x7) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 1.801728291s ago: executing program 2 (id=351): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.344027471s ago: executing program 0 (id=352): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfff, 0x3, 0x1007, 0x5, 0x7, 0x1, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0xd, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x1200}}]}, 0x40}}, 0x4010804) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.187544185s ago: executing program 0 (id=353): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.156924548s ago: executing program 3 (id=354): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) socket$inet6(0xa, 0x800000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='rxrpc_peer\x00', r3, 0x0, 0xfffffffffb}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0x6000) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 1.102882662s ago: executing program 0 (id=355): r0 = socket$netlink(0x10, 0x3, 0x8000000004) setreuid(0x0, 0xee00) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca946e64009400ff0325010ebc000000000000008004f0fffeffe809005300fff5dd0000000c0001000d0c10000000000000000000", 0x58}], 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xe, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x2e, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000000)=0x6, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x108, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xf7, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x8, 0x1, 0x0, 0x0, @ipv4=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8", @typed={0x8, 0x145, 0x0, 0x0, @ipv4=@remote}]}]}, 0x108}], 0x1, 0x0, 0x0, 0x1}, 0x0) 1.066320976s ago: executing program 3 (id=356): r0 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r0, 0x29, 0x6, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz1\x00'}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) syz_clone(0x41200111, 0x0, 0x0, 0x0, 0x0, 0x0) 1.065730676s ago: executing program 0 (id=357): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00'}, 0x10) listen(0xffffffffffffffff, 0x3) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000440), &(0x7f00000004c0)=0xc) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 482.779227ms ago: executing program 0 (id=358): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40222}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x1e43, 0x2000000000000000, 0x0, 0x0) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603f7ff000000000000000700000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a6970"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000906010200000000ffff0000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 482.083177ms ago: executing program 1 (id=359): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x10000000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80478b, &(0x7f0000000040)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0xff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@discard}, {@prjquota}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0xffff}}]}, 0x0, 0x489, &(0x7f0000000c80)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000001180), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x20, '\x00', r5, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000001280)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001240)={&(0x7f0000001300)=ANY=[@ANYBLOB="44800000b06589e13089b67c65f79ed488dc2d5800f482fc468e110a50044458753a6ee9c1015e45bdc147b6ee529924f4e8231623f8da519f7dce08f97554b7012b065912e48a0bdb28742a6d4fc79745baf6e209972386fa070e17cf66f22f92b9236a3e8ba120f3a8b35f9dfff712e151ac388b6921559d", @ANYRES16=r4, @ANYBLOB="000229bd7000fbdbdf25010000000c00030001000000000000000800090003000000080002000100000008000100", @ANYRES32=r5, @ANYBLOB="0c0003000200000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40000) openat(r2, &(0x7f00000012c0)='./file0\x00', 0x80, 0x8) personality(0xfe47fef9f5ff7379) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000180)={[0xffffffffffffff68]}, 0x8) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000000)) 216.467501ms ago: executing program 3 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) capset(0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x401) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000000a01080000000000000000050000090900010073797a310000000054000000030a03000000000000000000050000030900010073797a31000000000900030073797a3200000000280004800800014000000001080002400a7b1af2140003006970766c616e310000000000"], 0x9c}, 0x1, 0x0, 0x0, 0x24000144}, 0x20000050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x20042810) 191.057093ms ago: executing program 3 (id=361): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040), 0x10) listen(r2, 0x5) r3 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r3, &(0x7f0000000080), 0x10) sendmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close_range(r0, 0xffffffffffffffff, 0x0) 104.061261ms ago: executing program 3 (id=362): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="63b233ac", 0x4}], 0x1}, 0x20000000) ioctl$F2FS_IOC_FLUSH_DEVICE(r1, 0x4008f50a, &(0x7f0000000200)={0x1ff, 0x8}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x6) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x80}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x7}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x2, &(0x7f0000000180)=[{0x61}, {0x6, 0x0, 0xfc, 0x9}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) sync() 38.404686ms ago: executing program 1 (id=363): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r1, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2710}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000280)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x3, 0x5, {{0xb, 0x4, 0x3, 0x9, 0x2c, 0x67, 0x0, 0x9, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@generic={0x86, 0x8, "9153f7011830"}, @generic={0x82, 0xd, "b90a4d9b29044e88945ab0"}]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000440), &(0x7f0000000a80)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='kfree\x00', r2}, 0x18) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x80, 0x4, 0x6, 0x37, 0x7, 0x0, 0x9, 0x10042, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x9, 0x0, @perf_bp={&(0x7f0000000200), 0x4}, 0x0, 0x9, 0x8, 0x2, 0x1, 0xe8, 0x7f, 0x0, 0x3, 0x0, 0x9}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x420, 0x288, 0x43, 0xa0, 0x288, 0x98, 0x388, 0x178, 0x178, 0x388, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @multicast1, 0x0, 0x0, 'bridge_slave_1\x00', 'ip6erspan0\x00'}, 0x12a, 0x228, 0x288, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@string={{0xc0}, {0x0, 0x3, 'kmp\x00', "7af8bdb4c056dc65949041982abfe9ed51b01289c0026e2e6034ed587be5f09017b907388134b0ede40eb8d493f20d534fc37f23ec524d91a7a041f36bb1d1c3ab474544c5ef3f2fa69a80a0d967ee4464257d28d31e6843bc1221dfb9a6a27ad13af7061b737fd97d94f50942c68242819c941c0b4d9ec154c7d327187e8198", 0x38, 0x2, {0x1}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x7, 0x5, 0x4, 0x3, 0x4], 0x2, 0x4}, {0xffffffffffffffff, [0x1, 0x1, 0x1, 0x1, 0x1, 0x2], 0x4}}}}, {{@uncond, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x1b, 0x408, 0xfffffffb}}, @common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300], 0x0, 0x1}}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x480) write(0xffffffffffffffff, &(0x7f0000000040)="06", 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000cc0)={0x0, 0x5}, &(0x7f0000000d00)=0x8) 1.29654ms ago: executing program 0 (id=364): bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, 0x0, 0x0, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000001000/0x3000)=nil, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 0s ago: executing program 3 (id=365): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r3 = creat(&(0x7f0000001940)='./file0/file1\x00', 0x90) write$cgroup_type(r3, &(0x7f00000009c0), 0xd4ba0ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) unlink(&(0x7f0000000100)='./file0/file1\x00') r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB="34009f1a", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) kernel console output (not intermixed with test programs): [ 18.097767][ T29] audit: type=1400 audit(1767432744.460:62): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.119708][ T29] audit: type=1400 audit(1767432744.460:63): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=477 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.142225][ T29] audit: type=1400 audit(1767432744.460:64): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=481 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.165059][ T29] audit: type=1400 audit(1767432744.460:65): avc: denied { search } for pid=3201 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 18.187994][ T29] audit: type=1400 audit(1767432744.470:66): avc: denied { read open } for pid=3202 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.73' (ED25519) to the list of known hosts. [ 24.135121][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 24.135135][ T29] audit: type=1400 audit(1767432750.500:70): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.164052][ T29] audit: type=1400 audit(1767432750.530:71): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.164741][ T3307] cgroup: Unknown subsys name 'net' [ 24.191610][ T29] audit: type=1400 audit(1767432750.560:72): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.328868][ T3307] cgroup: Unknown subsys name 'cpuset' [ 24.334859][ T3307] cgroup: Unknown subsys name 'rlimit' [ 24.524092][ T29] audit: type=1400 audit(1767432750.890:73): avc: denied { setattr } for pid=3307 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.547353][ T29] audit: type=1400 audit(1767432750.890:74): avc: denied { create } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.567846][ T29] audit: type=1400 audit(1767432750.890:75): avc: denied { write } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.571170][ T3311] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.588185][ T29] audit: type=1400 audit(1767432750.890:76): avc: denied { read } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.612609][ T3307] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.617014][ T29] audit: type=1400 audit(1767432750.900:77): avc: denied { read } for pid=3047 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 24.617036][ T29] audit: type=1400 audit(1767432750.900:78): avc: denied { mounton } for pid=3307 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.671271][ T29] audit: type=1400 audit(1767432750.900:79): avc: denied { mount } for pid=3307 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.624088][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 