last executing test programs: 3.40881075s ago: executing program 1 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000090}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x1}, 0x18) close_range(r0, r3, 0x0) 3.3261477s ago: executing program 1 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x401, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 2.869428779s ago: executing program 1 (id=266): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a140000001100"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2.757506518s ago: executing program 4 (id=271): bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fc0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 2.714924788s ago: executing program 4 (id=273): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb", 0x1}], 0x1, 0x0, 0x0, 0x24008081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000800)='kfree_skb\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r4}, 0x10) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 2.627904458s ago: executing program 4 (id=275): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@jqfmt_vfsold}]}, 0xfe, 0x55d, &(0x7f0000000980)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800006, 0x11, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x0, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000740)="de", 0x206c}], 0x1}}], 0x1, 0x0) 2.514018218s ago: executing program 4 (id=278): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000002800, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x7, 0x40, 0x7, 0x2, 0x0, 0x0, 0x20000}, 0x10}}, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0xfff, 0x4, 0x105, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) close(r3) 1.616278915s ago: executing program 0 (id=294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000380)={&(0x7f0000000000)=""/62, 0x32b000, 0x800, 0x2}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x6, r3, 0xffffff7f}, 0x10) 1.546061215s ago: executing program 0 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x2000000000000000}, 0x18) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_ADD={0x6, 0x18, 0x0, @fd, 0x0, 0x0, 0x0, {0x4080}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 1.513327725s ago: executing program 0 (id=296): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7a5, &(0x7f0000000f80)="$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") newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) 1.086859753s ago: executing program 3 (id=297): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setgid(0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./bus\x00', 0xc406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x29a, &(0x7f0000000640)="$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") 1.073521033s ago: executing program 0 (id=298): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_XOR={0x8, 0x7, 0x800}, @TCA_FLOW_KEYS={0x8, 0x1, 0x16157}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x800) 1.027210473s ago: executing program 3 (id=299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc8500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r0}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r1, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 992.277493ms ago: executing program 3 (id=300): ftruncate(0xffffffffffffffff, 0x1002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000640)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r2}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100), 0x10) 945.772143ms ago: executing program 3 (id=301): unshare(0x22040400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$unix(r1, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r1, &(0x7f0000000080)=@file={0x1}, 0x6e) 883.836703ms ago: executing program 1 (id=303): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r4}, 0xa) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@version_u}]}}) 812.479262ms ago: executing program 0 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r2, &(0x7f0000000700)="bb", 0x4000, 0x0, 0x0, 0x0) 771.761742ms ago: executing program 1 (id=306): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fe", 0x1}, {&(0x7f0000000440)="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", 0x480}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0) 714.740322ms ago: executing program 2 (id=308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r2) keyctl$restrict_keyring(0x1d, r3, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r4}) 694.484982ms ago: executing program 0 (id=309): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) 680.537622ms ago: executing program 2 (id=310): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$setlease(r0, 0x400, 0x0) 632.240282ms ago: executing program 2 (id=311): sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x8000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0xa46, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 439.588991ms ago: executing program 2 (id=312): socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x2) 74.49381ms ago: executing program 3 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 59.18783ms ago: executing program 4 (id=314): r0 = perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7d7}, 0x0, 0x0, r0, 0x3) 38.35281ms ago: executing program 2 (id=315): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r3}, 0x18) accept4(r0, 0x0, 0x0, 0x0) 26.76092ms ago: executing program 4 (id=316): socket(0x2a, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x100000d, 0x12, r2, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffd, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) 12.5882ms ago: executing program 3 (id=317): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=318): perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3ff}, 0x0, 0x401, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): [ 19.898241][ T29] audit: type=1400 audit(1736526613.059:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. [ 26.226891][ T29] audit: type=1400 audit(1736526619.389:82): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.228181][ T3288] cgroup: Unknown subsys name 'net' [ 26.249639][ T29] audit: type=1400 audit(1736526619.389:83): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.277007][ T29] audit: type=1400 audit(1736526619.429:84): avc: denied { unmount } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.489137][ T3288] cgroup: Unknown subsys name 'cpuset' [ 26.495281][ T3288] cgroup: Unknown subsys name 'rlimit' [ 26.626158][ T29] audit: