last executing test programs: 5m40.821337469s ago: executing program 32 (id=149): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], &(0x7f0000000100)=""/141, 0x2e, 0x8d, 0x1, 0x7}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x1ffffffffffffffd}, 0x18) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa06a6, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x5, 0xa1, 0x9b9b, 0x8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') read$char_usb(r1, &(0x7f0000000080)=""/50, 0x32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x87a2f, 0x0, 0x0) 1m29.784356962s ago: executing program 33 (id=2736): r0 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f00000003c0)={0x0}) 56.799189477s ago: executing program 34 (id=3772): r0 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x18) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 56.037506268s ago: executing program 35 (id=3805): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r0, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$eJzs3c9rJFkdAPBvdbpjMpOZZNWDLrj+2JXMoNOdbNzd4GFdQfS0oK73MSadENJJh3RndxIWN4N/gCCigie9eBH8AwRZ8OJRhAU9KyqK6IwevDgl1V2dmWS6O5mZnnQ2/flAdb2qV1Xf9zqp6npVj6oARtYnIuK1iLiXpun1iJjO5xfyIQ7aQ7bc3TtvL2dDEmn6xj+TSPJ5nW0l+fhyvtpERHz9KxHfSh6O29jb31iq1ao7+XSlubldaezt31jfXFqrrlW3FhbmX158ZfGlxbmB1PNKRLz6pb/+4Ls/+/Krv/rsW3+6+fdr386KNZXnP1iPR1RsfU50z2xXvXQkO1th5zGDnUfFVg1zk92WGHtozu2nXCYAALrLzvE/GBGfiojrMR1j+eksAAAAcHGkX5iKsSQi7W68x3wAAADgfaTQ6gObFMp5X4CpKBTK5XYf3g/HpUKt3mh+ZrW+u7XS7is7E6XC6nqtOpf3FZ6JUpJNz7fS96dfPDa9EBHPRMT3pydb0+Xlem1l2Bc/AAAAYERcPtb+/890u/0PAAAAXDAzwy4AAAAA8NRp/wMAAMDFp/0PAAAAF9pXX389G9LO+69X3tzb3ai/eWOl2tgob+4ul5frO9vltXp9rfXMvs2Ttler17c/F1u7tyrNaqNZaezt39ys7241b673ekM2AAAA8LQ98/F3/5BExMHnJ1tDZvx0q55yMeC8Kh6mknzcZbf+49X2+C9nVCjgTIwNuwDA0BSHXQBgaErDLgAwdMkJ+T077/w2H39ysOUBAAAGb/ajve//F/quedA/Gzj37MQwutz/h9HVuv9/2p68ThbgQik5A4CR98T3/0+Upo9UIAAAYOCmWkNSKOeX96aiUCiXI660XgtQSlbXa9W5iLgaEb+fLn0gm55vrZmc2GYAAAAAAAAAAAAAAAAAAAAAAAAAANrSNIkUAAAAuNAiCn9Lft1+lv/s9AtTx68PjCf/nY78FaFv/fiNH95aajZ35rP5/zqc3/xRPv/FYVzBAAAAgJHwSC/w77TTO+14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABiku3feXu4MJyz6ziDj/uOLETHTLX4xJlrjiShFxKV/J1F8YL0kIsYGEH8y+/hIt/hJVqzDkN3iTw4g/sHtvvFjJv8WusW/PID4MMrezY4/rx3b/44cWLrvf8WII9OPq/fxLw6Pf2M99v8rp4zx7Hu/qPSMfzvi2WL3408nftIj/vOnjP/Nb+zv98pLfxIx2/X3JzkSq9Lc3K409vZvrG8urVXXqlsLC/MvL76y+NLiXGV1vVbNP7vG+N7HfnmvX/0v9Yg/06f+VyPihVPW/3/v3brzoXay1C3+tefz+Encj/+bn+ZLPBy/kP/2fTpPZ/mznfRBO/2g537+u+f61X+lR/1P+vtf61/t8U7i+te+8+f+iwIAZ6mxt7+xVKtVdy5sImuln4NiSOSJ8XP0X/fOQDeYpmma7VNPsJ0kzsPX0koM+8gEAAAM2v2T/mGXBAAAAAAAAAAAAAAAAAAAAEbXWTxO7HjMg8NUMohHaAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADMT/AwAA//+VPdXC") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 51.688356831s ago: executing program 36 (id=4150): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 49.145048527s ago: executing program 9 (id=4151): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) semget$private(0x0, 0x0, 0x4) 48.992326361s ago: executing program 9 (id=4212): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") openat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x101042, 0x109) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 48.629624484s ago: executing program 9 (id=4219): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 48.612172196s ago: executing program 8 (id=4220): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xffffff18, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a9c000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420002e2e00b9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 48.555732832s ago: executing program 8 (id=4222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000082aaaaaaaaaaaa88a8000081"], 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 48.399829906s ago: executing program 8 (id=4228): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r2 = syz_io_uring_setup(0x38, &(0x7f0000000140)={0x0, 0x1d2d, 0x13500}, &(0x7f0000000240), &(0x7f0000000480)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r2, 0x21, &(0x7f0000000440), 0x1) 48.337981342s ago: executing program 8 (id=4231): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") openat(0xffffffffffffff9c, &(0x7f0000000500)='./bus\x00', 0x101042, 0x109) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 47.982902935s ago: executing program 8 (id=4241): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x401}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000340)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7ee, @empty, 0x1}, {0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x37}, 0x108}, r2, 0xb}}, 0x48) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, &(0x7f0000000f80)={0x1, 0x10, 0xfa00, {&(0x7f00000001c0), r2}}, 0x18) 47.076076068s ago: executing program 8 (id=4264): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0x11, 0x102, 0xfffd, 0x0, 0x0, 0x0}) 47.029593223s ago: executing program 37 (id=4264): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x0, 0x11, 0x102, 0xfffd, 0x0, 0x0, 0x0}) 46.652055958s ago: executing program 9 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c"], 0x20}}, 0x0) 46.633193339s ago: executing program 38 (id=4275): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100030010651fbe347b2c"], 0x20}}, 0x0) 34.692125346s ago: executing program 7 (id=4520): socket(0x11, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f0000000580)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 34.565316988s ago: executing program 7 (id=4524): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x3, @empty, 0x2000}, 0x1c) sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211d", 0x41, 0x6d91fb6102d8910c, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, 0x0, &(0x7f0000048000), 0x0) sendmmsg$inet6(r0, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="209607e5", 0x4}], 0x1}}], 0x1, 0x40000000) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)=""/204, 0xcc}, {0x0}], 0x2}, 0xacf}], 0x1, 0x0, 0x0) 33.853550163s ago: executing program 1 (id=4544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd700000000000040000001400018008000100", @ANYRES32=r4, @ANYBLOB="08000300"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 33.693474948s ago: executing program 7 (id=4551): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') futex(&(0x7f0000000140), 0x5, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 33.639303063s ago: executing program 7 (id=4554): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 33.548957572s ago: executing program 1 (id=4556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="d800000018009903e00312ba028105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x0) 33.522232954s ago: executing program 1 (id=4557): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000785ceb2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0xf) 33.503297576s ago: executing program 1 (id=4558): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) 33.011409012s ago: executing program 7 (id=4563): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) close(r2) 32.968439105s ago: executing program 1 (id=4564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000000)='//sys\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x92ync_\x93\x96\xff\x92\xaf\x00\x04\x00\xf44.\x00'/46}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 32.869753334s ago: executing program 1 (id=4567): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0xe, 0xfd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x703c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800c5, 0xfffffffffffffffd}, 0x0, 0x5, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 32.673928692s ago: executing program 7 (id=4574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7fff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x29, 0x0, &(0x7f0000003180)) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xea\x90.!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\b\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2TmN]0\xb8K\x95vP~\xbd\f>m\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf\xe8\xdd\xcf\t\xb8\x89\xb5\x94t_\xf0\xfc\x18\xa2\xa2rm@\x9b1~3\xbc8\xde\xe3n~\xd2\xd2') bpf$PROG_LOAD(0x5, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='dn:\xff\xffe{') r3 = socket(0x2b, 0x80801, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f00000001c0)=0x400, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x25, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x0, 0xa8, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0xb63}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x3, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xb, 0x5, 0xc5}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0xb9, 0x8, 0x8, 0x8}, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socket$netlink(0x10, 0x3, 0x0) 32.633139316s ago: executing program 39 (id=4574): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x68, r1, 0x1, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x7fff, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r2, 0x0, 0x29, 0x0, &(0x7f0000003180)) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x85\x99\xab\xa7AkQ\x16$\x15\xcf\x14#\xad\x1f\xce}K\xea\x90.!\xd6z\x9e\xc3\xe5\xbf\xc2c\x02\xdc\x86\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xdc)\x82\xeb\b\xa9\x14\xf86\xdc\x8e$B\xa0\x12Zqeo\xb8Z\xa1{\x9ewcbQ[O\xf3y\x99\xc7\xd29\xb7R\xc4:5wV\x86\xef\x95\xa8\x8f2TmN]0\xb8K\x95vP~\xbd\f>m\n\xb3\xe5\x94\xa7\xd3\xc3_\xc9\xcc\xa0nN\xc14k\xcd\xad\x9d}\xd5$\xaaf\xe8\xdd\xcf\t\xb8\x89\xb5\x94t_\xf0\xfc\x18\xa2\xa2rm@\x9b1~3\xbc8\xde\xe3n~\xd2\xd2') bpf$PROG_LOAD(0x5, 0x0, 0x64) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='dn:\xff\xffe{') r3 = socket(0x2b, 0x80801, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000000c0)=@chain) setsockopt$inet6_tcp_int(r3, 0x6, 0x8, &(0x7f00000001c0)=0x400, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x25, [{{0x9, 0x4, 0x0, 0xb, 0x2, 0x3, 0x1, 0x0, 0xa8, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0xb63}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x3, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xb, 0x5, 0xc5}}]}}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7, 0xb9, 0x8, 0x8, 0x8}, 0x0, 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') socket$netlink(0x10, 0x3, 0x0) 27.656615648s ago: executing program 3 (id=4674): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x28}}], 0x2, 0x44080) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xfa9, 0x76c4, 0x7, 0x4}) 27.112010959s ago: executing program 3 (id=4676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x89, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0xfd, 0x6, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x4}, 0x4202, 0x400000000000000, 0x0, 0x0, 0xa, 0x2000, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 27.044415505s ago: executing program 3 (id=4680): r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) readv(r2, &(0x7f0000000300)=[{&(0x7f0000000000)=""/32, 0x20}], 0x1) 25.895193111s ago: executing program 3 (id=4693): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 25.857214725s ago: executing program 3 (id=4694): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 22.426378332s ago: executing program 3 (id=4763): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 22.380376487s ago: executing program 40 (id=4763): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x8001}, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0x0) 17.859907116s ago: executing program 41 (id=4567): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x1, 0xe, 0xfd, 0x0, 0xd, 0x0, 0x0, 0x1, 0x703c2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800c5, 0xfffffffffffffffd}, 0x0, 0x5, 0x0, 0x5, 0x0, 0xffff0000, 0x0, 0x0, 0x1ff, 0x0, 0x3}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.336018626s ago: executing program 2 (id=5261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80, 0x2a) renameat2(r3, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 1.333295887s ago: executing program 6 (id=5263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfff}, 0x18) socket$igmp6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fe, 0xfffffffa, 0x0, 0x88008007}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200014003000000000000000a0000000c00", @ANYRES32=r1], 0x20}}, 0x0) 1.29014531s ago: executing program 2 (id=5264): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r2}, &(0x7f00000004c0), &(0x7f0000000500)=r3}, 0x20) truncate(&(0x7f0000000580)='./file0\x00', 0x8) 1.271359132s ago: executing program 2 (id=5265): mq_unlink(0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) write$sndseq(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x1) 1.224044296s ago: executing program 6 (id=5266): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@nodelalloc}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@nojournal_checksum}, {@stripe={'stripe', 0x3d, 0x12}}, {@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000220000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) socket$inet6(0xa, 0x1, 0x7fff) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) open_by_handle_at(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="4b000000020000000b"], 0x36f0516f) 1.065135791s ago: executing program 6 (id=5267): r0 = open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x1cb041, 0x8) r2 = dup(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x8000fffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) 759.915689ms ago: executing program 4 (id=5271): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002e40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16], 0x30}}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a3000000000"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 700.913645ms ago: executing program 4 (id=5272): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x0) 649.448959ms ago: executing program 5 (id=5273): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000070000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}}, 0x0) 584.100545ms ago: executing program 4 (id=5274): bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) 581.013616ms ago: executing program 4 (id=5275): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000080)=0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000440)='\x00!C', 0x3}], 0x1, 0x8, 0x49d) 556.713048ms ago: executing program 5 (id=5276): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='9', 0x1, 0x0, 0x0, 0x0) io_uring_setup(0x56a9, 0x0) recvfrom(r1, &(0x7f0000000000)=""/44, 0x2c, 0x0, 0x0, 0x0) 543.508599ms ago: executing program 0 (id=5277): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) recvmmsg(0xffffffffffffffff, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x62010000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4844}, 0x880) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) iopl(0xc) getresuid(0x0, 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) 522.963391ms ago: executing program 0 (id=5278): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000080)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x1b, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 492.979564ms ago: executing program 0 (id=5281): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 