26.715725][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.722832][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.729976][ T3317] bridge_slave_0: entered allmulticast mode [ 26.736479][ T3317] bridge_slave_0: entered promiscuous mode [ 26.742886][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 26.763085][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.770258][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.777350][ T3317] bridge_slave_1: entered allmulticast mode [ 26.783731][ T3317] bridge_slave_1: entered promiscuous mode [ 26.790065][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.826853][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 26.849558][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.870433][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.889802][ T3325] chnl_net:caif_netlink_parms(): no params data found [ 26.918920][ T3317] team0: Port device team_slave_0 added [ 26.941901][ T3317] team0: Port device team_slave_1 added [ 26.947528][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.954569][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.961693][ T3321] bridge_slave_0: entered allmulticast mode [ 26.967904][ T3321] bridge_slave_0: entered promiscuous mode [ 26.991573][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.998624][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.005689][ T3321] bridge_slave_1: entered allmulticast mode [ 27.012075][ T3321] bridge_slave_1: entered promiscuous mode [ 27.019966][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.027009][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.034105][ T3318] bridge_slave_0: entered allmulticast mode [ 27.040314][ T3318] bridge_slave_0: entered promiscuous mode [ 27.061203][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.068225][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.075419][ T3318] bridge_slave_1: entered allmulticast mode [ 27.081730][ T3318] bridge_slave_1: entered promiscuous mode [ 27.088291][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.095237][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.121160][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.131776][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.138840][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.145880][ T3322] bridge_slave_0: entered allmulticast mode [ 27.152204][ T3322] bridge_slave_0: entered promiscuous mode [ 27.171188][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.178105][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.204075][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.214979][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.222053][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.229175][ T3322] bridge_slave_1: entered allmulticast mode [ 27.235377][ T3322] bridge_slave_1: entered promiscuous mode [ 27.242656][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.267020][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.276113][ T3325] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.283173][ T3325] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.290367][ T3325] bridge_slave_0: entered allmulticast mode [ 27.296748][ T3325] bridge_slave_0: entered promiscuous mode [ 27.304002][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.323519][ T3325] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.330571][ T3325] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.337680][ T3325] bridge_slave_1: entered allmulticast mode [ 27.344132][ T3325] bridge_slave_1: entered promiscuous mode [ 27.351049][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.361703][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.387932][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.397552][ T3321] team0: Port device team_slave_0 added [ 27.420428][ T3321] team0: Port device team_slave_1 added [ 27.426866][ T3325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.436744][ T3318] team0: Port device team_slave_0 added [ 27.444751][ T3317] hsr_slave_0: entered promiscuous mode [ 27.450741][ T3317] hsr_slave_1: entered promiscuous mode [ 27.465846][ T3325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.475672][ T3318] team0: Port device team_slave_1 added [ 27.481935][ T3322] team0: Port device team_slave_0 added [ 27.502396][ T3322] team0: Port device team_slave_1 added [ 27.508232][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.515161][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.541049][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.571541][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.578502][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.604400][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.615561][ T3325] team0: Port device team_slave_0 added [ 27.621383][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.628295][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.654233][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.673092][ T3325] team0: Port device team_slave_1 added [ 27.684710][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.691659][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.717657][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.732752][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.739693][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.765603][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.785571][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.792571][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.818527][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.833879][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.840832][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.866768][ T3325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.878278][ T3325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.885254][ T3325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.911122][ T3325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.955202][ T3318] hsr_slave_0: entered promiscuous mode [ 27.961264][ T3318] hsr_slave_1: entered promiscuous mode [ 27.966941][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.972676][ T3318] Cannot create hsr debugfs directory [ 27.985351][ T3321] hsr_slave_0: entered promiscuous mode [ 27.991345][ T3321] hsr_slave_1: entered promiscuous mode [ 27.997098][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 28.002825][ T3321] Cannot create hsr debugfs directory [ 28.028923][ T3322] hsr_slave_0: entered promiscuous mode [ 28.034765][ T3322] hsr_slave_1: entered promiscuous mode [ 28.040644][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 28.046351][ T3322] Cannot create hsr debugfs directory [ 28.061265][ T3325] hsr_slave_0: entered promiscuous mode [ 28.067276][ T3325] hsr_slave_1: entered promiscuous mode [ 28.073112][ T3325] debugfs: 'hsr0' already exists in 'hsr' [ 28.078829][ T3325] Cannot create hsr debugfs directory [ 28.199904][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.219018][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.236811][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.253770][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.293792][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.303432][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.316017][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.327503][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.347650][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.356276][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.369868][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.378876][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.393890][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.415828][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.425069][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.433988][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.446027][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.453348][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.481267][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.488298][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.504242][ T3325] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.514658][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.521697][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.532400][ T3325] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.542602][ T3325] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.556002][ T3325] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.602718][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.620020][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.640580][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.649355][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.663485][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.670579][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.684668][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.691825][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.704052][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.711186][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.722298][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.734056][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.741194][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.764516][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.782976][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.790041][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.805399][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.815150][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.822186][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.835563][ T3325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.880449][ T3325] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.901416][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.908549][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.941805][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.948943][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.960404][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.991124][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.030909][ T3317] veth0_vlan: entered promiscuous mode [ 29.052143][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.070107][ T3317] veth1_vlan: entered promiscuous mode [ 29.083297][ T3318] veth0_vlan: entered promiscuous mode [ 29.104344][ T3317] veth0_macvtap: entered promiscuous mode [ 29.119760][ T3318] veth1_vlan: entered promiscuous mode [ 29.130707][ T3317] veth1_macvtap: entered promiscuous mode [ 29.154864][ T3325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.165028][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.177493][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.196813][ T3318] veth0_macvtap: entered promiscuous mode [ 29.206888][ T2008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.219043][ T2008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.227882][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.237812][ T3318] veth1_macvtap: entered promiscuous mode [ 29.245860][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.263692][ T3322] veth0_vlan: entered promiscuous mode [ 29.276659][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.288736][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 29.288748][ T29] audit: type=1400 audit(1767432755.650:90): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.3GbvBD/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.291567][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.294814][ T29] audit: type=1400 audit(1767432755.650:91): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.348063][ T29] audit: type=1400 audit(1767432755.650:92): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.3GbvBD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.373300][ T29] audit: type=1400 audit(1767432755.650:93): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.395015][ T29] audit: type=1400 audit(1767432755.650:94): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.3GbvBD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.421589][ T29] audit: type=1400 audit(1767432755.650:95): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.3GbvBD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=5220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.450363][ T29] audit: type=1400 audit(1767432755.720:96): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.463214][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.470565][ T29] audit: type=1400 audit(1767432755.820:97): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.480158][ T3322] veth1_vlan: entered promiscuous mode [ 29.501206][ T29] audit: type=1400 audit(1767432755.820:98): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=4288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.508300][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.557882][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.576735][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.585882][ T3321] veth0_vlan: entered promiscuous mode [ 29.592345][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.610263][ T3321] veth1_vlan: entered promiscuous mode [ 29.621753][ T29] audit: type=1400 audit(1767432755.970:99): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.651396][ T3325] veth0_vlan: entered promiscuous mode [ 29.664251][ T3321] veth0_macvtap: entered promiscuous mode [ 29.687479][ T3322] veth0_macvtap: entered promiscuous mode [ 29.694071][ T3325] veth1_vlan: entered promiscuous mode [ 29.715480][ T3322] veth1_macvtap: entered promiscuous mode [ 29.725315][ T3321] veth1_macvtap: entered promiscuous mode [ 29.742637][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.756231][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 29.765030][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 29.778729][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.792783][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.807617][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.820654][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.831504][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.833765][ T3501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.855374][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.866909][ T3325] veth0_macvtap: entered promiscuous mode [ 29.881071][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.890738][ T3325] veth1_macvtap: entered promiscuous mode [ 29.905748][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.920767][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.939436][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.957561][ T3325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.969028][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.006279][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.031676][ T3509] loop4: detected capacity change from 0 to 1024 [ 30.037317][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.038538][ T3509] EXT4-fs: Ignoring removed bh option [ 30.049831][ T3512] loop2: detected capacity change from 0 to 1024 [ 30.082876][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.091933][ T3512] ======================================================= [ 30.091933][ T3512] WARNING: The mand mount option has been deprecated and [ 30.091933][ T3512] and is ignored by this kernel. Remove the mand [ 30.091933][ T3512] option from the mount to silence this warning. [ 30.091933][ T3512] ======================================================= [ 30.134807][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.134864][ T3509] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 30.143562][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.191649][ T3512] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 30.205011][ T3509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.206986][ T3512] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.235395][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:825: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 3) [ 30.250083][ T3512] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 30.262383][ T3512] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.262383][ T3512] [ 30.273234][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.287877][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.290127][ T3509] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 30.314897][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.329186][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.343540][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.357907][ T3512] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.392887][ T3527] loop0: detected capacity change from 0 to 512 [ 30.400231][ T3510] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.423446][ T3527] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 30.434198][ T3527] EXT4-fs (loop0): 1 truncate cleaned up [ 30.441024][ T3527] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.454408][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.457955][ T3510] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.478311][ T3510] EXT4-fs error (device loop2): ext4_map_blocks:783: inode #15: block 3: comm syz.2.3: lblock 3 mapped to illegal pblock 3 (length 1) [ 30.518143][ T3532] batman_adv: batadv0: Adding interface: dummy0 [ 30.524468][ T3532] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.550791][ T3532] batman_adv: batadv0: Interface activated: dummy0 [ 30.614496][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.973642][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 30.985952][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.985952][ T31] [ 31.005860][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 31.151988][ T3545] loop2: detected capacity change from 0 to 8192 [ 31.189393][ T3545] loop2: p1 p2 p4 < > [ 31.193482][ T3545] loop2: partition table partially beyond EOD, truncated [ 31.200758][ T3545] loop2: p1 start 16777216 is beyond EOD, truncated [ 31.207357][ T3545] loop2: p2 size 515840 extends beyond EOD, truncated [ 31.215687][ T3545] loop2: p4 start 16777216 is beyond EOD, truncated [ 31.366901][ T3561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22'. [ 31.375799][ T3561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.22'. [ 31.385297][ T3560] syzkaller0: entered promiscuous mode [ 31.386969][ T3561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22'. [ 31.390794][ T3560] syzkaller0: entered allmulticast mode [ 31.444124][ T3561] team0: Port device team_slave_1 removed [ 31.458968][ T3482] Process accounting resumed [ 31.912942][ T3574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26'. [ 31.951215][ T3576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 32.020343][ T3576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.27'. [ 32.176804][ T3580] bridge_slave_0: left allmulticast mode [ 32.182739][ T3580] bridge_slave_0: left promiscuous mode [ 32.188496][ T3580] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.198926][ T3580] bridge_slave_1: left allmulticast mode [ 32.204604][ T3580] bridge_slave_1: left promiscuous mode [ 32.210572][ T3580] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.218582][ T3586] netlink: 'syz.2.29': attribute type 10 has an invalid length. [ 32.226242][ T3586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.29'. [ 32.242677][ T3580] bond0: (slave bond_slave_0): Releasing backup interface [ 32.250051][ T3587] loop1: detected capacity change from 0 to 8192 [ 32.260347][ T3580] bond0: (slave bond_slave_1): Releasing backup interface [ 32.276178][ C0] hrtimer: interrupt took 47717 ns [ 32.276468][ T3580] team0: Port device team_slave_0 removed [ 32.291394][ T3580] team0: Port device team_slave_1 removed [ 32.298627][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.306293][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 32.315531][ T3580] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.322996][ T3580] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 32.332910][ T3580] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 32.352153][ T3583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 32.361086][ T3583] netlink: 32 bytes leftover after parsing attributes in process `syz.3.30'. [ 32.369870][ T3583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.30'. [ 32.401597][ T3586] batman_adv: batadv0: Adding interface: veth1_vlan [ 32.408190][ T3586] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.439323][ T3586] batman_adv: batadv0: Interface activated: veth1_vlan [ 32.747891][ T3600] xt_hashlimit: max too large, truncated to 1048576 [ 32.757592][ T3600] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.806392][ T3596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.818899][ T3596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.846764][ T3602] Zero length message leads to an empty skb [ 32.858701][ T3602] mmap: syz.2.37 (3602) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.912053][ T3607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3607 comm=syz.4.39 [ 33.172931][ T3616] Driver unsupported XDP return value 0 on prog (id 25) dev N/A, expect packet loss! [ 33.324415][ T3618] netlink: 'syz.2.43': attribute type 4 has an invalid length. [ 33.333854][ T3618] .