last executing test programs: 19.890949407s ago: executing program 3 (id=319): socket$inet6(0xa, 0x80002, 0x4) r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) keyctl$session_to_parent(0x12) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = syz_open_dev$loop(0x0, 0x7, 0x86100) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r2, 0x0, 0x0) socket(0xa, 0x40000000002, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000d80)={r2, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 19.749458128s ago: executing program 3 (id=322): bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x1, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x4040004) 17.254374971s ago: executing program 3 (id=359): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000002000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./bus\x00', 0x120c018, &(0x7f0000000180)={[{@check_relaxed}, {@map_normal}, {@nojoliet}, {@cruft}, {@uid}, {@dmode={'dmode', 0x3d, 0x1000}}, {@session={'session', 0x3d, 0x6}}, {@map_normal}]}, 0xff, 0x534, &(0x7f0000001000)="$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") bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) dup3(r3, 0xffffffffffffffff, 0x0) io_setup(0x3, &(0x7f0000000340)) 17.132754342s ago: executing program 3 (id=362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@dioread_nolock}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@resuid}, {@delalloc}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x39, &(0x7f0000000900)={0x8001, {{0xa, 0x4e22, 0xfffffff7, @local, 0x2}}, {{0xa, 0x4e22, 0x7, @private1, 0x6d26}}}, 0x108) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x88) recvfrom(r2, 0x0, 0x2a, 0x0, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmmsg$inet(r2, &(0x7f0000001880)=[{{&(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x32) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b900000000fffffffff2060000000000000200"}) listxattr(&(0x7f00000008c0)='./file1\x00', 0x0, 0x0) 16.642742244s ago: executing program 3 (id=372): listen(0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20) close(0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$tipc(r4, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 16.284584266s ago: executing program 3 (id=382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x6005, &(0x7f0000001c00)=0x8000000000043, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)=ANY=[@ANYBLOB="0401000016000104000000000000050fe000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000008000000ffffffff0c0015005907350008000000"], 0x104}}, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, &(0x7f00000002c0)=@access={'system_u:object_r:init_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x49) open(0x0, 0x8060, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f0000000700)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f0000000200)="b9", 0x1}, {&(0x7f0000000300)="3006", 0x2}, {&(0x7f0000000400)="d5", 0x1}], 0x4, 0xa) write(r2, 0x0, 0x0) 16.284225696s ago: executing program 32 (id=382): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) set_mempolicy(0x6005, &(0x7f0000001c00)=0x8000000000043, 0x9) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000140)=ANY=[@ANYBLOB="0401000016000104000000000000050fe000000200"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000008000000ffffffff0c0015005907350008000000"], 0x104}}, 0x0) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_create(r1, &(0x7f00000002c0)=@access={'system_u:object_r:init_var_run_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x0, 0x2b}, 0x49) open(0x0, 0x8060, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x0) vmsplice(r4, &(0x7f0000000700)=[{&(0x7f0000000180)='-', 0x1}, {&(0x7f0000000200)="b9", 0x1}, {&(0x7f0000000300)="3006", 0x2}, {&(0x7f0000000400)="d5", 0x1}], 0x4, 0xa) write(r2, 0x0, 0x0) 2.808609585s ago: executing program 5 (id=598): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r2, 0x101) r3 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r3, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) accept4(r2, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.807593665s ago: executing program 5 (id=600): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRESHEX], 0x48) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x2}, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a0000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) 2.783967435s ago: executing program 5 (id=602): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000780)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0xe1, 0x6, 0x6, 0x1, 0x97a, 0x3, "4c1b6ec14c85e972d0e4f00595feffa25cded70f7198d10e39c68514c8b9676b1f92681b3b2270b827e5927d70ecfb2c3300fe441efb1b84ee106b3609d421ed2a6b6f34fda5def0093bf12115ec4e9aa521c8d2123a14920bbced119fc7c55805f077cadf7fcaed5cac5c418ec9873882a29ff0341dab1cf468eef8dc7bcdf7f7f32db557050b67033530d69e364e692c319e5bc799a05210ea1220ef4b61036f8c5406a8163b020a4f3e4b558f55b82b380c5d2e90ecb76effea5e299b1f3f74c7876323fd0a440185a6948ab510aadf4d72562a9ca222172bdb972cb9c375f3"}}, 0x1f9) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073797a320000000008004100727865001400330067656e65766530004000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4880}, 0x20000000) 1.290286423s ago: executing program 5 (id=613): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x59, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0xa, 0x1, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x5452, &(0x7f00000006c0)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x3000c0c0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x300440f1) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000040), 0x4) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x7000014, &(0x7f0000000800)=[{&(0x7f0000000340)="fc", 0x9aab8}], 0x5}, 0x1b8a) 1.207447174s ago: executing program 0 (id=616): r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55d, &(0x7f0000000ec0)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000001080)=0x4) getdents(r1, &(0x7f0000000040)=""/104, 0x4d) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0xb, 0x6, 0x101, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24044005}, 0x240048d0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYRES8=r0, @ANYRES16=r2, @ANYRESDEC=r1, @ANYRES8=r2, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x1c8, 0x0, &(0x7f00000005c0)="b9ff030f6044238cb89e14f088ca1bff430500031100633c77fbac141410e934a0a662079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef73123c899b699eeaa8eaa0073461119663906400f30c060000000000000600000000000000ce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa7fda7c04c3080007b590793112ef6ef33a1198b651326a0d77c0fbb2ec2e1aa61c6c6ba7f7e3cd5ece6a0325aa00679599ec7d0419921740f6502f27f3f5a91a46a073e70f535edbbb14b3d59c5e9c01d52dbaa90a0d57841b90f217b94a034b6891583e3305bcb96e55152625206bfe2550688806479ec35fa002f826042bd5154e2ccab36ab77bfbde0a617649e81e1b9b7fd0ddf06cd48920047fd2c37921787c2b3de7219480d1c025f201ea1992340becdb4fb3e42ff3990ac36abcfc15d1d778e32a2fe81772a5d8ae2f6e3fb92e090ab229000000", 