type=1400 audit(1736526619.799:85): avc: denied { setattr } for pid=3288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.649435][ T29] audit: type=1400 audit(1736526619.799:86): avc: denied { create } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.669992][ T29] audit: type=1400 audit(1736526619.799:87): avc: denied { write } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.690419][ T29] audit: type=1400 audit(1736526619.799:88): avc: denied { read } for pid=3288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.710718][ T29] audit: type=1400 audit(1736526619.799:89): avc: denied { mounton } for pid=3288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.719833][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.735523][ T29] audit: type=1400 audit(1736526619.799:90): avc: denied { mount } for pid=3288 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.767483][ T29] audit: type=1400 audit(1736526619.919:91): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.804279][ T3288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.784256][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 27.883178][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.890308][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.897469][ T3298] bridge_slave_0: entered allmulticast mode [ 27.904114][ T3298] bridge_slave_0: entered promiscuous mode [ 27.919574][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.926717][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.933982][ T3298] bridge_slave_1: entered allmulticast mode [ 27.940441][ T3298] bridge_slave_1: entered promiscuous mode [ 27.975047][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.986397][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.008742][ T3298] team0: Port device team_slave_0 added [ 28.032623][ T3298] team0: Port device team_slave_1 added [ 28.051310][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.058307][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.084402][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.100317][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.107351][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.133355][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.178095][ T3298] hsr_slave_0: entered promiscuous mode [ 28.184333][ T3298] hsr_slave_1: entered promiscuous mode [ 28.247454][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 28.298674][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.309893][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.318803][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.380301][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.387468][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.394871][ T3311] bridge_slave_0: entered allmulticast mode [ 28.401371][ T3311] bridge_slave_0: entered promiscuous mode [ 28.429226][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.436306][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.443614][ T3311] bridge_slave_1: entered allmulticast mode [ 28.450065][ T3311] bridge_slave_1: entered promiscuous mode [ 28.465242][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.472371][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.479697][ T3307] bridge_slave_0: entered allmulticast mode [ 28.486122][ T3307] bridge_slave_0: entered promiscuous mode [ 28.505306][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.512462][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.519700][ T3307] bridge_slave_1: entered allmulticast mode [ 28.526074][ T3307] bridge_slave_1: entered promiscuous mode [ 28.538432][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.567893][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.582114][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.589209][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.596355][ T3308] bridge_slave_0: entered allmulticast mode [ 28.602865][ T3308] bridge_slave_0: entered promiscuous mode [ 28.617666][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.627877][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.641912][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.649792][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.657128][ T3308] bridge_slave_1: entered allmulticast mode [ 28.663496][ T3308] bridge_slave_1: entered promiscuous mode [ 28.674463][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.681614][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.688879][ T3312] bridge_slave_0: entered allmulticast mode [ 28.695193][ T3312] bridge_slave_0: entered promiscuous mode [ 28.702022][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.709221][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.716414][ T3312] bridge_slave_1: entered allmulticast mode [ 28.722902][ T3312] bridge_slave_1: entered promiscuous mode [ 28.760522][ T3307] team0: Port device team_slave_0 added [ 28.767236][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.777767][ T3311] team0: Port device team_slave_0 added [ 28.784577][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.796717][ T3307] team0: Port device team_slave_1 added [ 28.808586][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.818511][ T3311] team0: Port device team_slave_1 added [ 28.825086][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.839473][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.871972][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.880911][ T3312] team0: Port device team_slave_0 added [ 28.886595][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.904803][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.911879][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.937839][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.949193][ T3312] team0: Port device team_slave_1 added [ 28.955276][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.962279][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.988358][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.999261][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.008092][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.015147][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.041214][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.052895][ T3308] team0: Port device team_slave_0 added [ 29.070937][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.077901][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.103916][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.115140][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.122175][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.148341][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.159656][ T3308] team0: Port device team_slave_1 added [ 29.170903][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.178024][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.204111][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.224656][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.231750][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.257739][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.269747][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.276705][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.302631][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.327369][ T3311] hsr_slave_0: entered promiscuous mode [ 29.333523][ T3311] hsr_slave_1: entered promiscuous mode [ 29.339729][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.347279][ T3311] Cannot create hsr debugfs directory [ 29.393275][ T3308] hsr_slave_0: entered promiscuous mode [ 29.399323][ T3308] hsr_slave_1: entered promiscuous mode [ 29.405301][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.412906][ T3308] Cannot create hsr debugfs directory [ 29.429641][ T3307] hsr_slave_0: entered promiscuous mode [ 29.435575][ T3307] hsr_slave_1: entered promiscuous mode [ 29.441670][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.449347][ T3307] Cannot create hsr debugfs directory [ 29.457700][ T3312] hsr_slave_0: entered promiscuous mode [ 29.463864][ T3312] hsr_slave_1: entered promiscuous mode [ 29.470452][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.478020][ T3312] Cannot create hsr debugfs directory [ 29.642358][ T3311] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.658638][ T3311] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.667718][ T3311] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.685949][ T3311] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.702461][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.713305][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.722172][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.732489][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.760291][ T3312] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.771317][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.778773][ T3312] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.790282][ T3312] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.800395][ T3312] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.835794][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.843492][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.853363][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.862642][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.871747][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.884601][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.891700][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.915101][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.922362][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.977544][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.000587][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.015789][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.027183][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.034284][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.048628][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.055747][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.072103][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.084577][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.096438][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.105975][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.136664][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.147483][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.160015][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.167161][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.176955][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.184022][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.192610][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.199690][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.209442][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.216615][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.247510][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.281389][ T1771] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.288511][ T1771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.298095][ T1771] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.305233][ T1771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.317163][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.361753][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.372194][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.398728][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.454244][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.464007][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.532464][ T3298] veth0_vlan: entered promiscuous mode [ 30.541489][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.556469][ T3311] veth0_vlan: entered promiscuous mode [ 30.573269][ T3298] veth1_vlan: entered promiscuous mode [ 30.583193][ T3311] veth1_vlan: entered promiscuous mode [ 30.604282][ T3298] veth0_macvtap: entered promiscuous mode [ 30.617664][ T3311] veth0_macvtap: entered promiscuous mode [ 30.627129][ T3298] veth1_macvtap: entered promiscuous mode [ 30.643412][ T3311] veth1_macvtap: entered promiscuous mode [ 30.654593][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.675069][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.691769][ T3312] veth0_vlan: entered promiscuous mode [ 30.702007][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.712541][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.723401][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.734465][ T3311] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.745029][ T3311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.757363][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.767547][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.776372][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.785303][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.794036][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.805391][ T3312] veth1_vlan: entered promiscuous mode [ 30.821819][ T3311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.830590][ T3311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.839449][ T3311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.848343][ T3311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.876095][ T3308] veth0_vlan: entered promiscuous mode [ 30.890014][ T3307] veth0_vlan: entered promiscuous mode [ 30.897945][ T3307] veth1_vlan: entered promiscuous mode [ 30.910976][ T3308] veth1_vlan: entered promiscuous mode [ 30.923527][ T3312] veth0_macvtap: entered promiscuous mode [ 30.940711][ T3312] veth1_macvtap: entered promiscuous mode [ 30.952449][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.962705][ T3307] veth0_macvtap: entered promiscuous mode [ 30.982865][ T3308] veth0_macvtap: entered promiscuous mode [ 30.998909][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.009573][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.019502][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.029939][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.041046][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.049697][ T3307] veth1_macvtap: entered promiscuous mode [ 31.059875][ T3308] veth1_macvtap: entered promiscuous mode [ 31.061367][ T3441] syz.0.1[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.065862][ T3441] syz.0.1[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.069343][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.077768][ T3441] syz.0.1[3441] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.087928][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.087950][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.130084][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.139961][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.150464][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.161225][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.177548][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.188061][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.198314][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.200982][ T3442] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 31.208831][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.210875][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.232445][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.242950][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.252893][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.263426][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.273253][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.283772][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.294849][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 31.294871][ T29] audit: type=1400 audit(1736526624.459:133): avc: denied { ioctl } for pid=3438 comm="syz.1.2" path="socket:[3794]" dev="sockfs" ino=3794 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 31.311935][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.337747][ T3445] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6'. [ 31.338811][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355350][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.364107][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.372865][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.375173][ T29] audit: type=1400 audit(1736526624.549:134): avc: denied { ioctl } for pid=3438 comm="syz.1.2" path="socket:[4393]" dev="sockfs" ino=4393 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 31.411143][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.413262][ T29] audit: type=1400 audit(1736526624.579:135): avc: denied { mounton } for pid=3446 comm="syz.0.7" path="/proc/7/task" dev="proc" ino=4400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 31.421682][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.453686][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.464225][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.474062][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.484516][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.494435][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.504882][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.515525][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.536348][ T29] audit: type=1400 audit(1736526624.699:136): avc: denied { create } for pid=3449 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.556838][ T29] audit: type=1400 audit(1736526624.699:137): avc: denied { write } for pid=3449 comm="syz.0.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.595071][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.605825][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.615701][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.626155][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.636004][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.646459][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.656416][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.666950][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.686902][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.699624][ T3312] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.708499][ T3312] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.717183][ T3312] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.726111][ T3312] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.750098][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.758928][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.767747][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.776549][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.788509][ T29] audit: type=1400 audit(1736526624.949:138): avc: denied { create } for pid=3455 comm="syz.0.11" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.809390][ T29] audit: type=1400 audit(1736526624.959:139): avc: denied { write } for pid=3455 comm="syz.0.11" name="file0" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.831531][ T29] audit: type=1400 audit(1736526624.959:140): avc: denied { open } for pid=3455 comm="syz.0.11" path="/5/file0" dev="tmpfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.853800][ T29] audit: type=1400 audit(1736526624.959:141): avc: denied { ioctl } for pid=3455 comm="syz.0.11" path="/5/file0" dev="tmpfs" ino=42 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 31.931415][ T29] audit: type=1400 audit(1736526625.099:142): avc: denied { name_bind } for pid=3459 comm="syz.4.5" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 32.172601][ T3478] loop2: detected capacity change from 