`: renamed from bond0 (while UP) [ 33.358688][ T3620] loop3: detected capacity change from 0 to 128 [ 33.365358][ T3620] ext4: Unknown parameter 'uid' [ 33.371883][ T3622] netlink: 'syz.2.45': attribute type 1 has an invalid length. [ 33.428212][ T3624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3624 comm=syz.2.46 [ 33.453383][ T3627] loop0: detected capacity change from 0 to 512 [ 33.500969][ T3627] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.47: inode has both inline data and extents flags [ 33.514197][ T3627] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.47: couldn't read orphan inode 15 (err -117) [ 33.526591][ T3627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.816713][ T3650] loop1: detected capacity change from 0 to 512 [ 34.832111][ T3650] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 34.840611][ T3650] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.841559][ T3654] netlink: 'syz.4.55': attribute type 13 has an invalid length. [ 34.871756][ T3650] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.53: Allocating blocks 41-42 which overlap fs metadata [ 34.892028][ T3650] __quota_error: 215 callbacks suppressed [ 34.892040][ T3650] Quota error (device loop1): write_blk: dquota write failed [ 34.905210][ T3650] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 34.935359][ T3650] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.53: Allocating blocks 41-42 which overlap fs metadata [ 34.954532][ T3650] Quota error (device loop1): write_blk: dquota write failed [ 34.962561][ T3650] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 34.972710][ T3650] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.53: Failed to acquire dquot type 1 [ 34.987914][ T3650] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 34.993103][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.003023][ T3650] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.53: corrupted inode contents [ 35.009609][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.031790][ T3659] 9p: Bad value for 'rfdno' [ 35.038659][ T29] audit: type=1400 audit(1767432761.400:315): avc: denied { associate } for pid=3653 comm="syz.4.55" name="current" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.044737][ T3654] batman_adv: batadv0: Interface deactivated: dummy0 [ 35.059816][ T3650] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.53: mark_inode_dirty error [ 35.079082][ T3650] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.53: corrupted inode contents [ 35.095067][ T3650] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.53: mark_inode_dirty error [ 35.106423][ T3650] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.53: corrupted inode contents [ 35.118280][ T3650] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 35.127007][ T3650] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.53: corrupted inode contents [ 35.140055][ T3650] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.53: mark_inode_dirty error [ 35.151597][ T3650] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 35.154249][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.160688][ T3650] EXT4-fs (loop1): 1 truncate cleaned up [ 35.170795][ T3654] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.174011][ T3650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.229744][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.252009][ T3650] syz.1.53 (3650) used greatest stack depth: 9952 bytes left [ 35.260835][ T1758] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.282544][ T1758] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.318490][ T31] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.327422][ T31] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.350542][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.366618][ T3665] syzkaller0: entered promiscuous mode [ 35.372134][ T3665] syzkaller0: entered allmulticast mode [ 35.389576][ T29] audit: type=1400 audit(1767432761.730:316): avc: denied { ioctl } for pid=3663 comm="syz.3.58" path="socket:[4806]" dev="sockfs" ino=4806 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 35.649994][ T29] audit: type=1400 audit(1767432762.020:317): avc: denied { load_policy } for pid=3670 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 35.670104][ T3671] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 35.786704][ T3671] SELinux: failed to load policy [ 35.816733][ T3675] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.861115][ T3675] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.941454][ T3675] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.002208][ T3675] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.019832][ T29] audit: type=1400 audit(1767432762.390:318): avc: denied { mounton } for pid=3678 comm="syz.4.61" path="/11/bus" dev="tmpfs" ino=76 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 36.066777][ T53] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.078161][ T3679] loop4: detected capacity change from 0 to 512 [ 36.084811][ T53] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.093556][ T53] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.102569][ T53] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.105501][ T3679] EXT4-fs: dax option not supported [ 36.120205][ T29] audit: type=1400 audit(1767432762.470:319): avc: denied { mounton } for pid=3678 comm="syz.4.61" path="/11/bus" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.211393][ T29] audit: type=1400 audit(1767432762.580:320): avc: denied { setopt } for pid=3683 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 36.313572][ T3696] syzkaller0: entered promiscuous mode [ 36.319261][ T3696] syzkaller0: entered allmulticast mode [ 36.843280][ T3720] ieee802154 phy0 wpan0: encryption failed: -22 [ 37.466467][ T3732] syzkaller0: entered promiscuous mode [ 37.472075][ T3732] syzkaller0: entered allmulticast mode [ 37.578794][ T3741] process 'syz.2.74' launched '/dev/fd/4' with NULL argv: empty string added [ 37.610468][ T3743] __nla_validate_parse: 4 callbacks suppressed [ 37.610480][ T3743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 37.627125][ T3743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 37.637119][ T3743] hsr_slave_1 (unregistering): left promiscuous mode [ 37.641032][ T3745] loop0: detected capacity change from 0 to 512 [ 37.650555][ T3745] EXT4-fs: dax option not supported [ 37.727935][ T3752] openvswitch: netlink: Missing key (keys=40, expected=80) [ 37.741377][ T3754] loop4: detected capacity change from 0 to 512 [ 37.759899][ T3754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.772545][ T3754] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.999520][ T3754] Set syz1 is full, maxelem 65536 reached [ 38.046987][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.282235][ T3767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.82'. [ 38.299632][ T3763] loop4: detected capacity change from 0 to 32768 [ 38.349325][ T3308] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 38.354872][ T3308] loop4: p1 start 460800 is beyond EOD, truncated [ 38.361347][ T3308] loop4: p2 size 83886080 extends beyond EOD, truncated [ 38.370201][ T3308] loop4: p5 start 460800 is beyond EOD, truncated [ 38.376751][ T3308] loop4: p6 size 83886080 extends beyond EOD, truncated [ 38.399492][ T3763] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 38.406802][ T3768] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 38.415070][ T3768] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 38.418700][ T3763] loop4: p1 start 460800 is beyond EOD, truncated [ 38.430116][ T3763] loop4: p2 size 83886080 extends beyond EOD, truncated [ 38.442005][ T3771] loop1: detected capacity change from 0 to 128 [ 38.473260][ T3763] loop4: p5 start 460800 is beyond EOD, truncated [ 38.479809][ T3763] loop4: p6 size 83886080 extends beyond EOD, truncated [ 38.549324][ T3774] syz.1.83: attempt to access beyond end of device [ 38.549324][ T3774] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 38.598054][ T3774] syz.1.83: attempt to access beyond end of device [ 38.598054][ T3774] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 38.618923][ T3774] syz.1.83: attempt to access beyond end of device [ 38.618923][ T3774] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 38.632879][ T3774] syz.1.83: attempt to access beyond end of device [ 38.632879][ T3774] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 38.646631][ T3774] syz.1.83: attempt to access beyond end of device [ 38.646631][ T3774] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 38.703138][ T3774] syz.1.83: attempt to access beyond end of device [ 38.703138][ T3774] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 38.736408][ T3774] syz.1.83: attempt to access beyond end of device [ 38.736408][ T3774] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 38.753493][ T3782] loop0: detected capacity change from 0 to 8192 [ 38.770863][ T3782] netlink: 76 bytes leftover after parsing attributes in process `syz.0.88'. [ 38.797538][ T3774] syz.1.83: attempt to access beyond end of device [ 38.797538][ T3774] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 38.816016][ T3784] SELinux: policydb version 1367335593 does not match my version range 15-35 [ 38.832347][ T3784] SELinux: failed to load policy [ 38.841737][ T3784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.892287][ T3786] loop1: detected capacity change from 0 to 8192 [ 38.901279][ T3784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.930323][ T3556] udevd[3556]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 38.941503][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.958308][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop4p6, 10) failed: No such file or directory [ 38.977749][ T3784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.034583][ T3784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.141970][ T1758] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.160028][ T1758] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.178422][ T1758] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.186657][ T1758] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.289792][ T3789] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 39.298805][ T3795] netlink: 'syz.0.92': attribute type 4 has an invalid length. [ 39.306409][ T3795] netlink: 152 bytes leftover after parsing attributes in process `syz.0.92'. [ 39.337588][ T3795] .