last executing test programs: 1m1.088127461s ago: executing program 32 (id=5762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89n\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zp\xadbdY\xdcz\xc6lo\xd0\xc7\'CT') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x7fff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a3000000000280004802400018009000100"], 0xc4}}, 0x0) 58.231765643s ago: executing program 33 (id=5852): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r1, 0x0, 0x2144}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}]}, 0x34}}, 0x0) 55.178732422s ago: executing program 34 (id=5934): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x22840, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) 34.415774703s ago: executing program 6 (id=6667): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='xen_cpu_write_gdt_entry\x00', r0, 0x0, 0x7ffc}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x8000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8, 0x20, 0x8, 0xb4f, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast1, @private=0xa010100}}}}) write(r4, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x80000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="bfb1d970a3bc07579a9ea082bb77de1ea9702612fe5303120dde5ef9f02401101c4c10e280fe0cbc916fb4a94728d94d032a2e0418fd16b18d018893fe75a477a13dfa15cbd3428d699ace55eb975e200ab990fab287683c63280508ed451febeebc66f69c23cb0e6ad23cb6e3e37e875122ad1b78cc330dd0a9161ca1b17ce71f0843d74ee8a58d486393ca21980b7d536e6944ab51bb83c573fa90e578baa7d93ce84d392158ca4707d103630110356400eb18472be1241b1c05504e9c1c73471336fdb2afeb6d", 0xc8}, {&(0x7f0000000900)="a3a15dfc6d130314236b133336a79b234f8f1dd6b8920550b5fd18d560f1dc50439cce891046c8b2f0032286576b7fbffcce7ea521ad132d331d3b3fc5475c8930b9b6135029f15ef51743d5d247fd2e6d0f265367f4464bc6f46be14d4af6b9936d69bf4b0f56072f5486bf05f62ac17e63dcf2a1fa662206ee1152ce1fd2ec9860e3eedcfa79a17685bfaf65a31c033e4434243673ea726da637c29f6a46f574ab83c06f397159952f53e6ea284c213dafc2abf84309f5d419e2cfec0526c14822a5e037e658d1986985ae1f7ddf9b22c894ab84bcc683605788a3e2bd090eb58ae97b4f83648e2e9e83ff61c327fb10d55fece76e", 0xf6}], 0x2}, 0x20001) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x40000) 33.617042875s ago: executing program 6 (id=6702): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000001c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@llc={0x4, {@snap={0x1, 0x1, 'p', '\x00', 0x10}}}}}, 0x0) 33.594876027s ago: executing program 6 (id=6704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40200, 0x0) sendfile(r2, r3, 0x0, 0x10ffff) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000240)=0x6) 33.509962414s ago: executing program 6 (id=6706): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', r1, &(0x7f0000000180)='./file0\x00', 0x100) 33.509273034s ago: executing program 6 (id=6708): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd70000000000021040000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2008040}, 0x880) 33.30410134s ago: executing program 6 (id=6716): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003aaaaaaaaaabbbbbbbbbbbbbb86dd62f40702011406"], 0x4e) 33.255074303s ago: executing program 35 (id=6716): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="00006003aaaaaaaaaabbbbbbbbbbbbbb86dd62f40702011406"], 0x4e) 25.238169069s ago: executing program 7 (id=6928): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/238, 0xee}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 25.060359603s ago: executing program 7 (id=6936): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x20, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 24.990531188s ago: executing program 7 (id=6939): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 24.96747727s ago: executing program 7 (id=6940): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 24.946888622s ago: executing program 7 (id=6941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='mm_page_free\x00', r0, 0x0, 0x2000000000000000}, 0x18) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0xc8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8112"], 0xfdef) 24.780648705s ago: executing program 7 (id=6954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "1839f45fc0723889c7f5877caaf7fb7dda"}, 0x21) 24.751625618s ago: executing program 36 (id=6954): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) write$selinux_load(r2, &(0x7f0000000000)={0xf97cff8c, 0x8, 'SE Linux', "1839f45fc0723889c7f5877caaf7fb7dda"}, 0x21) 24.58538076s ago: executing program 3 (id=6962): r0 = io_uring_setup(0x2b85, &(0x7f0000000280)={0x0, 0xe84e, 0x8, 0x0, 0x1c8}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[r2], 0x1) 24.529507304s ago: executing program 3 (id=6964): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000480)={[{@nouid32}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@errors_remount}]}, 0x1, 0x53f, &(0x7f0000001100)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='ext4_error\x00', r0}, 0x18) io_setup(0x8, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xbf5, 0x2000402) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 24.435512932s ago: executing program 3 (id=6967): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) 24.261009275s ago: executing program 3 (id=6970): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) 24.206951409s ago: executing program 3 (id=6973): bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000580)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f0000000200)={0xe, 0x18, 0xfa00, @ib_path={0x0, r2, 0x1, 0x1, 0x4000}}, 0x20) 23.910923433s ago: executing program 3 (id=6980): lseek(0xffffffffffffffff, 0xfffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0xfffffff8, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x40, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0xffffffff, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x80000000, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x0, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x7f, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x8, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x89, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0xdc1, 0x5, 0x6, 0x7, 0x7, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x7ff, 0x6, 0xf, 0xffffffff, 0xa, 0x723, 0x7e, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x40000000, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x6, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 23.884172085s ago: executing program 37 (id=6980): lseek(0xffffffffffffffff, 0xfffd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001180)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x2, 0x0, 0x5f0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x247ecded, 0x0, 0x80000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xb, 0x37, 0xffffff01, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40000000, 0x0, 0xfffffff8, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x40, 0xb, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0xffffffff, 0x0, 0x0, 0xfffffffe, 0xa, 0x0, 0xa7, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000004a56}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x207, 0xfea7, 0x1, 0xffff8000, 0x90, 0x9fd, 0x2, 0xb8, 0xca2, 0x6, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x5, 0x3, 0x1ff, 0xe5, 0x2d, 0xd, 0x3, 0xa, 0x3, 0x1, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x3, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xe0b2, 0x1, 0x8fc, 0xbf0, 0x9, 0x3, 0x9, 0x7ffffffd, 0x6, 0x0, 0x8, 0x800, 0x89, 0x4, 0x100, 0x401, 0x8, 0xffffffff, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0xee, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x80000000, 0x8000, 0x0, 0x9, 0x80, 0x7, 0x5, 0x1, 0x0, 0x7, 0xeb22, 0xd, 0x8000, 0xfffffff7, 0x0, 0x0, 0x3ff, 0x400000, 0x10, 0x5, 0x3, 0xfffd, 0x5, 0x1, 0x0, 0x2, 0x6, 0x5, 0x6, 0xe5a, 0x8, 0x2, 0x81, 0xd44, 0x10, 0x7f, 0x7fff, 0x800, 0xfffffff4, 0x10000, 0x5, 0x408, 0xba, 0x2, 0x89, 0x2, 0x8, 0x6, 0x9, 0xffffa3e0, 0x96, 0xff, 0x1, 0x2, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb6, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x100, 0x1, 0x8001, 0x100, 0xffff9c71, 0x20000008, 0x101, 0x6, 0x2, 0xfffffc00, 0x89, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x9, 0x7, 0x4, 0xb, 0x80, 0x0, 0x0, 0xdc1, 0x5, 0x6, 0x7, 0x7, 0xfffffa0c, 0x3, 0x0, 0x2, 0x5, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x5, 0x3, 0x0, 0x3, 0x8, 0x28, 0x4000002, 0x5, 0x7ff, 0x6, 0xf, 0xffffffff, 0xa, 0x723, 0x7e, 0x9, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x6, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x40000000, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb85, 0x6, 0x8d8d, 0x55, 0x101, 0x6, 0x64e8, 0x8, 0xf, 0x772, 0x80a, 0xffe, 0x3, 0x3f7, 0xb160, 0x8, 0x7, 0x1, 0x5d, 0x9, 0xd, 0x82]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3}}}}]}]}, 0x898}, 0x1, 0x0, 0x0, 0x50}, 0x240040c0) 21.283289038s ago: executing program 8 (id=7031): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, 0x0, 0x0) 21.183922726s ago: executing program 8 (id=7035): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000300000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 21.1312746s ago: executing program 8 (id=7038): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000001c0)={[{@debug}, {@data_err_ignore}, {@data_err_ignore}, {@nobarrier}, {@inlinecrypt}, {@orlov}, {@nogrpid}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x3, 0x572, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x1b6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00', r3, 0x0, 0x7}, 0x18) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) 20.893740438s ago: executing program 8 (id=7044): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0", 0x4d) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f0000000040)='./file1\x00', 0xd) 20.685432285s ago: executing program 8 (id=7050): memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0xb9d) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) 20.36590992s ago: executing program 8 (id=7068): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000004090001"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1bd}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 20.36571208s ago: executing program 38 (id=7068): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007000004090001"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1bd}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40, 0x0, {0x0, r4}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 16.845315245s ago: executing program 5 (id=7168): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x221d, &(0x7f0000000100)={0x0, 0x6e7f, 0x800, 0x1, 0x5cc}, &(0x7f0000000280)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffa, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x1, 0x0, 0xffffffffffffffff, 0x0, r1}) io_uring_enter(r1, 0x66ab, 0x4, 0x2, 0x0, 0x0) 16.844782965s ago: executing program 5 (id=7170): io_uring_setup(0xccd, &(0x7f00000001c0)={0x0, 0xeec3, 0x2, 0x4, 0x2000110}) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x4000}, 0x10) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xa011, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2a, 0x0, r3, 0x0, 0x0, 0x0, 0x12001, 0x1}) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) 16.792134699s ago: executing program 5 (id=7174): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) 16.748195932s ago: executing program 5 (id=7177): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380), 0xfe, 0x558, &(0x7f0000000c00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001040)={0x8, {"bfee929ee454947f8a623a2b2b34418607048345f78360c5286bdc3fe861e9a9c3a6f80b105517b1138dd74f72be858fb66a62d059c275fe01f74801391de4d91d927c40d9ca1384cb2300eb961cb54b53ce39106aeb13857581d74cc5e0219dc34af22b2670865fd6b368dd82feafdfd769e4200df09ff5dda65551f872add9e18089e5c4ee1f7a40ed311773d88f7e6dd85c9e9c8d67e3bb3b76950b353b14b5da5a4b4a83cecffbb9b43417e7a891e3ccfeae693bc794390079fd59461a5d49a874fd33546c75fc5079039e938d4878e45e972b64aa469a3afbd40ad91237e05dfa4d86a98e356cd974adb45a4cf826b21f2c152f49a76294644400b878248bcd834c1ea835865082329a2b73d04b6a878b242a517850755903da0b6d86171c0525daab1c42a1b29dd32f19fd97f8de340628bb70f253122d498b2fc9a730e0f92c390ee7e32c31fa7876d8e7ce050c4e698afa0ea6447892694a2754d9bd7411118f1a66d8e9c91d7de640ed6c22c0cbf770f3ddbccef23770d483ca1bf15f13f0bdfe3abaf075396d83e8b0b9118e8d40cf89921b05b0790ff27bc595bf75fb662c93593c702358550a4a473c924cb71ae677e7ab9e41509f7aa845c1c6f3ba1d9889336bb058ce1711e5a73f138474d1db3db829a77b773960ba913f384a654d31857566a6fb957326c7823fb2f69d463674881e5c5cabcf30c4de4f1586a8481fc7cc8b369faef2b29f619f0d44de53a18b90ea7eca72674a3857ae7b35625e3f6589ac132f3cbe9d8f517d046aa019e9ee503fb8f4d99643528d1f921e5e298e817bdd7a2dfb78d90147ffad1cf6139514e23976a9819679d354f28ef39eec4ede8f8e31a6b2be957e69dbe1c1f75709127b2c0054a55c66472a972fc9b9d607c60b8fd05bc987e2930859d15bc1e349807339bbe7bd3aa7a1cc89d7a30ace199a9c17e628b064a60f3010e98dae0cd118a7deb1f1fba51bea6ce4ffdd3fe24056fe468152a92d217858259930d8db2b8828294857ad201083928020930d5a95c95d326a95ac8fac384910ac11a704eabfed5922e2722a7e5c0396f48d50e890b94358191511e0e7186d7033e18557b15b8f60c43618ab4cf9b9bee8b6b8dc87f6f706e6ce437606dec69f265f94fa8aa30fd0464d2b10c977a2895e6265eda0927d86ac9169874b9e9f8546453d8b3fbdca23400e923f7891796b8b7ba043323d496889f9dc1bc1eca3a05d167ec3169f57e0038baa8cc9030580f8e6e7d20225541dde9d28d57663de227563cfe19178b95ea1fda554b6ac3a393acb87fbf13163a06ab66034128e70d295250d95c82740e18f7992fb8cfae8ed85fa9f3e2738f090a7cf6fe1e509568fa5cad4afd51e13cd38b8c27eb1ec944984ac2195d96542199e82c53108c03da40faed3dde328e562e2e3a59e0a72ce0985a878d39843fb5d7d7b377d75c69896e3aba736607864e29969b58c892cd93463edfe1de0e5c63fb8934d2991f338cc425c8793193f209f825e07a431971dffea8cadc67f000ab6ccdcc052d84cb6557ffba89b6229b0d9e358619a4c29edb40bef8e5d520b4800c2ee0045dfd93087b06acf41cec328c732fc602654199a1fd6bf75bd28a04b6a0f404a481c1b810aeb98ffd0c053650c11b8346b2703837140d48d5e630d55338b9c757e56feabe85530df1d0fd36ada4aec4cda076780fec533115b7358b5728842372879f5d6caaf7c52a851a264f0e54c2cd5290fa086585fa1db76e0ade328023fa512ba4566a446906a154d9efd005cbc6cd2d5491448197ced777f3fcb8b93484bae3a83b79734b449eb3f21ac4f78205367e1ab9773228ee88d5fbee6354397d604e15172643bc92aa5090e0f9766b35dad247458604fb61c5d76718a352eedb4dd7aa8c910919097856d5a2c993f063faedce3aae3d0e43955a681c9eff53848b2b99a219691463fb8e26b0d37db9a4d3e9898193d68465638c6c90f95767366051bb8c17e6ab9ff61387192b83b5113bfbfa4df6c5086a0623eda129e7a407f0ac789c9b67e60cc1b2d3195411edcee10d06a3764f673115b593cf4d426070dc6ab08de1544f628fbca38b9fd32cf012c7f76ceb0964e54cea6bf428e0d21a238073216ea284132532f3f4ee1cd57f6514cf37f322b42819c79ee09b46191cefa42a7de3a55ae4514b860cf441d8ed446962808b23673db82dcd0c87bbe5a065cbe71516247d26406a12cf79ff7c149c2992bd61f85d1a38fe822ad915c97bc1debc88306342d9a4442d9536ddbcdf826ab842d72886529db80cad7a8d0bc7c064672c6568a0745b1ba881b33a481c1748cedfd0f95ae27257f2124a184052c407665da76c5fc5f9558664b6d9c1aa4fe221aa34e2c3039ff6bee3e6e798d2960761524db15ece9c91318bd6a00158ca9f87c95b944dbb3d7632ef3844264bbc841581aa1333742d483216ff0344d5c2661cade9e8a011fc9463548f9477aec1cad8a6267b0670fa834b2d1fac27949a6bc7973eb7786a440a962caeb574caef5fd3549b011485255075438f5003b98367b416c124bb1229dc92ae8117c4508ca1c61d88504dfc47de6cdb615a7938316fc45c9b003234844b38555f9de9dd40308ffcf1daff0e7f02de6230a4ec96a9167ff109d8321a419840e64e7b6277b32a9621c6226d25069fc2d1950c823245db1dee5e9e47295a570a0bd5ecb7b86a3c6ff5239d8bf5431338fb98a54e2b350b5cfc52a2ce15ad607e29c7a5a51f81fa6ec2b34dfc4b5a65a98877d74b83c064321f8f5c04f428f4bdd08b3a348c74643191226ff849495437165cf1f8fa254605a9682e78970099e92b7e5649b5277df234948578963573bd8ed844a5b3aabc18df6b2ed50ca4e8246514c3a42831030862ff24b44a2d2713ea3e9c8455d7e5f34993f2422a4ab92fb285ffc0d02443e5956b10974acedd583271be17d718741eb116fd458ad6a3d295bc4364acc8b49122ff2f13677778401662350d5ef20f68731fb5f318d61df369a859b1dc3ad384639664cc8365c7a535381758a6e125bb11453d602542c39c5a9d7aacf80e2ce03412dbc487936d26740b520143e1fce9c1ed80a7b4e3c54e120162210009e1939d6fa58c6269daf5b5078475277a3a4d45eb399089f367131405839f0bf83780a7783fd0501fc186611ad3464bd54334128a7d527a913b76812ead44bd019b93bd05b7f471ec870eaff5400089a7591827175799189ce467946661174bbb0c0e6690c9fd71add6640b15161c7eb7b8cc53f74cdfe1c050065c3e64d840e9fd779d6cc7666f727cd01ec5dad5934640e1cf7e0b3283df3231e7c6f96cd991f11a352c2d6e301e11d0e241e3d80f18804bcfda779967720da4eedbd70fecaec563f384344b18694b5172c9ac134533feea55985186f6500876264cfc77d558a73333718329a803afaefdb516b2ee57c2898b34450058d2cbb27611e53f417461f9ebacdc9f26c7c2377eb6fdf8ca1689e2ad6591cfce0aaab1442069fc2852105c0378586ea719c638a82097c5d4e70615ef45cf692ab719dd6c5dc28bb088353867b00662958dda270f267cd889b86e97f66fd3dd91e25ab0c645aa5f8284061bcb7503a2f37e467cef6bb1f4e7afed2b9db295be16766bb6ff3549a290d2f959fec3ef961945f776635e276f0d86ff96dfcbd56e77095ba84e650f800d0148758654f6a167f78cc10a2c7cad0795aad08564013a03283286f5a5f60c190220e34ae49eb1b68e85f7e38b502cd7d2921f07e5c65e85d198fde7629a8c3789299455662fac55d3b83af7e464c3905967685a20b71e005bd6455b4129c37b92e8f578ba57ac87d112e214bb1f442150ece519919fe56534bb3bdfd868ca33adaaed890232252595