0x0, 0xfe, 0x60000000, 0x7, 0x0, &(0x7f00000002c0)="b36e52d00a2945", &(0x7f0000000300), 0x0, 0xf80d, 0x9}, 0x50) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) ioctl$VT_DISALLOCATE(r2, 0x5608) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfff3, 0x69c}, {0x2, 0x9}, {0xab7, 0x8}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62042, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x4528, 0x8579}) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1.194549813s ago: executing program 1 (id=617): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x1e, r3}, 0x10) 1.113483334s ago: executing program 1 (id=618): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000008c80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @multicast2}}}, @ip_retopts={{0x10}}], 0x30}}], 0x2, 0x840) 1.040532154s ago: executing program 1 (id=619): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000fe850000002300000095"], &(0x7f0000001500)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='page_pool_state_release\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000380)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x5, [@func_proto, @func_proto={0x0, 0x0, 0x0, 0xd, 0x4}, @ptr, @func={0x4, 0x0, 0x0, 0xf, 0x3}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) openat$urandom(0xffffffffffffff9c, 0x0, 0x680, 0x0) 1.040077834s ago: executing program 1 (id=620): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) 990.195764ms ago: executing program 0 (id=622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x803}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000100)) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00\x00\v\x00'}) 872.719015ms ago: executing program 0 (id=624): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40400c1) socket$packet(0x11, 0x3, 0x300) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000009, 0x31, r1, 0xb7a58000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0xfffffffffffff, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) io_submit(0x0, 0x0, &(0x7f0000000540)) socket$can_raw(0x1d, 0x3, 0x1) 636.537726ms ago: executing program 2 (id=626): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x8801, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f0000000500)={[{@data_err_abort}, {@noblock_validity}, {@dioread_lock}, {@init_itable}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000740)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000000)={'vlan1\x00', @broadcast}) 635.554146ms ago: executing program 2 (id=627): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x890b, &(0x7f0000000000)) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 575.684187ms ago: executing program 0 (id=628): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fchdir(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/reserved_size', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r4, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x100, r3, &(0x7f00000000c0)="0d86", 0x2}]) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, 0x0, 0x0) close(r1) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) wait4(r5, &(0x7f0000000080), 0x8, &(0x7f0000000200)) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 558.895427ms ago: executing program 2 (id=629): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000340)={{r0}, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 384.642788ms ago: executing program 4 (id=630): connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)='devices.allow\x00', 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000bc0)) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x4, 'H0I', "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"}}, 0x110) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) dup(0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 362.563088ms ago: executing program 4 (id=631): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x5}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) tkill(r1, 0x13) 350.126088ms ago: executing program 5 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x248, &(0x7f0000000100), 0xfd, 0x48f, &(0x7f0000000940)="$eJzs3M1rHOUfAPDvzG6SX1+TX60vrdVGq1h8SZq0akHBFxA8KAh6qCeJSVpq00aaCLYEG6XUi6AF7yJ4EfwLPHkS9SR41bsUivTS6mllMrPrJtnNSzfJptnPB6aZJ/vMPt/vzDwzz8xkGkDH6s/+SSJ2RsTvEdEbEWl9hW35lNW7dWNm9O8bM6NJVCpv/pVki8XNGzOj1apJ8XNHXihnX5ReTuLFBu1OXbh4ZmRiYvx8UR6cPvv+4NSFi0+dPjtyavzU+Lnh48ePHR169pnhp9ckzyymm/s/mjyw79W3r74+euLquz9/l9QFXZ9Hi57rrc3O1NbJQo+uUWObxa66+aTcxkBYlZ6IyDZX11z/743S5d21z3rjlU/aGhywriqVSmW4+cezFWALS6LdEQDtUT3RZ9e/1WmDhh6bwvWX8gugLO9bxZR/Us7vg/Tk10a71qn9/og4MfvPV9kUq74P0bVOUQEAW9kP2fjnyQbjv3LEPXX1dhfPhvoi4v8RsSci7oqIvRFxd+R1742I+xo30/9Ok/b7F5QXj3/Say2kt6xs/Pd88Wxr/viv9hSsr1SUds3l35WcPD0xfqRYJ4ejqycrDzX89iRiNvv52+fN2q8f/2VT1n51LFjEca3cM3+ZsZHpkZYTL1z/OGJ/uVH+SZT/yyL2RcT+22zj9OPfHpj/m1Jtbvn8l7AGz5kqX0c8lm//2ViQf1Wy9PPJwf/FxPiRwepesdgvv155o1n7ef5pLJ3/ttYTbSLb/tsb7f8v1PLvS+qf104t+oru5dq48senTa9pbnf/707emtf4hyPT0+eHIrqT1xb/vu4Gd7VcrZ/lf/hQ4/6/p1gmy//+iMh24gci4sGIOFjE/lBEPBwRh5bI/6eXH3mvaf4HW9j/10CW/1jD41+z7b/6mdKZH79v1v7Ktv+xamEuqJUc/1YaYCvrDgAAAO4UaUTsjCQdqM2n6cBA/vfye2N7OjE5Nf3EyckPzo3l7wj0RVdavdPVW3c/dKi4N1wtDxflS0X5aHHf+MvStrnywOjkxFi7k4cOt6NJ/8/8WWp3dMC6874WdC79HzrX7fd/Rw640y3Ti9ONigPYeM7i0Lka9f9L9YUk8r+SB7Yc53/oXLX+/8UKKte97rXw5U3gzrPU+b/Su4GBABvO+B86Uivv9W+KmfgmYuk6yWYJdVUzn7WyeHkDIoy0jeunuy0bZbgU0cZdorzS/9UiLlQutdxou49MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAa+PfAAAA///67uRi") mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x411, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=virt yio']) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8943, &(0x7f0000001980)={'macvtap0\x00', 0x0}) 270.234338ms ago: executing program 2 (id=633): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb8500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x6, 0x1, 0x1d, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x20, 0x40, 0x7fffffff, 0x40}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0xee01, r2, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) getgid() sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x48010) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)={0x0, 0x3, 0x7, 0x0, 0x40, 0x8b}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x2) 269.588448ms ago: executing program 0 (id=634): r0 = socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000010651fbe347b2c2b00000c000180080001"], 0x20}}, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x32) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0xe24}, {0x0, 0x4000}, {0x0}, {0x0}, {&(0x7f00000020c0), 0x500}], 0x5}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bind$unix(r0, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e23}, 0x6b) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 