470.681816ms ago: executing program 5 (id=5282): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000010c0)=0xb8, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000e00)=ANY=[], 0x958) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) shutdown(r0, 0x1) 430.09054ms ago: executing program 4 (id=5283): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x804, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendto$inet6(r2, &(0x7f0000000c80)="7cffa9061b2f8b082b6f69ae5043", 0xe, 0xbcff, 0x0, 0x0) writev(r2, &(0x7f0000001300)=[{&(0x7f0000000280)="a4", 0x34000}], 0x1) 429.64712ms ago: executing program 0 (id=5284): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1, 0x0, 0x2}, 0x18) r2 = io_uring_setup(0x5197, &(0x7f0000000300)={0x0, 0x417c, 0x40, 0x8001002, 0x3a8}) close_range(r2, 0xffffffffffffffff, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r3, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) 429.05269ms ago: executing program 5 (id=5285): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 339.951978ms ago: executing program 5 (id=5286): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x7, 0x28}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="48000000020603000000000000000000000000000d000300686173683a6e65740000000005000400000000000900020073797a31000000000500050002000000050001000600"], 0x48}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c00028008000140"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 339.517608ms ago: executing program 2 (id=5287): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 283.154994ms ago: executing program 6 (id=5288): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000980)="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", 0x227}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)="bae4e6c90e2c5160899c4dafaadec1", 0xf}, {&(0x7f0000000380)="863df713b27092133340e45590eac45df1f0a54f338c8d702066c10522ae87", 0x1f}, {&(0x7f0000000900)="5e9a96da6c96c227926d725c264c8db1743e2a714194d97fd4a96b32f3a0cc57ff3d188ab8257403ab87aac73eb1db3cffb4c9b525154c45716736588985037d1390ae2dfd39d2cc24a7a4170eebea1d87b1321de2c2a9", 0x57}, {&(0x7f0000001000)="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", 0x231}], 0x4}}], 0x2, 0x4004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 253.645506ms ago: executing program 2 (id=5289): syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x208a022, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x4}, 0x18) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 194.984762ms ago: executing program 6 (id=5290): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000280)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 194.718791ms ago: executing program 0 (id=5291): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a808682b7fc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c00008008000340000000023f0000000e0a010200000000000000000a0000000900010073797a31000000000900020073797a31"], 0xdc}, 0x1, 0x0, 0x0, 0x48051}, 0x40) 194.349192ms ago: executing program 2 (id=5292): mq_unlink(0x0) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) write$sndseq(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) 330.41µs ago: executing program 0 (id=5293): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x1, 0x6, 0x10}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4000}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 0s ago: executing program 6 (id=5294): r0 = epoll_create(0x3ff) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x4) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000240)={0xa0000000, 0x1b54c8}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r3, &(0x7f0000000440)={0x2000000}) kernel console output (not intermixed with test programs): etlink: 'syz.0.4061': attribute type 21 has an invalid length. [ 329.170669][T18455] team0: Port device team_slave_0 added [ 329.190782][T18455] team0: Port device team_slave_1 added [ 329.216857][T18720] geneve3: entered promiscuous mode [ 329.222200][T18720] geneve3: entered allmulticast mode [ 329.254201][T18455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.261288][T18455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.287422][T18455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.298174][T18647] vcan0 speed is unknown, defaulting to 1000 [ 329.299459][T18455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.311153][T18455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.337267][T18455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.382197][T18647] lo speed is unknown, defaulting to 1000 [ 329.390834][T18455] hsr_slave_0: entered promiscuous mode [ 329.402519][T18455] hsr_slave_1: entered promiscuous mode [ 329.417270][T18455] debugfs: 'hsr0' already exists in 'hsr' [ 329.423185][T18455] Cannot create hsr debugfs directory [ 329.469235][T18647] lo speed is unknown, defaulting to 1000 [ 329.630482][T18455] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 329.642214][T18455] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 329.651865][T18455] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 329.661765][T18455] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 329.676530][T18647] chnl_net:caif_netlink_parms(): no params data found [ 329.744281][T18455] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.751700][T18455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 329.759077][T18455] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.766180][T18455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 329.796977][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.804159][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.812330][T18647] bridge_slave_0: entered allmulticast mode [ 329.819710][T18647] bridge_slave_0: entered promiscuous mode [ 329.845202][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.853599][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.874125][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.881218][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.890647][T18647] bridge_slave_1: entered allmulticast mode [ 329.897618][T18647] bridge_slave_1: entered promiscuous mode [ 329.907331][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4078'. [ 329.916471][T19036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4078'. [ 329.925642][T19036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4078'. [ 329.935215][T19036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4078'. [ 329.944394][T19036] netlink: 'syz.2.4078': attribute type 6 has an invalid length. [ 330.007400][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.032015][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.053725][T18455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.089197][T18647] team0: Port device team_slave_0 added [ 330.097107][T18455] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.115443][T18647] team0: Port device team_slave_1 added [ 330.143945][ T7635] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.151043][ T7635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.199483][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.206862][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.239085][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.246162][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.272124][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.284451][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.291437][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.294203][T19066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.317449][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.337001][T19066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.415656][T18647] hsr_slave_0: entered promiscuous mode [ 330.422133][T18647] hsr_slave_1: entered promiscuous mode [ 330.432048][T18647] debugfs: 'hsr0' already exists in 'hsr' [ 330.437906][T18647] Cannot create hsr debugfs directory [ 330.453934][T18455] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.615440][T18455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.666862][T18647] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.678129][T18647] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 330.691983][T18647] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.707830][T18647] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.808089][T18455] veth0_vlan: entered promiscuous mode [ 330.818985][T18455] veth1_vlan: entered promiscuous mode [ 330.831671][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.850722][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.864208][ T2606] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.871406][ T2606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.885533][ T2606] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.892645][ T2606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.901146][T18455] veth0_macvtap: entered promiscuous mode [ 330.917808][T18455] veth1_macvtap: entered promiscuous mode [ 330.940774][T18647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 330.951342][T18647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 330.994870][T18455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.005380][T18455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.037688][T19279] loop6: detected capacity change from 0 to 512 [ 331.066538][T19279] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 331.075326][T19279] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.076799][ T2606] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.096773][ T2606] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.106668][ T2606] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.116945][T19279] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.4100: Allocating blocks 41-42 which overlap fs metadata [ 331.127085][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 331.127103][ T29] audit: type=1400 audit(1767004915.231:203708): avc: denied { mount } for pid=19287 comm="syz.0.4109" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 331.140007][ T2606] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.173016][T19279] Quota error (device loop6): write_blk: dquota write failed [ 331.180496][T19279] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 331.218181][T19279] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.4100: Allocating blocks 41-42 which overlap fs metadata [ 331.236824][T19279] Quota error (device loop6): write_blk: dquota write failed [ 331.289470][T18647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.388089][T19279] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 331.517611][T19279] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.4100: Failed to acquire dquot type 1 [ 331.619205][T19279] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 331.634296][ T29] audit: type=1400 audit(1767004915.721:203709): avc: denied { create } for pid=19311 comm="syz.7.4107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 331.654226][ T29] audit: type=1400 audit(1767004915.741:203710): avc: denied { write } for pid=19311 comm="syz.7.4107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 331.686789][T19279] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.4100: corrupted inode contents [ 331.716067][T19279] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.4100: mark_inode_dirty error [ 331.727930][T19279] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.4100: corrupted inode contents [ 331.740233][T19279] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.4100: mark_inode_dirty error [ 331.752090][T19279] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.4100: corrupted inode contents [ 331.764943][T19279] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 331.773993][T19279] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.4100: corrupted inode contents [ 331.890050][T19279] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.4100: mark_inode_dirty error [ 331.895573][T18647] veth0_vlan: entered promiscuous mode [ 331.901423][ T29] audit: type=1400 audit(1767004915.991:203711): avc: denied { bind } for pid=19329 comm="syz.2.4112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 331.917823][T18647] veth1_vlan: entered promiscuous mode [ 331.953929][T18647] veth0_macvtap: entered promiscuous mode [ 331.966210][T18647] veth1_macvtap: entered promiscuous mode [ 331.981740][T18647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.991544][T19331] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 332.015440][T18647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.104172][ T2606] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.211541][ T2606] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.318091][ T2606] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.350404][ T29] audit: type=1326 audit(1767004916.151:203712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19332 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 332.374289][ T29] audit: type=1326 audit(1767004916.151:203713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19332 comm="syz.2.4113" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7effe1541667 code=0x7ffc0000 [ 332.382847][ T2606] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.398285][T19279] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 332.416594][T19279] EXT4-fs (loop6): 1 truncate cleaned up [ 332.422823][T19279] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.436770][T19279] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.547611][T19334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.576244][T19334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.586479][T19360] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4122'. [ 332.597579][T19360] IPVS: Error connecting to the multicast addr [ 332.711913][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4127'. [ 332.729138][T19372] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 332.731464][T19371] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4127'. [ 332.881041][T19397] loop6: detected capacity change from 0 to 512 [ 332.888462][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4139'. [ 332.904147][T19399] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4139'. [ 332.904414][T19397] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.926897][T19397] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 332.956116][T19406] pim6reg: entered allmulticast mode [ 332.967956][T19410] loop8: detected capacity change from 0 to 512 [ 332.975180][T19406] pim6reg: left allmulticast mode [ 332.987509][T19410] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.4142: Failed to acquire dquot type 1 [ 332.998858][T19397] loop6: detected capacity change from 512 to 0 [ 333.000675][T19410] EXT4-fs (loop8): 1 truncate cleaned up [ 333.011326][T19397] EXT4-fs error (device loop6): __ext4_find_entry:1615: inode #2: comm syz.6.4138: reading directory lblock 0 [ 333.016856][T19410] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.023637][T19397] buffer_io_error: 9 callbacks suppressed [ 333.023653][T19397] Buffer I/O error on dev loop6, logical block 0, lost sync page write [ 333.036157][T19410] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 333.041666][T19397] EXT4-fs (loop6): I/O error while writing