`: renamed from bond0 (while UP) [ 39.479224][ T3811] 9p: Bad value for 'wfdno' [ 39.505446][ T3812] loop0: detected capacity change from 0 to 512 [ 39.524898][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 39.541980][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 39.562236][ T3812] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.576991][ T3812] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.730355][ T3811] syz.2.96 (3811) used greatest stack depth: 9600 bytes left [ 39.759430][ T3824] loop2: detected capacity change from 0 to 1024 [ 39.766074][ T3824] EXT4-fs: inline encryption not supported [ 39.782585][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.802411][ T3827] loop4: detected capacity change from 0 to 512 [ 39.819961][ T3827] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.98: bg 0: block 248: padding at end of block bitmap is not set [ 39.834340][ T3827] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.98: Failed to acquire dquot type 1 [ 39.845947][ T3827] EXT4-fs (loop4): 1 truncate cleaned up [ 39.851980][ T3827] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.865548][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.869242][ T3827] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.961261][ T3832] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.100: bg 0: block 248: padding at end of block bitmap is not set [ 39.975655][ T3832] __quota_error: 200 callbacks suppressed [ 39.975713][ T3832] Quota error (device loop2): write_blk: dquota write failed [ 39.988860][ T3832] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 39.998779][ T3832] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.100: Failed to acquire dquot type 1 [ 40.010444][ T3832] EXT4-fs (loop2): 1 truncate cleaned up [ 40.016446][ T3832] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.028972][ T3832] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.264751][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.283166][ T29] audit: type=1326 audit(1767432766.650:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.306640][ T29] audit: type=1326 audit(1767432766.650:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.329947][ T29] audit: type=1326 audit(1767432766.650:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.353149][ T29] audit: type=1326 audit(1767432766.650:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.376418][ T29] audit: type=1326 audit(1767432766.650:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.399672][ T29] audit: type=1326 audit(1767432766.650:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.422921][ T29] audit: type=1326 audit(1767432766.650:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.442246][ T3837] syz.0.101: attempt to access beyond end of device [ 40.442246][ T3837] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 40.446181][ T29] audit: type=1326 audit(1767432766.650:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3835 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 40.467610][ T3837] syz.0.101: attempt to access beyond end of device [ 40.467610][ T3837] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 40.512590][ T3839] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 40.541066][ T3827] syz.4.98 (3827) used greatest stack depth: 9256 bytes left [ 40.569872][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.651425][ T3850] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 40.659647][ T3850] EXT4-fs (loop0): orphan cleanup on readonly fs [ 40.674244][ T3852] netlink: 'syz.4.105': attribute type 4 has an invalid length. [ 40.681902][ T3852] netlink: 152 bytes leftover after parsing attributes in process `syz.4.105'. [ 40.696281][ T3850] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.701049][ T3852] .`: renamed from bond0 [ 40.717283][ T3850] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 40.724404][ T3850] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #13: comm syz.0.106: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 40.760638][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.769795][ T3850] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.106: couldn't read orphan inode 13 (err -117) [ 40.814963][ T3850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.830793][ T3855] netlink: 44 bytes leftover after parsing attributes in process `syz.2.107'. [ 40.879991][ T3857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.881528][ T3861] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 40.892594][ T3857] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.920215][ T3850] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 40.940257][ T3850] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 40.967439][ T3850] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 40.967745][ T3861] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 41.041331][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.098740][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.255509][ T3884] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4 sclass=netlink_route_socket pid=3884 comm=syz.4.114 [ 41.406801][ T3889] set_capacity_and_notify: 5 callbacks suppressed [ 41.406810][ T3889] loop2: detected capacity change from 0 to 512 [ 41.524972][ T3893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.533763][ T3893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.650286][ T3889] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.117: bg 0: block 248: padding at end of block bitmap is not set [ 41.665106][ T3889] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.117: Failed to acquire dquot type 1 [ 41.678934][ T3889] EXT4-fs (loop2): 1 truncate cleaned up [ 41.685818][ T3889] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.699557][ T3889] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.843521][ T3895] netlink: 'syz.3.118': attribute type 1 has an invalid length. [ 41.902340][ T3895] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3895 comm=syz.3.118 [ 41.955645][ T3899] loop0: detected capacity change from 0 to 512 [ 41.957008][ T10] IPVS: starting estimator thread 0... [ 41.969700][ T3899] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.982746][ T3899] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.995133][ T3899] EXT4-fs (loop0): 1 truncate cleaned up [ 42.001252][ T3899] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.057048][ T3907] loop4: detected capacity change from 0 to 128 [ 42.063389][ T3900] IPVS: using max 2352 ests per chain, 117600 per kthread [ 42.063884][ T3907] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 42.087222][ T3907] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 42.120966][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.151553][ T3910] loop4: detected capacity change from 0 to 4096 [ 42.161857][ T3910] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.180463][ T3912] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.195338][ T3889] syz.2.117 (3889) used greatest stack depth: 9088 bytes left [ 42.195640][ T3912] vhci_hcd vhci_hcd.2: invalid port number 96 [ 42.208936][ T3912] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 42.218615][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.218883][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.385656][ T3920] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 42.421237][ T3922] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=3922 comm=syz.2.128 [ 42.441057][ T3924] netlink: 'syz.0.130': attribute type 1 has an invalid length. [ 42.492343][ T3924] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3924 comm=syz.0.130 [ 42.650756][ T3929] tipc: Started in network mode [ 42.655663][ T3929] tipc: Node identity 12ed939815df, cluster identity 4711 [ 42.662881][ T3929] tipc: Enabled bearer , priority 0 [ 42.671026][ T3929] syzkaller0: entered promiscuous mode [ 42.676501][ T3929] syzkaller0: entered allmulticast mode [ 42.684924][ T3929] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 42.694332][ T3929] tipc: Resetting bearer [ 42.700926][ T3928] tipc: Resetting bearer [ 42.708080][ T3928] tipc: Disabling bearer [ 42.767154][ T3931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.133'. [ 42.796362][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 42.805928][ T3933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.134'. [ 43.054768][ T3944] loop3: detected capacity change from 0 to 512 [ 43.062759][ T3944] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 43.071098][ T3944] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.137: iget: bad i_size value: 12154757448730 [ 43.084013][ T3944] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.137: couldn't read orphan inode 13 (err -117) [ 43.096292][ T3944] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.308864][ T3950] loop2: detected capacity change from 0 to 512 [ 43.320755][ T3950] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.138: bg 0: block 248: padding at end of block bitmap is not set [ 43.335206][ T3950] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.138: Failed to acquire dquot type 1 [ 43.347442][ T3950] EXT4-fs (loop2): 1 truncate cleaned up [ 43.353385][ T3950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.366099][ T3950] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.773322][ T3959] openvswitch: netlink: Missing key (keys=40, expected=80) [ 43.892784][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.914178][ T3961] loop3: detected capacity change from 0 to 512 [ 43.930174][ T3961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.942741][ T3961] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.965875][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.088839][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.364051][ T3986] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 44.783232][ T4002] netlink: 'syz.3.150': attribute type 1 has an invalid length. [ 44.790901][ T4002] netlink: 224 bytes leftover after parsing attributes in process `syz.3.150'. [ 44.897280][ T4007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.151'. [ 44.927382][ T4007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.151'. [ 45.019122][ T3996] netlink: 92 bytes leftover after parsing attributes in process `syz.0.148'. [ 45.031074][ T3996] netlink: 32 bytes leftover after parsing attributes in process `syz.0.148'. [ 45.099491][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 45.099503][ T29] audit: type=1400 audit(1767432771.470:886): avc: denied { create } for pid=4008 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.105078][ T3995] Set syz1 is full, maxelem 65536 reached [ 45.114799][ T29] audit: type=1400 audit(1767432771.470:887): avc: denied { bind } for pid=4008 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.149888][ T29] audit: type=1400 audit(1767432771.470:888): avc: denied { setopt } for pid=4008 comm="syz.2.152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.220826][ T4013] IPv6: Can't replace route, no match found [ 45.261320][ T4012] capability: warning: `syz.0.153' uses deprecated v2 capabilities in a way that may be insecure [ 45.276275][ T4018] loop4: detected capacity change from 0 to 1024 [ 45.293138][ T29] audit: type=1326 audit(1767432771.590:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 45.316420][ T29] audit: type=1326 audit(1767432771.590:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 45.328336][ T4018] EXT4-fs: Ignoring removed orlov option [ 45.339648][ T29] audit: type=1326 audit(1767432771.590:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 45.339673][ T29] audit: type=1326 audit(1767432771.590:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 45.391684][ T29] audit: type=1326 audit(1767432771.590:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 45.414894][ T29] audit: type=1326 audit(1767432771.590:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 45.438037][ T29] audit: type=1326 audit(1767432771.590:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4011 comm="syz.0.