251.803498ms ago: executing program 4 (id=635): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x400000000000}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8904, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 242.831418ms ago: executing program 0 (id=636): sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1008002, &(0x7f0000000800), 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) 160.579049ms ago: executing program 2 (id=637): socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 160.001389ms ago: executing program 5 (id=638): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080002000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00'}, 0x10) r1 = epoll_create(0x3) epoll_pwait2(r1, &(0x7f0000001280)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) recvmmsg(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f0000000080)=""/236, 0xec}], 0x2, &(0x7f0000001200)=""/95, 0x5f}}, {{&(0x7f00000015c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000001640)=""/68, 0x44}, {&(0x7f0000001380)=""/197, 0xc5}, {&(0x7f0000000540)=""/224, 0xe0}], 0x3, &(0x7f00000014c0)=""/45, 0x2d}}], 0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x5f) r3 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) 158.355299ms ago: executing program 4 (id=639): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)=0x700, 0x12) accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000004240), 0x80000) open(0x0, 0x111300, 0xc) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x4, 0x5) 101.513809ms ago: executing program 4 (id=640): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x45) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc75, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000000000000000012020000c00024000000000000000010900010073797a310000000020000480140003006e657466657673696d300000000000000800"], 0xd4}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_HSR_MULTICAST_SPEC={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_VERSION={0x5}, @IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE2={0x8, 0x2, r5}]}}}]}, 0x58}}, 0x0) 99.512089ms ago: executing program 1 (id=641): r0 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_NAME(0xf, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) r2 = syz_io_uring_setup(0x26c0, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$UHID_CREATE2(r5, &(0x7f0000000200)=ANY=[@ANYBLOB=','], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 4.58186ms ago: executing program 1 (id=642): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f00000001c0)=0xa, 0x4) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x77, 0x0) r1 = epoll_create(0x7) io_setup(0x7, &(0x7f0000000280)=0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_normal', 0x42, 0x0) io_submit(r2, 0x2, &(0x7f00000004c0)=[&(0x7f0000000040)={0x4000000, 0x4000, 0x0, 0x7, 0x0, r3, 0x0}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x8, 0x100, r3, &(0x7f00000008c0)="455e742c8706df", 0x7}]) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000340)=0x7, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000002c0)={0x10000008}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0x2824000, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) 3.867909ms ago: executing program 4 (id=643): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x8002, 0x0, 0x0, 0x40f00, 0x24, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x20000000, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000b2f17db98500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42032, 0xffffffffffffffff, 0x0) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x800, @loopback, 0x5b5}, 0x1c) 0s ago: executing program 2 (id=644): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000080)={0x0}, 0x20) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r5, 0x40107446, &(0x7f00000002c0)={0x1, &(0x7f0000000300)=[{0x4ed, 0xf, 0x1, 0xdb}]}) kernel console output (not intermixed with test programs): [ 21.466078][ T29] audit: type=1400 audit(1731908607.247:81): avc: denied { read } for pid=3000 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 26.105206][ T29] audit: type=1400 audit(1731908611.887:82): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.106352][ T3305] cgroup: Unknown subsys name 'net' [ 26.127917][ T29] audit: type=1400 audit(1731908611.887:83): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.155313][ T29] audit: type=1400 audit(1731908611.907:84): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.394005][ T3305] cgroup: Unknown subsys name 'cpuset' [ 26.400037][ T3305] cgroup: Unknown subsys name 'rlimit' [ 26.547631][ T29] audit: type=1400 audit(1731908612.327:85): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.570899][ T29] audit: type=1400 audit(1731908612.327:86): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.591349][ T29] audit: type=1400 audit(1731908612.327:87): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.611730][ T29] audit: type=1400 audit(1731908612.327:88): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.619425][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.632079][ T29] audit: type=1400 audit(1731908612.327:89): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.665487][ T29] audit: type=1400 audit(1731908612.327:90): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.688774][ T29] audit: type=1400 audit(1731908612.427:91): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.738678][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.619185][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.706102][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.721833][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.728911][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.736076][ T3315] bridge_slave_0: entered allmulticast mode [ 28.742283][ T3315] bridge_slave_0: entered promiscuous mode [ 28.769593][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.776654][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.783870][ T3315] bridge_slave_1: entered allmulticast mode [ 28.790274][ T3315] bridge_slave_1: entered promiscuous mode [ 28.802603][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 28.837760][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.849385][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.867068][ T3324] chnl_net:caif_netlink_parms(): no params data found [ 28.894535][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 28.905704][ T3315] team0: Port device team_slave_0 added [ 28.929609][ T3315] team0: Port device team_slave_1 added [ 28.939601][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.946677][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.953840][ T3319] bridge_slave_0: entered allmulticast mode [ 28.960297][ T3319] bridge_slave_0: entered promiscuous mode [ 