superblock [ 333.067484][T19397] EXT4-fs (loop6): Remounting filesystem read-only [ 333.110037][T18647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.119488][T18271] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.130410][T19402] Buffer I/O error on dev loop6, logical block 12, lost sync page write [ 333.151120][T19426] netlink: 'syz.0.4147': attribute type 3 has an invalid length. [ 333.162867][T19430] loop8: detected capacity change from 0 to 512 [ 333.171732][T19430] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 333.177143][T19436] syzkaller1: entered promiscuous mode [ 333.187185][T19436] syzkaller1: entered allmulticast mode [ 333.196652][T19430] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4146: invalid indirect mapped block 4294967295 (level 0) [ 333.218886][ T5388] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.231899][T19430] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.4146: invalid indirect mapped block 4294967295 (level 1) [ 333.261159][T19430] EXT4-fs (loop8): 1 orphan inode deleted [ 333.267081][T19430] EXT4-fs (loop8): 1 truncate cleaned up [ 333.286650][T19430] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.303279][T19430] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 333.321506][ T5388] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.349097][T18647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.406141][ T5388] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.434039][T19473] loop8: detected capacity change from 0 to 512 [ 333.440928][T19473] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 333.509158][ T5388] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.539805][T19494] 9p: Bad value for 'trans' [ 333.607880][ T5388] bridge_slave_1: left allmulticast mode [ 333.613675][ T5388] bridge_slave_1: left promiscuous mode [ 333.619376][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.632185][ T5388] bridge_slave_0: left allmulticast mode [ 333.638041][ T5388] bridge_slave_0: left promiscuous mode [ 333.643948][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.700076][T19525] 9p: Bad value for 'source' [ 333.775515][ T5388] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.786036][ T5388] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.803069][ T5388] bond0 (unregistering): Released all slaves [ 333.812055][ T5388] bond1 (unregistering): Released all slaves [ 333.832932][T19446] vcan0 speed is unknown, defaulting to 1000 [ 333.875939][T19446] lo speed is unknown, defaulting to 1000 [ 333.917520][T19446] lo speed is unknown, defaulting to 1000 [ 333.920473][T19538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4177'. [ 333.932478][T19538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4177'. [ 333.941698][ T2969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.978134][T19557] netlink: 'syz.0.4178': attribute type 1 has an invalid length. [ 334.050555][ T5388] hsr_slave_0: left promiscuous mode [ 334.056565][ T5388] hsr_slave_1: left promiscuous mode [ 334.062367][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.069857][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.077883][ T5388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.085538][ T5388] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.096342][ T5388] veth1_macvtap: left promiscuous mode [ 334.101812][ T5388] veth0_macvtap: left promiscuous mode [ 334.107694][ T5388] veth1_vlan: left promiscuous mode [ 334.113200][ T5388] veth0_vlan: left promiscuous mode [ 334.162351][ T2969] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 334.196908][ T5388] team0 (unregistering): Port device team_slave_1 removed [ 334.207360][ T5388] team0 (unregistering): Port device team_slave_0 removed [ 334.252280][T19446] chnl_net:caif_netlink_parms(): no params data found [ 334.293761][T19446] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.300897][T19446] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.308286][T19446] bridge_slave_0: entered allmulticast mode [ 334.315130][T19446] bridge_slave_0: entered promiscuous mode [ 334.321897][T19446] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.329228][T19446] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.336748][T19446] bridge_slave_1: entered allmulticast mode [ 334.343486][T19446] bridge_slave_1: entered promiscuous mode [ 334.362875][T19446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.373409][T19446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.396033][T19446] team0: Port device team_slave_0 added [ 334.402820][T19446] team0: Port device team_slave_1 added [ 334.420375][T19446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.427443][T19446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.453683][T19446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.465066][T19446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.472060][T19446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.498129][T19446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.527762][T19446] hsr_slave_0: entered promiscuous mode [ 334.534285][T19446] hsr_slave_1: entered promiscuous mode [ 334.575262][T19824] netlink: 'syz.8.4182': attribute type 13 has an invalid length. [ 334.620005][T19824] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.627412][T19824] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.676397][T19824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.688203][T19824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.753907][ T7539] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.774835][ T7539] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.793251][ T7539] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.825543][ T7539] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.834484][T19873] sd 0:0:1:0: device reset [ 334.843619][T19446] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 334.853445][T19446] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 334.871992][T19446] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 334.881903][T19446] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 334.891910][T19884] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 334.947361][T19897] loop8: detected capacity change from 0 to 1024 [ 334.959711][T19897] EXT4-fs: Ignoring removed nomblk_io_submit option [ 334.966905][T19899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4192'. [ 334.980219][T19446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 335.002372][T19897] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 335.030890][T19446] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.055696][ T9667] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.062835][ T9667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.114228][ T9667] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.121373][ T9667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.307326][T19446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.344801][T18647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.544935][T19446] veth0_vlan: entered promiscuous mode [ 335.561007][T19446] veth1_vlan: entered promiscuous mode [ 335.597261][T19446] veth0_macvtap: entered promiscuous mode [ 335.607253][T19446] veth1_macvtap: entered promiscuous mode [ 335.621305][T19446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.634872][T19446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.652335][ T5388] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.664166][T19956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4206'. [ 335.674503][ T5388] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.756484][ T5388] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.779259][ T5388] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.811644][T19964] loop7: detected capacity change from 0 to 512 [ 335.825031][T19964] EXT4-fs: dax option not supported [ 335.883224][T19972] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 336.008123][T19976] loop9: detected capacity change from 0 to 512 [ 336.040318][T19976] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.065147][T19981] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4223'. [ 336.098636][T19976] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.133477][T19985] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 336.204893][T19985] SELinux: failed to load policy [ 336.242413][T19976] loop9: detected capacity change from 512 to 0 [ 336.254042][T19988] EXT4-fs error (device loop9): __ext4_find_entry:1615: inode #2: comm syz.9.4212: reading directory lblock 0 [ 336.284584][T19988] Buffer I/O error on dev loop9, logical block 0, lost sync page write [ 336.294731][T19988] EXT4-fs (loop9): I/O error while writing superblock [ 336.301669][T19988] EXT4-fs (loop9): Remounting filesystem read-only [ 336.358927][T19446] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.379530][T19979] Buffer I/O error on dev loop9, logical block 12, lost sync page write [ 336.613672][T20027] loop8: detected capacity change from 0 to 512 [ 336.626769][T20027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.648931][T20027] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.702012][T20027] loop8: detected capacity change from 512 to 0 [ 336.710319][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 336.710413][ T29] audit: type=1326 audit(1767004920.812:203814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.7.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f83df749 code=0x7ffc0000 [ 336.712261][T20027] EXT4-fs error (device loop8): __ext4_find_entry:1615: inode #2: comm syz.8.4231: reading directory lblock 0 [ 336.741213][ T29] audit: type=1400 audit(1767004920.812:203815): avc: denied { create } for pid=20044 comm="syz.0.4238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.772221][ T29] audit: type=1400 audit(1767004920.812:203816): avc: denied { ioctl } for pid=20044 comm="syz.0.4238" path="socket:[48607]" dev="sockfs" ino=48607 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.797199][ T29] audit: type=1326 audit(1767004920.812:203817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.7.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f83df749 code=0x7ffc0000 [ 336.798605][T20027] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 336.825837][ T29] audit: type=1326 audit(1767004920.862:203818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.7.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f46f83df749 code=0x7ffc0000 [ 336.853295][ T29] audit: type=1326 audit(1767004920.862:203819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.7.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f83df749 code=0x7ffc0000 [ 336.877169][ T29] audit: type=1326 audit(1767004920.862:203820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20042 comm="syz.7.4237" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f83df749 code=0x7ffc0000 [ 336.877250][T20027] EXT4-fs (loop8): I/O error while writing superblock [ 336.908351][T20027] EXT4-fs (loop8): Remounting filesystem read-only [ 336.992021][ T29] audit: type=1400 audit(1767004921.082:203821): avc: denied { firmware_load } for pid=20049 comm="syz.7.4240" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 337.020275][T18647] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.030431][T20031] Buffer I/O error on dev loop8, logical block 12, lost sync page write [ 337.077046][ T29] audit: type=1326 audit(1767004921.182:203822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20058 comm="syz.7.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f83df749 code=0x7ffc0000 [ 337.120280][ T29] audit: type=1326 audit(1767004921.182:203823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20058 comm="syz.7.4244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f46f83df749 code=0x7ffc0000 [ 337.153806][T20060] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 337.221482][T20064] loop7: detected capacity change from 0 to 512 [ 337.230357][T20064] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 337.239164][T20064] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 337.254582][T20064] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.4246: Allocating blocks 41-42 which overlap fs metadata [ 337.268983][T20064] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4215: comm syz.7.4246: Allocating blocks 41-42 which overlap fs metadata [ 337.289678][T20064] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.4246: Failed to acquire dquot type 1 [ 337.304481][T20064] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 337.319507][T20064] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.4246: corrupted inode contents [ 337.332010][T20064] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #12: comm syz.7.4246: mark_inode_dirty error [ 337.344319][T20064] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.4246: corrupted inode contents [ 337.357000][T20064] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #12: comm syz.7.4246: mark_inode_dirty error [ 337.370697][T20064] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.4246: corrupted inode contents [ 337.383253][T20064] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 337.392251][T20064] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #12: comm syz.7.4246: corrupted inode contents [ 337.405744][T20064] EXT4-fs error (device loop7): ext4_truncate:4635: inode #12: comm syz.7.4246: mark_inode_dirty error [ 337.419564][T20064] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 337.429000][T20064] EXT4-fs (loop7): 1 truncate cleaned up [ 337.436167][T20064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.520804][T18455] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.673613][T20078] hub 9-0:1.0: USB hub found [ 337.678371][T20078] hub 9-0:1.0: 8 ports detected [ 338.143212][ T7635] bridge_slave_1: left allmulticast mode [ 338.148923][ T7635] bridge_slave_1: left promiscuous mode [ 338.154873][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.170674][ T7635] bridge_slave_0: left allmulticast mode [ 338.176554][ T7635] bridge_slave_0: left promiscuous mode [ 338.182593][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.279280][ T7635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.306313][ T7635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.328080][ T7635] bond0 (unregistering): Released all slaves [ 338.451333][T20111] vcan0 speed is unknown, defaulting to 1000 [ 338.547035][T20111] lo speed is unknown, defaulting to 1000 [ 338.622158][T20156] vcan0 speed is unknown, defaulting to 1000 [ 338.630712][T20111] lo speed is unknown, defaulting to 1000 [ 338.647799][T20180] loop7: detected capacity change from 0 to 8192 [ 338.663000][T20180] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 338.763961][T20156] lo speed is unknown, defaulting to 1000 [ 338.804114][T20111] chnl_net:caif_netlink_parms(): no params data found [ 338.890745][T20156] lo speed is unknown, defaulting to 1000 [ 338.931763][ T7635] hsr_slave_0: left promiscuous mode [ 338.939671][ T7635] hsr_slave_1: left promiscuous mode [ 338.957704][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.967204][T20338] loop7: detected capacity change from 0 to 8192 [ 338.975525][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.975760][T20338] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 