0 to 512 [ 32.207481][ T3478] EXT4-fs: Ignoring removed oldalloc option [ 32.217172][ T3478] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.230350][ T3478] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 32.335156][ T3481] syz.1.16 (3481) used greatest stack depth: 9808 bytes left [ 32.457605][ T3478] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 32.476614][ T3478] EXT4-fs (loop2): 1 truncate cleaned up [ 32.484332][ T3478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.563569][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.641098][ T3508] syz.2.25 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.646950][ T3506] process 'syz.4.27' launched './file1' with NULL argv: empty string added [ 32.697132][ T3369] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 32.705618][ T3515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.719454][ T3369] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 32.736100][ T3515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.844094][ T3528] syz.3.35[3528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.844230][ T3528] syz.3.35[3528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.867982][ T3528] syz.3.35[3528] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.132360][ T3543] loop1: detected capacity change from 0 to 8192 [ 33.170855][ T3543] ======================================================= [ 33.170855][ T3543] WARNING: The mand mount option has been deprecated and [ 33.170855][ T3543] and is ignored by this kernel. Remove the mand [ 33.170855][ T3543] option from the mount to silence this warning. [ 33.170855][ T3543] ======================================================= [ 33.231335][ T3543] msdos: Unknown parameter '18446744073709551615ÿÿÿÿÿÿÿÿ01777777777777777777777ÿ0xffffffffffffffff18446744073709551615ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ¨ÐÊ3†…ƒPq{ÚP [ 33.231335][ T3543] n'º|$@OOݱµ’-®+·el' [ 33.423314][ T3558] Illegal XDP return value 3325295192 on prog (id 48) dev N/A, expect packet loss! [ 33.455920][ T3556] serio: Serial port ptm0 [ 33.628588][ T3566] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 33.637919][ T3566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.659903][ T3566] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.674026][ T3566] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 33.730981][ T3564] syzkaller0: entered promiscuous mode [ 33.736613][ T3564] syzkaller0: entered allmulticast mode [ 33.749748][ T3573] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.793048][ T3575] batman_adv: batadv0: Adding interface: dummy0 [ 33.799430][ T3575] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.826853][ T3575] batman_adv: batadv0: Interface activated: dummy0 [ 33.836228][ T3577] netlink: 36 bytes leftover after parsing attributes in process `syz.3.55'. [ 33.866989][ T3575] batadv0: mtu less than device minimum [ 33.873178][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.884145][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.895017][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.899752][ T3582] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 33.905772][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.924920][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.935845][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.946722][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.957626][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.968467][ T3575] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.984953][ T3580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.56'. [ 34.023707][ T3585] raw_sendmsg: syz.2.58 forgot to set AF_INET. Fix it! [ 34.208792][ T3607] loop4: detected capacity change from 0 to 512 [ 34.227453][ T3607] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.66: corrupted in-inode xattr: invalid ea_ino [ 34.245709][ T3607] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.66: couldn't read orphan inode 15 (err -117) [ 34.259468][ T3607] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.331387][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.387573][ T3633] xt_hashlimit: max too large, truncated to 1048576 [ 34.409916][ T3637] loop3: detected capacity change from 0 to 2048 [ 34.412022][ T3633] Cannot find set identified by id 0 to match [ 34.440216][ T3637] loop3: p1 < > p4 [ 34.440223][ T3633] lo speed is unknown, defaulting to 1000 [ 34.450608][ T3637] loop3: p4 size 8388608 extends beyond EOD, truncated [ 34.457718][ T3633] lo speed is unknown, defaulting to 1000 [ 34.469562][ T3000] loop3: p1 < > p4 [ 34.474231][ T3633] lo speed is unknown, defaulting to 1000 [ 34.480901][ T3000] loop3: p4 size 8388608 extends beyond EOD, truncated [ 34.486013][ T3633] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 34.507523][ T3633] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 34.537434][ T3633] lo speed is unknown, defaulting to 1000 [ 34.572523][ T3633] lo speed is unknown, defaulting to 1000 [ 34.579733][ T3651] ref_ctr increment failed for inode: 0x46 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888100056f40 [ 34.593056][ T3633] lo speed is unknown, defaulting to 1000 [ 34.609545][ T3289] udevd[3289]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.612941][ T3653] udevd[3653]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 34.631255][ T3633] lo speed is unknown, defaulting to 1000 [ 34.637430][ T3633] lo speed is unknown, defaulting to 1000 [ 34.646201][ T3650] uprobe: syz.2.72:3650 failed to unregister, leaking uprobe [ 34.668908][ T3653] udevd[3653]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 34.680890][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 34.839910][ T3678] loop1: detected capacity change from 0 to 128 [ 34.846281][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.853501][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.859756][ T3678] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.866172][ T3679] bridge_slave_1: left allmulticast mode [ 34.874603][ T3678] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 34.878321][ T3679] bridge_slave_1: left promiscuous mode [ 34.878428][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.963474][ T3679] bridge_slave_0: left allmulticast mode [ 34.969463][ T3679] bridge_slave_0: left promiscuous mode [ 34.975251][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.987406][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 35.025958][ T3692] Zero length message leads to an empty skb [ 35.035917][ T3690] syz.1.89[3690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.036039][ T3690] syz.1.89[3690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.047624][ T3690] syz.1.89[3690] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.193490][ T3706] batman_adv: batadv0: Interface deactivated: dummy0 [ 35.211415][ T3706] batman_adv: batadv0: Removing interface: dummy0 [ 35.222091][ T3706] bridge_slave_0: left allmulticast mode [ 35.227812][ T3706] bridge_slave_0: left promiscuous mode [ 35.233560][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.243061][ T3706] bridge_slave_1: left allmulticast mode [ 35.248873][ T3706] bridge_slave_1: left promiscuous mode [ 35.254548][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.268871][ T3706] bond0: (slave bond_slave_0): Releasing backup interface [ 35.282959][ T3706] bond0: (slave bond_slave_1): Releasing backup interface [ 35.311438][ T3706] team0: Port device team_slave_0 removed [ 35.328477][ T3706] team0: Port device team_slave_1 removed [ 35.341859][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.349410][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.360020][ T3706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.367527][ T3706] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.461771][ T3718] loop4: detected capacity change from 0 to 1024 [ 35.484795][ T3718] EXT4-fs: Ignoring removed bh option [ 35.512414][ T3718] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.617425][ T3726] loop2: detected capacity change from 0 to 2048 [ 35.703334][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 35.718357][ T3729] bridge_slave_1: left allmulticast mode [ 35.724143][ T3729] bridge_slave_1: left promiscuous mode [ 35.730038][ T3729] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.738044][ T3729] bridge_slave_0: left allmulticast mode [ 35.743814][ T3729] bridge_slave_0: left promiscuous mode [ 35.749593][ T3729] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.778810][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.815222][ T3733] capability: warning: `syz.4.105' uses deprecated v2 capabilities in a way that may be insecure [ 35.994554][ T3749] lo speed is unknown, defaulting to 1000 [ 36.104285][ T3765] loop4: detected capacity change from 0 to 512 [ 36.138578][ T3765] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.168012][ T3765] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.291618][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.376796][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 36.376818][ T29] audit: type=1326 audit(1736526629.519:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be865d29 code=0x7ffc0000 [ 36.406568][ T29] audit: type=1326 audit(1736526629.519:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f87be865d29 code=0x7ffc0000 [ 36.429871][ T29] audit: type=1326 audit(1736526629.519:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be865d29 code=0x7ffc0000 [ 36.453243][ T29] audit: type=1326 audit(1736526629.519:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3772 comm="syz.4.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be865d29 code=0x7ffc0000 [ 36.542019][ T3775] loop4: detected capacity change from 0 to 1024 [ 36.561044][ T3775] EXT4-fs: Ignoring removed i_version option [ 36.573609][ T3775] EXT4-fs: Ignoring removed bh option [ 36.594420][ T3775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.612493][ T29] audit: type=1400 audit(1736526629.779:467): avc: denied { append } for pid=3774 comm="syz.4.116" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.655671][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.668277][ T3781] lo speed is unknown, defaulting to 1000 [ 36.677443][ T3782] loop3: detected capacity change from 0 to 256 [ 36.699318][ T3782] FAT-fs (loop3): bogus number of FAT sectors [ 36.705502][ T3782] FAT-fs (loop3): Can't find a valid FAT filesystem [ 36.715386][ T29] audit: type=1400 audit(1736526629.889:468): avc: denied { read } for pid=3783 comm="syz.4.119" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.739814][ T29] audit: type=1400 audit(1736526629.889:469): avc: denied { open } for pid=3783 comm="syz.4.119" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.776233][ T3784] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 36.785818][ T29] audit: type=1400 audit(1736526629.889:470): avc: denied { ioctl } for pid=3783 comm="syz.4.119" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 36.955211][ T29] audit: type=1400 audit(1736526630.119:471): avc: denied { listen } for pid=3789 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 36.975072][ T29] audit: type=1400 audit(1736526630.119:472): avc: denied { accept } for pid=3789 comm="syz.0.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.199896][ T3805] .: renamed from bond0 (while UP) [ 37.523142][ T3831] loop2: detected capacity change from 0 to 1024 [ 37.541860][ T1036] IPVS: starting estimator thread 0... [ 37.547499][ T3831] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 37.591802][ T3831] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 37.614597][ T3831] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.622079][ T3831] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5837: Corrupt filesystem [ 37.638397][ T3832] IPVS: using max 1872 ests per chain, 93600 per kthread [ 37.663411][ T3834] lo speed is unknown, defaulting to 1000 [ 37.674195][ T3831] EXT4-fs (loop2): Remounting filesystem read-only [ 37.707127][ T3831] EXT4-fs (loop2): 1 orphan inode deleted [ 37.728949][ T3831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 37.741295][ T3831] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 37.748411][ T3831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.782742][ T3831] loop2: detected capacity change from 0 to 512 [ 37.801924][ T3831] EXT4-fs: Ignoring removed bh option [ 37.819621][ T3831] EXT4-fs error (device loop2): __ext4_iget:4984: inode #15: block 1803188595: comm syz.2.139: invalid block [ 37.852821][ T3831] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.139: couldn't read orphan inode 15 (err -117) [ 37.868570][ T3831] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.888289][ T3844] mmap: syz.4.142 (3844) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.989451][ T3851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.146'. [ 38.029014][ T3831] syz.2.139 (3831) used greatest stack depth: 9648 bytes left [ 38.058024][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.098551][ T3853] netlink: 'syz.0.147': attribute type 1 has an invalid length. [ 