28.971131][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.978205][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.985398][ T3320] bridge_slave_0: entered allmulticast mode [ 28.991723][ T3320] bridge_slave_0: entered promiscuous mode [ 29.007199][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.014259][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.021397][ T3319] bridge_slave_1: entered allmulticast mode [ 29.027906][ T3319] bridge_slave_1: entered promiscuous mode [ 29.034164][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.041263][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.048454][ T3320] bridge_slave_1: entered allmulticast mode [ 29.054864][ T3320] bridge_slave_1: entered promiscuous mode [ 29.067490][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.074543][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.100456][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.111392][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.118411][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.144386][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.194160][ T3324] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.201284][ T3324] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.208484][ T3324] bridge_slave_0: entered allmulticast mode [ 29.215039][ T3324] bridge_slave_0: entered promiscuous mode [ 29.222126][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.231213][ T3324] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.238304][ T3324] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.245437][ T3324] bridge_slave_1: entered allmulticast mode [ 29.251664][ T3324] bridge_slave_1: entered promiscuous mode [ 29.258879][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.273681][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.296815][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.305906][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.312950][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.320154][ T3322] bridge_slave_0: entered allmulticast mode [ 29.326493][ T3322] bridge_slave_0: entered promiscuous mode [ 29.345522][ T3324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.358966][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.366084][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.373270][ T3322] bridge_slave_1: entered allmulticast mode [ 29.379591][ T3322] bridge_slave_1: entered promiscuous mode [ 29.386052][ T3319] team0: Port device team_slave_0 added [ 29.397742][ T3315] hsr_slave_0: entered promiscuous mode [ 29.403731][ T3315] hsr_slave_1: entered promiscuous mode [ 29.410413][ T3324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.428367][ T3319] team0: Port device team_slave_1 added [ 29.447530][ T3320] team0: Port device team_slave_0 added [ 29.453631][ T3324] team0: Port device team_slave_0 added [ 29.465672][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.479933][ T3324] team0: Port device team_slave_1 added [ 29.486572][ T3320] team0: Port device team_slave_1 added [ 29.497053][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.503999][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.529968][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.541355][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.550790][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.557794][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.583776][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.629370][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.636364][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.662279][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.673234][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.680172][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.706133][ T3324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.721625][ T3322] team0: Port device team_slave_0 added [ 29.728072][ T3322] team0: Port device team_slave_1 added [ 29.735798][ T3319] hsr_slave_0: entered promiscuous mode [ 29.741794][ T3319] hsr_slave_1: entered promiscuous mode [ 29.748573][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.756132][ T3319] Cannot create hsr debugfs directory [ 29.767866][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.774860][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.800766][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.811719][ T3324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.818718][ T3324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.844698][ T3324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.878619][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.885606][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.911572][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.922967][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.929918][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.955863][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.008774][ T3320] hsr_slave_0: entered promiscuous mode [ 30.014795][ T3320] hsr_slave_1: entered promiscuous mode [ 30.020612][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.028218][ T3320] Cannot create hsr debugfs directory [ 30.037995][ T3324] hsr_slave_0: entered promiscuous mode [ 30.044148][ T3324] hsr_slave_1: entered promiscuous mode [ 30.050056][ T3324] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.057627][ T3324] Cannot create hsr debugfs directory [ 30.067152][ T3322] hsr_slave_0: entered promiscuous mode [ 30.072974][ T3322] hsr_slave_1: entered promiscuous mode [ 30.078928][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.086584][ T3322] Cannot create hsr debugfs directory [ 30.195117][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.215396][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.238856][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.258682][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.296567][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.305271][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.315871][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.326948][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.335688][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.346411][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.355823][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.370036][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.388778][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.401455][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.414750][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.423092][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.464870][ T3324] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.474586][ T3324] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.487854][ T3324] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.505618][ T3324] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.539941][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.556970][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.565827][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.588212][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.599821][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.616677][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.625118][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.632223][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.640738][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.647802][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.660113][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.670092][ T1882] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.677214][ T1882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.686329][ T1882] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.693456][ T1882] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.715901][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.723026][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.740243][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.751850][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.758902][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.776021][ T1882] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.783080][ T1882] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.796408][ T3324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.812845][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.819914][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.860515][ T3324] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.874002][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.881050][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.893042][ T3320] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.903437][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.928125][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.935271][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.976371][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.026614][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.044916][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.056936][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.117819][ T3315] veth0_vlan: entered promiscuous mode [ 31.130265][ T3315] veth1_vlan: entered promiscuous mode [ 31.150027][ T3324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.167980][ T3315] veth0_macvtap: entered promiscuous mode [ 31.188103][ T3315] veth1_macvtap: entered promiscuous mode [ 31.195463][ T3322] veth0_vlan: entered promiscuous mode [ 31.220634][ T3322] veth1_vlan: entered promiscuous mode [ 31.243709][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.257661][ T3319] veth0_vlan: entered promiscuous mode [ 31.264647][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.277964][ T3319] veth1_vlan: entered promiscuous mode [ 31.298864][ T3319] veth0_macvtap: entered promiscuous mode [ 31.306010][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.314775][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.323656][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.332346][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.354136][ T3319] veth1_macvtap: entered promiscuous mode [ 31.367920][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.378442][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.389236][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.401876][ T3322] veth0_macvtap: entered promiscuous mode [ 31.412771][ T3322] veth1_macvtap: entered promiscuous mode [ 31.419428][ T3320] veth0_vlan: entered promiscuous mode [ 31.429376][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.439860][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.450500][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.460326][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.460339][ T29] audit: type=1400 audit(1731908617.237:110): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.i1dOcr/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.468787][ T3320] veth1_vlan: entered promiscuous mode [ 31.496406][ T29] audit: type=1400 audit(1731908617.237:111): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.513408][ T3324] veth0_vlan: entered promiscuous mode [ 31.518553][ T29] audit: type=1400 audit(1731908617.237:112): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.i1dOcr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.528171][ T3324] veth1_vlan: entered promiscuous mode [ 31.549056][ T29] audit: type=1400 audit(1731908617.237:113): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.562823][ T3324] veth0_macvtap: entered promiscuous mode [ 31.576499][ T29] audit: type=1400 audit(1731908617.247:114): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.i1dOcr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.592454][ T3324] veth1_macvtap: entered promiscuous mode [ 31.608727][ T29] audit: type=1400 audit(1731908617.247:115): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/root/syzkaller.i1dOcr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4404 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.631377][ T3320] veth0_macvtap: entered promiscuous mode [ 31.641785][ T29] audit: type=1400 audit(1731908617.247:116): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.658596][ T3319] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.668547][ T29] audit: type=1400 audit(1731908617.277:117): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.675865][ T3319] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.707603][ T3319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.716404][ T3319] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.727274][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.737069][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.752261][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.762158][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.772607][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.782963][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.793047][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.803538][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.813370][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.823799][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.833685][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.844130][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.856784][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.866548][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.877045][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.886858][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.897316][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.907771][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.916483][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.925292][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.934034][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.942718][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.951601][ T29] audit: type=1400 audit(1731908617.707:118): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.964508][ T3320] veth1_macvtap: entered promiscuous mode [ 31.975703][ T29] audit: type=1400 audit(1731908617.707:119): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.011129][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.013947][ T3455] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 32.021606][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.037481][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.048065][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.057949][ T3324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.068423][ T3324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.078985][ T3324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.088004][ T3455] @: renamed from bond0 (while UP) [ 32.097653][ T3324] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.106466][ T3324] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.115215][ T3324] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.123997][ T3324] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.170029][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.180590][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.190430][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.200933][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.210854][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.221350][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.226739][ T3460] loop0: detected capacity change from 0 to 512 [ 32.231192][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.247878][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.259082][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.267377][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.277919][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.287746][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.298344][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.308199][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.318725][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.328530][ T3320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.339022][ T3320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.350005][ T3460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.350368][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.362824][ T3460] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.391203][ T3320] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.400038][ T3320] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.408749][ T3320] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.417470][ T3320] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.437138][ T3466] loop1: detected capacity change from 0 to 512 [ 32.494600][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.525792][ T3466] EXT4-fs warning (device loop1): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 32.581525][ T3466] EXT4-fs (loop1): mount failed [ 32.596274][ T3485] loop3: detected capacity change from 0 to 512 [ 32.661893][ T3492] 9pnet_fd: Insufficient options for proto=fd [ 32.805468][ T3501] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.815562][ T3504] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 32.821035][ T3505] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3505 comm=syz.2.20 [ 32.841231][ T3504] netlink: 'syz.0.19': attribute type 4 has an invalid length. [ 32.904255][ T3511] loop0: detected capacity change from 0 to 512 [ 32.926370][ T3508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3508 comm=syz.4.21 [ 32.949186][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.968548][ T3511] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.989553][ T3511] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.22: corrupted inode contents [ 33.002048][ T3511] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.22: mark_inode_dirty error [ 33.019782][ T3511] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.22: corrupted inode contents [ 33.032064][ T3511] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.22: mark_inode_dirty error [ 33.035060][ T3525] loop4: detected capacity change from 0 to 128 [ 33.060520][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.102385][ T3525] syz.4.26: attempt to access beyond end of device [ 33.102385][ T3525] loop4: rw=34817, sector=106, nr_sectors = 703 limit=128 [ 33.152332][ T50] kworker/u8:3: attempt to access beyond end of device [ 33.152332][ T50] loop4: rw=1, sector=809, nr_sectors = 232 limit=128 [ 33.206095][ T3529] loop0: detected capacity change from 0 to 2048 [ 33.234518][ T3529] Alternate GPT is invalid, using primary GPT. [ 33.240847][ T3529] loop0: p1 p2 p3 [ 33.285482][ T3393] udevd[3393]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 33.296511][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 33.308784][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 33.343434][ T3544] syzkaller0: entered allmulticast mode [ 33.358379][ T3547] loop3: detected capacity change from 0 to 512 [ 33.365256][ T3547] ======================================================= [ 33.365256][ T3547] WARNING: The mand mount option has been deprecated and [ 33.365256][ T3547] and is ignored by this kernel. Remove the mand [ 33.365256][ T3547] option from the mount to silence this warning. [ 33.365256][ T3547] ======================================================= [ 33.402267][ T3547] EXT4-fs: Ignoring removed orlov option [ 33.410251][ T3547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.423806][ T3547] EXT4-fs (loop3): orphan cleanup on readonly fs [ 33.430914][ T3547] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.34: bg 0: block 248: padding at end of block bitmap is not set [ 33.447632][ T3547] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.34: Failed to acquire dquot type 1 [ 33.459465][ T3547] EXT4-fs (loop3): 1 truncate cleaned up [ 33.466864][ T3547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.508399][ T3547] EXT4-fs: Ignoring removed orlov option [ 33.514471][ T3547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.528337][ T3547] EXT4-fs error (device loop3): __ext4_remount:6522: comm syz.3.34: Abort forced by user [ 33.541648][ T3555] loop4: detected capacity change from 0 to 512 [ 33.554996][ T3555] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.564111][ T3555] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 33.564744][ T3557] loop1: detected capacity change from 0 to 1024 [ 33.577022][ T3547] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 33.591018][ T3559] loop0: detected capacity change from 0 to 2048 [ 33.597914][ T3559] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.604879][ T3555] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 33.614200][ T3555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 33.622273][ T3555] System zones: 0-2, 18-18, 34-34 [ 33.627810][ T3555] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 33.634211][ T3547] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 33.643682][ T3555] EXT4-fs (loop4): 1 truncate cleaned up [ 33.654139][ T3547] ext4 filesystem being remounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.663498][ T3557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.680719][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.688882][ T3559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.695243][ T3557] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.721132][ T3555] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 33.731661][ T3557] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.38: bg 0: block 393: padding at end of block bitmap is not set [ 33.747674][ T3557] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 33.767943][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.810342][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.830829][ T3570] syz.4.41[3570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.830885][ T3570] syz.4.41[3570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.843006][ T3570] syz.4.41[3570] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.913205][ C0] hrtimer: interrupt took 17482 ns [ 33.933783][ T3577] process 'syz.2.44' launched './file0' with NULL argv: empty string added [ 33.972805][ T3559] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.39: bg 0: block 234: padding at end of block bitmap is not set [ 33.987735][ T3559] EXT4-fs (loop0): Remounting filesystem read-only [ 34.009530][ T3571] EXT4-fs (loop0): ext4_do_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5 [ 34.044251][ T3559] syz.0.39 (3559) used greatest stack depth: 9832 bytes left [ 34.147777][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.200958][ T3594] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.217082][ T3594] batadv_slave_0: entered promiscuous mode [ 34.321656][ T3603] loop2: detected capacity change from 0 to 512 [ 34.328612][ T3603] EXT4-fs: Ignoring removed orlov option [ 34.343484][ T3603] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.352612][ T3606] syz.0.55[3606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.356548][ T3603] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.368998][ T3603] EXT4-fs (loop2): 1 orphan inode deleted [ 34.377707][ T3606] syz.0.55[3606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.383472][ T3603] EXT4-fs (loop2): 1 truncate cleaned up [ 34.389519][ T3603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.395017][ T3606] syz.0.55[3606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.412495][ T3547] syz.3.34 (3547) used greatest stack depth: 9352 bytes left [ 34.433858][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.445653][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.468799][ T3606] veth0_macvtap: left promiscuous mode [ 34.520328][ T3613] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.869961][ T3633] pim6reg1: entered promiscuous mode [ 34.875355][ T3633] pim6reg1: entered allmulticast mode [ 35.146262][ T3666] loop1: detected capacity change from 0 to 1024 [ 35.184519][ T3666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.212883][ T3666] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 40 with max blocks 4 with error 28 [ 35.225245][ T3666] EXT4-fs (loop1): This should not happen!! Data will be lost [ 35.225245][ T3666] [ 35.234946][ T3666] EXT4-fs (loop1): Total free blocks count 0 [ 35.240934][ T3666] EXT4-fs (loop1): Free/Dirty block details [ 35.246903][ T3666] EXT4-fs (loop1): free_blocks=0 [ 35.251845][ T3666] EXT4-fs (loop1): dirty_blocks=0 [ 35.256909][ T3666] EXT4-fs (loop1): Block reservation details [ 35.262931][ T3666] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 35.333804][ T3674] wg2: entered promiscuous mode [ 35.339016][ T3674] wg2: entered allmulticast mode [ 35.356723][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.410127][ T3676] loop1: detected capacity change from 0 to 512 [ 35.421380][ T3676] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 35.430255][ T3676] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 35.439420][ T3676] EXT4-fs (loop1): blocks per group (71) and clusters per group (20800) inconsistent [ 35.456752][ T3680] pim6reg1: entered promiscuous mode [ 35.462151][ T3680] pim6reg1: entered allmulticast mode [ 35.675294][ T3691] devtmpfs: Unknown parameter 'posixacl' [ 35.813174][ T3701] loop0: detected capacity change from 0 to 512 [ 35.833649][ T3701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 35.871724][ T3701] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.894093][ T3701] EXT4-fs (loop0): 1 truncate cleaned up [ 35.902476][ T3701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.302369][ T3713] loop3: detected capacity change from 0 to 164 [ 36.311866][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.321834][ T3713] iso9660: Unknown parameter '00000000000000000000' [ 36.479336][ T29] kauditd_printk_skb: 260 callbacks suppressed [ 36.479350][ T29] audit: type=1400 audit(1731908622.257:377): avc: denied { create } for pid=3722 comm="syz.1.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 36.565272][ T3728] loop0: detected capacity change from 0 to 128 [ 37.389423][ T29] audit: type=1400 audit(1731908623.147:378): avc: denied { setopt } for pid=3801 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.408706][ T29] audit: type=1400 audit(1731908623.147:379): avc: denied { connect } for pid=3801 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 37.428114][ T29] audit: type=1400 audit(1731908623.147:380): avc: denied { name_connect } for pid=3801 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 37.448207][ T29] audit: type=1400 audit(1731908623.167:381): avc: denied { write } for pid=3804 comm="syz.0.85" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 37.484901][ T29] audit: type=1400 audit(1731908623.267:382): avc: denied { create } for pid=3831 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.505991][ T29] audit: type=1400 audit(1731908623.277:383): avc: denied { setopt } for pid=3831 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.525230][ T29] audit: type=1400 audit(1731908623.277:384): avc: denied { ioctl } for pid=3831 comm="syz.1.87" path="socket:[4886]" dev="sockfs" ino=4886 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 37.569961][ T29] audit: type=1400 audit(1731908623.337:385): avc: denied { bind } for pid=3831 comm="syz.1.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 37.621771][ T29] audit: type=1400 audit(1731908623.387:386): avc: denied { create } for pid=3844 comm="syz.1.