339.035981][ T7635] team0 (unregistering): Port device team_slave_1 removed [ 339.049076][ T7635] team0 (unregistering): Port device team_slave_0 removed [ 339.064225][T20355] loop7: detected capacity change from 0 to 512 [ 339.088544][T20355] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 339.104316][T20355] EXT4-fs (loop7): orphan cleanup on readonly fs [ 339.121853][T20355] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #16: comm syz.7.4298: corrupted inode contents [ 339.134428][T20355] EXT4-fs (loop7): Remounting filesystem read-only [ 339.141087][T20355] EXT4-fs (loop7): 1 truncate cleaned up [ 339.147546][ T9667] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 339.158341][ T9667] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 339.184041][ T9667] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 339.198063][T20355] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 339.216821][T20111] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.224031][T20111] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.231749][T20111] bridge_slave_0: entered allmulticast mode [ 339.238354][T20111] bridge_slave_0: entered promiscuous mode [ 339.247623][T20111] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.254785][T20111] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.269282][T20111] bridge_slave_1: entered allmulticast mode [ 339.275910][T18455] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.276389][T20111] bridge_slave_1: entered promiscuous mode [ 339.323552][T20111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.351754][T20111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.436782][T20111] team0: Port device team_slave_0 added [ 339.471328][T20111] team0: Port device team_slave_1 added [ 339.505568][ T7635] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.525186][T20111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.532229][T20111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.558509][T20111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.570294][T20156] chnl_net:caif_netlink_parms(): no params data found [ 339.577953][T20562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.589088][T20562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.590474][T20111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.604164][T20111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.630333][T20111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.715130][T20637] netlink: 'syz.2.4307': attribute type 1 has an invalid length. [ 339.723075][T20637] __nla_validate_parse: 1 callbacks suppressed [ 339.723087][T20637] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4307'. [ 339.741470][T20111] hsr_slave_0: entered promiscuous mode [ 339.747573][T20111] hsr_slave_1: entered promiscuous mode [ 339.753618][T20111] debugfs: 'hsr0' already exists in 'hsr' [ 339.759609][T20111] Cannot create hsr debugfs directory [ 339.767684][T20156] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.775044][T20156] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.782948][T20156] bridge_slave_0: entered allmulticast mode [ 339.790052][T20156] bridge_slave_0: entered promiscuous mode [ 339.797547][T20156] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.804769][T20156] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.812119][T20156] bridge_slave_1: entered allmulticast mode [ 339.818501][T20156] bridge_slave_1: entered promiscuous mode [ 339.848371][T20156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.860459][ T7635] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.874108][T20156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.909170][T20156] team0: Port device team_slave_0 added [ 339.919161][ T7635] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.931893][T20156] team0: Port device team_slave_1 added [ 339.960351][ T7635] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.971848][T20156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.978813][T20156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.004917][T20156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.025128][T20156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.032194][T20156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 340.058155][T20156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.100718][T20156] hsr_slave_0: entered promiscuous mode [ 340.106878][T20156] hsr_slave_1: entered promiscuous mode [ 340.114163][T20156] debugfs: 'hsr0' already exists in 'hsr' [ 340.119914][T20156] Cannot create hsr debugfs directory [ 340.175594][ T7635] bridge_slave_1: left allmulticast mode [ 340.181283][ T7635] bridge_slave_1: left promiscuous mode [ 340.187052][ T7635] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.199688][ T7635] bridge_slave_0: left allmulticast mode [ 340.205471][ T7635] bridge_slave_0: left promiscuous mode [ 340.211206][ T7635] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.354477][ T7635] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.365510][ T7635] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.381918][ T7635] bond0 (unregistering): Released all slaves [ 340.454281][T20902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20902 comm=syz.7.4315 [ 340.588328][ T7635] hsr_slave_0: left promiscuous mode [ 340.599947][ T7635] hsr_slave_1: left promiscuous mode [ 340.614223][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.621682][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.638823][ T7635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.646339][ T7635] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.658097][ T7635] veth1_macvtap: left promiscuous mode [ 340.667964][ T7635] veth0_macvtap: left promiscuous mode [ 340.674317][ T7635] veth1_vlan: left promiscuous mode [ 340.680159][ T7635] veth0_vlan: left promiscuous mode [ 340.766134][T20950] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4321'. [ 340.858005][ T7635] team0 (unregistering): Port device team_slave_1 removed [ 340.868379][ T7635] team0 (unregistering): Port device team_slave_0 removed [ 341.459157][T20111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.477980][T20111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.497434][T20111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.510630][T20156] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 341.530706][T20111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 341.545143][T20156] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 341.569404][T20156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 341.586617][T20156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 341.676313][T20156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.696587][T20111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.713925][T20156] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.732114][T20111] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.752374][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.759480][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.788008][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.795149][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.807932][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.815232][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.831770][T21142] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4338'. [ 341.841510][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 341.851592][T21149] netlink: 664 bytes leftover after parsing attributes in process `syz.0.4339'. [ 341.861403][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.868486][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.903948][T20111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.914871][T20111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.948934][T20156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.959690][T20156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 342.013173][T21156] SELinux: ebitmap: truncated map [ 342.053896][T20111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.055865][T21156] SELinux: failed to load policy [ 342.135742][T20156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.504238][T21211] loop7: detected capacity change from 0 to 1024 [ 342.536845][T21211] EXT4-fs: inline encryption not supported [ 342.542844][T21211] EXT4-fs: Ignoring removed orlov option [ 342.567101][T21211] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 342.614432][T21211] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0002] [ 342.651033][T21211] System zones: 0-1, 3-12 [ 342.671730][T21211] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.769168][T18455] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.840345][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 342.840365][ T29] audit: type=1400 audit(1767004926.942:203930): avc: denied { append } for pid=21220 comm="syz.7.4347" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 342.875009][T21221] program syz.7.4347 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.919206][T20156] veth0_vlan: entered promiscuous mode [ 342.940464][ T29] audit: type=1400 audit(1767004927.042:203931): avc: denied { bind } for pid=21235 comm="syz.7.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.950863][T20156] veth1_vlan: entered promiscuous mode [ 342.961172][ T29] audit: type=1400 audit(1767004927.042:203932): avc: denied { listen } for pid=21235 comm="syz.7.4349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 342.974200][T20156] veth0_macvtap: entered promiscuous mode [ 343.012858][ T29] audit: type=1400 audit(1767004927.103:203933): avc: denied { write } for pid=21235 comm="syz.7.4349" path="socket:[50354]" dev="sockfs" ino=50354 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 343.038886][T20156] veth1_macvtap: entered promiscuous mode [ 343.058433][T20111] veth0_vlan: entered promiscuous mode [ 343.084332][T20156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.106725][T20156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.114329][ T29] audit: type=1400 audit(1767004927.223:203934): avc: denied { connect } for pid=21240 comm="syz.7.4350" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 343.138965][T20111] veth1_vlan: entered promiscuous mode [ 343.160880][ T9671] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.182796][ T9671] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.226814][ T9671] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.237350][T20111] veth0_macvtap: entered promiscuous mode [ 343.246611][ T9671] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.256624][T20111] veth1_macvtap: entered promiscuous mode [ 343.268347][T20111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.290692][T20111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.326556][ T7288] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.359923][ T7288] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.395285][ T7288] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.425596][ T7288] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.494227][ T29] audit: type=1400 audit(1767004927.603:203935): avc: denied { read } for pid=21278 comm="syz.0.4358" path="socket:[49623]" dev="sockfs" ino=49623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 343.899099][T21275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.945862][T21275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.274564][ T29] audit: type=1400 audit(1767004928.383:203936): avc: denied { write } for pid=21311 comm="syz.1.4364" name="rt_acct" dev="proc" ino=4026534008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 344.308404][ T29] audit: type=1400 audit(1767004928.403:203937): avc: denied { write } for pid=21311 comm="syz.1.4364" path="socket:[50528]" dev="sockfs" ino=50528 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 344.448173][ T29] audit: type=1400 audit(1767004928.553:203938): avc: denied { read } for pid=21343 comm="syz.7.4369" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 344.529174][ T29] audit: type=1326 audit(1767004928.593:203939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21347 comm="syz.1.4371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19f3abf749 code=0x0 [ 344.611508][T21358] loop7: detected capacity change from 0 to 2048 [ 344.662821][T21358] loop7: p1 < > p4 [ 344.669673][T21358] loop7: p4 size 8388608 extends beyond EOD, truncated [ 344.974929][T21425] loop4: detected capacity change from 0 to 2048 [ 345.021368][T21425] loop4: p1 < > p4 [ 345.027102][T21439] syzkaller1: entered promiscuous mode [ 345.032726][T21439] syzkaller1: entered allmulticast mode [ 345.044659][T21425] loop4: p4 size 8388608 extends beyond EOD, truncated [ 345.118945][T21459] veth2: entered promiscuous mode [ 345.124378][T21459] veth2: entered allmulticast mode [ 345.217480][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'. [ 345.264827][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4398'. [ 345.292052][T21477] vcan0 speed is unknown, defaulting to 1000 [ 345.382317][T21508] gre0: entered promiscuous mode [ 345.387327][T21508] gre0: entered allmulticast mode [ 345.427627][T21477] lo speed is unknown, defaulting to 1000 [ 345.509469][T21477] lo speed is unknown, defaulting to 1000 [ 345.578931][T21550] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 345.684605][T21564] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 346.138436][T21581] tipc: Started in network mode [ 346.143461][T21581] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 346.190887][T21581] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 346.199508][T21581] tipc: Enabled bearer , priority 10 [ 346.205889][T21587] loop7: detected capacity change from 0 to 128 [ 346.225256][T21587] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.244445][T21587] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 346.290487][ T31] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 346.796726][T21688] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 347.321054][ T3482] tipc: Node number set to 1 [ 347.506237][T21754] loop4: detected capacity change from 0 to 256 [ 347.540472][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4448'. [ 347.557214][T21760] netlink: 96 bytes leftover after parsing attributes in process `syz.7.4450'. [ 347.621742][T21777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4454'. [ 347.782050][T21801] Invalid argument reading file caps for ./file0 [ 348.712535][T21779] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 348.773796][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 348.773814][ T29] audit: type=1326 audit(1767004932.873:204046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.1.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f3abf749 code=0x7ffc0000 [ 348.804190][ T29] audit: type=1326 audit(1767004932.873:204047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.1.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f19f3abf749 code=0x7ffc0000 [ 348.828030][ T29] audit: type=1326 audit(1767004932.873:204048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21812 comm="syz.1.4464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f3abf749 code=0x7ffc0000 [ 348.882400][ T29] audit: type=1326 audit(1767004932.993:204049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21833 comm="syz.1.