38.125295][ T3856] loop2: detected capacity change from 0 to 164 [ 38.183823][ T3858] veth2: entered promiscuous mode [ 38.189961][ T3858] batadv0: entered promiscuous mode [ 38.198803][ T3858] hsr1: Slave A (veth2) is not up; please bring it up to get a fully working HSR network [ 38.231944][ T3860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.149'. [ 38.271261][ T3860] hsr_slave_1 (unregistering): left promiscuous mode [ 38.519735][ T3881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.157'. [ 38.578278][ T3881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.157'. [ 38.758887][ T3901] netlink: 'syz.4.163': attribute type 10 has an invalid length. [ 38.789169][ T3901] syz_tun: entered promiscuous mode [ 38.811764][ T3901] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 38.825683][ T3903] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.855280][ T3905] netlink: 24 bytes leftover after parsing attributes in process `syz.3.165'. [ 39.155109][ T3928] syzkaller0: entered allmulticast mode [ 39.169953][ T3925] netlink: 108 bytes leftover after parsing attributes in process `syz.3.174'. [ 39.179075][ T3925] netlink: 108 bytes leftover after parsing attributes in process `syz.3.174'. [ 39.188260][ T3925] netlink: 108 bytes leftover after parsing attributes in process `syz.3.174'. [ 39.216571][ T3928] syzkaller0 (unregistering): left allmulticast mode [ 39.274635][ T3936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.179'. [ 39.370542][ T3944] loop0: detected capacity change from 0 to 1024 [ 39.415392][ T3944] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.485778][ T3956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.183'. [ 39.523233][ T3964] tipc: Started in network mode [ 39.528252][ T3964] tipc: Node identity 7f000001, cluster identity 4711 [ 39.535325][ T3964] tipc: Enabled bearer , priority 10 [ 39.538586][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.545450][ T3964] tipc: Enabled bearer , priority 0 [ 39.562778][ T3966] loop1: detected capacity change from 0 to 128 [ 39.583785][ T3966] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.596140][ T3966] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 39.675855][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.686430][ T3973] xt_hashlimit: size too large, truncated to 1048576 [ 39.743974][ T3979] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 39.882966][ T3989] loop2: detected capacity change from 0 to 2048 [ 39.923613][ T3989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.229701][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.331939][ T4024] loop1: detected capacity change from 0 to 128 [ 40.370790][ T4028] loop3: detected capacity change from 0 to 512 [ 40.377493][ T4028] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.384645][ T4024] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 40.393996][ T4028] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 40.411023][ T4028] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.215: corrupted in-inode xattr: e_value out of bounds [ 40.449340][ T4028] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.215: couldn't read orphan inode 15 (err -117) [ 40.477174][ T4028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.615691][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.650643][ T1036] tipc: Node number set to 2130706433 [ 40.672617][ T4043] loop3: detected capacity change from 0 to 128 [ 40.696650][ T4045] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 40.714638][ T4043] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.727136][ T4043] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.730284][ T4045] loop2: detected capacity change from 0 to 512 [ 40.779338][ T4043] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. Quota mode: none. [ 40.791273][ T4045] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.221: Failed to acquire dquot type 1 [ 40.806338][ T4045] EXT4-fs (loop2): 1 truncate cleaned up [ 40.813983][ T4045] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.826823][ T4045] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.862752][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.895936][ T3307] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.024471][ T4070] ref_ctr increment failed for inode: 0x106 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff888118522a00 [ 41.037166][ T4069] uprobe: syz.3.232:4069 failed to unregister, leaking uprobe [ 41.604631][ T4089] loop0: detected capacity change from 0 to 128 [ 41.621709][ T4089] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 41.652191][ T4089] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 41.660209][ T4089] FAT-fs (loop0): Filesystem has been set read-only [ 41.671026][ T4089] syz.0.239: attempt to access beyond end of device [ 41.671026][ T4089] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 41.708376][ T4089] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 41.716295][ T4089] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 41.732647][ T4091] netlink: 'syz.3.240': attribute type 7 has an invalid length. [ 41.745606][ T4089] syz.0.239: attempt to access beyond end of device [ 41.745606][ T4089] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 41.775584][ T4089] syz.0.239: attempt to access beyond end of device [ 41.775584][ T4089] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 42.136782][ T29] kauditd_printk_skb: 176 callbacks suppressed [ 42.136798][ T29] audit: type=1326 audit(1736526635.299:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be865d29 code=0x7ffc0000 [ 42.205917][ T29] audit: type=1326 audit(1736526635.339:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f87be865d29 code=0x7ffc0000 [ 42.229122][ T29] audit: type=1326 audit(1736526635.339:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4109 comm="syz.4.