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90ad52f749 code=0x7ffc0000 [ 45.471907][ T4015] loop3: detected capacity change from 0 to 8192 [ 45.480531][ T4018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.519515][ T4015] loop3: p1 p2[DM] p4 [ 45.526442][ T4015] loop3: p1 size 196608 extends beyond EOD, truncated [ 45.534864][ T4015] loop3: p2 start 4292936063 is beyond EOD, truncated [ 45.541656][ T4015] loop3: p4 size 50331648 extends beyond EOD, truncated [ 45.550031][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.579523][ T3610] IPVS: starting estimator thread 0... [ 45.587826][ T4015] veth2: entered promiscuous mode [ 45.592873][ T4015] veth2: entered allmulticast mode [ 45.632157][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 45.643792][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 45.668589][ T4030] IPVS: using max 2400 ests per chain, 120000 per kthread [ 45.677017][ T4033] loop0: detected capacity change from 0 to 2048 [ 45.716838][ T4037] netlink: 'syz.3.160': attribute type 1 has an invalid length. [ 45.724578][ T4037] netlink: 12 bytes leftover after parsing attributes in process `syz.3.160'. [ 45.729649][ T4033] loop0: p1 < > p4 [ 45.737823][ T4033] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.745174][ T4068] loop4: detected capacity change from 0 to 512 [ 46.766883][ T4068] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.170: bg 0: block 248: padding at end of block bitmap is not set [ 46.971116][ T4077] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.001607][ T4068] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.170: Failed to acquire dquot type 1 [ 47.031601][ T4068] EXT4-fs (loop4): 1 truncate cleaned up [ 47.067039][ T4068] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.108211][ T4068] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.238347][ T4082] program syz.0.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.272088][ T4084] netlink: 'syz.0.174': attribute type 12 has an invalid length. [ 47.282202][ T4085] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 47.289872][ T4085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.172'. [ 47.298971][ T4084] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 47.305489][ T4084] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 47.305542][ T4084] vhci_hcd vhci_hcd.0: Device attached [ 47.325236][ T4087] vhci_hcd: connection closed [ 47.325374][ T52] vhci_hcd vhci_hcd.0: stop threads [ 47.335393][ T52] vhci_hcd vhci_hcd.0: release socket [ 47.340808][ T52] vhci_hcd vhci_hcd.0: disconnect device [ 47.355318][ T4091] loop1: detected capacity change from 0 to 256 [ 47.367244][ T4091] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 47.882918][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.250587][ T4116] netlink: 'syz.4.183': attribute type 1 has an invalid length. [ 48.258300][ T4116] __nla_validate_parse: 1 callbacks suppressed [ 48.258311][ T4116] netlink: 224 bytes leftover after parsing attributes in process `syz.4.183'. [ 48.464343][ T4126] loop3: detected capacity change from 0 to 1024 [ 48.482213][ T4126] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 48.509107][ T4126] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.527894][ T4127] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 48.540464][ T4127] vhci_hcd vhci_hcd.2: invalid port number 96 [ 48.546552][ T4127] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 48.805158][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 48.814047][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 48.822970][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 49.110906][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 49.119853][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 49.128836][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 49.184646][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 49.193558][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 49.202495][ T4141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.189'. [ 49.314534][ T4148] hub 9-0:1.0: USB hub found [ 49.319478][ T4148] hub 9-0:1.0: 8 ports detected [ 49.494825][ T4165] netlink: 'syz.0.199': attribute type 1 has an invalid length. [ 49.537393][ T4171] loop0: detected capacity change from 0 to 256 [ 49.556580][ T4171] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 49.600833][ T4167] loop4: detected capacity change from 0 to 8192 [ 49.609505][ T3308] loop4: p1 p2[DM] p4 [ 49.613872][ T3308] loop4: p1 size 196608 extends beyond EOD, truncated [ 49.621507][ T3308] loop4: p2 start 4292936063 is beyond EOD, truncated [ 49.628276][ T3308] loop4: p4 size 50331648 extends beyond EOD, truncated [ 49.637972][ T4167] loop4: p1 p2[DM] p4 [ 49.648911][ T4167] loop4: p1 size 196608 extends beyond EOD, truncated [ 49.657309][ T4167] loop4: p2 start 4292936063 is beyond EOD, truncated [ 49.664118][ T4167] loop4: p4 size 50331648 extends beyond EOD, truncated [ 49.688652][ T4167] veth2: entered promiscuous mode [ 49.693697][ T4167] veth2: entered allmulticast mode [ 49.718028][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 49.729260][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.739507][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 49.744311][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 49.765006][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 49.799900][ T4182] syz_tun: refused to change device tx_queue_len [ 49.807225][ T4182] netlink: '+°ç@': attribute type 4 has an invalid length. [ 49.842195][ T4186] loop3: detected capacity change from 0 to 512 [ 49.861459][ T4186] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.207: bg 0: block 248: padding at end of block bitmap is not set [ 49.875918][ T4186] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.207: Failed to acquire dquot type 1 [ 49.889502][ T4186] EXT4-fs (loop3): 1 truncate cleaned up [ 49.896231][ T4186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.909257][ T4186] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.909523][ T4188] ref_ctr increment failed for inode: 0x101 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810423a880 [ 49.947387][ T4193] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 50.053325][ T4196] loop4: detected capacity change from 0 to 2048 [ 50.080745][ T4198] loop1: detected capacity change from 0 to 128 [ 50.099975][ T3308] Alternate GPT is invalid, using primary GPT. [ 50.106275][ T3308] loop4: p2 p3 p7 [ 50.115643][ T4196] Alternate GPT is invalid, using primary GPT. [ 50.117731][ T29] kauditd_printk_skb: 710 callbacks suppressed [ 50.117743][ T29] audit: type=1326 audit(1767432776.480:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.121992][ T4196] loop4: p2 p3 p7 [ 50.128575][ T29] audit: type=1326 audit(1767432776.490:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.194776][ T29] audit: type=1326 audit(1767432776.530:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.218192][ T29] audit: type=1326 audit(1767432776.540:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.241597][ T29] audit: type=1326 audit(1767432776.550:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4151 comm="syz.2.193" exe="/root/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.275420][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 50.276203][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 50.286243][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 50.315028][ T4202] loop4: detected capacity change from 0 to 512 [ 50.321695][ T29] audit: type=1400 audit(1767432776.690:1607): avc: denied { remount } for pid=4201 comm="syz.4.214" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 50.361296][ T4204] hsr_slave_0: left promiscuous mode [ 50.424510][ T29] audit: type=1326 audit(1767432776.790:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.453179][ T29] audit: type=1326 audit(1767432776.790:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.476504][ T29] audit: type=1400 audit(1767432776.790:1610): avc: denied { mount } for pid=4199 comm="syz.2.213" name="/" dev="configfs" ino=958 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 50.499096][ T29] audit: type=1326 audit(1767432776.790:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4199 comm="syz.2.213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 50.567406][ T4212] loop4: detected capacity change from 0 to 128 [ 50.581384][ T4212] veth0: entered promiscuous mode [ 50.587342][ T4212] veth0 (unregistering): left promiscuous mode [ 50.630750][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.640151][ T3308] loop0: p1 p2[DM] p4 [ 50.644293][ T3308] loop0: p1 size 196608 extends beyond EOD, truncated [ 50.652533][ T3308] loop0: p2 start 4292936063 is beyond EOD, truncated [ 50.659399][ T3308] loop0: p4 size 50331648 extends beyond EOD, truncated [ 50.679332][ T4208] loop0: p1 p2[DM] p4 [ 50.683429][ T4208] loop0: p1 size 196608 extends beyond EOD, truncated [ 50.698018][ T4215] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.712269][ T4208] loop0: p2 start 4292936063 is beyond EOD, truncated [ 50.719075][ T4208] loop0: p4 size 50331648 extends beyond EOD, truncated [ 50.768694][ T4208] veth2: entered promiscuous mode [ 50.773766][ T4208] veth2: entered allmulticast mode [ 50.807346][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.817488][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 50.818049][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 50.854228][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 50.874429][ T4218] netlink: 'syz.3.221': attribute type 13 has an invalid length. [ 50.883474][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 50.941683][ T4218] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 50.951658][ T4212] bio_check_eod: 108 callbacks suppressed [ 50.951671][ T4212] syz.4.219: attempt to access beyond end of device [ 50.951671][ T4212] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 