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f3abf749 code=0x7ffc0000 [ 348.910375][ T29] audit: type=1326 audit(1767004932.993:204050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21833 comm="syz.1.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7f19f3abf749 code=0x7ffc0000 [ 348.934278][ T29] audit: type=1326 audit(1767004932.993:204051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21833 comm="syz.1.4470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19f3abf749 code=0x7ffc0000 [ 349.000681][ T29] audit: type=1400 audit(1767004933.093:204052): avc: denied { listen } for pid=21841 comm="syz.2.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.020796][ T29] audit: type=1400 audit(1767004933.093:204053): avc: denied { accept } for pid=21841 comm="syz.2.4472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 349.075718][T21858] loop7: detected capacity change from 0 to 1024 [ 349.089877][ T29] audit: type=1400 audit(1767004933.193:204054): avc: denied { ioctl } for pid=21856 comm="syz.2.4480" path="socket:[50943]" dev="sockfs" ino=50943 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 349.115589][T21858] EXT4-fs: Ignoring removed mblk_io_submit option [ 349.123912][T21867] program syz.1.4484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.148416][ T29] audit: type=1400 audit(1767004933.253:204055): avc: denied { associate } for pid=21871 comm="syz.4.4482" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 349.185110][T21858] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.242448][T18455] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.304229][T21895] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 349.321213][T21896] loop7: detected capacity change from 0 to 8192 [ 349.328915][T21896] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.201066][T21953] SELinux: Context Ü is not valid (left unmapped). [ 350.399495][T21969] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4523'. [ 350.487543][T21973] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 350.903273][T21986] sctp: [Deprecated]: syz.1.4531 (pid 21986) Use of int in maxseg socket option. [ 350.903273][T21986] Use struct sctp_assoc_value instead [ 350.903893][T21988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4532'. [ 350.952802][T21994] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4535'. [ 351.137070][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4544'. [ 351.159879][T22016] bridge_slave_1: left allmulticast mode [ 351.165647][T22016] bridge_slave_1: left promiscuous mode [ 351.171546][T22016] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.180482][T22016] bridge_slave_0: left allmulticast mode [ 351.186172][T22016] bridge_slave_0: left promiscuous mode [ 351.192154][T22016] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.381592][T22040] loop7: detected capacity change from 0 to 512 [ 351.388388][T22040] EXT4-fs: Ignoring removed oldalloc option [ 351.416372][T22042] IPv6: Can't replace route, no match found [ 351.467012][T22040] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 351.483867][T22040] EXT4-fs (loop7): 1 truncate cleaned up [ 351.490194][T22040] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 351.837585][T22047] sd 0:0:1:0: device reset [ 351.842620][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.842947][T22040] loop7: detected capacity change from 512 to 64 [ 351.852458][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.868646][ T12] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 351.905801][T18455] EXT4-fs warning (device loop7): ext4_evict_inode:273: xattr delete (err -12) [ 351.931404][T18455] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 351.946750][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.956830][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.966723][ T12] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 351.977050][T18455] EXT4-fs error (device loop7): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 352.059173][T19994] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.107060][T22071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'. [ 352.127174][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.137565][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.147588][ T12] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 352.175403][T22075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4568'. [ 352.221641][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.231582][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.241387][ T12] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 352.470251][ T12] bond6 (unregistering): (slave geneve2): Releasing active interface [ 352.632172][ T12] bond0 (unregistering): Released all slaves [ 352.642309][ T12] bond1 (unregistering): Released all slaves [ 352.654233][ T12] bond2 (unregistering): Released all slaves [ 352.664801][ T12] bond3 (unregistering): Released all slaves [ 352.676158][ T12] bond4 (unregistering): Released all slaves [ 352.687357][ T12] bond5 (unregistering): Released all slaves [ 352.699431][ T12] bond6 (unregistering): Released all slaves [ 352.711675][ T12] bond7 (unregistering): Released all slaves [ 352.725606][ T12] bond8 (unregistering): Released all slaves [ 352.737170][ T12] bond9 (unregistering): Released all slaves [ 352.748271][ T12] bond10 (unregistering): Released all slaves [ 352.759416][ T12] bond11 (unregistering): Released all slaves [ 352.772036][ T12] bond12 (unregistering): Released all slaves [ 352.783066][ T12] bond13 (unregistering): Released all slaves [ 352.801679][ T12] bond14 (unregistering): Released all slaves [ 352.821775][ T12] bond15 (unregistering): Released all slaves [ 352.830706][ T12] bond16 (unregistering): Released all slaves [ 352.841199][ T12] bond17 (unregistering): Released all slaves [ 352.852702][ T12] bond18 (unregistering): Released all slaves [ 352.922282][ T12] tipc: Left network mode [ 353.048318][T22124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4584'. [ 353.057419][T22124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4584'. [ 353.072786][T22127] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4585'. [ 353.183284][T22142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4592'. [ 353.198265][ T12] veth1_macvtap: left promiscuous mode [ 353.205296][ T12] veth0_macvtap: left promiscuous mode [ 353.288913][ T12] pim6reg (unregistering): left allmulticast mode [ 353.298565][ T12] pimreg3 (unregistering): left allmulticast mode [ 353.358083][ T12] team0 (unregistering): Port device dummy0 removed [ 353.399583][T22104] vcan0 speed is unknown, defaulting to 1000 [ 353.516817][T22104] lo speed is unknown, defaulting to 1000 [ 353.550991][ T12] IPVS: stop unused estimator thread 0... [ 353.609208][T22104] lo speed is unknown, defaulting to 1000 [ 353.626883][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.788938][ T29] kauditd_printk_skb: 175 callbacks suppressed [ 353.788956][ T29] audit: type=1326 audit(1767004937.894:204231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effe15365e7 code=0x7ffc0000 [ 353.827105][ T29] audit: type=1326 audit(1767004937.934:204232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effe14db829 code=0x7ffc0000 [ 353.850923][ T29] audit: type=1326 audit(1767004937.934:204233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effe15365e7 code=0x7ffc0000 [ 353.874685][ T29] audit: type=1326 audit(1767004937.934:204234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effe14db829 code=0x7ffc0000 [ 353.890976][T22202] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 353.898312][ T29] audit: type=1326 audit(1767004937.934:204235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 353.933853][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.948916][ T29] audit: type=1326 audit(1767004937.934:204236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effe15365e7 code=0x7ffc0000 [ 353.972781][ T29] audit: type=1326 audit(1767004937.934:204237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effe14db829 code=0x7ffc0000 [ 353.996415][ T29] audit: type=1326 audit(1767004937.934:204238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 354.020293][ T29] audit: type=1326 audit(1767004937.944:204239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7effe15365e7 code=0x7ffc0000 [ 354.022693][T22104] chnl_net:caif_netlink_parms(): no params data found [ 354.044226][ T29] audit: type=1326 audit(1767004937.944:204240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22163 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7effe14db829 code=0x7ffc0000 [ 354.091615][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.149488][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.172046][T22104] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.179259][T22104] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.187379][T22104] bridge_slave_0: entered allmulticast mode [ 354.194082][T22104] bridge_slave_0: entered promiscuous mode [ 354.201296][T22104] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.208371][T22104] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.216385][T22104] bridge_slave_1: entered allmulticast mode [ 354.223170][T22104] bridge_slave_1: entered promiscuous mode [ 354.265419][T22104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.291234][ T12] bridge_slave_1: left allmulticast mode [ 354.296949][ T12] bridge_slave_1: left promiscuous mode [ 354.302712][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.331668][ T12] bridge_slave_0: left allmulticast mode [ 354.337457][ T12] bridge_slave_0: left promiscuous mode [ 354.343217][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.485965][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.501038][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.527022][ T12] bond0 (unregistering): Released all slaves [ 354.562014][T22104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.607122][T22104] team0: Port device team_slave_0 added [ 354.634708][T22384] loop4: detected capacity change from 0 to 512 [ 354.635167][T22104] team0: Port device team_slave_1 added [ 354.652205][T22384] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 354.700945][T22384] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.721778][T22104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.728846][T22104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.755131][T22104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.760089][T22384] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 354.835190][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.845067][T22104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.852107][T22104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 354.878118][T22104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.967943][ T12] hsr_slave_0: left promiscuous mode [ 354.976977][ T12] hsr_slave_1: left promiscuous mode [ 354.982721][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.990314][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.010740][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.018184][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.077986][ T12] veth1_macvtap: left promiscuous mode [ 355.089894][ T12] veth0_macvtap: left promiscuous mode [ 355.096904][ T12] veth1_vlan: left promiscuous mode [ 355.102506][ T12] veth0_vlan: left promiscuous mode [ 355.311156][ T12] team0 (unregistering): Port device team_slave_1 removed [ 355.338770][ T12] team0 (unregistering): Port device team_slave_0 removed [ 355.461038][T22487] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4635'. [ 355.492655][T22104] hsr_slave_0: entered promiscuous mode [ 355.498964][T22104] hsr_slave_1: entered promiscuous mode [ 356.062633][T22104] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.075977][T22104] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.086597][T22104] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.109235][T22104] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.227252][T22104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.242622][T22104] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.253938][ T7288] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.261109][ T7288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.283081][T22104] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 356.293589][T22104] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.308183][ T7288] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.315361][ T7288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.376929][T22651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4649'. [ 356.423166][T22104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.573897][T22104] veth0_vlan: entered promiscuous mode [ 356.592301][T22104] veth1_vlan: entered promiscuous mode [ 356.623078][T22104] veth0_macvtap: entered promiscuous mode [ 356.634052][T22104] veth1_macvtap: entered promiscuous mode [ 356.658502][T22104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.685079][T22104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.709670][ T9675] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.720254][ T9675] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.731307][ T9675] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.754971][ T9675] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.796500][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4655'. [ 356.896165][T22696] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 356.911829][T22695] IPVS: stopping master sync thread 22696 ... [ 356.981832][T22703] openvswitch: netlink: Missing key (keys=40, expected=80) [ 357.037537][T22710] loop4: detected capacity change from 0 to 512 [ 357.058480][T22710] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.4668: iget: bad extra_isize 90 (inode size 256) [ 357.122561][T22710] EXT4-fs (loop4): Remounting filesystem read-only [ 357.148359][T22710] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 357.271911][T22710] EXT4-fs (loop4): 1 orphan inode deleted [ 357.280407][T22710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.382085][T22729] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 357.799440][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 359.157840][ T29] kauditd_printk_skb: 566 callbacks suppressed [ 359.157858][ T29] audit: type=1400 audit(1767004943.264:204807): avc: denied { relabelfrom } for pid=22776 comm="syz.4.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 359.184477][ T29] audit: type=1400 audit(1767004943.264:204808): avc: denied { relabelto } for pid=22776 comm="syz.4.4695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 359.305803][ T29] audit: type=1326 audit(1767004943.414:204809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22790 comm="syz.4.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24270f749 code=0x7ffc0000 [ 359.329759][ T29] audit: type=1326 audit(1767004943.414:204810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22790 comm="syz.4.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24270f749 code=0x7ffc0000 [ 359.419861][ T29] audit: type=1326 audit(1767004943.414:204811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22790 comm="syz.4.