afefe96b7910dd5e1d21a130d87da17ab620d622cd8fd401d73a28bb0a46fc97dd9dd8ce5f167dbd620715f857bb566acbec3871577cd26b4bfbf7abec46376ce81fb84abad1c9bcc15bf705159d966a815a72630acded1f3084a3cd92f5cde80cccc1c28b9577d4171bd46c165a3754bc789500a2d460992aacac97c0575afe07fbad9e75992756196f9cddfe0f4e5c6f11377b43b858139411615f5172d7e99c3d9c1bc264c3d1de74ea87c480721694e22648539106c54a3f7bdf5c35d102b1a7c3c2482dd2787af9125098b37b88059ff1e1413e559173ac84779ee73c122cc8874f2928dc0beeb8dff053bf2e857601bdfbcb0be2f6b4e0694decb85eb0963df58bebae0e2287f075da9928752e0bd63cd5d35e7984815093346a80815119b3d5ecd5abe7968b627e7dcb6329c85a53afcdfda09aefa74da3e2877e8328924a93366a21935c4de961996bba50e22e2c302246e333da18d4d45f63cca76c93397b1a38efa4f3351fda6326cdace7b5691a845e3c1dad0c8ecbdadebbe8018bcbaf01e92c9cdf21211c80655249b5bede4147edf82d3d61e4e49070e18d84c94e8ce9702b68453f31c4070d77f943908b62d5be5347cd2bcd48ca2dedc6798cf8304da76127f66c2a0b513dc33f2caaf01cc352452f1afdf14e0901f0bb08491fcc7e9e48c40062090095a1a21f6e99227e7d4b322afcef29ad7eb20a3da47d698d1e1892ee8505ccc62fac6299e7ae8d908008232727c6dd569576eefc3d68f3ca91a973b7e0ecdb715a526adc679674f4ffa0414ed09c042cc62a43343caa7f0ecf022ef177c4c0ef43d7fcb33e546212fbf09dcf4e49c6fba3be914000c20787b9332441510bca05accd15376d8d795c489a0ce18c3d6ddad4aa23558a758e3779aacbe97fb4127723963516a3fdc43cf68ebb87d8db28cd08d6accf21c577290c29b7b4ee9968f9fa2e174c1eef3bb187b75d3a98d9d2ff56fcdb5ff600524dfe6b26276ed900395f24554282f22208e32217fa42a318c1cbb888c14728488e826c899b488a8adf4c18504d1a29709b0026e66c6811c3586208899bab9c353e30d21f140971d9b171ff2420c296a3a1e0af2f6838c4719c22558d754b8f624fd8adeaab9210d93dff58f27701dd5ae50bc00f053b8d715310318e7cf9202db41e188c4d2d897bf4707548c8ba4e686ac9daf515b6683e1ecc0c26ad496c49ee0ea9fec0473ebfa184dc33bf4be6feed6b07aca8c2a1aefe602d5e765111635631f471a37ceeabdb9647d3ebbfde155c251a35ab90cd68050ea2195da8ee80fa97182217d5c23cc238b3279eed5df5996fff6d81ddb36db86db6d573ef486a45ea675c507fb8a4362614a9c3055f2ae69c2a78d323ed94db181b0c66ce4e9133e20fbef72b73cfa9272df23e801579907c8a89b70d3d6f2b503da5d50658a66a0b2b8f3b9b99e5ca55d9f1cd2c270f0aec8429dc4fd6ca93df5fc5adbdcad6f15941c725d462dfd2c9f594aa104b9c35922ddcf599936ee24fe0040ab01199d97344940f67348e06f4b250ed162bae9b0f5043893c5736eaa67ab2fd4623db76836cb98a1b732e6dbb3e960e5bc70cd9f621c126872495552873d871184fa19086decf8d95ae22f940caf9b61cd60652f68333524f810b7205e98c00962eecd46e541bbd7051acabdcfb5557b21b018cfb34d760519cbdd080ca032860f4d5aedc8430be9d97c90a8572fe330168a4a2eff758e88ddd8388e0497a24389396a4816813f8874664b8714d21b054927b97c2ad9797c25440d87fd3ed13f3f73e75ca243f7850662769596789b4c4420a3e11686618057e994cc73129f7dd8e74fd7612bb88b5400019c83", 0x1000}}, 0x1006) creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6ffffffff00009e63bdbcefbde78439753abd950100002a001200ff0000000000000000000000000000000000000000000000000000bc00", "b7326736181c208220000000b9000000000000000000f0fffffffff2120100", [0x4, 0x5]}) fadvise64(r0, 0x14, 0x0, 0x4) 16.355644102s ago: executing program 5 (id=7183): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000040), &(0x7f00000000c0)=r2}, 0x20) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)=ANY=[@ANYBLOB='@ \x00\x00', @ANYRES16=r3, @ANYBLOB="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"], 0x2040}}, 0x0) 16.051586937s ago: executing program 5 (id=7191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 16.046191837s ago: executing program 39 (id=7191): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 1.092342814s ago: executing program 4 (id=7625): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x1, r0, 0x0, 0x1000009, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 1.059865777s ago: executing program 1 (id=7626): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 997.472581ms ago: executing program 0 (id=7629): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) io_submit(0x0, 0x0, &(0x7f0000000100)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x4000, 0x1}]}}}}}}}, 0x0) 997.060412ms ago: executing program 4 (id=7630): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='xen_cpu_write_gdt_entry\x00', r0, 0x0, 0x7ffc}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x8000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8, 0x20, 0x8, 0xb4f, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast1, @private=0xa010100}}}}) write(r4, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x80000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="bfb1d970a3bc07579a9ea082bb77de1ea9702612fe5303120dde5ef9f02401101c4c10e280fe0cbc916fb4a94728d94d032a2e0418fd16b18d018893fe75a477a13dfa15cbd3428d699ace55eb975e200ab990fab287683c63280508ed451febeebc66f69c23cb0e6ad23cb6e3e37e875122ad1b78cc330dd0a9161ca1b17ce71f0843d74ee8a58d486393ca21980b7d536e6944ab51bb83c573fa90e578baa7d93ce84d392158ca4707d103630110356400eb18472be1241b1c05504e9c1c73471336fdb2afeb6d4868c9ae3873d3fecfd3bcd4af", 0xd5}, {&(0x7f0000000900)="a3a15dfc6d130314236b133336a79b234f8f1dd6b8920550b5fd18d560f1dc50439cce891046c8b2f0032286576b7fbffcce7ea521ad132d331d3b3fc5475c8930b9b6135029f15ef51743d5d247fd2e6d0f265367f4464bc6f46be14d4af6b9936d69bf4b0f56072f5486bf05f62ac17e63dcf2a1fa662206ee1152ce1fd2ec9860e3eedcfa79a17685bfaf65a31c033e4434243673ea726da637c29f6a46f574ab83c06f397159952f53e6ea284c213dafc2abf84309f5d419e2cfec0526c14822a5e037e658d1986985ae1f7ddf9b22c894ab84bcc683605788a3e2bd090eb58ae97b4f83648e2e9e83ff61c327fb10d55fece76e", 0xf6}], 0x2}, 0x20001) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x40000) 935.385786ms ago: executing program 0 (id=7632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@getchain={0x24, 0x66, 0x1, 0x70bd0d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xa}, {0x10, 0x2}, {0x2, 0x8}}}, 0x24}}, 0x20040084) 932.007137ms ago: executing program 1 (id=7633): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x2439, &(0x7f0000001480)={0x0, 0x1064, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r2, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {0x0}], 0x2, 0x0, 0x530}, 0x0, 0x1000}) io_uring_enter(r2, 0x47f8, 0x1e43, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000240)={[{@nombcache}, {@debug}, {@norecovery}, {@grpid}, {@nodelalloc}]}, 0x9, 0x61b, &(0x7f0000000800)="$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") 813.254526ms ago: executing program 0 (id=7639): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 761.72531ms ago: executing program 2 (id=7641): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000009000000000000000200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000014b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000380)={0xa, 0x0, 0x7ff, @empty, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303, 0x39}, "4506000000927650", "0bf70000000000000000061000000001", '\x00', "ba0200"}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000000c0)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) 656.475908ms ago: executing program 2 (id=7642): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) write$tun(r0, &(0x7f0000000440)={@void, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0x28, 0x68, 0x0, 0x9, 0x4, 0x0, @rand_addr=0x64010100, @broadcast}, "e8a6647b41d5d17c8224497e20aeaf10ffb6df27"}}}}}, 0x3e) 607.649122ms ago: executing program 1 (id=7643): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x0, 0x7ffc0001}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x0, 0x0, 0x3, 0x9, 0xa, 0x20, 0x5}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file2\x00', 0x0, &(0x7f0000000b00)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@dax_always}, {@grpjquota_path={'grpjquota', 0x3d, './file2'}}]}, 0x3, 0x546, &(0x7f0000000180)="$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") syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000001380)=@raw={'raw\x00', 0x4001, 0x3, 0x320, 0x0, 0x0, 0x148, 0x0, 0x148, 0x288, 0x240, 0x240, 0x288, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x7fff, 0x1ff, 0x100000, 0x0, 0xed, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0x80000000, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x29, 0x1e, 0x29], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e24, 0x4e21], [0x4e23, 0x4e20], 0x2, 0xc2, 0x2, 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) ioctl$MON_IOCH_MFLUSH(r1, 0x9208, 0x51cf) 607.271042ms ago: executing program 1 (id=7644): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='smaps\x00') preadv(r1, &(0x7f0000000600)=[{&(0x7f00000036c0)=""/4092, 0xffc}], 0x1, 0x515e, 0xfffffffc) 578.230984ms ago: executing program 9 (id=7645): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000002040), 0xc2001, 0x0) ioctl$SNAPSHOT_FREE(r2, 0x3305) 557.964716ms ago: executing program 2 (id=7646): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x4403, &(0x7f0000000280)={[{@nobh}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@resgid}, {@debug}, {@norecovery}]}, 0x2, 0x484, &(0x7f0000001500)="$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") 500.34743ms ago: executing program 0 (id=7647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x7d93, &(0x7f0000000380)={0x0, 0xffd5, 0x800, 0x82, 0x255}, &(0x7f0000000200)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000100)=0x1, 0x0, 0x4) r4 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r4, 0x0, 0x0, 0x9000) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, r4, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r1, 0x5fdd, 0x217, 0xa5, 0x0, 0x0) 439.843405ms ago: executing program 0 (id=7648): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xffa8) 301.896936ms ago: executing program 9 (id=7649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) write$tun(r0, &(0x7f0000002300)=ANY=[], 0xfdef) 286.062987ms ago: executing program 0 (id=7650): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a242) poll(0x0, 0x0, 0x101) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x0, 0x0, 0x11, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8) close_range(r0, 0xffffffffffffffff, 0x0) 173.184926ms ago: executing program 4 (id=7651): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffff000000000000100000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x101}, 0x18) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) 111.309251ms ago: executing program 9 (id=7652): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xffffffff, @loopback, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000340)=@ccm_128={{0x304}, "49c2ace48cb54d80", "e0e6d4a271e30000596600", '\x00', "c962b0c0b5d958c9"}, 0x28) 110.713951ms ago: executing program 2 (id=7653): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x900, 0x0) 110.418691ms ago: executing program 1 (id=7654): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x34, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 110.202201ms ago: executing program 4 (id=7655): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x4801) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r1) 109.923621ms ago: executing program 2 (id=7656): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0xf) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0xc, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r3 = syz_open_pts(r2, 0x141601) write(r3, &(0x7f0000000000)="d5", 0xfffffedf) close_range(r1, 0xffffffffffffffff, 0x0) 51.825435ms ago: executing program 9 (id=7657): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0x10017, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 51.568845ms ago: executing program 4 (id=7658): request_key(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x9) 51.356465ms ago: executing program 1 (id=7659): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) 50.509936ms ago: executing program 9 (id=7660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24048855}, 0x2008c010) 37.415347ms ago: executing program 4 (id=7661): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='xen_cpu_write_gdt_entry\x00', r0, 0x0, 0x7ffc}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}, 0x8000000}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x8, 0x20, 0x8, 0xb4f, {{0x5, 0x4, 0x2, 0x4, 0x14, 0x65, 0x0, 0x0, 0x4, 0x0, @multicast1, @private=0xa010100}}}}) write(r4, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x80000000}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000800)="bfb1d970a3bc07579a9ea082bb77de1ea9702612fe5303120dde5ef9f02401101c4c10e280fe0cbc916fb4a94728d94d032a2e0418fd16b18d018893fe75a477a13dfa15cbd3428d699ace55eb975e200ab990fab287683c63280508ed451febeebc66f69c23cb0e6ad23cb6e3e37e875122ad1b78cc330dd0a9161ca1b17ce71f0843d74ee8a58d486393ca21980b7d536e6944ab51bb83c573fa90e578baa7d93ce84d392158ca4707d103630110356400eb18472be1241b1c05504e9c1c73471336fdb2afeb6d4868c9ae3873d3fecfd3bcd4af", 0xd5}, {&(0x7f0000000900)="a3a15dfc6d130314236b133336a79b234f8f1dd6b8920550b5fd18d560f1dc50439cce891046c8b2f0032286576b7fbffcce7ea521ad132d331d3b3fc5475c8930b9b6135029f15ef51743d5d247fd2e6d0f265367f4464bc6f46be14d4af6b9936d69bf4b0f56072f5486bf05f62ac17e63dcf2a1fa662206ee1152ce1fd2ec9860e3eedcfa79a17685bfaf65a31c033e4434243673ea726da637c29f6a46f574ab83c06f397159952f53e6ea284c213dafc2abf84309f5d419e2cfec0526c14822a5e037e658d1986985ae1f7ddf9b22c894ab84bcc683605788a3e2bd090eb58ae97b4f83648e2e9e83ff61c327fb10d55fece76e", 0xf6}], 0x2}, 0x20001) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0xe8) r8 = socket$key(0xf, 0x3, 0x2) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10}}, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x40000) 24.052478ms ago: executing program 9 (id=7662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 0s ago: executing program 2 (id=7663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) bind$can_raw(r2, &(0x7f0000000080), 0x10) 0s ago: executing program 2 (id=7665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7f}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000100)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_tos_u8={{0x11, 0x0, 0x7}}], 0x18}, 0x40010) kernel console output (not intermixed with test programs): =4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.381366][ T29] audit: type=1326 audit(1765954153.218:6179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.404953][ T29] audit: type=1326 audit(1765954153.218:6180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.428498][ T29] audit: type=1326 audit(1765954153.218:6181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.429533][T19000] ext4 filesystem being mounted at /1373/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.452096][ T29] audit: type=1326 audit(1765954153.218:6182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.452126][ T29] audit: type=1326 audit(1765954153.218:6183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.509478][ T29] audit: type=1326 audit(1765954153.218:6184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.533052][ T29] audit: type=1326 audit(1765954153.218:6185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19007 comm="syz.6.6564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf1edaf749 code=0x7ffc0000 [ 231.586350][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.689778][T19024] loop3: detected capacity change from 0 to 8192 [ 231.700137][T19028] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6572'. [ 231.745333][ T29] audit: type=1400 audit(1765954153.638:6186): avc: denied { module_load } for pid=19031 comm="syz.7.6574" path="/sys/kernel/notes" dev="sysfs" ino=210 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 231.787722][ T29] audit: type=1326 audit(1765954153.680:6187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19035 comm="syz.7.6576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bf0ff749 code=0x7ffc0000 [ 231.827200][T19040] loop7: detected capacity change from 0 to 1024 [ 231.834026][T19040] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 231.927366][T19047] ALSA: seq fatal error: cannot create timer (-19) [ 231.978798][T19055] loop7: detected capacity change from 0 to 256 [ 231.987692][T19054] vhci_hcd vhci_hcd.4: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 232.015512][T19055] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.049657][T19061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.058493][T19061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.070723][T19063] loop3: detected capacity change from 0 to 512 [ 232.077737][T19063] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 232.095867][T19063] ext4 filesystem being mounted at /1381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 232.160065][T19067] SELinux: failed to load policy [ 232.205363][T19073] SELinux: ebitmap start bit (4044972160) is beyond the end of the bitmap (1472) [ 232.214680][T19073] SELinux: failed to load policy [ 232.311561][T19085] netlink: 28 bytes leftover after parsing attributes in process `syz.7.6598'. [ 232.320657][T19085] netem: change failed [ 232.455259][T19083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.463938][T19083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.560695][T19097] SELinux: failed to load policy [ 232.648019][T19116] loop6: detected capacity change from 0 to 1024 [ 232.682792][T19115] SELinux: failed to load policy [ 233.530739][ T3398] IPVS: starting estimator thread 0... [ 233.592204][T19199] sg_write: data in/out 178/8 bytes for SCSI command 0xfe-- guessing data in; [ 233.592204][T19199] program syz.1.6647 not setting count and/or reply_len properly [ 233.600831][T19176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.618460][T19187] IPVS: using max 1920 ests per chain, 96000 per kthread [ 233.625984][T19176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.659390][T19201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6648'. [ 233.737769][T19203] ALSA: seq fatal error: cannot create timer (-22) [ 233.771059][T19197] loop5: p1 p2 p3 < p5 p6 p7 > [ 233.776540][T19197] loop5: p2 size 16775168 extends beyond EOD, truncated [ 233.784921][T19197] loop5: p5 start 4294970168 is beyond EOD, truncated [ 234.152081][T19241] gretap0: entered promiscuous mode [ 234.226135][T19250] sg_write: data in/out 178/8 bytes for SCSI command 0xfe-- guessing data in; [ 234.226135][T19250] program syz.3.6670 not setting count and/or reply_len properly [ 234.291004][T19254] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 234.299600][T19254] FAT-fs (loop3): Filesystem has been set read-only [ 234.553979][T19269] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6678'. [ 234.648255][T19281] SELinux: failed to load policy [ 234.716353][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6690'. [ 234.766090][T19305] set_capacity_and_notify: 6 callbacks suppressed [ 234.766110][T19305] loop3: detected capacity change from 0 to 128 [ 234.847995][T19311] loop3: detected capacity change from 0 to 1024 [ 234.858074][T19311] ext4 filesystem being mounted at /1406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.874857][T19311] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm syz.3.6697: lblock 0 mapped to illegal pblock 0 (length 1) [ 234.889895][T19311] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 234.902251][T19311] EXT4-fs (loop3): This should not happen!! Data will be lost [ 234.902251][T19311] [ 235.014831][T19331] netlink: 'syz.3.6705': attribute type 6 has an invalid length. [ 235.022725][T19331] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6705'. [ 235.280404][T12411] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.337154][T12411] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.392595][T19359] SELinux: failed to load policy [ 235.398662][T12411] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.449839][T12411] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.521486][T19378] gre1: entered promiscuous mode [ 235.560548][T12411] bridge_slave_1: left allmulticast mode [ 235.566437][T12411] bridge_slave_1: left promiscuous mode [ 235.572326][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.581001][T12411] bridge_slave_0: left allmulticast mode [ 235.586673][T12411] bridge_slave_0: left promiscuous mode [ 235.592482][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.687237][T12411] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.696882][T12411] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.706298][T12411] .` (unregistering): Released all slaves [ 235.747919][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.755472][T12411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.773771][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.781218][T12411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.796754][T12411] veth1_macvtap: left promiscuous mode [ 235.811870][T12411] veth0_macvtap: left promiscuous mode [ 235.817906][T12411] veth1_vlan: left promiscuous mode [ 235.823809][T12411] veth0_vlan: left promiscuous mode [ 235.894812][T19403] loop5: detected capacity change from 0 to 512 [ 235.921424][T12411] team0 (unregistering): Port device team_slave_1 removed [ 235.931723][T12411] team0 (unregistering): Port device team_slave_0 removed [ 235.951614][T19403] loop5: detected capacity change from 512 to 64 [ 235.960108][T19403] FAT-fs (loop5): unable to read inode block for updating (i_pos 6688) [ 235.975657][T19362] chnl_net:caif_netlink_parms(): no params data found [ 236.003774][T17026] FAT-fs (loop5): Directory bread(block 418) failed [ 236.010665][T17026] FAT-fs (loop5): Directory bread(block 419) failed [ 236.019402][T17026] FAT-fs (loop5): Directory bread(block 420) failed [ 236.027684][T17026] FAT-fs (loop5): Directory bread(block 421) failed [ 236.037870][T17026] FAT-fs (loop5): Directory bread(block 422) failed [ 236.044627][T17026] FAT-fs (loop5): Directory bread(block 423) failed [ 236.051571][T17026] FAT-fs (loop5): Directory bread(block 424) failed [ 236.061017][T17026] FAT-fs (loop5): Directory bread(block 425) failed [ 236.093946][T17026] FAT-fs (loop5): Directory bread(block 426) failed [ 236.101471][T19362] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.108642][T19362] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.123830][T17026] FAT-fs (loop5): Directory bread(block 427) failed [ 236.141007][T19362] bridge_slave_0: entered allmulticast mode [ 236.147566][T15040] FAT-fs (loop5): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 1) [ 236.148769][T19362] bridge_slave_0: entered promiscuous mode [ 236.164934][T19362] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.164968][T19362] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.165108][T19362] bridge_slave_1: entered allmulticast mode [ 236.165762][T19362] bridge_slave_1: entered promiscuous mode [ 236.239604][T19362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.250246][T19362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.280804][T19362] team0: Port device team_slave_0 added [ 236.289770][T19362] team0: Port device team_slave_1 added [ 236.317518][T19362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.324541][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.350530][T19362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.381449][T19362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.388423][T19362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 236.403135][T19414] loop3: detected capacity change from 0 to 8192 [ 236.414436][T19362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.476740][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 236.476755][ T29] audit: type=1400 audit(1765954161.597:6370): avc: denied { open } for pid=19413 comm="syz.3.6739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 236.502270][ T29] audit: type=1400 audit(1765954161.597:6371): avc: denied { kernel } for pid=19413 comm="syz.3.6739" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 236.529061][ T29] audit: type=1400 audit(1765954161.639:6372): avc: denied { execmem } for pid=19415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 236.607296][T19362] hsr_slave_0: entered promiscuous mode [ 236.613777][T19362] hsr_slave_1: entered promiscuous mode [ 236.621462][ T29] audit: type=1400 audit(1765954161.702:6373): avc: denied { mounton } for pid=19420 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 236.643141][ T29] audit: type=1400 audit(1765954161.713:6374): avc: denied { create } for pid=19418 comm="syz.3.6740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 236.662753][ T29] audit: type=1400 audit(1765954161.723:6375): avc: denied { sys_module } for pid=19420 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 236.684172][ T29] audit: type=1400 audit(1765954161.755:6376): avc: denied { allowed } for pid=19416 comm="syz.7.6741" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 236.703619][ T29] audit: type=1400 audit(1765954161.755:6377): avc: denied { create } for pid=19416 comm="syz.7.6741" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 236.704787][T19362] debugfs: 'hsr0' already exists in 'hsr' [ 236.725076][ T29] audit: type=1400 audit(1765954161.765:6378): avc: denied { ioctl } for pid=19418 comm="syz.3.6740" path="socket:[58572]" dev="sockfs" ino=58572 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 236.730665][T19362] Cannot create hsr debugfs directory [ 236.760831][ T29] audit: type=1400 audit(1765954161.765:6379): avc: denied { write } for pid=19418 comm="syz.3.6740" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 236.812289][T12411] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.862725][T12411] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.921015][T19436] netlink: 'syz.7.6743': attribute type 6 has an invalid length. [ 236.928900][T19436] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6743'. [ 236.950926][T12411] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.986675][T19362] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 237.004294][T12411] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.017274][T19362] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 237.032915][T19362] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 237.050381][T19362] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 237.089459][T19420] chnl_net:caif_netlink_parms(): no params data found [ 237.125862][T19451] loop7: detected capacity change from 0 to 512 [ 237.135439][T12411] batadv1: left allmulticast mode [ 237.140521][T12411] batadv1: left promiscuous mode [ 237.145713][T12411] bridge0: port 3(batadv1) entered disabled state [ 237.152874][T12411] bridge_slave_1: left allmulticast mode [ 237.158527][T12411] bridge_slave_1: left promiscuous mode [ 237.164305][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.174068][T12411] bridge_slave_0: left allmulticast mode [ 237.175021][T19451] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.179810][T12411] bridge_slave_0: left promiscuous mode [ 237.179907][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.325658][T12411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.335748][T12411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.345231][T12411] bond0 (unregistering): Released all slaves [ 237.378580][T19420] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.386148][T19420] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.393822][T19420] bridge_slave_0: entered allmulticast mode [ 237.400729][T19420] bridge_slave_0: entered promiscuous mode [ 237.417760][T12411] hsr_slave_0: left promiscuous mode [ 237.424651][T19468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6751'. [ 237.438122][T12411] hsr_slave_1: left promiscuous mode [ 237.453744][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.461329][T12411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.469245][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.476672][T12411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.488199][T12411] veth1_macvtap: left promiscuous mode [ 237.493695][T12411] veth0_macvtap: left promiscuous mode [ 237.499444][T12411] veth1_vlan: left promiscuous mode [ 237.505113][T12411] veth0_vlan: left promiscuous mode [ 237.578565][T12411] team0 (unregistering): Port device team_slave_1 removed [ 237.589003][T12411] team0 (unregistering): Port device team_slave_0 removed [ 237.622700][T19420] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.629879][T19420] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.637038][T19420] bridge_slave_1: entered allmulticast mode [ 237.643623][T19420] bridge_slave_1: entered promiscuous mode [ 237.650592][T19474] tipc: Started in network mode [ 237.655527][T19474] tipc: Node identity ac14140f, cluster identity 4711 [ 237.662619][T19474] tipc: New replicast peer: 255.255.255.255 [ 237.668830][T19474] tipc: Enabled bearer , priority 10 [ 237.675065][T19475] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6754'. [ 237.684083][T19475] tipc: Disabling bearer [ 237.707334][T19420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.719212][T19420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.744752][T19420] team0: Port device team_slave_0 added [ 237.754863][T19420] team0: Port device team_slave_1 added [ 237.771831][T19420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.778767][T19420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.804801][T19420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.816186][T19420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.823158][T19420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 237.849077][T19420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.872143][T19362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.890707][T19420] hsr_slave_0: entered promiscuous mode [ 237.897213][T19420] hsr_slave_1: entered promiscuous mode [ 237.903080][T19420] debugfs: 'hsr0' already exists in 'hsr' [ 237.908837][T19420] Cannot create hsr debugfs directory [ 237.921278][T19362] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.941086][T15088] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.948285][T15088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.981070][T15093] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.988152][T15093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.017972][T19362] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 238.028407][T19362] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.050976][T12411] IPVS: stop unused estimator thread 0... [ 238.081127][ T3518] hid_parser_main: 76 callbacks suppressed [ 238.081149][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.094734][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.102205][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.109824][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.117416][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.124837][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.132235][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.139661][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.147125][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.154562][ T3518] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 238.163223][ T3518] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 238.211787][T19500] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6763'. [ 238.231018][T19362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.425153][T19362] veth0_vlan: entered promiscuous mode [ 238.432172][T19420] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.443773][T19362] veth1_vlan: entered promiscuous mode [ 238.450265][T19420] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 238.461559][T19420] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 238.470545][T19420] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.493013][T19362] veth0_macvtap: entered promiscuous mode [ 238.501606][T19362] veth1_macvtap: entered promiscuous mode [ 238.519539][T19362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.536128][T19362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.549742][T12411] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.558838][T12411] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.568918][T12411] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.579578][T12411] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.594827][T19420] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.612587][T19420] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.622297][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.629384][T15040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.641461][T15076] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.648542][T15076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.756866][T19420] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.936441][T19420] veth0_vlan: entered promiscuous mode [ 238.945378][T19420] veth1_vlan: entered promiscuous mode [ 238.969476][T19420] veth0_macvtap: entered promiscuous mode [ 238.982962][T19420] veth1_macvtap: entered promiscuous mode [ 239.003691][T19420] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.016711][T19420] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.045214][T12411] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.061284][T12411] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.078651][ T3519] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 239.095780][T12411] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.109902][T12411] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.150331][T19607] netlink: 96 bytes leftover after parsing attributes in process `syz.8.6795'. [ 239.232542][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6801'. [ 239.262210][T19623] netlink: 'syz.8.6812': attribute type 1 has an invalid length. [ 239.349086][T19635] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6808'. [ 239.380267][T19639] loop3: detected capacity change from 0 to 512 [ 239.387267][T19639] EXT4-fs: Ignoring removed bh option [ 239.394091][T19639] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 239.408589][T19639] EXT4-fs (loop3): 1 truncate cleaned up [ 239.425416][T19639] EXT4-fs (loop3): shut down requested (0) [ 239.446001][T19639] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 239.465756][T19639] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 239.707868][T19672] loop3: detected capacity change from 0 to 512 [ 239.725880][T19672] ext4 filesystem being mounted at /1451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.983497][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6836'. [ 