50.976505][ T4212] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 51.003537][ T4213] syz.4.219: attempt to access beyond end of device [ 51.003537][ T4213] loop4: rw=8390657, sector=128, nr_sectors = 1 limit=128 [ 51.017234][ T4213] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 51.187907][ T4231] syz_tun: refused to change device tx_queue_len [ 51.206763][ T4231] netlink: '+°ç@': attribute type 4 has an invalid length. [ 51.218679][ T4227] journal_path: Lookup failure for './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 51.233617][ T4227] EXT4-fs: error: could not find journal device path [ 51.267664][ T4239] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.227: error while reading EA inode 32 err=-116 [ 51.352946][ T4239] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.227: error while reading EA inode 32 err=-116 [ 51.370920][ T4239] EXT4-fs (loop4): 1 orphan inode deleted [ 51.420620][ T4239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.042082][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.063261][ T4254] set_capacity_and_notify: 4 callbacks suppressed [ 52.063317][ T4254] loop2: detected capacity change from 0 to 512 [ 53.201016][ T4279] loop3: detected capacity change from 0 to 4096 [ 53.216156][ T4279] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.371420][ T4285] __nla_validate_parse: 7 callbacks suppressed [ 53.371432][ T4285] netlink: 14 bytes leftover after parsing attributes in process `syz.3.243'. [ 53.416009][ T4285] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.429858][ T4285] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.459768][ T4285] bond0 (unregistering): Released all slaves [ 53.592717][ T4291] loop4: detected capacity change from 0 to 256 [ 54.010611][ T4291] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 54.025080][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.096057][ T4298] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.185482][ T4298] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.251860][ T4298] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.261952][ T4308] loop1: detected capacity change from 0 to 512 [ 54.312935][ T4308] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 54.320881][ T4308] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 54.332375][ T4298] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.342234][ T4308] EXT4-fs (loop1): orphan cleanup on readonly fs [ 54.349029][ T4308] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #13: comm syz.1.251: iget: bad i_size value: 12154761577498 [ 54.361980][ T4308] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.251: couldn't read orphan inode 13 (err -117) [ 54.382041][ T4308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 54.511689][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.532455][ T4314] loop4: detected capacity change from 0 to 164 [ 54.539733][ T4314] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.543442][ T4308] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.251: dx entry: limit 65535 != root limit 120 [ 54.559873][ T4308] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.251: Corrupt directory, running e2fsck is recommended [ 54.580072][ T4314] xt_hashlimit: max too large, truncated to 1048576 [ 54.587316][ T4314] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 54.587582][ T4308] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.251: path /43/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 54.608590][ T4314] rock: directory entry would overflow storage [ 54.616024][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.622145][ T4314] rock: sig=0x4f50, size=4, remaining=3 [ 54.622159][ T4314] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 54.664342][ T4294] loop2: detected capacity change from 0 to 1024 [ 54.687967][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.708837][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.718345][ T4294] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.769854][ T4294] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.807187][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.827597][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.877128][ T4331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'. [ 54.885977][ T4331] netlink: 28 bytes leftover after parsing attributes in process `syz.3.259'. [ 54.886176][ T4326] loop4: detected capacity change from 0 to 4096 [ 54.942267][ T4326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.964947][ T4334] loop0: detected capacity change from 0 to 1024 [ 54.996783][ T4334] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a041c01c, mo2=0002] [ 55.043428][ T4334] System zones: 0-1, 3-36 [ 55.048813][ T4334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.069057][ T4346] netlink: 14 bytes leftover after parsing attributes in process `syz.4.257'. [ 55.080840][ T4346] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.090054][ T4346] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.132541][ T4346] .` (unregistering): Released all slaves [ 55.145354][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 55.145367][ T29] audit: type=1400 audit(1767432781.510:1778): avc: denied { bind } for pid=4329 comm="syz.2.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 55.185471][ T4348] rdma_op ffff888104ce3980 conn xmit_rdma 0000000000000000 [ 55.238891][ T29] audit: type=1326 audit(1767432781.610:1779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.262968][ T3325] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.274774][ T29] audit: type=1326 audit(1767432781.640:1780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.315778][ T4355] loop1: detected capacity change from 0 to 1024 [ 55.319713][ T29] audit: type=1326 audit(1767432781.670:1781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.345411][ T29] audit: type=1326 audit(1767432781.670:1782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.346487][ T4355] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.368740][ T29] audit: type=1326 audit(1767432781.670:1783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.398707][ T29] audit: type=1326 audit(1767432781.670:1784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.421998][ T29] audit: type=1326 audit(1767432781.670:1785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.445310][ T29] audit: type=1326 audit(1767432781.670:1786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.468624][ T29] audit: type=1326 audit(1767432781.670:1787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4351 comm="syz.3.265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3be555f749 code=0x7ffc0000 [ 55.510667][ T4352] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.527987][ T4361] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 55.528725][ T4355] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.567711][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.582745][ T4352] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.638764][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.671875][ T4352] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.704476][ T4367] loop4: detected capacity change from 0 to 1024 [ 55.717603][ T4367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.740653][ T4367] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.756612][ T4374] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.763833][ T4374] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.781187][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.812820][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.822854][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.856656][ T1727] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.869377][ T4352] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.897630][ T1727] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.907306][ T4383] SELinux: security_context_str_to_sid (u) failed with errno=-22 [ 55.916642][ T1727] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.925638][ T1727] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.942760][ T1727] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.965111][ T1727] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.974213][ T1727] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.982508][ T1727] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.171509][ T4392] batman_adv: batadv0: Adding interface: dummy0 [ 56.177778][ T4392] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 56.182071][ T4390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.203456][ T4392] batman_adv: batadv0: Interface activated: dummy0 [ 56.216944][ T4390] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.252511][ T4390] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.753957][ T4390] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.790665][ T4390] EXT4-fs (loop2): 1 truncate cleaned up [ 56.804970][ T4390] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.833262][ T4390] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.956048][ T4410] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.282'. [ 56.994918][ T4410] netlink: zone id is out of range [ 57.000073][ T4410] netlink: zone id is out of range [ 57.044478][ T4410] netlink: set zone limit has 8 unknown bytes [ 57.055759][ T4416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.073380][ T4418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.282'. [ 57.143956][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.410675][ T4427] wireguard0: entered promiscuous mode [ 57.416159][ T4427] wireguard0: entered allmulticast mode [ 57.729578][ T4443] set_capacity_and_notify: 4 callbacks suppressed [ 57.729592][ T4443] loop4: detected capacity change from 0 to 512 [ 57.746321][ T4438] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.799811][ T4438] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.828237][ T4446] loop1: detected capacity change from 0 to 4096 [ 57.851152][ T4446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.865242][ T4438] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.012479][ T4438] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.056908][ T4454] netlink: 14 bytes leftover after parsing attributes in process `syz.1.297'. [ 58.104127][ T4456] loop4: detected capacity change from 0 to 512 [ 58.114405][ T4454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 58.127196][ T4456] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 58.144705][ T4454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 58.155367][ T4454] bond0 (unregistering): Released all slaves [ 58.169755][ T4456] EXT4-fs (loop4): 1 truncate cleaned up [ 58.169853][ T4461] ref_ctr increment failed for inode: 0x169 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810005ca40 [ 58.176031][ T4456] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.288650][ T4466] batman_adv: batadv0: Removing interface: dummy0 [ 58.302082][ T4466] bridge_slave_0: left allmulticast mode [ 58.307729][ T4466] bridge_slave_0: left promiscuous mode [ 58.313415][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.329365][ T4466] bridge_slave_1: left allmulticast mode [ 58.335033][ T4466] bridge_slave_1: left promiscuous mode [ 58.340817][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.352751][ T4466] team0: Port device team_slave_0 removed [ 58.362171][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.379565][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.406061][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.868214][ T3373] IPVS: starting estimator thread 0... [ 58.874909][ T4480] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 58.884398][ T4481] loop4: detected capacity change from 0 to 128 [ 58.959013][ T4482] IPVS: using max 2592 ests per chain, 129600 per kthread [ 59.041461][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.041461][ T1758] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 59.055230][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.055230][ T1758] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 59.074247][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.074247][ T1758] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 59.088183][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.088183][ T1758] loop4: rw=1, sector=193, nr_sectors = 88 limit=128 [ 59.162892][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.162892][ T1758] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 59.176426][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.176426][ T1758] loop4: rw=1, sector=305, nr_sectors = 8 limit=128 [ 59.190202][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.190202][ T1758] loop4: rw=1, sector=321, nr_sectors = 8 limit=128 [ 59.203905][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.203905][ T1758] loop4: rw=1, sector=337, nr_sectors = 8 limit=128 [ 59.217529][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.217529][ T1758] loop4: rw=1, sector=353, nr_sectors = 8 limit=128 [ 59.231977][ T1758] kworker/u8:12: attempt to access beyond end of device [ 59.231977][ T1758] loop4: rw=1, sector=369, nr_sectors = 8 limit=128 [ 59.376086][ T4486] hub 9-0:1.0: USB hub found [ 59.393355][ T4486] hub 9-0:1.0: 8 ports detected [ 59.574606][ T4498] loop4: detected capacity change from 0 to 1024 [ 59.608259][ T4498] EXT4-fs: Ignoring removed nomblk_io_submit option [ 60.141561][ T4512] loop4: detected capacity change from 0 to 512 [ 60.153379][ T29] kauditd_printk_skb: 338 callbacks suppressed [ 60.153391][ T29] audit: type=1400 audit(1767432786.520:2126): avc: denied { write } for pid=4511 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.212700][ T29] audit: type=1400 audit(1767432786.520:2127): avc: denied { nlmsg_read } for pid=4511 comm="syz.4.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.225412][ T4516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.316'. [ 60.233186][ T29] audit: type=1400 audit(1767432786.570:2128): avc: denied { read write } for pid=4514 comm="syz.4.316" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.233211][ T29] audit: type=1400 audit(1767432786.570:2129): avc: denied { open } for pid=4514 comm="syz.4.316" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.233233][ T29] audit: type=1400 audit(1767432786.570:2130): avc: denied { ioctl } for pid=4514 comm="syz.4.316" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 60.313115][ T29] audit: type=1400 audit(1767432786.580:2131): avc: denied { create } for pid=4514 comm="syz.4.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 60.518672][ T29] audit: type=1400 audit(1767432786.890:2132): avc: denied { create } for pid=4524 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.519736][ T29] audit: type=1400 audit(1767432786.890:2133): avc: denied { setopt } for pid=4524 comm="syz.4.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 60.543612][ T4527] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 60.580094][ T1727] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.598519][ T1727] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.606730][ T1727] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.630333][ T4527] netlink: 14 bytes leftover after parsing attributes in process `syz.4.323'. [ 60.651388][ T1727] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.679731][ T4534] loop2: detected capacity change from 0 to 128 [ 60.690197][ T29] audit: type=1326 audit(1767432787.060:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 60.733891][ T29] audit: type=1326 audit(1767432787.060:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4533 comm="syz.2.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa467f0f749 code=0x7ffc0000 [ 60.791279][ T4535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.332'. [ 61.250168][ T4548] syzkaller0: entered promiscuous mode [ 61.255661][ T4548] syzkaller0: entered allmulticast mode [ 61.335823][ T4554] tipc: Started in network mode [ 61.340761][ T4554] tipc: Node identity 422597c6a7c6, cluster identity 4711 [ 61.347894][ T4554] tipc: Enabled bearer , priority 0 [ 61.368606][ T4553] tipc: Resetting bearer [ 61.452373][ T4553] tipc: Disabling bearer [ 61.739531][ T4576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.331'. [ 61.952418][ T4580] veth0: entered promiscuous mode [ 61.957976][ T4580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.340'. [ 62.574836][ T4587] syzkaller0: entered promiscuous mode [ 62.574854][ T4587] syzkaller0: entered allmulticast mode [ 62.602004][ T4587] tipc: Started in network mode [ 62.602025][ T4587] tipc: Node identity 3ac662a681d1, cluster identity 4711 [ 62.602068][ T4587] tipc: Enabled bearer , priority 0 [ 62.602753][ T4584] tipc: Resetting bearer [ 62.603910][ T4584] tipc: Disabling bearer [ 62.934901][ T4598] SELinux: failed to load policy [ 62.947815][ T4600] loop3: detected capacity change from 0 to 512 [ 62.981902][ T4602] ip6gre1: entered promiscuous mode [ 62.987160][ T4602] ip6gre1: entered allmulticast mode [ 63.022162][ T4600] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.035057][ T4605] Cannot find del_set index 0 as target [ 63.069054][ T4610] loop4: detected capacity change from 0 to 512 [ 63.117665][ T4610] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 63.136557][ T4600] loop3: detected capacity change from 0 to 512 [ 63.149836][ T4600] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 63.160528][ T4610] EXT4-fs (loop4): orphan cleanup on readonly fs [ 63.167887][ T4600] EXT4-fs (loop3): 1 truncate cleaned up [ 63.178222][ T4610] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #16: comm syz.4.345: corrupted inode contents [ 63.190632][ T4610] EXT4-fs (loop4): Remounting filesystem read-only [ 63.197201][ T4610] EXT4-fs (loop4): 1 truncate cleaned up [ 63.203119][ T1758] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.213694][ T1758] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 63.227425][ T1758] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 63.333670][ T4619] wireguard0: entered promiscuous mode [ 63.339235][ T4619] wireguard0: entered allmulticast mode [ 63.352951][ T4610] infiniband syz!: set down [ 63.357580][ T4610] infiniband syz!: added team_slave_0 [ 63.468777][ T4610] RDS/IB: syz!: added [ 63.472857][ T4610] smc: adding ib device syz! with port count 1 [ 63.481527][ T4610] smc: ib device syz! port 1 has no pnetid [ 63.585703][ T4623] tipc: Enabling of bearer rejected, failed to enable media [ 64.077985][ T4640] netlink: 'syz.0.357': attribute type 4 has an invalid length. [ 64.396815][ T4647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 64.458587][ T4647] loop1: detected capacity change from 0 to 512 [ 64.467311][ T4647] EXT4-fs (loop1): orphan cleanup on readonly fs [ 64.478200][ T4647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.359: ea_inode with extended attributes [ 64.529090][ T4647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.359: error while reading EA inode 11 err=-117 [ 64.586031][ T4647] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 64.635212][ T4647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #11: comm syz.1.359: ea_inode with extended attributes [ 64.698634][ T4647] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.359: error while reading EA inode 11 err=-117 [ 64.758813][ T4647] EXT4-fs (loop1): 1 orphan inode deleted [ 64.896325][ T4661] SET target dimension over the limit! [ 64.908531][ T3483] ================================================================== [ 64.916601][ T3483] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 64.923613][ T3483] [ 64.925912][ T3483] read-write to 0xffff888237c2a524 of 4 bytes by task 3514 on cpu 0: [ 64.933947][ T3483] wq_worker_running+0x95/0x120 [ 64.938777][ T3483] schedule_timeout+0xb7/0x170 [ 64.943510][ T3483] msleep+0x50/0x90 [ 64.947299][ T3483] nsim_fib_event_work+0x413c/0x45e0 [ 64.952562][ T3483] process_scheduled_works+0x4ce/0x9d0 [ 64.957996][ T3483] worker_thread+0x582/0x770 [ 64.962570][ T3483] kthread+0x489/0x510 [ 64.966629][ T3483] ret_from_fork+0x149/0x290 [ 64.971194][ T3483] ret_from_fork_asm+0x1a/0x30 [ 64.975937][ T3483] [ 64.978236][ T3483] read to 0xffff888237c2a524 of 4 bytes by task 3483 on cpu 1: [ 64.985748][ T3483] kick_pool+0x49/0x2d0 [ 64.989882][ T3483] __queue_work+0x897/0xae0 [ 64.994366][ T3483] queue_work_on+0xa9/0x130 [ 64.998846][ T3483] wg_packet_encrypt_worker+0xc0a/0xe10 [ 65.004376][ T3483] process_scheduled_works+0x4ce/0x9d0 [ 65.009812][ T3483] worker_thread+0x582/0x770 [ 65.014378][ T3483] kthread+0x489/0x510 [ 65.018423][ T3483] ret_from_fork+0x149/0x290 [ 65.022988][ T3483] ret_from_fork_asm+0x1a/0x30 [ 65.027736][ T3483] [ 65.030034][ T3483] value changed: 0x00000000 -> 0x00000001 [ 65.035722][ T3483] [ 65.038038][ T3483] Reported by Kernel Concurrency Sanitizer on: [ 65.044191][ T3483] CPU: 1 UID: 0 PID: 3483 Comm: kworker/1:6 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.053966][ T3483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.063998][ T3483] Workqueue: wg-crypt-wg1 wg_packet_encrypt_worker [ 65.070476][ T3483] ================================================================== [ 65.196818][ T3321] EXT4-fs unmount: 10 callbacks suppressed [ 65.196846][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.254376][ T4663] infiniband !yz!: set down [ 65.258926][ T4663] infiniband !yz!: added team_slave_0 [ 65.300819][ T4663] RDS/IB: !yz!: added [ 65.322376][ T4663] smc: adding ib device !yz! with port count 1 [ 65.352988][ T4663] smc: ib device !yz! port 1 has no pnetid