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7fe24270f749 code=0x7ffc0000 [ 359.443736][ T29] audit: type=1326 audit(1767004943.414:204812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22790 comm="syz.4.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24270f749 code=0x7ffc0000 [ 359.467686][ T29] audit: type=1326 audit(1767004943.414:204813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22790 comm="syz.4.4697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24270f749 code=0x7ffc0000 [ 359.496817][T22800] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.540526][T22800] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.611140][T22800] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.652386][T22814] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4705'. [ 359.798274][T22800] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.400848][ T9675] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.417305][ T9675] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.433401][ T9675] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.457712][ T9675] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.854191][T22858] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 360.854418][T22858] SELinux: failed to load policy [ 361.038411][T22890] warn_alloc: 1 callbacks suppressed [ 361.038431][T22890] syz.2.4744: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 361.058723][T22890] CPU: 1 UID: 0 PID: 22890 Comm: syz.2.4744 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 361.058789][T22890] Tainted: [W]=WARN [ 361.058796][T22890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.058856][T22890] Call Trace: [ 361.058864][T22890] [ 361.058873][T22890] __dump_stack+0x1d/0x30 [ 361.058905][T22890] dump_stack_lvl+0x95/0xd0 [ 361.059055][T22890] dump_stack+0x15/0x1b [ 361.059075][T22890] warn_alloc+0x12b/0x1a0 [ 361.059227][T22890] __vmalloc_node_range_noprof+0xa0/0x1310 [ 361.059254][T22890] ? tracing_record_taskinfo_sched_switch+0x71/0x260 [ 361.059312][T22890] ? probe_sched_wakeup+0x85/0xa0 [ 361.059411][T22890] ? __rcu_read_unlock+0x4f/0x70 [ 361.059431][T22890] ? avc_has_perm_noaudit+0xab/0x130 [ 361.059452][T22890] ? should_fail_ex+0x30/0x280 [ 361.059558][T22890] ? should_failslab+0x8c/0xb0 [ 361.059579][T22890] vmalloc_user_noprof+0x7d/0xb0 [ 361.059602][T22890] ? xskq_create+0x80/0xe0 [ 361.059684][T22890] xskq_create+0x80/0xe0 [ 361.059715][T22890] xsk_init_queue+0x95/0xf0 [ 361.059750][T22890] xsk_setsockopt+0x3f5/0x640 [ 361.059786][T22890] ? __pfx_xsk_setsockopt+0x10/0x10 [ 361.059826][T22890] __sys_setsockopt+0x184/0x200 [ 361.059858][T22890] __x64_sys_setsockopt+0x64/0x80 [ 361.059947][T22890] x64_sys_call+0x21d5/0x3000 [ 361.059975][T22890] do_syscall_64+0xca/0x2b0 [ 361.060009][T22890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.060032][T22890] RIP: 0033:0x7effe153f749 [ 361.060122][T22890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.060143][T22890] RSP: 002b:00007effdff9f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 361.060186][T22890] RAX: ffffffffffffffda RBX: 00007effe1795fa0 RCX: 00007effe153f749 [ 361.060199][T22890] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 361.060211][T22890] RBP: 00007effe15c3f91 R08: 0000000000000004 R09: 0000000000000000 [ 361.060246][T22890] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.060260][T22890] R13: 00007effe1796038 R14: 00007effe1795fa0 R15: 00007ffce0d444c8 [ 361.060278][T22890] [ 361.275630][T22890] Mem-Info: [ 361.279212][T22890] active_anon:8793 inactive_anon:2735 isolated_anon:0 [ 361.279212][T22890] active_file:19976 inactive_file:2454 isolated_file:0 [ 361.279212][T22890] unevictable:0 dirty:260 writeback:0 [ 361.279212][T22890] slab_reclaimable:4115 slab_unreclaimable:68920 [ 361.279212][T22890] mapped:29086 shmem:3096 pagetables:1285 [ 361.279212][T22890] sec_pagetables:0 bounce:0 [ 361.279212][T22890] kernel_misc_reclaimable:0 [ 361.279212][T22890] free:1815010 free_pcp:11385 free_cma:0 [ 361.324734][T22890] Node 0 active_anon:35056kB inactive_anon:10940kB active_file:79904kB inactive_file:9816kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:116344kB dirty:1040kB writeback:0kB shmem:12384kB kernel_stack:5584kB pagetables:5024kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 361.343264][T22893] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 361.353112][T22890] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 361.362319][T22893] SELinux: failed to load policy [ 361.391479][T22890] lowmem_reserve[]: 0 2880 7859 7859 [ 361.391522][T22890] Node 0 DMA32 free:2945988kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949516kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 361.391665][T22890] lowmem_reserve[]: 0 0 4978 4978 [ 361.391717][T22890] Node 0 Normal free:4298436kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35056kB inactive_anon:10940kB active_file:79904kB inactive_file:9816kB unevictable:0kB writepending:1040kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:42316kB local_pcp:11160kB free_cma:0kB [ 361.472391][T22890] lowmem_reserve[]: 0 0 0 0 [ 361.477222][T22890] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 361.490466][T22890] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 4*16kB (M) 3*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945988kB [ 361.506839][T22890] Node 0 Normal: 4184*4kB (UME) 2512*8kB (UM) 439*16kB (UME) 261*32kB (UME) 516*64kB (UME) 689*128kB (UME) 503*256kB (UME) 331*512kB (UME) 211*1024kB (UM) 151*2048kB (UME) 806*4096kB (UM) = 4298352kB [ 361.526852][T22890] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 361.536284][T22890] 25645 total pagecache pages [ 361.541016][T22890] 140 pages in swap cache [ 361.545419][T22890] Free swap = 67844kB [ 361.549535][T22890] Total swap = 124996kB [ 361.553752][T22890] 2097051 pages RAM [ 361.557748][T22890] 0 pages HighMem/MovableOnly [ 361.562521][T22890] 81272 pages reserved [ 361.609541][T22900] serio: Serial port ptm0 [ 361.671428][ T3424] kernel write not supported for file [eventfd] (pid: 3424 comm: kworker/1:5) [ 361.679769][ T29] audit: type=1400 audit(1767005201.784:204814): avc: denied { mounton } for pid=22910 comm="syz.2.4741" path="/1002/file0" dev="tmpfs" ino=5218 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 361.794147][T22929] serio: Serial port ptm0 [ 361.795675][T22927] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 361.806977][T22927] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 361.846648][T22927] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 361.854944][T22927] netlink: 28 bytes leftover after parsing attributes in process `ÿ'. [ 361.947099][T22929] serio: Serial port ptm0 [ 362.021759][T22940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4754'. [ 362.041923][T22940] netlink: 67 bytes leftover after parsing attributes in process `syz.4.4754'. [ 362.425180][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4762'. [ 362.434186][T22956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4762'. [ 362.469804][ T9676] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.469820][T22956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4762'. [ 362.469860][T22956] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4762'. [ 362.482484][ T9676] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.515759][ T1849] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.557687][ T9676] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.591487][ T9676] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.603946][ T1849] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.702447][ T1849] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.773272][ T1849] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.807934][T22984] netlink: 'syz.2.4769': attribute type 4 has an invalid length. [ 362.889202][ T1849] bridge_slave_1: left allmulticast mode [ 362.894969][ T1849] bridge_slave_1: left promiscuous mode [ 362.900822][ T1849] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.929350][ T1849] bridge_slave_0: left allmulticast mode [ 362.935275][ T1849] bridge_slave_0: left promiscuous mode [ 362.941712][ T1849] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.102843][T23012] sd 0:0:1:0: device reset [ 363.152784][T23017] loop4: detected capacity change from 0 to 2048 [ 363.152978][ T1849] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.184840][ T1849] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.199293][T23017] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.212987][ T1849] bond0 (unregistering): Released all slaves [ 363.252513][T23029] IPVS: Unknown mcast interface: ipvlan1 [ 363.359365][T22966] vcan0 speed is unknown, defaulting to 1000 [ 363.402373][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.439330][T22966] lo speed is unknown, defaulting to 1000 [ 363.479244][T23042] SELinux: failed to load policy [ 363.524000][ T29] audit: type=1400 audit(1767005203.634:204815): avc: denied { map } for pid=23045 comm="syz.4.4786" path="socket:[53979]" dev="sockfs" ino=53979 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 363.605831][T22966] lo speed is unknown, defaulting to 1000 [ 363.704153][ T1849] hsr_slave_0: left promiscuous mode [ 363.719090][ T1849] hsr_slave_1: left promiscuous mode [ 363.740234][ T1849] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.747668][ T1849] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.767091][T23082] loop4: detected capacity change from 0 to 8192 [ 363.769349][ T1849] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.780953][ T1849] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.822975][ T1849] veth1_macvtap: left promiscuous mode [ 363.828495][ T1849] veth0_macvtap: left promiscuous mode [ 363.844217][ T1849] veth1_vlan: left promiscuous mode [ 363.851016][ T1849] veth0_vlan: left promiscuous mode [ 363.940928][ T1849] team0 (unregistering): Port device team_slave_1 removed [ 363.955985][ T1849] team0 (unregistering): Port device team_slave_0 removed [ 364.083023][T22966] chnl_net:caif_netlink_parms(): no params data found [ 364.130791][ T29] audit: type=1326 audit(1767005204.244:204816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.186295][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 364.186319][ T29] audit: type=1326 audit(1767005204.264:204818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.216333][ T29] audit: type=1326 audit(1767005204.264:204819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.240111][ T29] audit: type=1326 audit(1767005204.264:204820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.263862][ T29] audit: type=1326 audit(1767005204.264:204821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.287737][ T29] audit: type=1326 audit(1767005204.264:204822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.311899][ T29] audit: type=1326 audit(1767005204.264:204823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.335586][ T29] audit: type=1326 audit(1767005204.264:204824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.359274][ T29] audit: type=1326 audit(1767005204.264:204825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.382982][ T29] audit: type=1326 audit(1767005204.264:204826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.406731][ T29] audit: type=1326 audit(1767005204.274:204827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23211 comm="syz.0.4801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f454956f749 code=0x7ffc0000 [ 364.445844][T22966] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.453069][T22966] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.469171][T22966] bridge_slave_0: entered allmulticast mode [ 364.485446][T22966] bridge_slave_0: entered promiscuous mode [ 364.498048][T22966] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.505242][T22966] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.533179][T22966] bridge_slave_1: entered allmulticast mode [ 364.547356][T22966] bridge_slave_1: entered promiscuous mode [ 364.565828][T23258] syz_tun (unregistering): left allmulticast mode [ 364.596324][T22966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.606985][T22966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.641972][T22966] team0: Port device team_slave_0 added [ 364.654545][T22966] team0: Port device team_slave_1 added [ 364.703058][T23341] random: crng reseeded on system resumption [ 364.709283][T22966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.716342][T22966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.743237][T22966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.766391][T23343] xt_hashlimit: size too large, truncated to 1048576 [ 364.851990][T22966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.859158][T22966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 364.885385][T22966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.987555][T22966] hsr_slave_0: entered promiscuous mode [ 364.994872][T22966] hsr_slave_1: entered promiscuous mode [ 365.120935][T23438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23438 comm=syz.2.4816 [ 365.149285][T22966] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.149744][T23346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.188466][T23346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.270319][T22966] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.321967][T22966] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.370355][T22966] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.456428][T22966] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 365.465591][T22966] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 365.474851][T22966] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 365.484103][T22966] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 365.538467][T22966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.553188][T22966] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.563288][ T9668] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.570471][ T9668] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.581404][ T9205] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.588476][ T9205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.670698][T22966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.807834][T22966] veth0_vlan: entered promiscuous mode [ 365.824963][T22966] veth1_vlan: entered promiscuous mode [ 365.864297][T22966] veth0_macvtap: entered promiscuous mode [ 365.881730][T22966] veth1_macvtap: entered promiscuous mode [ 365.905760][T22966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.928578][T22966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.941580][T23524] loop4: detected capacity change from 0 to 1024 [ 365.949829][T23524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 365.958807][ T9654] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.968541][ T9654] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.979860][ T9654] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.993926][T23524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.006978][ T9654] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.046797][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.104164][T23539] IPVS: Error connecting to the multicast addr [ 366.467624][T23584] loop4: detected capacity change from 0 to 1024 [ 