239.994672][T19701] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6836'. [ 239.994709][T15076] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.012565][T15076] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.021779][T15076] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.038101][T15076] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.052891][T19704] netlink: 'syz.7.6838': attribute type 1 has an invalid length. [ 240.055725][T19706] loop3: detected capacity change from 0 to 512 [ 240.079847][T19706] ext4 filesystem being mounted at /1457/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.165584][T19720] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6842'. [ 240.426552][T19746] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 240.433203][T19746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 240.440787][T19746] vhci_hcd vhci_hcd.0: Device attached [ 240.471001][T19753] loop8: detected capacity change from 0 to 512 [ 240.496339][T19747] vhci_hcd: cannot find the pending unlink 1023 [ 240.505724][T19747] vhci_hcd: connection closed [ 240.506049][T12411] vhci_hcd vhci_hcd.7: stop threads [ 240.516016][T12411] vhci_hcd vhci_hcd.7: release socket [ 240.521412][T12411] vhci_hcd vhci_hcd.7: disconnect device [ 240.535920][T19753] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.550592][T19761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6853'. [ 240.630821][T19770] loop8: detected capacity change from 0 to 1024 [ 240.637610][T19770] EXT4-fs: Ignoring removed bh option [ 240.738035][T19787] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 240.821989][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6866'. [ 240.873606][T19805] $H: renamed from bond0 (while UP) [ 240.881542][T19805] $H: entered promiscuous mode [ 240.886725][T19805] bond_slave_0: entered promiscuous mode [ 240.892429][T19805] bond_slave_1: entered promiscuous mode [ 241.005988][T19815] sd 0:0:1:0: device reset [ 241.291009][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 241.291025][ T29] audit: type=1400 audit(1765954166.657:6538): avc: denied { write } for pid=19824 comm="syz.8.6877" name="ptype" dev="proc" ino=4026532781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 241.391310][T19829] loop8: detected capacity change from 0 to 1024 [ 241.411327][T19829] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.424263][T19829] EXT4-fs error (device loop8): ext4_map_blocks:825: inode #15: block 3: comm syz.8.6879: lblock 3 mapped to illegal pblock 3 (length 3) [ 241.438651][T19829] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 241.450981][T19829] EXT4-fs (loop8): This should not happen!! Data will be lost [ 241.450981][T19829] [ 241.461402][ T29] audit: type=1400 audit(1765954166.836:6539): avc: denied { ioctl } for pid=19828 comm="syz.8.6879" path="/26/file1/file1" dev="loop8" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 241.461567][T19829] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.6879: Freeing blocks not in datazone - block = 3, count = 3 [ 241.500352][T19829] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.6879: Freeing blocks not in datazone - block = 0, count = 16 [ 241.525539][T12411] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:16: bg 0: block 112: padding at end of block bitmap is not set [ 241.540472][T12411] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 117 [ 241.553198][T12411] EXT4-fs (loop8): This should not happen!! Data will be lost [ 241.553198][T12411] [ 241.834779][ T29] audit: type=1400 audit(1765954167.214:6540): avc: denied { setcurrent } for pid=19832 comm="syz.3.6883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 241.854524][ T29] audit: type=1401 audit(1765954167.214:6541): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 241.876945][T19837] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6881'. [ 241.888965][T19841] loop5: detected capacity change from 0 to 512 [ 241.921368][T19841] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.046927][ T29] audit: type=1400 audit(1765954167.444:6542): avc: denied { read write } for pid=19855 comm="syz.8.6890" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 242.070649][ T29] audit: type=1400 audit(1765954167.444:6543): avc: denied { ioctl open } for pid=19855 comm="syz.8.6890" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 242.096050][T19856] random: crng reseeded on system resumption [ 242.202492][ T29] audit: type=1400 audit(1765954167.591:6544): avc: denied { read } for pid=19864 comm="syz.8.6893" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.226875][ T29] audit: type=1400 audit(1765954167.591:6545): avc: denied { open } for pid=19864 comm="syz.8.6893" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.251740][ T29] audit: type=1400 audit(1765954167.591:6546): avc: denied { ioctl } for pid=19864 comm="syz.8.6893" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 242.277926][ T29] audit: type=1400 audit(1765954167.612:6547): avc: denied { read } for pid=19866 comm="syz.1.6894" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 242.352519][T19873] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 242.399034][T19873] batman_adv: batadv0: Adding interface: ip6gretap1 [ 242.405795][T19873] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.462194][T19873] batman_adv: batadv0: Interface activated: ip6gretap1 [ 242.521089][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6897'. [ 242.575360][T12411] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.584424][T12411] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.597950][T12411] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.623739][T12411] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 243.033739][T19918] loop7: detected capacity change from 0 to 1024 [ 243.101639][T19918] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.150480][T19918] EXT4-fs error (device loop7): ext4_map_blocks:825: inode #15: block 3: comm syz.7.6916: lblock 3 mapped to illegal pblock 3 (length 3) [ 243.166429][T19918] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 243.178734][T19918] EXT4-fs (loop7): This should not happen!! Data will be lost [ 243.178734][T19918] [ 243.191122][T19918] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.6916: Freeing blocks not in datazone - block = 3, count = 3 [ 243.204564][T19918] EXT4-fs error (device loop7): ext4_free_blocks:6728: comm syz.7.6916: Freeing blocks not in datazone - block = 0, count = 16 [ 243.237817][T15040] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:23: bg 0: block 112: padding at end of block bitmap is not set [ 243.252807][T15040] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 117 [ 243.265433][T15040] EXT4-fs (loop7): This should not happen!! Data will be lost [ 243.265433][T15040] [ 243.272595][T19933] SELinux: failed to load policy [ 243.352095][T19946] serio: Serial port ptm0 [ 243.497301][T19948] loop5: detected capacity change from 0 to 32768 [ 243.526006][T19948] loop5: p1 p3 < p5 p6 > [ 243.530390][T19948] loop5: partition table partially beyond EOD, truncated [ 243.780129][T12411] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.790526][T12411] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.823920][T12411] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.834477][T12411] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.891741][T12411] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.902094][T12411] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.938250][T12411] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.948643][T12411] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.056736][T12411] bridge_slave_1: left allmulticast mode [ 244.062590][T12411] bridge_slave_1: left promiscuous mode [ 244.068357][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.082432][T12411] bridge_slave_0: left allmulticast mode [ 244.088148][T12411] bridge_slave_0: left promiscuous mode [ 244.093894][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.104853][T12411] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 244.149859][T12411] batman_adv: batadv0: Removing interface: ip6gretap1 [ 244.212785][T12411] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.223568][T12411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.233369][T12411] bond0 (unregistering): Released all slaves [ 244.272137][T20007] chnl_net:caif_netlink_parms(): no params data found [ 244.289845][T12411] tipc: Left network mode [ 244.302922][T12411] hsr_slave_0: left promiscuous mode [ 244.324904][T12411] hsr_slave_1: left promiscuous mode [ 244.335724][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.343133][T12411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.353643][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.361067][T12411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.375572][T12411] veth1_macvtap: left promiscuous mode [ 244.381287][T12411] veth0_macvtap: left promiscuous mode [ 244.386947][T12411] veth1_vlan: left promiscuous mode [ 244.392281][T12411] veth0_vlan: left promiscuous mode [ 244.392601][T20056] __nla_validate_parse: 5 callbacks suppressed [ 244.392657][T20056] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6972'. [ 244.500748][T20061] loop5: detected capacity change from 0 to 512 [ 244.527461][T20061] EXT4-fs: quotafile must be on filesystem root [ 244.534893][T12411] team0 (unregistering): Port device team_slave_1 removed [ 244.545628][T12411] team0 (unregistering): Port device team_slave_0 removed [ 244.564448][T20065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.592329][T20065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.612255][T15694] bond0: (slave syz_tun): Releasing backup interface [ 244.640915][T20007] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.647970][T20007] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.655098][T20007] bridge_slave_0: entered allmulticast mode [ 244.664297][T20007] bridge_slave_0: entered promiscuous mode [ 244.671943][T20007] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.679108][T20007] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.686294][T20007] bridge_slave_1: entered allmulticast mode [ 244.693044][T20007] bridge_slave_1: entered promiscuous mode [ 244.717214][T20007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.728407][T20007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.757386][T20007] team0: Port device team_slave_0 added [ 244.765734][T20007] team0: Port device team_slave_1 added [ 244.787240][T20007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.794342][T20007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.820366][T20007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.831729][T20007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.838676][T20007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.864689][T20007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.895487][T20007] hsr_slave_0: entered promiscuous mode [ 244.901668][T20007] hsr_slave_1: entered promiscuous mode [ 244.907700][T20007] debugfs: 'hsr0' already exists in 'hsr' [ 244.913422][T20007] Cannot create hsr debugfs directory [ 245.034849][T20007] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 245.043815][T20007] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 245.056542][T20007] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 245.065458][T20074] chnl_net:caif_netlink_parms(): no params data found [ 245.074679][T20007] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 245.123993][T20074] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.131175][T20074] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.138541][T20074] bridge_slave_0: entered allmulticast mode [ 245.145209][T20074] bridge_slave_0: entered promiscuous mode [ 245.152370][T20074] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.159498][T20074] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.166789][T20074] bridge_slave_1: entered allmulticast mode [ 245.173297][T20074] bridge_slave_1: entered promiscuous mode [ 245.180323][T20007] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.187632][T20007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.194946][T20007] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.202011][T20007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.217688][T15088] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.226231][T15088] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.254898][T20074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.271261][T20074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.294153][T20074] team0: Port device team_slave_0 added [ 245.303108][T20074] team0: Port device team_slave_1 added [ 245.323639][T20074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.330718][T20074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.356804][T20074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.378334][T20074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.385427][T20074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.411680][T20074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.463518][T20007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.473528][T20074] hsr_slave_0: entered promiscuous mode [ 245.480233][T20108] loop9: detected capacity change from 0 to 7 [ 245.480474][T20074] hsr_slave_1: entered promiscuous mode [ 245.486560][T20108] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.492556][T20074] debugfs: 'hsr0' already exists in 'hsr' [ 245.500119][T20108] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.505557][T20074] Cannot create hsr debugfs directory [ 245.513429][T20108] loop9: unable to read partition table [ 245.526565][T20108] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 245.526565][T20108] ) failed (rc=-5) [ 245.552618][T20007] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.579854][T15098] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.587043][T15098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.603471][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.610582][T15098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.741459][T20007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.906026][T20007] veth0_vlan: entered promiscuous mode [ 245.925772][T20007] veth1_vlan: entered promiscuous mode [ 245.934099][T20074] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.950846][T20074] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.961585][T20007] veth0_macvtap: entered promiscuous mode [ 245.973370][T20074] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.984976][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6993'. [ 245.988425][T20074] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.994149][T20140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6993'. [ 246.018451][T20007] veth1_macvtap: entered promiscuous mode [ 246.039069][T20007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.057775][T20007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.066867][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 246.066881][ T29] audit: type=1400 audit(1765954171.665:6621): avc: denied { setopt } for pid=20149 comm="syz.1.6996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 246.105465][T20152] netlink: 'syz.8.6997': attribute type 1 has an invalid length. [ 246.108263][T12411] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.122607][T12411] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.168264][T12411] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.192783][T20074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.195577][T20160] xt_connbytes: Forcing CT accounting to be enabled [ 246.200258][ T29] audit: type=1400 audit(1765954171.801:6622): avc: denied { create } for pid=20158 comm="syz.1.7000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.219670][T20160] set match dimension is over the limit! [ 246.225840][ T29] audit: type=1400 audit(1765954171.801:6623): avc: denied { bind } for pid=20158 comm="syz.1.7000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 246.240043][T20162] loop8: detected capacity change from 0 to 2048 [ 246.259046][T12411] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.275434][T20074] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.289967][T12411] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.297073][T12411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.317182][T20162] EXT4-fs mount: 24 callbacks suppressed [ 246.317197][T20162] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.338775][T12416] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.345884][T12416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.359687][ T29] audit: type=1400 audit(1765954171.980:6624): avc: denied { read write open } for pid=20161 comm="syz.8.7001" path="/56/file1/bus" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 246.424792][ T29] audit: type=1400 audit(1765954172.032:6625): avc: denied { watch_reads } for pid=20169 comm="syz.1.7003" path="/1402" dev="tmpfs" ino=7211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 246.445195][T20174] serio: Serial port ttyS3 [ 