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87be865d29 code=0x7ffc0000 [ 42.252466][ T29] audit: type=1326 audit(1736526635.349:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d425d29 code=0x7ffc0000 [ 42.275845][ T29] audit: type=1326 audit(1736526635.349:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f140d425d29 code=0x7ffc0000 [ 42.299132][ T29] audit: type=1326 audit(1736526635.349:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d425d29 code=0x7ffc0000 [ 42.322400][ T29] audit: type=1326 audit(1736526635.359:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f140d425d29 code=0x7ffc0000 [ 42.345732][ T29] audit: type=1326 audit(1736526635.359:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4111 comm="syz.2.249" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140d425d29 code=0x7ffc0000 [ 42.468578][ T29] audit: type=1400 audit(1736526635.629:651): avc: denied { connect } for pid=4119 comm="syz.1.253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 42.506418][ T29] audit: type=1400 audit(1736526635.669:652): avc: denied { bind } for pid=4113 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.930901][ T4147] netlink: 'syz.2.265': attribute type 4 has an invalid length. [ 43.049791][ T4155] loop2: detected capacity change from 0 to 1024 [ 43.111555][ T4155] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.136327][ T4155] EXT4-fs (loop2): shut down requested (0) [ 43.141456][ T4149] __nla_validate_parse: 8 callbacks suppressed [ 43.141519][ T4149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.266'. [ 43.258951][ T3375] kernel write not supported for file /125/attr/exec (pid: 3375 comm: kworker/1:4) [ 43.319491][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.426106][ T4189] loop0: detected capacity change from 0 to 512 [ 43.441187][ T4189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 43.497170][ T4189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.520824][ T4200] loop2: detected capacity change from 0 to 512 [ 43.540440][ T4189] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.554690][ T4189] SELinux: security_context_str_to_sid (@) failed with errno=-22 [ 43.571475][ T4205] netlink: 24 bytes leftover after parsing attributes in process `syz.3.284'. [ 43.577147][ T4203] loop1: detected capacity change from 0 to 1024 [ 43.594788][ T4200] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #15: comm syz.2.283: casefold flag without casefold feature [ 43.610379][ T4200] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.283: couldn't read orphan inode 15 (err -117) [ 43.629716][ T4200] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.643710][ T4203] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.755612][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.906206][ T4255] netlink: 'syz.2.291': attribute type 1 has an invalid length. [ 43.920761][ T4255] 8021q: adding VLAN 0 to HW filter on device bond1 [ 43.942170][ T4255] bond1: (slave gretap1): making interface the new active one [ 43.950828][ T4255] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 44.089999][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.121157][ T4285] loop0: detected capacity change from 0 to 512 [ 44.128385][ T4285] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 44.151674][ T4285] EXT4-fs (loop0): 1 truncate cleaned up [ 44.158001][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.211955][ T3311] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.336716][ T4316] loop0: detected capacity change from 0 to 2048 [ 44.360399][ T4316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.578143][ T4332] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.593381][ T4332] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 44.605864][ T4332] EXT4-fs (loop0): This should not happen!! Data will be lost [ 44.605864][ T4332] [ 44.615550][ T4332] EXT4-fs (loop0): Total free blocks count 0 [ 44.621685][ T4332] EXT4-fs (loop0): Free/Dirty block details [ 44.627600][ T4332] EXT4-fs (loop0): free_blocks=2415919104 [ 44.633402][ T4332] EXT4-fs (loop0): dirty_blocks=8192 [ 44.638752][ T4332] EXT4-fs (loop0): Block reservation details [ 44.644775][ T4332] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 44.664952][ T4316] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 44.759510][ T4368] loop3: detected capacity change from 0 to 128 [ 44.943531][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.192864][ T4420] loop0: detected capacity change from 0 to 8192 [ 45.234803][ T4430] loop2: detected capacity change from 0 to 128 [ 45.248131][ T4430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 45.883945][ T4420] ================================================================== [ 45.892068][ T4420] BUG: KCSAN: data-race in __xa_set_mark / xas_find_marked [ 45.899326][ T4420] [ 45.901672][ T4420] write to 0xffff888117134e14 of 4 bytes by task 4431 on cpu 0: [ 45.909323][ T4420] __xa_set_mark+0x182/0x1b0 [ 45.913954][ T4420] __folio_mark_dirty+0x3b5/0x4e0 [ 45.919019][ T4420] mark_buffer_dirty+0x134/0x230 [ 45.923989][ T4420] block_write_end+0x123/0x210 [ 45.928785][ T4420] generic_write_end+0x5c/0x160 [ 45.933676][ T4420] fat_write_end+0x4e/0x160 [ 45.938219][ T4420] generic_perform_write+0x33c/0x4a0 [ 45.943540][ T4420] __generic_file_write_iter+0xa1/0x120 [ 45.949111][ T4420] generic_file_write_iter+0x77/0x1c0 [ 45.954561][ T4420] iter_file_splice_write+0x5f1/0x980 [ 45.959976][ T4420] direct_splice_actor+0x160/0x2c0 [ 45.965118][ T4420] splice_direct_to_actor+0x302/0x670 [ 45.970520][ T4420] do_splice_direct+0xd7/0x150 [ 45.975322][ T4420] do_sendfile+0x398/0x660 [ 45.979769][ T4420] __x64_sys_sendfile64+0x110/0x150 [ 45.984996][ T4420] x64_sys_call+0xfbd/0x2dc0 [ 45.989657][ T4420] do_syscall_64+0xc9/0x1c0 [ 45.994192][ T4420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.000135][ T4420] [ 46.002477][ T4420] read to 0xffff888117134e14 of 4 bytes by task 4420 on cpu 1: [ 46.010054][ T4420] xas_find_marked+0x60a/0x660 [ 46.014852][ T4420] find_get_entry+0x54/0x390 [ 46.019478][ T4420] filemap_get_folios_tag+0x9e/0x210 [ 46.024804][ T4420] file_write_and_wait_range+0x204/0x2f0 [ 46.030466][ T4420] __generic_file_fsync+0x46/0x140 [ 46.035610][ T4420] fat_file_fsync+0x46/0x100 [ 46.040248][ T4420] vfs_fsync_range+0x116/0x130 [ 46.045058][ T4420] generic_file_write_iter+0x185/0x1c0 [ 46.050551][ T4420] iter_file_splice_write+0x5f1/0x980 [ 46.055963][ T4420] direct_splice_actor+0x160/0x2c0 [ 46.061107][ T4420] splice_direct_to_actor+0x302/0x670 [ 46.066528][ T4420] do_splice_direct+0xd7/0x150 [ 46.071329][ T4420] do_sendfile+0x398/0x660 [ 46.075763][ T4420] __x64_sys_sendfile64+0x110/0x150 [ 46.081164][ T4420] x64_sys_call+0xfbd/0x2dc0 [ 46.085783][ T4420] do_syscall_64+0xc9/0x1c0 [ 46.090325][ T4420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.096265][ T4420] [ 46.098603][ T4420] value changed: 0x04000021 -> 0x0e000021 [ 46.104343][ T4420] [ 46.106680][ T4420] Reported by Kernel Concurrency Sanitizer on: [ 46.112860][ T4420] CPU: 1 UID: 0 PID: 4420 Comm: syz.0.309 Not tainted 6.13.0-rc6-syzkaller-00130-g2144da25584e #0 [ 46.123478][ T4420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.133649][ T4420] ==================================================================