366.491754][T23584] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 366.519029][T23584] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 366.540704][T23584] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 366.548798][T23584] EXT4-fs (loop4): orphan cleanup on readonly fs [ 366.566577][T23584] EXT4-fs error (device loop4): ext4_read_inode_bitmap:167: comm syz.4.4857: Inode bitmap for bg 0 marked uninitialized [ 366.583044][T23584] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 366.599696][T23584] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.4857: path /121/file0: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 366.630659][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.745299][T23614] loop4: detected capacity change from 0 to 512 [ 366.755500][T23614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 366.764301][T23614] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 366.785200][T23614] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.4858: Allocating blocks 41-42 which overlap fs metadata [ 366.800485][T23614] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.4858: Allocating blocks 41-42 which overlap fs metadata [ 366.814760][T23614] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4858: Failed to acquire dquot type 1 [ 366.826583][T23614] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 366.841402][T23614] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4858: corrupted inode contents [ 366.853452][T23614] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.4858: mark_inode_dirty error [ 366.865090][T23614] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4858: corrupted inode contents [ 366.877378][T23614] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.4858: mark_inode_dirty error [ 366.891322][T23614] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4858: corrupted inode contents [ 366.907623][T23614] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 366.923481][T23614] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.4858: corrupted inode contents [ 366.937160][T23614] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.4858: mark_inode_dirty error [ 366.948770][T23614] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 366.958520][T23614] EXT4-fs (loop4): 1 truncate cleaned up [ 366.968377][T23614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.005835][T23629] __nla_validate_parse: 6 callbacks suppressed [ 367.005855][T23629] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4861'. [ 367.022171][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.152380][T23652] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4867'. [ 367.174337][ T3423] hid_parser_main: 7 callbacks suppressed [ 367.174426][ T3423] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x4 [ 367.188351][ T3423] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x2 [ 367.208074][ T3423] hid-generic 0000:3000000:0000.0007: unknown main item tag 0x3 [ 367.216817][ T3423] hid-generic 0000:3000000:0000.0007: hidraw0: HID v0.00 Device [sy] on syz0 [ 367.323285][T23681] loop4: detected capacity change from 0 to 512 [ 367.333997][ T9668] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.351947][T23681] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4876: Failed to acquire dquot type 1 [ 367.383663][T23681] EXT4-fs (loop4): 1 truncate cleaned up [ 367.390839][T23681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 367.403502][T23681] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.416080][ T9668] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.437178][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.444964][T23651] vcan0 speed is unknown, defaulting to 1000 [ 367.484799][ T9668] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.496587][T23651] lo speed is unknown, defaulting to 1000 [ 367.539606][T23651] lo speed is unknown, defaulting to 1000 [ 367.547945][ T9668] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.590874][T23706] loop4: detected capacity change from 0 to 164 [ 367.749377][ T9668] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.768227][ T9668] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.780890][ T9668] bond0 (unregistering): Released all slaves [ 367.796226][T23820] loop5: detected capacity change from 0 to 1024 [ 367.805644][T23651] chnl_net:caif_netlink_parms(): no params data found [ 367.827690][T23820] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 367.843843][ T9668] tipc: Disabling bearer [ 367.849268][ T9668] tipc: Left network mode [ 367.855866][T23820] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 367.874182][T23820] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4885: bg 0: block 112: padding at end of block bitmap is not set [ 367.930519][T23651] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.937670][T23651] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.946774][T22966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 367.956926][T23651] bridge_slave_0: entered allmulticast mode [ 367.971256][T23651] bridge_slave_0: entered promiscuous mode [ 367.984828][T23651] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.992184][T23651] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.002413][T23651] bridge_slave_1: entered allmulticast mode [ 368.020255][T23651] bridge_slave_1: entered promiscuous mode [ 368.118586][T23919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4894'. [ 368.140812][T23651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.152531][ T9668] hsr_slave_0: left promiscuous mode [ 368.158383][ T9668] hsr_slave_1: left promiscuous mode [ 368.164633][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.172139][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.187050][ T9668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.194674][ T9668] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.235097][ T9668] veth1_macvtap: left promiscuous mode [ 368.244479][ T9668] veth0_macvtap: left promiscuous mode [ 368.251060][ T9668] veth1_vlan: left promiscuous mode [ 368.256864][ T9668] veth0_vlan: left promiscuous mode [ 368.485035][ T9668] team0 (unregistering): Port device team_slave_1 removed [ 368.495144][ T9668] team0 (unregistering): Port device team_slave_0 removed [ 368.589203][T23938] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 369.027293][T23651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.040709][T23930] vlan2: entered allmulticast mode [ 369.047297][T23930] dummy0: entered allmulticast mode [ 369.095515][T23651] team0: Port device team_slave_0 added [ 369.103202][T23651] team0: Port device team_slave_1 added [ 369.131492][T23651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.139330][T23651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.165621][T23651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.178213][T23651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.185251][T23651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.211392][T23651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.223247][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 369.223264][ T29] audit: type=1326 audit(1767005209.294:205031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23993 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 369.253489][ T29] audit: type=1326 audit(1767005209.294:205032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23993 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 369.277259][ T29] audit: type=1326 audit(1767005209.294:205033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23993 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 369.301241][ T29] audit: type=1326 audit(1767005209.294:205034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23993 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 369.324975][ T29] audit: type=1326 audit(1767005209.294:205035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23993 comm="syz.2.4899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effe153f749 code=0x7ffc0000 [ 369.360631][ T29] audit: type=1400 audit(1767005209.474:205036): avc: denied { bind } for pid=24000 comm="syz.0.4901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 369.380427][ T29] audit: type=1400 audit(1767005209.474:205037): avc: denied { name_bind } for pid=24000 comm="syz.0.4901" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 369.402617][ T29] audit: type=1400 audit(1767005209.474:205038): avc: denied { node_bind } for pid=24000 comm="syz.0.4901" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 369.438367][T23651] hsr_slave_0: entered promiscuous mode [ 369.445581][T23651] hsr_slave_1: entered promiscuous mode [ 369.452365][T23651] debugfs: 'hsr0' already exists in 'hsr' [ 369.458222][T23651] Cannot create hsr debugfs directory [ 369.473241][ T29] audit: type=1400 audit(1767005209.574:205039): avc: denied { read write } for pid=24034 comm="syz.2.4903" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 369.497009][ T29] audit: type=1400 audit(1767005209.574:205040): avc: denied { open } for pid=24034 comm="syz.2.4903" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 369.787779][T23651] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 369.797339][T23651] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 369.809086][T23651] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 369.818180][T23651] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 369.887361][T23651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.902303][T23651] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.912211][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.919407][ T7539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.952321][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.959880][ T7539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.974497][T24171] loop5: detected capacity change from 0 to 4096 [ 369.981415][T24171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 369.997497][T24171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.113852][T23651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.204258][T24184] syzkaller0: entered promiscuous mode [ 370.210023][T24184] syzkaller0: entered allmulticast mode [ 370.346384][T24202] loop4: detected capacity change from 0 to 1024 [ 370.360503][T24202] EXT4-fs: Ignoring removed mblk_io_submit option [ 370.377600][T24202] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 370.409528][T24202] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.4925: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 370.441870][T23651] veth0_vlan: entered promiscuous mode [ 370.451552][T23651] veth1_vlan: entered promiscuous mode [ 370.494151][T22966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.505499][T23651] veth0_macvtap: entered promiscuous mode [ 370.511664][T24202] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4925: couldn't read orphan inode 11 (err -117) [ 370.526331][T23651] veth1_macvtap: entered promiscuous mode [ 370.540972][T24202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 370.574270][T23651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 370.584078][T24202] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.4925: Invalid block bitmap block 0 in block_group 0 [ 370.600603][T24202] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.4925: Failed to acquire dquot type 0 [ 370.600985][T24212] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4926'. [ 370.613955][T23651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.633371][ T9491] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.646252][T24214] macsec1: entered promiscuous mode [ 370.651699][T24214] bridge0: entered promiscuous mode [ 370.657663][T24214] bridge0: port 1(macsec1) entered blocking state [ 370.660258][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.664579][T24214] bridge0: port 1(macsec1) entered disabled state [ 370.680432][T24214] macsec1: entered allmulticast mode [ 370.685760][T24214] bridge0: entered allmulticast mode [ 370.692233][T24214] macsec1: left allmulticast mode [ 370.697311][T24214] bridge0: left allmulticast mode [ 370.703323][T24214] bridge0: left promiscuous mode [ 370.710654][ T9491] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.725535][ T9491] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.735956][ T9491] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.873597][T24247] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4934'. [ 371.025602][T24254] vcan0 speed is unknown, defaulting to 1000 [ 371.042035][T24264] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4940'. [ 371.128033][T24265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.163771][T24265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.163793][T24254] lo speed is unknown, defaulting to 1000 [ 371.257332][T24282] netlink: 87 bytes leftover after parsing attributes in process `syz.2.4945'. [ 371.303476][T24254] lo speed is unknown, defaulting to 1000 [ 371.429521][T24319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4952'. [ 371.703771][T24334] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 372.062631][T24355] loop6: detected capacity change from 0 to 7 [ 372.229551][T24364] netdevsim netdevsim6: Direct firmware load for ./file1 failed with error -2 [ 372.253814][T24368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.263248][T24368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.275111][ T3423] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x4 [ 372.283183][ T3423] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x2 [ 372.291273][ T3423] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 372.300452][ T3423] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 372.308197][ T3423] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 372.316348][ T3423] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 372.324092][ T3423] hid-generic 0000:3000000:0000.0008: unknown main item tag 0x0 [ 372.345672][ T3423] hid-generic 0000:3000000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 372.618636][T24417] netlink: 7 bytes leftover after parsing attributes in process `syz.6.4989'. [ 372.662428][T24424] loop4: detected capacity change from 0 to 512 [ 372.681758][T24424] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 372.697127][T24424] EXT4-fs (loop4): mount failed [ 372.734537][T24435] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4995'. [ 372.900972][T24452] loop5: detected capacity change from 0 to 2048 [ 372.907973][T24452] EXT4-fs: Ignoring removed nobh option [ 372.920563][T24452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.967485][T24458] netlink: 168 bytes leftover after parsing attributes in process `syz.6.5004'. [ 372.977942][T22966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.124227][T24493] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5012'. [ 373.261733][T24513] loop6: detected capacity change from 0 to 128 [ 373.315921][T24522] loop6: detected capacity change from 0 to 512 [ 373.323230][T24522] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 373.334842][T24522] EXT4-fs (loop6): 1 orphan inode deleted [ 373.340668][T24522] EXT4-fs (loop6): 1 truncate cleaned up [ 373.346859][T24522] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.369837][T23651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.427356][T24538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5028'. [ 