246.491376][T20074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.609024][ T29] audit: type=1400 audit(1765954172.232:6626): avc: denied { read } for pid=20198 comm="syz.9.7010" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.632054][ T29] audit: type=1400 audit(1765954172.232:6627): avc: denied { open } for pid=20198 comm="syz.9.7010" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.655821][ T29] audit: type=1400 audit(1765954172.232:6628): avc: denied { ioctl } for pid=20198 comm="syz.9.7010" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 246.658086][T19362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.693345][T20074] veth0_vlan: entered promiscuous mode [ 246.707520][T20074] veth1_vlan: entered promiscuous mode [ 246.727242][T20074] veth0_macvtap: entered promiscuous mode [ 246.738364][T20074] veth1_macvtap: entered promiscuous mode [ 246.758050][T20074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.775781][T20074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.793855][T15098] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.808123][T20207] netlink: 72 bytes leftover after parsing attributes in process `syz.8.7014'. [ 246.819484][T15098] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.838629][T15098] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.847345][T20213] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7018'. [ 246.856562][T20213] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7018'. [ 246.872325][T15098] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.882931][T20215] loop5: detected capacity change from 0 to 1024 [ 246.913313][T20215] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.948150][T20223] loop9: detected capacity change from 0 to 128 [ 246.948850][T19420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.965404][T20223] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 246.977637][T20222] loop8: detected capacity change from 0 to 2048 [ 246.984318][ T29] audit: type=1400 audit(1765954172.631:6629): avc: denied { create } for pid=20225 comm="syz.0.7021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.004088][ T29] audit: type=1400 audit(1765954172.631:6630): avc: denied { connect } for pid=20225 comm="syz.0.7021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 247.024525][T20223] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.054919][T12416] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 247.086550][T20222] loop8: p2 p3 p7 [ 247.184907][T20239] loop8: detected capacity change from 0 to 512 [ 247.213109][T20239] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.230762][T20239] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 247.263173][T20232] usb usb8: usbfs: process 20232 (syz.9.7024) did not claim interface 0 before use [ 247.299527][T19362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.320293][ T5102] hid_parser_main: 54 callbacks suppressed [ 247.320367][ T5102] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 247.334520][ T5102] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 247.365732][T20252] serio: Serial port ttyS3 [ 247.378000][T20256] loop5: detected capacity change from 0 to 512 [ 247.404309][T20256] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.428170][T20256] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.461529][T20256] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.7034: corrupted xattr block 6: invalid header [ 247.482051][T20267] loop8: detected capacity change from 0 to 1024 [ 247.491995][T20256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 247.494566][T20267] EXT4-fs: inline encryption not supported [ 247.506884][T20267] EXT4-fs: Ignoring removed orlov option [ 247.512995][T20256] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.7034: corrupted xattr block 6: invalid header [ 247.526310][T20267] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 247.526613][T20256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 247.546015][T20256] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.7034: corrupted xattr block 6: invalid header [ 247.560373][T20256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 247.573644][T20256] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.7034: corrupted xattr block 6: invalid header [ 247.587121][T20256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 247.596547][T20267] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 247.596622][T20256] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.7034: corrupted xattr block 6: invalid header [ 247.596825][T20256] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=12 [ 247.618004][T20267] System zones: 0-1, 3-12 [ 247.618751][T20267] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.630368][T20256] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #12: comm syz.5.7034: corrupted xattr block 6: invalid header [ 247.688670][T19362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.689960][T19420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.739967][T20283] loop8: detected capacity change from 0 to 512 [ 247.751058][T20283] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.7044: inode has both inline data and extents flags [ 247.773294][T20283] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.7044: couldn't read orphan inode 15 (err -117) [ 247.786427][T20283] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.841439][T20283] bio_check_eod: 22 callbacks suppressed [ 247.841459][T20283] syz.8.7044: attempt to access beyond end of device [ 247.841459][T20283] loop8: rw=8390659, sector=74, nr_sectors = 2 limit=64 [ 247.861151][T20283] EXT4-fs (loop8): discard request in group:0 block:36 count:1 failed with -5 [ 247.871101][T20283] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: IO failure [ 247.896175][T19362] EXT4-fs warning (device loop8): htree_dirblock_to_tree:1051: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 247.926265][T20295] serio: Serial port ttyS3 [ 247.941708][T20299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7052'. [ 247.953242][T19362] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.009374][T20309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7056'. [ 248.018554][T20309] tc_dump_action: action bad kind [ 248.033329][T20309] netlink: 'syz.1.7056': attribute type 27 has an invalid length. [ 248.042901][T20309] gre1: left promiscuous mode [ 248.104245][T20322] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 248.135392][T20322] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.151715][T20329] EXT4-fs: Ignoring removed bh option [ 248.159164][T20329] EXT4-fs: inline encryption not supported [ 248.173655][T20329] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 248.202551][T20329] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854e018, mo2=0000] [ 248.210731][T20329] System zones: 0-1, 3-12 [ 248.221632][T20329] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #3: block 1: comm syz.5.7065: lblock 1 mapped to illegal pblock 1 (length 1) [ 248.240082][T20329] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.7065: Failed to acquire dquot type 0 [ 248.253889][T20074] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 248.266649][T20329] EXT4-fs error (device loop5): ext4_free_blocks:6728: comm syz.5.7065: Freeing blocks not in datazone - block = 0, count = 4096 [ 248.290341][T20329] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.7065: Invalid inode bitmap blk 0 in block_group 0 [ 248.311330][ T290] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 248.334469][T20329] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 248.343198][ T290] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 248.385767][T20329] EXT4-fs (loop5): 1 orphan inode deleted [ 248.395951][T20329] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.422540][ T290] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 248.447649][T20346] loop0: p2 p3 p7 [ 248.466370][ T290] EXT4-fs error (device loop5): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 0 [ 248.499985][T20329] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 248.547831][T19420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.591839][T20335] chnl_net:caif_netlink_parms(): no params data found [ 248.670381][T20335] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.673088][ C0] vcan0: j1939_tp_rxtimer: 0xffff888125411800: rx timeout, send abort [ 248.677512][T20335] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.685946][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888125411800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 248.693642][T20335] bridge_slave_0: entered allmulticast mode [ 248.714916][T20335] bridge_slave_0: entered promiscuous mode [ 248.898953][T20335] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.906062][T20335] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.920545][T20335] bridge_slave_1: entered allmulticast mode [ 248.927467][T20335] bridge_slave_1: entered promiscuous mode [ 248.947762][T20379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7084'. [ 248.963195][T20335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.976782][T20378] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 248.988533][T20335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.998235][T20378] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 249.034479][T20378] EXT4-fs error (device loop5): ext4_map_blocks:825: inode #15: block 3: comm syz.5.7083: lblock 3 mapped to illegal pblock 3 (length 1) [ 249.049912][T20378] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 249.062375][T20378] EXT4-fs (loop5): This should not happen!! Data will be lost [ 249.062375][T20378] [ 249.080298][T20335] team0: Port device team_slave_0 added [ 249.086907][T20335] team0: Port device team_slave_1 added [ 249.106286][T19420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 249.116286][T20335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.123297][T20335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.149252][T20335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.160573][T20335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.167641][T20335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.193635][T20335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.234173][T20335] hsr_slave_0: entered promiscuous mode [ 249.241502][T20335] hsr_slave_1: entered promiscuous mode [ 249.249153][T20335] debugfs: 'hsr0' already exists in 'hsr' [ 249.254941][T20335] Cannot create hsr debugfs directory [ 249.287856][T20401] sd 0:0:1:0: device reset [ 249.325931][T20408] set_capacity_and_notify: 5 callbacks suppressed [ 249.325953][T20408] loop9: detected capacity change from 0 to 512 [ 249.349380][T20408] EXT4-fs: Ignoring removed i_version option [ 249.356081][T20408] EXT4-fs: Ignoring removed bh option [ 249.365857][T20335] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.385858][T20408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 249.413591][T20335] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.426354][T20408] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 249.461290][T20335] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.484341][T20007] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.517489][T20335] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.526177][T20429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7104'. [ 249.556733][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7105'. [ 249.588012][T20335] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.597538][T20335] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.622417][T20335] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.635907][T20335] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.705292][T20335] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.727046][T20335] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.737852][T12416] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.744949][T12416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.758222][T15088] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.765304][T15088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.885402][T20335] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.898021][T20475] netlink: 296 bytes leftover after parsing attributes in process `syz.5.7121'. [ 249.910266][T20479] loop0: detected capacity change from 0 to 128 [ 250.023978][T20335] veth0_vlan: entered promiscuous mode [ 250.033810][T20335] veth1_vlan: entered promiscuous mode [ 250.043504][T20490] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 250.071894][T20490] SELinux: failed to load policy [ 250.077059][T20335] veth0_macvtap: entered promiscuous mode [ 250.087423][T20335] veth1_macvtap: entered promiscuous mode [ 250.115757][T20335] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.139832][T20335] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.143150][T20498] loop5: detected capacity change from 0 to 2048 [ 250.160428][T15088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.176364][T20498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.191859][T15088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.203850][T15088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.221518][T15088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.299927][T20479] syz.0.7123: attempt to access beyond end of device [ 250.299927][T20479] loop0: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 250.319315][T20479] syz.0.7123: attempt to access beyond end of device [ 250.319315][T20479] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 250.333271][T20479] syz.0.7123: attempt to access beyond end of device [ 250.333271][T20479] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 250.347891][T20513] syzkaller0: entered promiscuous mode [ 250.353481][T20513] syzkaller0: entered allmulticast mode [ 250.360423][T20479] syz.0.7123: attempt to access beyond end of device [ 250.360423][T20479] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 250.386313][T20479] syz.0.7123: attempt to access beyond end of device [ 250.386313][T20479] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 250.400107][T20479] syz.0.7123: attempt to access beyond end of device [ 250.400107][T20479] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 250.413920][T20479] syz.0.7123: attempt to access beyond end of device [ 250.413920][T20479] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 250.428136][T20479] syz.0.7123: attempt to access beyond end of device [ 250.428136][T20479] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 250.441936][T20479] syz.0.7123: attempt to access beyond end of device [ 250.441936][T20479] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 250.458111][T19420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.496627][ T3518] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 250.505727][ T3518] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 250.540830][T20521] loop9: detected capacity change from 0 to 512 [ 250.557448][T20521] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.570554][T20521] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.601061][T20007] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.624514][T20534] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7140'. [ 250.633854][T20534] netlink: 9 bytes leftover after parsing attributes in process `syz.9.7140'. [ 250.687431][T20536] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.694634][T20536] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.737906][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.747936][T20536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.788279][ T290] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.798521][ T290] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.816942][ T290] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.833866][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 250.833889][ T29] audit: type=1400 audit(1765954176.672:6810): avc: denied { name_bind } for pid=20542 comm="syz.5.7144" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 250.835380][ T290] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.840158][ T29] audit: type=1400 audit(1765954176.672:6811): avc: denied { node_bind } for pid=20542 comm="syz.5.7144" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 250.894154][T20545] rdma_op ffff88810cb24980 conn xmit_rdma 0000000000000000 [ 250.894272][ T29] audit: type=1400 audit(1765954176.735:6812): avc: denied { bind } for pid=20544 comm="syz.9.7145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.920968][ T29] audit: type=1400 audit(1765954176.735:6813): avc: denied { write } for pid=20544 comm="syz.9.7145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 250.974472][ T29] audit: type=1400 audit(1765954176.830:6814): avc: denied { sqpoll } for pid=20550 comm="syz.9.7148" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 251.020699][T20549] SELinux: failed to load policy [ 251.026607][ T3425] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 251.034510][ T3425] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.046588][ T29] audit: type=1400 audit(1765954176.903:6815): avc: denied { lock } for pid=20555 comm="syz.5.7150" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=64451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 251.091076][ T29] audit: type=1400 audit(1765954176.945:6816): avc: denied { execmem } for pid=20557 comm="syz.9.7151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 251.139329][ T29] audit: type=1400 audit(1765954176.998:6817): avc: denied { read } for pid=20563 comm="syz.1.7154" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.163726][ T29] audit: type=1400 audit(1765954176.998:6818): avc: denied { open } for pid=20563 comm="syz.1.7154" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.187584][ T29] audit: type=1400 audit(1765954176.998:6819): avc: denied { ioctl } for pid=20563 comm="syz.1.7154" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 251.325348][T20558] loop9: detected capacity change from 0 to 1024 [ 251.337518][T20558] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.351396][T20558] EXT4-fs error (device loop9): ext4_validate_block_bitmap:432: comm syz.9.7151: bg 0: block 260: invalid block bitmap [ 251.364337][T20558] EXT4-fs error (device loop9): ext4_free_inode:354: comm syz.9.7151: bit already cleared for inode 15 [ 251.425746][T20581] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7159'. [ 251.441134][T20581] netlink: 9 bytes leftover after parsing attributes in process `syz.0.7159'. [ 251.456856][T20007] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.556809][T20589] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7173'. [ 251.558811][ T5372] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 251.573725][T20589] netlink: 9 bytes leftover after parsing attributes in process `syz.5.7173'. [ 251.584928][ T5372] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 251.619435][T20595] loop5: detected capacity change from 0 to 1024 [ 251.634347][T20595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.676499][T19420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.677714][T20600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7166'. [ 251.744263][T20612] bridge0: port 3(batadv1) entered blocking state [ 251.750948][T20612] bridge0: port 3(batadv1) entered disabled state [ 251.758561][T20612] batadv1: entered allmulticast mode [ 251.765344][T20612] batadv1: entered promiscuous mode [ 251.797990][T20618] Cannot find del_set index 0 as target [ 251.845240][T20624] loop5: detected capacity change from 0 to 1024 [ 251.878262][T20624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.905975][T20630] loop0: detected capacity change from 0 to 1024 [ 251.914968][T20630] EXT4-fs: inline encryption not supported [ 251.920830][T20630] EXT4-fs: Ignoring removed orlov option [ 251.946705][T20630] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 251.967716][T20630] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 251.976865][T20630] System zones: 0-1, 3-12 [ 251.981827][T20630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.021625][T20624] loop5: detected capacity change from 1024 to 2 [ 252.030985][T20631] EXT4-fs error (device loop5): ext4_get_inode_loc:4968: inode #18: block 9: comm syz.5.7177: unable to read itable block [ 252.047939][T20631] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 252.058877][T20074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.068443][T20622] Set syz1 is full, maxelem 65536 reached [ 252.070170][T20631] EXT4-fs (loop5): I/O error while writing superblock [ 252.081071][T20631] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6298: IO failure [ 252.099982][T20631] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 252.108456][T20631] EXT4-fs (loop5): I/O error while writing superblock [ 252.115302][T20631] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #18: comm syz.5.7177: mark_inode_dirty error [ 252.128573][T20631] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 252.138500][T20631] EXT4-fs (loop5): I/O error while writing superblock [ 252.145455][T20631] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 5 [ 252.157709][T20631] EXT4-fs (loop5): This should not happen!! Data will be lost [ 252.157709][T20631] [ 252.188867][T19420] EXT4-fs error (device loop5): ext4_check_bdev_write_error:227: comm syz-executor: Error while async write back metadata [ 252.201995][T19420] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 252.210429][T19420] EXT4-fs (loop5): I/O error while writing superblock [ 252.218387][T20641] loop0: detected capacity change from 0 to 512 [ 252.225005][T15041] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 252.228053][T20641] EXT4-fs: Ignoring removed nobh option [ 252.234268][T15041] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 252.245823][T15041] EXT4-fs error (device loop5): __ext4_get_inode_loc_noinmem:4953: inode #18: block 9: comm kworker/u8:24: unable to read itable block [ 252.264303][T15041] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 252.273045][T15041] EXT4-fs (loop5): I/O error while writing superblock [ 252.289813][T19420] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.300149][T20641] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.7184: corrupted inode contents [ 252.312740][T19420] Buffer I/O error on dev loop5, logical block 1, lost sync page write [ 252.321439][T19420] EXT4-fs (loop5): I/O error while writing superblock [ 252.330086][T20627] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 252.335950][T20641] EXT4-fs (loop0): Remounting filesystem read-only [ 252.345924][T20641] EXT4-fs (loop0): 1 truncate cleaned up [ 252.352075][T20641] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.365761][T20641] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.394400][T20651] EXT4-fs: Ignoring removed bh option [ 252.409026][T20074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.420606][T20651] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.440910][T20655] pim6reg1: entered promiscuous mode [ 252.446386][T20655] pim6reg1: entered allmulticast mode [ 252.455021][T20007] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.501876][T12411] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.594986][T20671] EXT4-fs: Ignoring removed orlov option [ 252.601071][T12411] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.615024][T20671] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.653667][T12411] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.715953][T12411] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.847600][T12411] bridge_slave_1: left allmulticast mode [ 252.853344][T12411] bridge_slave_1: left promiscuous mode [ 252.858991][T12411] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.867630][T12411] bridge_slave_0: left allmulticast mode [ 252.873441][T12411] bridge_slave_0: left promiscuous mode [ 252.879230][T12411] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.924858][T20074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.979577][T12411] $H (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.988450][T12411] bond_slave_0: left promiscuous mode [ 252.995563][T12411] $H (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.004453][T12411] bond_slave_1: left promiscuous mode [ 253.011073][T12411] $H (unregistering): Released all slaves [ 253.054929][T12411] hsr_slave_0: left promiscuous mode [ 253.060682][T12411] hsr_slave_1: left promiscuous mode [ 253.066550][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.073990][T12411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.081521][T12411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.089122][T12411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.112004][T12411] veth1_macvtap: left promiscuous mode [ 253.119124][T12411] veth0_macvtap: left promiscuous mode [ 253.125083][T12411] veth1_vlan: left promiscuous mode [ 253.131339][T12411] veth0_vlan: left promiscuous mode [ 253.207182][T12411] team0 (unregistering): Port device team_slave_1 removed [ 253.217114][T12411] team0 (unregistering): Port device team_slave_0 removed [ 253.275551][T20668] chnl_net:caif_netlink_parms(): no params data found [ 253.319700][T20668] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.326824][T20668] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.333960][T20668] bridge_slave_0: entered allmulticast mode [ 253.340536][T20668] bridge_slave_0: entered promiscuous mode [ 253.347989][T20668] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.355041][T20668] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.362359][T20668] bridge_slave_1: entered allmulticast mode [ 253.368917][T20668] bridge_slave_1: entered promiscuous mode [ 253.387119][T20668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.397943][T20668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.417733][T20668] team0: Port device team_slave_0 added [ 253.424255][T20668] team0: Port device team_slave_1 added [ 253.440736][T20668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.447698][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.473625][T20668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.484872][T20668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.491829][T20668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.517932][T20668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.546225][T20668] hsr_slave_0: entered promiscuous mode [ 253.552456][T20668] hsr_slave_1: entered promiscuous mode [ 253.558314][T20668] debugfs: 'hsr0' already exists in 'hsr' [ 253.564108][T20668] Cannot create hsr debugfs directory [ 253.758729][T20747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 253.771408][T20747] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.780024][T20668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 253.789641][T20747] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.7220: Freeing blocks not in datazone - block = 0, count = 16 [ 253.805991][T20668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 253.815782][T20668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 253.822784][T12416] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm kworker/u8:18: bg 0: block 112: padding at end of block bitmap is not set [ 253.825348][T20668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 253.838631][T12416] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 253.856325][T12416] EXT4-fs (loop2): This should not happen!! Data will be lost [ 253.856325][T12416] [ 253.866657][T12416] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 253.879075][T12416] EXT4-fs (loop2): This should not happen!! Data will be lost [ 253.879075][T12416] [ 253.882246][T20668] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.888712][T12416] EXT4-fs (loop2): Total free blocks count 0 [ 253.895776][T20668] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.901810][T12416] EXT4-fs (loop2): Free/Dirty block details [ 253.909181][T20668] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.914942][T12416] EXT4-fs (loop2): free_blocks=16 [ 253.922034][T20668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.927014][T12416] EXT4-fs (loop2): dirty_blocks=64 [ 253.939319][T12416] EXT4-fs (loop2): Block reservation details [ 253.980035][T20760] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 253.983997][T20668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.002591][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.014926][T20760] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.039256][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.055825][T20760] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.090555][T20668] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.100481][T15041] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.107642][T15041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.168136][T15098] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.175348][T15098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.204007][T20772] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #19: comm syz.2.7221: corrupted inode contents [ 254.227446][T20772] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #19: comm syz.2.7221: mark_inode_dirty error [ 254.239192][T20772] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #19: comm syz.2.7221: corrupted inode contents [ 254.254606][T20772] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #19: comm syz.2.7221: mark_inode_dirty error [ 254.267298][T20772] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #19: comm syz.2.7221: mark inode dirty (error -117) [ 254.280656][T20772] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 254.294895][T20668] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 254.422254][T20668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.481819][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.642209][T20668] veth0_vlan: entered promiscuous mode [ 254.666207][T20668] veth1_vlan: entered promiscuous mode [ 254.704286][T20825] syzkaller1: entered promiscuous mode [ 254.709870][T20825] syzkaller1: entered allmulticast mode [ 254.765679][T20668] veth0_macvtap: entered promiscuous mode [ 254.776094][T20668] veth1_macvtap: entered promiscuous mode [ 254.787123][T20668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.797636][T20668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.815309][T12415] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.831362][T12415] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.847718][T12415] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.857760][T12415] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.874224][T20836] netlink: 'syz.1.7245': attribute type 1 has an invalid length. [ 254.882160][T20836] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7245'. [ 254.935722][T20847] set_capacity_and_notify: 4 callbacks suppressed [ 254.935743][T20847] loop2: detected capacity change from 0 to 1764 [ 255.023871][T20861] syzkaller1: entered promiscuous mode [ 255.029393][T20861] syzkaller1: entered allmulticast mode [ 255.088354][T20869] netlink: 8 bytes leftover after parsing attributes in process `wޣ'. [ 255.130324][T20875] Invalid argument reading file caps for ./file0 [ 255.297509][T20894] netlink: 660 bytes leftover after parsing attributes in process `syz.1.7270'. [ 255.653104][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 255.653120][ T29] audit: type=1400 audit(1765954181.732:6952): avc: denied { create } for pid=20913 comm="syz.9.7279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 255.724196][ T29] audit: type=1400 audit(1765954181.806:6953): avc: denied { create } for pid=20918 comm="syz.2.7281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 255.858471][T20931] Invalid argument reading file caps for ./file0 [ 256.059650][T20950] loop0: detected capacity change from 0 to 764 [ 256.080670][T20950] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 256.093955][T20950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7296'. [ 256.132508][T20953] futex_wake_op: syz.1.7298 tries to shift op by -1; fix this program [ 256.152192][T20155] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 256.165713][T20155] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 256.178935][T20957] loop2: detected capacity change from 0 to 2048 [ 256.199577][T20959] loop0: detected capacity change from 0 to 512 [ 256.207074][T20959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 256.224589][ T29] audit: type=1400 audit(1765954182.341:6954): avc: denied { write } for pid=20960 comm="syz.1.7301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.244994][ T29] audit: type=1400 audit(1765954182.341:6955): avc: denied { nlmsg_write } for pid=20960 comm="syz.1.7301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 256.271619][T20959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.285891][T20959] ext4 filesystem being mounted at /54/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.341600][ T29] audit: type=1400 audit(1765954182.425:6956): avc: denied { bind } for pid=20972 comm="syz.2.7303" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 256.365620][T20977] IPv4: Oversized IP packet from 127.202.26.0 [ 256.455978][ T29] audit: type=1400 audit(1765954182.551:6957): avc: denied { read write } for pid=20981 comm="syz.2.7316" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.479901][ T29] audit: type=1400 audit(1765954182.551:6958): avc: denied { open } for pid=20981 comm="syz.2.7316" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.503865][ T29] audit: type=1400 audit(1765954182.551:6959): avc: denied { ioctl } for pid=20981 comm="syz.2.7316" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 256.710084][T20982] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #19: comm syz.0.7300: corrupted inode contents [ 256.740813][T20982] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #19: comm syz.0.7300: mark_inode_dirty error [ 256.748833][T21005] loop9: detected capacity change from 0 to 164 [ 256.761950][T20982] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #19: comm syz.0.7300: corrupted inode contents [ 256.774043][T21005] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 