373.496938][T24551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5032'. [ 373.642132][T24571] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5042'. [ 373.745419][T24582] loop6: detected capacity change from 0 to 2048 [ 373.771608][T24582] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.787710][T24582] netlink: 'syz.6.5046': attribute type 10 has an invalid length. [ 373.795653][T24582] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5046'. [ 373.808716][T24582] batman_adv: batadv0: Adding interface: veth1_vlan [ 373.815468][T24582] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.844062][T24582] batman_adv: batadv0: Interface activated: veth1_vlan [ 373.978772][T24567] Set syz1 is full, maxelem 65536 reached [ 374.001648][T23651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.125532][T24611] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5056'. [ 374.217794][T24624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5061'. [ 374.271145][T24649] netdevsim netdevsim5: Direct firmware load for ./file1 failed with error -2 [ 374.285089][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 374.285109][ T29] audit: type=1400 audit(1767005214.394:205253): avc: denied { execute } for pid=24650 comm="syz.6.5074" dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.312829][ T29] audit: type=1400 audit(1767005214.394:205254): avc: denied { execute_no_trans } for pid=24650 comm="syz.6.5074" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=695 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 374.375891][T24659] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 374.445994][T24664] loop4: detected capacity change from 0 to 4096 [ 374.453876][T24664] EXT4-fs: Ignoring removed nomblk_io_submit option [ 374.467979][T24664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 374.487390][ T29] audit: type=1400 audit(1767005214.594:205255): avc: denied { shutdown } for pid=24654 comm="syz.6.5066" laddr=::1 lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 374.560088][ T29] audit: type=1400 audit(1767005214.674:205256): avc: denied { ioctl } for pid=24680 comm="syz.0.5077" path="socket:[57318]" dev="sockfs" ino=57318 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.587087][T24681] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 374.606978][ T9694] Bluetooth: hci0: Frame reassembly failed (-84) [ 374.613967][ T29] audit: type=1400 audit(1767005214.714:205257): avc: denied { read } for pid=24683 comm="syz.5.5080" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 374.670012][ T29] audit: type=1400 audit(1767005214.784:205258): avc: denied { create } for pid=24682 comm="syz.6.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 374.876818][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 374.893205][ T29] audit: type=1400 audit(1767005215.004:205259): avc: denied { relabelfrom } for pid=24707 comm="syz.6.5089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.913466][ T29] audit: type=1400 audit(1767005215.004:205260): avc: denied { relabelto } for pid=24707 comm="syz.6.5089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 374.965271][ T29] audit: type=1326 audit(1767005215.074:205261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24721 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24270f749 code=0x7ffc0000 [ 374.989527][ T29] audit: type=1326 audit(1767005215.074:205262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24721 comm="syz.4.5090" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe24270f749 code=0x7ffc0000 [ 375.154165][T24740] loop6: detected capacity change from 0 to 512 [ 375.183974][T24740] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.240852][T23651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.253128][T24752] IPVS: Error connecting to the multicast addr [ 375.265998][T24747] vcan0 speed is unknown, defaulting to 1000 [ 375.325690][T24762] pim6reg1: entered promiscuous mode [ 375.331262][T24762] pim6reg1: entered allmulticast mode [ 375.338169][T24763] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 375.358762][T24747] lo speed is unknown, defaulting to 1000 [ 375.391173][T24776] loop6: detected capacity change from 0 to 7 [ 375.437379][T24747] lo speed is unknown, defaulting to 1000 [ 375.743579][T24818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24818 comm=syz.6.5116 [ 375.873298][T24825] SELinux: failed to load policy [ 376.639282][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 376.645413][ T3506] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 377.118912][T24882] vcan0 speed is unknown, defaulting to 1000 [ 377.224879][T24892] macvtap0: refused to change device tx_queue_len [ 377.254282][T24895] loop5: detected capacity change from 0 to 1024 [ 377.272434][T24895] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 377.307626][T22966] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 377.335865][T24882] lo speed is unknown, defaulting to 1000 [ 377.501028][T24918] IPv6: Can't replace route, no match found [ 377.515655][T24882] lo speed is unknown, defaulting to 1000 [ 378.146309][T24976] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 378.738124][T24988] hub 2-0:1.0: USB hub found [ 378.749287][T24988] hub 2-0:1.0: 8 ports detected [ 379.237523][T25012] loop4: detected capacity change from 0 to 512 [ 379.291344][T25012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 379.359936][T25012] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.445470][ T29] kauditd_printk_skb: 116 callbacks suppressed [ 379.445490][ T29] audit: type=1400 audit(1767005219.554:205379): avc: denied { write open } for pid=25011 comm="syz.4.5177" path="/187/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 379.521387][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.564990][T25028] atomic_op ffff88810360fd28 conn xmit_atomic 0000000000000000 [ 379.573703][ T29] audit: type=1400 audit(1767005219.584:205380): avc: denied { append } for pid=25011 comm="syz.4.5177" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 379.596376][ T29] audit: type=1400 audit(1767005219.584:205381): avc: denied { ioctl } for pid=25011 comm="syz.4.5177" path="/187/file1/file2" dev="loop4" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 379.621361][ T29] audit: type=1400 audit(1767005219.674:205382): avc: denied { bind } for pid=25027 comm="syz.5.5181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.640966][ T29] audit: type=1400 audit(1767005219.674:205383): avc: denied { write } for pid=25027 comm="syz.5.5181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 379.727391][T25036] __nla_validate_parse: 13 callbacks suppressed [ 379.727574][T25036] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5183'. [ 379.861371][ T29] audit: type=1400 audit(1767005219.974:205384): avc: denied { ioctl } for pid=25049 comm="syz.6.5188" path="socket:[57793]" dev="sockfs" ino=57793 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 379.893330][T25052] veth4: entered promiscuous mode [ 379.898424][T25052] veth4: entered allmulticast mode [ 380.049832][ T29] audit: type=1400 audit(1767005220.164:205385): avc: denied { create } for pid=25087 comm="syz.6.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 380.109994][ T29] audit: type=1400 audit(1767005220.184:205386): avc: denied { write } for pid=25087 comm="syz.6.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 380.168656][T25099] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5197'. [ 380.201999][T25101] loop6: detected capacity change from 0 to 512 [ 380.216743][T25101] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 380.231121][T25101] EXT4-fs (loop6): 1 truncate cleaned up [ 380.243962][T25101] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.258266][ T29] audit: type=1400 audit(1767005220.364:205387): avc: denied { remove_name } for pid=25100 comm="syz.6.5198" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 380.281544][ T29] audit: type=1400 audit(1767005220.364:205388): avc: denied { rename } for pid=25100 comm="syz.6.5198" name="file0" dev="loop6" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 380.327801][T23651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.384649][T25119] netlink: 212924 bytes leftover after parsing attributes in process `syz.6.5202'. [ 380.441784][T25121] tipc: Started in network mode [ 380.448359][T25121] tipc: Node identity ac14140f, cluster identity 4711 [ 380.462481][T25121] tipc: New replicast peer: 255.255.255.255 [ 380.473670][T25121] tipc: Enabled bearer , priority 10 [ 380.577684][ T3481] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 380.593094][ T3481] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 380.657192][T25138] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 381.567007][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.574542][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.582096][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.589544][ T9] tipc: Node number set to 2886997007 [ 381.595615][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.603218][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.610757][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.618233][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.625776][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.633239][ T3481] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 381.641963][ T3481] hid-generic 0000:0000:0000.000A: hidraw0: HID v8.01 Device [syz0] on syz0 [ 381.709721][T25182] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.5226' sets config #1 [ 381.822579][T25191] loop4: detected capacity change from 0 to 1024 [ 381.861579][T25195] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 381.868230][T25195] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 381.876715][T25195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5230'. [ 381.886410][T25195] hsr_slave_0: left promiscuous mode [ 381.894059][T25195] hsr_slave_1: left promiscuous mode [ 381.894423][T25191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.824671][T25188] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 382.882859][T20111] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.925455][T25211] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5233'. [ 382.949133][T25213] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5235'. [ 382.951656][T25216] loop6: detected capacity change from 0 to 512 [ 382.967608][T25216] EXT4-fs warning (device loop6): ext4_xattr_inode_get:560: inode #11: comm syz.6.5236: EA inode hash validation failed [ 382.981278][T25216] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5236: corrupted inode contents [ 382.993584][T25216] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.5236: mark_inode_dirty error [ 383.005313][T25216] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.5236: corrupted inode contents [ 383.018046][T25216] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.5236: mark_inode_dirty error [ 383.032027][T25216] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.5236: mark inode dirty (error -117) [ 383.045116][T25216] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 383.054410][T25216] EXT4-fs (loop6): 1 orphan inode deleted [ 383.060950][T25216] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.091942][T23651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.104996][T25226] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5240'. [ 383.131003][T25236] IPv4: Oversized IP packet from 127.202.26.0 [ 383.262306][T25253] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5249'. [ 383.342098][T25262] pimreg: entered allmulticast mode [ 383.348546][T25262] pimreg: left allmulticast mode [ 383.406409][T25270] loop6: detected capacity change from 0 to 512 [ 383.432997][T25270] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 383.461270][T25270] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.534633][T23651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 383.794796][T25303] loop6: detected capacity change from 0 to 512 [ 383.802354][T25303] EXT4-fs: Ignoring removed i_version option [ 383.809002][T25303] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 383.821073][T25303] EXT4-fs (loop6): 1 truncate cleaned up [ 383.827168][T25303] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 383.891652][T23651] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.212755][T25316] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5270'. [ 384.357055][T25322] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5273'. [ 384.558236][T25365] SELinux: failed to load policy [ 384.873635][T25382] __nla_validate_parse: 1 callbacks suppressed [ 384.873653][T25382] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5291'. [ 384.969136][T25371] Set syz1 is full, maxelem 65536 reached [ 384.976593][ T31] ================================================================== [ 384.984705][ T31] BUG: KCSAN: data-race in __bpf_get_stackid / __bpf_get_stackid [ 384.992449][ T31] [ 384.994786][ T31] write to 0xffff8881646d3030 of 4 bytes by task 25391 on cpu 0: [ 385.002590][ T31] __bpf_get_stackid+0x740/0x7d0 [ 385.007543][ T31] bpf_get_stackid+0xf3/0x130 [ 385.012758][ T31] bpf_get_stackid_raw_tp+0xf6/0x120 [ 385.018233][ T31] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 385.023711][ T31] bpf_trace_run2+0x107/0x1d0 [ 385.028412][ T31] kfree+0x353/0x3c0 [ 385.032314][ T31] kobject_uevent_env+0x28d/0x570 [ 385.037438][ T31] kobject_uevent+0x1d/0x30 [ 385.042009][ T31] device_add+0x41f/0x770 [ 385.046387][ T31] wakeup_source_sysfs_add+0x15a/0x1d0 [ 385.051863][ T31] wakeup_source_register+0xfd/0x240 [ 385.057157][ T31] ep_insert+0x8bd/0xdb0 [ 385.061496][ T31] do_epoll_ctl+0x686/0x8a0 [ 385.066095][ T31] __x64_sys_epoll_ctl+0xcb/0x100 [ 385.071136][ T31] x64_sys_call+0x745/0x3000 [ 385.075734][ T31] do_syscall_64+0xca/0x2b0 [ 385.080260][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.086162][ T31] [ 385.088497][ T31] read to 0xffff8881646d3030 of 4 bytes by task 31 on cpu 1: [ 385.096044][ T31] __bpf_get_stackid+0x2dc/0x7d0 [ 385.100995][ T31] bpf_get_stackid+0xf3/0x130 [ 385.105769][ T31] bpf_get_stackid_raw_tp+0xf6/0x120 [ 385.111066][ T31] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 385.116527][ T31] bpf_trace_run2+0x107/0x1d0 [ 385.121215][ T31] kfree+0x353/0x3c0 [ 385.125118][ T31] kfree_rcu_work+0x167/0x1b0 [ 385.129890][ T31] process_scheduled_works+0x4ce/0x9d0 [ 385.135359][ T31] worker_thread+0x582/0x770 [ 385.139958][ T31] kthread+0x489/0x510 [ 385.144105][ T31] ret_from_fork+0x149/0x290 [ 385.148702][ T31] ret_from_fork_asm+0x1a/0x30 [ 385.153475][ T31] [ 385.155808][ T31] value changed: 0x243ea77b -> 0x4c32853b [ 385.161521][ T31] [ 385.163843][ T31] Reported by Kernel Concurrency Sanitizer on: [ 385.170088][ T31] CPU: 1 UID: 0 PID: 31 Comm: kworker/u8:1 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 385.181476][ T31] Tainted: [W]=WARN [ 385.185306][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 385.195368][ T31] Workqueue: kvfree_rcu_reclaim kfree_rcu_work [ 385.201544][ T31] ================================================================== [ 385.264858][T25396] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0'