256.776119][T20982] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3000: inode #19: comm syz.0.7300: mark_inode_dirty error [ 256.794768][T20982] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3003: inode #19: comm syz.0.7300: mark inode dirty (error -117) [ 256.800345][T21005] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 256.808095][T21010] syzkaller0: entered promiscuous mode [ 256.820386][T21010] syzkaller0: entered allmulticast mode [ 256.836617][T20982] EXT4-fs warning (device loop0): ext4_evict_inode:273: xattr delete (err -117) [ 256.878368][T20074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.892881][ T29] audit: type=1400 audit(1765954183.034:6960): avc: denied { read write } for pid=21015 comm="syz.9.7322" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 256.916334][ T29] audit: type=1400 audit(1765954183.034:6961): avc: denied { open } for pid=21015 comm="syz.9.7322" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 256.943074][T21019] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 256.943074][T21019] program wg1 not setting count and/or reply_len properly [ 257.064896][T21028] loop0: detected capacity change from 0 to 512 [ 257.081624][T21028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.096410][T21028] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.122496][T20074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.310206][ T5102] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 257.318628][ T5102] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 257.494341][T21068] sg_write: data in/out 124/1 bytes for SCSI command 0xe1-- guessing data in; [ 257.494341][T21068] program syz.1.7339 not setting count and/or reply_len properly [ 257.564225][T21070] loop9: detected capacity change from 0 to 512 [ 257.571910][T21070] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 257.581181][T21070] EXT4-fs (loop9): invalid journal inode [ 257.588063][T21070] EXT4-fs (loop9): can't get journal size [ 257.598169][T21070] EXT4-fs (loop9): 1 truncate cleaned up [ 257.604404][T21070] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.711868][T20007] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.740530][T21090] loop9: detected capacity change from 0 to 1024 [ 257.747477][T21090] EXT4-fs: Ignoring removed orlov option [ 257.757859][T21090] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.779573][T21095] loop2: detected capacity change from 0 to 512 [ 257.807656][T21095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.824062][T21095] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.841888][T21101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7352'. [ 257.867710][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.074414][T20007] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.101582][T21121] loop9: detected capacity change from 0 to 512 [ 258.109041][T21121] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.126890][T21121] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.162227][T21121] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 258.341032][T21137] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #19: comm syz.9.7360: corrupted inode contents [ 258.386685][T21137] EXT4-fs error (device loop9): ext4_dirty_inode:6502: inode #19: comm syz.9.7360: mark_inode_dirty error [ 258.432332][T21137] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #19: comm syz.9.7360: corrupted inode contents [ 258.454833][T21137] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3000: inode #19: comm syz.9.7360: mark_inode_dirty error [ 258.487306][T21137] EXT4-fs error (device loop9): ext4_xattr_delete_inode:3003: inode #19: comm syz.9.7360: mark inode dirty (error -117) [ 258.511969][T21137] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -117) [ 258.575734][T21156] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 258.596537][T21156] EXT4-fs (loop2): invalid journal inode [ 258.602218][T21156] EXT4-fs (loop2): can't get journal size [ 258.620709][T20007] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.631342][T21156] EXT4-fs (loop2): 1 truncate cleaned up [ 258.637900][T21156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.685734][T21128] EXT4-fs (loop0): 1 orphan inode deleted [ 258.699113][ T290] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:6: Failed to release dquot type 1 [ 258.739482][T20335] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.754289][T21128] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.791027][T21128] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.810292][T21170] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 258.818293][T21170] FAT-fs (loop2): Filesystem has been set read-only [ 258.851282][T21170] bio_check_eod: 122 callbacks suppressed [ 258.851300][T21170] syz.2.7380: attempt to access beyond end of device [ 258.851300][T21170] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 258.908977][T20074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.364058][T21202] syzkaller1: entered promiscuous mode [ 259.369610][T21202] syzkaller1: entered allmulticast mode [ 259.461733][T21213] netlink: 'syz.2.7402': attribute type 10 has an invalid length. [ 259.491365][T21213] team0 (unregistering): Port device team_slave_0 removed [ 259.513002][T21213] team0 (unregistering): Port device team_slave_1 removed [ 259.716034][T21226] netlink: 'syz.1.7418': attribute type 10 has an invalid length. [ 259.725876][T21226] team0 (unregistering): Port device team_slave_0 removed [ 259.733851][T21226] team0 (unregistering): Port device team_slave_1 removed [ 259.743686][T21226] team0 (unregistering): Port device batadv1 removed [ 259.828638][T21242] set_capacity_and_notify: 3 callbacks suppressed [ 259.828723][T21242] loop9: detected capacity change from 0 to 7 [ 259.843892][T21243] syzkaller1: entered promiscuous mode [ 259.849388][T21243] syzkaller1: entered allmulticast mode [ 259.857089][T21242] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.870567][T21242] Buffer I/O error on dev loop9, logical block 0, async page read [ 259.878477][T21242] loop9: unable to read partition table [ 259.884349][T21242] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 259.884349][T21242] ) failed (rc=-5) [ 259.938715][T21251] netlink: 'syz.0.7429': attribute type 10 has an invalid length. [ 259.960196][T21251] team0 (unregistering): Port device team_slave_0 removed [ 259.991621][T21255] loop4: detected capacity change from 0 to 512 [ 260.005089][T21251] team0 (unregistering): Port device team_slave_1 removed [ 260.061796][T21255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 260.082958][T21255] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 260.128726][T21255] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 260.193803][T20668] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.833799][T21272] netlink: 'syz.9.7428': attribute type 29 has an invalid length. [ 260.841887][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 260.841901][ T29] audit: type=1400 audit(1765954187.181:7086): avc: denied { create } for pid=21269 comm="syz.4.7437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.872095][T21272] netlink: 'syz.9.7428': attribute type 29 has an invalid length. [ 260.904595][ T29] audit: type=1400 audit(1765954187.212:7087): avc: denied { bind } for pid=21269 comm="syz.4.7437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 260.950284][ T29] audit: type=1326 audit(1765954187.296:7088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.4.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dccaff749 code=0x7ffc0000 [ 260.982333][ T29] audit: type=1326 audit(1765954187.328:7089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21277 comm="syz.4.7431" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3dccaff749 code=0x7ffc0000 [ 261.052964][T21289] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7435'. [ 261.077437][T21294] tipc: Started in network mode [ 261.082443][T21294] tipc: Node identity ac14140f, cluster identity 4711 [ 261.096572][T21294] tipc: New replicast peer: 255.255.255.255 [ 261.102754][T21294] tipc: Enabled bearer , priority 10 [ 261.132280][T21296] hub 2-0:1.0: USB hub found [ 261.137092][T21296] hub 2-0:1.0: 8 ports detected [ 261.163985][ T29] audit: type=1400 audit(1765954187.517:7090): avc: denied { watch watch_reads } for pid=21300 comm="syz.9.7443" path="/78" dev="tmpfs" ino=422 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 261.190978][T21301] loop2: detected capacity change from 0 to 256 [ 261.217422][T21303] loop1: detected capacity change from 0 to 1024 [ 261.244445][ T29] audit: type=1400 audit(1765954187.611:7091): avc: denied { module_load } for pid=21298 comm="syz.2.7441" path="/62/file0/bus" dev="loop2" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=system permissive=1 [ 261.275946][T21312] loop0: detected capacity change from 0 to 1024 [ 261.283245][T21301] Invalid ELF header magic: != ELF [ 261.296463][T21303] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 261.323439][T21312] EXT4-fs: Ignoring removed i_version option [ 261.338871][T21303] ext4 filesystem being mounted at /1520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.355132][T21312] EXT4-fs: Ignoring removed nobh option [ 261.387714][T21312] EXT4-fs: Ignoring removed oldalloc option [ 261.389507][T21318] SELinux: failed to load policy [ 261.408876][T21303] EXT4-fs error (device loop1): ext4_map_blocks:825: inode #15: block 3: comm syz.1.7444: lblock 3 mapped to illegal pblock 3 (length 3) [ 261.436886][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7451'. [ 261.444497][T21303] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 261.458084][T21303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 261.458084][T21303] [ 261.469795][T21312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.493419][T21312] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 261.495575][T21327] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.7444: Freeing blocks not in datazone - block = 3, count = 3 [ 261.524065][T21329] tipc: Started in network mode [ 261.529083][T21329] tipc: Node identity ac14140f, cluster identity 4711 [ 261.548721][T21329] tipc: New replicast peer: 255.255.255.255 [ 261.554847][T21329] tipc: Enabled bearer , priority 10 [ 261.566515][T21327] EXT4-fs error (device loop1): ext4_free_blocks:6728: comm syz.1.7444: Freeing blocks not in datazone - block = 0, count = 16 [ 261.595462][T20074] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.621145][ T29] audit: type=1326 audit(1765954188.000:7092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21334 comm="syz.0.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881224f749 code=0x7ffc0000 [ 261.656161][ T29] audit: type=1326 audit(1765954188.000:7093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21334 comm="syz.0.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881224f749 code=0x7ffc0000 [ 261.679756][ T29] audit: type=1326 audit(1765954188.031:7094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21334 comm="syz.0.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f881224f749 code=0x7ffc0000 [ 261.703255][ T29] audit: type=1326 audit(1765954188.031:7095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21334 comm="syz.0.7456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f881224f749 code=0x7ffc0000 [ 261.793508][T15044] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u8:26: bg 0: block 112: padding at end of block bitmap is not set [ 261.815720][T21344] netlink: 'syz.4.7470': attribute type 29 has an invalid length. [ 261.833451][T21344] netlink: 'syz.4.7470': attribute type 29 has an invalid length. [ 261.844580][T15044] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 117 [ 261.857092][T15044] EXT4-fs (loop1): This should not happen!! Data will be lost [ 261.857092][T15044] [ 261.876084][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 261.911692][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.919205][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.926640][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.934080][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.941514][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.948965][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.956375][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.963961][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.971643][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 261.979093][ T3519] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 262.001538][ T3519] hid-generic 0000:0000:0000.0014: hidraw0: HID v8.00 Device [syz0] on syz0 [ 262.064401][T21331] loop2: detected capacity change from 0 to 512 [ 262.166165][ T5372] tipc: Node number set to 2886997007 [ 262.209124][T21331] EXT4-fs (loop2): 1 orphan inode deleted [ 262.223640][T15076] EXT4-fs error (device loop2): ext4_release_dquot:7022: comm kworker/u8:44: Failed to release dquot type 1 [ 262.239663][T21370] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.249784][T21331] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.252369][T21370] vhci_hcd vhci_hcd.2: invalid port number 96 [ 262.266934][T21370] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 262.276512][T21368] loop4: detected capacity change from 0 to 2048 [ 262.291729][T21368] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.345332][T21380] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.353369][T21380] vhci_hcd vhci_hcd.2: invalid port number 96 [ 262.359628][T21380] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 262.368387][T21381] netlink: 'syz.2.7475': attribute type 29 has an invalid length. [ 262.378208][T21381] netlink: 'syz.2.7475': attribute type 29 has an invalid length. [ 262.436743][ T3519] hid-generic 0000:0000:0000.0015: hidraw0: HID v8.00 Device [syz0] on syz0 [ 262.477516][T21393] loop0: detected capacity change from 0 to 128 [ 262.484375][T21393] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 262.509266][ T3519] tipc: Node number set to 2886997007 [ 262.579019][T15076] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 262.608173][T21404] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.7486' sets config #0 [ 262.618417][T21400] loop9: detected capacity change from 0 to 4096 [ 262.626033][T21402] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 262.658963][T21382] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7471: bg 0: block 345: padding at end of block bitmap is not set [ 262.661797][T21402] vhci_hcd vhci_hcd.2: invalid port number 96 [ 262.679385][T21402] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0060 l0 [ 262.699192][T21382] EXT4-fs (loop4): Remounting filesystem read-only [ 262.723526][T21410] loop9: detected capacity change from 0 to 256 [ 262.736285][T21412] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 262.756795][T21412] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.7489: invalid indirect mapped block 4294967295 (level 0) [ 262.774067][T21412] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.7489: invalid indirect mapped block 4294967295 (level 1) [ 262.807841][T21412] EXT4-fs (loop0): 1 orphan inode deleted [ 262.813615][T21412] EXT4-fs (loop0): 1 truncate cleaned up [ 262.827041][T15076] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.863037][T21415] netlink: 'syz.1.7490': attribute type 29 has an invalid length. [ 262.881840][T21415] netlink: 'syz.1.7490': attribute type 29 has an invalid length. [ 262.914325][T15076] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.979263][T15076] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.036281][T15076] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.177883][T15076] bridge_slave_1: left allmulticast mode [ 263.183646][T15076] bridge_slave_1: left promiscuous mode [ 263.189381][T15076] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.208586][T15076] bridge_slave_0: left allmulticast mode [ 263.214425][T15076] bridge_slave_0: left promiscuous mode [ 263.220136][T15076] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.228535][T21442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 263.267459][T21446] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7500'. [ 263.278001][T21446] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7500'. [ 263.320979][T15076] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.331433][T15076] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.342428][T15076] bond0 (unregistering): Released all slaves [ 263.375436][T15076] tipc: Disabling bearer [ 263.380742][T15076] tipc: Left network mode [ 263.388690][T15076] hsr_slave_0: left promiscuous mode [ 263.394347][T15076] hsr_slave_1: left promiscuous mode [ 263.400222][T15076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.407677][T15076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.415579][T15076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.422978][T15076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.434304][T15076] veth1_macvtap: left promiscuous mode [ 263.439870][T15076] veth0_macvtap: left promiscuous mode [ 263.445669][T15076] veth1_vlan: left promiscuous mode [ 263.451088][T15076] veth0_vlan: left promiscuous mode [ 263.460211][T21457] EXT4-fs: Ignoring removed i_version option [ 263.466389][T21457] EXT4-fs: Ignoring removed bh option [ 263.483685][T21457] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 263.539434][T21461] ext4 filesystem being mounted at /file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.618278][T21424] chnl_net:caif_netlink_parms(): no params data found [ 263.658777][T21468] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.673382][T21468] EXT4-fs error (device loop0): ext4_map_blocks:825: inode #15: block 3: comm syz.0.7507: lblock 3 mapped to illegal pblock 3 (length 3) [ 263.690639][T21468] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 263.703027][T21468] EXT4-fs (loop0): This should not happen!! Data will be lost [ 263.703027][T21468] [ 263.717489][T21468] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.7507: Freeing blocks not in datazone - block = 3, count = 3 [ 263.731116][T21468] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.7507: Freeing blocks not in datazone - block = 0, count = 16 [ 263.745464][T21424] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.752587][T21424] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.759954][T21424] bridge_slave_0: entered allmulticast mode [ 263.766755][T21424] bridge_slave_0: entered promiscuous mode [ 263.786817][T21424] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.794162][T21424] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.804434][T12415] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:17: bg 0: block 112: padding at end of block bitmap is not set [ 263.819214][T21424] bridge_slave_1: entered allmulticast mode [ 263.826957][T21424] bridge_slave_1: entered promiscuous mode [ 263.833710][T21479] netlink: 28 bytes leftover after parsing attributes in process `syz.9.7510'. [ 263.843301][T12415] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 117 [ 263.855957][T12415] EXT4-fs (loop0): This should not happen!! Data will be lost [ 263.855957][T12415] [ 263.872672][T21483] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 263.896936][T21424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.915886][T21488] EXT4-fs: inline encryption not supported [ 263.924271][T21483] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #13: comm syz.1.7513: attempt to clear invalid blocks 2 len 1 [ 263.930946][T21424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.960527][T21424] team0: Port device team_slave_0 added [ 263.967606][T21424] team0: Port device team_slave_1 added [ 263.974909][T21483] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 263.989638][T21483] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7513: invalid indirect mapped block 1819239214 (level 0) [ 264.005108][T21483] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.7513: invalid indirect mapped block 1819239214 (level 1) [ 264.020051][T21483] EXT4-fs (loop1): 1 truncate cleaned up [ 264.037429][T21424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.044460][T21424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.070399][T21424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.084123][T21424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.091133][T21424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.117104][T21424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.188856][T21424] hsr_slave_0: entered promiscuous mode [ 264.195058][T21424] hsr_slave_1: entered promiscuous mode [ 264.218998][T21424] debugfs: 'hsr0' already exists in 'hsr' [ 264.224785][T21424] Cannot create hsr debugfs directory [ 264.234043][T21502] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.248724][T21502] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.7519: Freeing blocks not in datazone - block = 0, count = 16 [ 264.263923][T21502] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7519: bg 0: block 112: padding at end of block bitmap is not set [ 264.309332][T21502] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 264.321648][T21502] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.321648][T21502] [ 264.381321][ T290] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 37 with error 28 [ 264.393767][ T290] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.393767][ T290] [ 264.403448][ T290] EXT4-fs (loop4): Total free blocks count 0 [ 264.409551][ T290] EXT4-fs (loop4): Free/Dirty block details [ 264.415474][ T290] EXT4-fs (loop4): free_blocks=16 [ 264.420503][ T290] EXT4-fs (loop4): dirty_blocks=64 [ 264.425649][ T290] EXT4-fs (loop4): Block reservation details [ 264.431641][ T290] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 264.709313][T21424] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.723756][T21424] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.733619][T21424] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.744069][T21424] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.795543][T21424] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.803459][T21537] pim6reg1: entered promiscuous mode [ 264.809036][T21537] pim6reg1: entered allmulticast mode [ 264.827671][T21424] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.837921][T12416] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.845096][T12416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.856584][T15076] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.863666][T15076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.932051][T21543] netlink: 'syz.0.7532': attribute type 7 has an invalid length. [ 264.939940][T21543] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7532'. [ 264.959458][T21424] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.046105][T21424] veth0_vlan: entered promiscuous mode [ 265.059161][T21424] veth1_vlan: entered promiscuous mode [ 265.071432][T15093] Bluetooth: hci0: Frame reassembly failed (-84) [ 265.082589][T21424] veth0_macvtap: entered promiscuous mode [ 265.091809][T21424] veth1_macvtap: entered promiscuous mode [ 265.105173][T21424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.115933][T21424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.127663][T15044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.136523][T15044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.145462][T15044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.154989][T15044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.236978][T21563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7536'. [ 265.264045][T21565] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27766 sclass=netlink_route_socket pid=21565 comm=syz.2.7537 [ 265.277158][T21565] netlink: 'syz.2.7537': attribute type 29 has an invalid length. [ 265.342201][T21571] set_capacity_and_notify: 7 callbacks suppressed [ 265.342259][T21571] loop2: detected capacity change from 0 to 512 [ 265.382164][T21571] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.477703][T21590] loop1: detected capacity change from 0 to 1024 [ 265.484628][T21590] EXT4-fs: Ignoring removed i_version option [ 265.491199][T21590] EXT4-fs: Ignoring removed nobh option [ 265.497838][T21590] EXT4-fs: Ignoring removed oldalloc option [ 265.534636][T21591] SELinux: failed to load policy [ 265.568212][T21601] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7550'. [ 265.608998][T21607] SELinux: policydb version 17152 does not match my version range 15-35 [ 265.625759][T21607] SELinux: failed to load policy [ 265.652396][T21611] loop2: detected capacity change from 0 to 512 [ 265.659459][T21611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 265.661870][T21613] loop1: detected capacity change from 0 to 128 [ 265.669420][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 265.669437][ T29] audit: type=1400 audit(1765954192.241:7185): avc: denied { write } for pid=21612 comm="syz.1.7558" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 265.687644][T21613] ext4 filesystem being mounted at /1536/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 265.714054][T21611] EXT4-fs (loop2): 1 truncate cleaned up [ 265.753897][T21611] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7556'. [ 265.763904][T21617] loop4: detected capacity change from 0 to 1024 [ 265.788047][T21617] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.802773][T21621] loop1: detected capacity change from 0 to 512 [ 265.815034][T21621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 265.838927][T21621] ext4 filesystem being mounted at /1537/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.856808][T21617] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.7567: bg 0: block 112: padding at end of block bitmap is not set [ 265.909790][T21625] loop2: detected capacity change from 0 to 128 [ 265.957467][T21625] syz.2.7561: attempt to access beyond end of device [ 265.957467][T21625] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 265.970043][ T29] audit: type=1400 audit(1765954192.545:7186): avc: denied { create } for pid=21630 comm="syz.4.7562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 265.990370][ T29] audit: type=1400 audit(1765954192.545:7187): avc: denied { setopt } for pid=21630 comm="syz.4.7562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.009924][ T29] audit: type=1400 audit(1765954192.545:7188): avc: denied { connect } for pid=21630 comm="syz.4.7562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 266.056872][T21635] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7564'. [ 266.112111][T21641] netlink: 19 bytes leftover after parsing attributes in process `syz.1.7568'. [ 266.133593][T21643] loop9: detected capacity change from 0 to 1024 [ 266.153224][T21643] EXT4-fs: inline encryption not supported [ 266.230113][ T29] audit: type=1326 audit(1765954192.839:7189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21653 comm="syz.1.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d4bdf749 code=0x7ffc0000 [ 266.253722][ T29] audit: type=1326 audit(1765954192.839:7190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21653 comm="syz.1.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d4bdf749 code=0x7ffc0000 [ 266.277230][ T29] audit: type=1326 audit(1765954192.839:7191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21653 comm="syz.1.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d4bdf749 code=0x7ffc0000 [ 266.300761][ T29] audit: type=1326 audit(1765954192.839:7192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21653 comm="syz.1.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d4bdf749 code=0x7ffc0000 [ 266.325257][ T29] audit: type=1326 audit(1765954192.839:7193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21653 comm="syz.1.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51d4bdf749 code=0x7ffc0000 [ 266.348824][ T29] audit: type=1326 audit(1765954192.839:7194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21653 comm="syz.1.7582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d4bdf749 code=0x7ffc0000 [ 266.427736][T21658] loop9: detected capacity change from 0 to 512 [ 266.434895][T21658] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.479425][T21658] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.570062][T21672] loop1: detected capacity change from 0 to 512 [ 266.580700][T21673] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 266.610803][T21672] ext4 filesystem being mounted at /1545/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.627710][T21681] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 266.672504][T21687] EXT4-fs: inline encryption not supported [ 266.736255][T21695] EXT4-fs: Ignoring removed i_version option [ 266.743474][T21695] EXT4-fs: Ignoring removed i_version option [ 266.767567][T21695] EXT4-fs (loop1): can't mount with commit=, fs mounted w/o journal [ 266.820820][T21700] netlink: 'syz.1.7591': attribute type 29 has an invalid length. [ 266.866794][T21708] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 266.996239][ T4011] Bluetooth: hci0: command 0x1003 tx timeout [ 267.002338][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 267.077152][T21730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.105740][T21732] sd 0:0:1:0: device reset [ 267.120860][T21730] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.185956][T21738] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7609'. [ 267.230491][T21742] SELinux: failed to load policy [ 267.503668][T21775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7625'. [ 267.549297][T21779] ext4 filesystem being mounted at /1562/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 267.609442][T21789] EXT4-fs: Ignoring removed i_version option [ 267.615719][T21789] EXT4-fs: Ignoring removed i_version option [ 267.624606][T21789] EXT4-fs (loop2): can't mount with commit=, fs mounted w/o journal [ 267.734542][T21803] EXT4-fs: Ignoring removed orlov option [ 267.821469][T21812] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 267.839495][T21812] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 267.848058][T21812] EXT4-fs (loop1): failed to initialize system zone (-117) [ 267.855442][T21812] EXT4-fs (loop1): mount failed [ 267.946337][T21828] EXT4-fs: dax option not supported [ 268.041250][T21836] EXT4-fs: Ignoring removed nobh option [ 268.074257][T21836] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 268.102814][T21836] System zones: 1-12 [ 268.113195][T21836] EXT4-fs (loop2): orphan cleanup on readonly fs [ 268.153742][T21836] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 268.180275][T21833] random: crng reseeded on system resumption [ 268.183575][T21836] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.7646: corrupted inode contents [ 268.192408][T21833] Restarting kernel threads ... [ 268.199997][T21841] SELinux: policydb magic number 0x6c65732f does not match expected magic number 0xf97cff8c [ 268.203406][T21833] Done restarting kernel threads. [ 268.231005][T21836] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #15: comm syz.2.7646: mark_inode_dirty error [ 268.252492][T21841] SELinux: failed to load policy [ 268.262179][T21836] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #15: comm syz.2.7646: corrupted inode contents [ 268.304849][T21836] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #15: comm syz.2.7646: mark_inode_dirty error [ 268.319550][ T3405] hid_parser_main: 76 callbacks suppressed [ 268.319568][ T3405] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 268.344895][T21836] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #15: comm syz.2.7646: mark inode dirty (error -117) [ 268.357548][ T3405] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.358163][T21836] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 268.405340][T21836] EXT4-fs (loop2): 1 orphan inode deleted [ 268.536701][T21867] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 268.593174][T21878] ================================================================== [ 268.601309][T21878] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 268.609060][T21878] [ 268.611392][T21878] write to 0xffff8881463c90c8 of 4 bytes by task 21880 on cpu 1: [ 268.619115][T21878] __bpf_get_stackid+0x740/0x7d0 [ 268.624075][T21878] bpf_get_stackid+0xf3/0x130 [ 268.628766][T21878] bpf_get_stackid_raw_tp+0xf6/0x120 [ 268.634070][T21878] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 268.639645][T21878] bpf_trace_run2+0x107/0x1d0 [ 268.644340][T21878] kfree+0x353/0x3c0 [ 268.648244][T21878] compute_postorder+0x3c3/0x3e0 [ 268.653197][T21878] bpf_check+0x2ce7/0xc860 [ 268.657632][T21878] bpf_prog_load+0xf6e/0x1140 [ 268.662318][T21878] __sys_bpf+0x469/0x7c0 [ 268.666563][T21878] __x64_sys_bpf+0x41/0x50 [ 268.671009][T21878] x64_sys_call+0x28e1/0x3000 [ 268.675701][T21878] do_syscall_64+0xd8/0x2c0 [ 268.680226][T21878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.686131][T21878] [ 268.688454][T21878] read to 0xffff8881463c90c8 of 4 bytes by task 21878 on cpu 0: [ 268.696080][T21878] __bpf_get_stackid+0x2dc/0x7d0 [ 268.701036][T21878] bpf_get_stackid+0xf3/0x130 [ 268.705731][T21878] bpf_get_stackid_raw_tp+0xf6/0x120 [ 268.711041][T21878] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 268.716509][T21878] bpf_trace_run2+0x107/0x1d0 [ 268.721204][T21878] kfree+0x353/0x3c0 [ 268.725109][T21878] audit_log_d_path+0xf4/0x150 [ 268.729887][T21878] audit_log_d_path_exe+0x42/0x70 [ 268.734920][T21878] audit_log_task+0x1e9/0x250 [ 268.739615][T21878] audit_seccomp+0x61/0x100 [ 268.744142][T21878] __seccomp_filter+0x843/0x1260 [ 268.749111][T21878] __secure_computing+0x82/0x150 [ 268.754062][T21878] syscall_trace_enter+0xcf/0x1e0 [ 268.759108][T21878] do_syscall_64+0xb2/0x2c0 [ 268.763626][T21878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.769525][T21878] [ 268.771852][T21878] value changed: 0x1a2a1568 -> 0xe75b1bdd [ 268.777653][T21878] [ 268.779976][T21878] Reported by Kernel Concurrency Sanitizer on: [ 268.786135][T21878] CPU: 0 UID: 0 PID: 21878 Comm: syz.2.7665 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 268.797520][T21878] Tainted: [W]=WARN [ 268.801327][T21878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 268.811383][T21878] ==================================================================