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 37.685819][ T3849] bond_slave_0: entered promiscuous mode [ 37.691558][ T3849] bond_slave_1: entered promiscuous mode [ 37.713321][ T3849] vlan2: entered promiscuous mode [ 37.718397][ T3849] @: entered promiscuous mode [ 37.721153][ T3853] loop2: detected capacity change from 0 to 512 [ 37.733379][ T3849] @: left promiscuous mode [ 37.738120][ T3849] bond_slave_0: left promiscuous mode [ 37.743569][ T3849] bond_slave_1: left promiscuous mode [ 37.751578][ T3853] EXT4-fs (loop2): bad s_min_extra_isize: 65528 [ 37.795893][ T3856] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 37.809998][ T3856] team0: Port device geneve0 added [ 38.037959][ T3869] syzkaller0: entered promiscuous mode [ 38.043540][ T3869] syzkaller0: entered allmulticast mode [ 38.049556][ T3858] loop1: detected capacity change from 0 to 1024 [ 38.065918][ T3858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.087006][ T3858] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 38.125774][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.196353][ T3881] loop0: detected capacity change from 0 to 256 [ 38.211819][ T3883] loop3: detected capacity change from 0 to 512 [ 38.241226][ T3881] FAT-fs (loop0): Directory bread(block 64) failed [ 38.252943][ T3883] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.260876][ T3881] FAT-fs (loop0): Directory bread(block 65) failed [ 38.275256][ T3881] FAT-fs (loop0): Directory bread(block 66) failed [ 38.282367][ T3881] FAT-fs (loop0): Directory bread(block 67) failed [ 38.290010][ T3881] FAT-fs (loop0): Directory bread(block 68) failed [ 38.296957][ T3881] FAT-fs (loop0): Directory bread(block 69) failed [ 38.298338][ T3887] loop4: detected capacity change from 0 to 164 [ 38.304682][ T3881] FAT-fs (loop0): Directory bread(block 70) failed [ 38.310395][ T3883] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 38.316787][ T3881] FAT-fs (loop0): Directory bread(block 71) failed [ 38.316810][ T3881] FAT-fs (loop0): Directory bread(block 72) failed [ 38.316847][ T3881] FAT-fs (loop0): Directory bread(block 73) failed [ 38.439950][ T3887] syz.4.102: attempt to access beyond end of device [ 38.439950][ T3887] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 38.463831][ T3881] syz.0.101: attempt to access beyond end of device [ 38.463831][ T3881] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 38.518429][ T3883] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 38.526847][ T3881] syz.0.101: attempt to access beyond end of device [ 38.526847][ T3881] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 38.601640][ T3883] System zones: 0-2, 18-18, 34-34 [ 38.622339][ T3883] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.103: bad orphan inode 15 [ 38.644794][ T3887] syz.4.102: attempt to access beyond end of device [ 38.644794][ T3887] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.696968][ T3883] ext4_test_bit(bit=14, block=18) = 1 [ 38.702398][ T3883] is_bad_inode(inode)=0 [ 38.706718][ T3883] NEXT_ORPHAN(inode)=2264924160 [ 38.711559][ T3883] max_ino=32 [ 38.714864][ T3883] i_nlink=0 [ 38.805645][ T3883] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 38.830896][ T3887] syz.4.102: attempt to access beyond end of device [ 38.830896][ T3887] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.846914][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #15: comm syz.3.103: corrupted inode contents [ 38.882333][ T3887] syz.4.102: attempt to access beyond end of device [ 38.882333][ T3887] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 38.897507][ T3883] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #15: comm syz.3.103: mark_inode_dirty error [ 38.910111][ T3883] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #15: comm syz.3.103: corrupted inode contents [ 39.003664][ T3883] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3006: inode #15: comm syz.3.103: mark_inode_dirty error [ 39.081322][ T3883] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3009: inode #15: comm syz.3.103: mark inode dirty (error -117) [ 39.190420][ T3887] syz.4.102: attempt to access beyond end of device [ 39.190420][ T3887] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.216669][ T3883] EXT4-fs warning (device loop3): ext4_evict_inode:276: xattr delete (err -117) [ 39.238534][ T3883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.280519][ T3906] loop0: detected capacity change from 0 to 8192 [ 39.299201][ T3906] vfat: Unknown parameter '000000000000000000080xffffffffffffffff' [ 39.310171][ T3883] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.103: bg 0: block 80: padding at end of block bitmap is not set [ 39.393852][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.434649][ T3908] loop4: detected capacity change from 0 to 512 [ 39.473518][ T3908] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 40.273434][ T3926] Zero length message leads to an empty skb [ 40.274686][ T3920] syzkaller0: entered promiscuous mode [ 40.285063][ T3920] syzkaller0: entered allmulticast mode [ 40.316632][ T3930] loop0: detected capacity change from 0 to 164 [ 40.325930][ T3930] Unable to read rock-ridge attributes [ 40.335267][ T3930] Unable to read rock-ridge attributes [ 40.378096][ T3932] loop0: detected capacity change from 0 to 2048 [ 40.495319][ T3943] loop3: detected capacity change from 0 to 256 [ 40.671341][ T3948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.125'. [ 40.718670][ T3954] loop0: detected capacity change from 0 to 128 [ 40.831658][ T3961] loop3: detected capacity change from 0 to 2048 [ 40.928047][ T3961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.982878][ T3975] pim6reg1: entered promiscuous mode [ 40.988366][ T3975] pim6reg1: entered allmulticast mode [ 40.992390][ T3324] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 41.018168][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.273322][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.280777][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.325847][ T3985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.333312][ T3985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.365653][ T3988] loop4: detected capacity change from 0 to 512 [ 41.375453][ T3988] EXT4-fs error (device loop4): ext4_orphan_get:1388: inode #15: comm syz.4.141: casefold flag without casefold feature [ 41.401421][ T3988] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.141: couldn't read orphan inode 15 (err -117) [ 41.428481][ T3988] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.501213][ T3991] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 41.522651][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.567495][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 41.567508][ T29] audit: type=1400 audit(1731908627.347:553): avc: denied { write } for pid=3993 comm="syz.2.144" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.611012][ T3994] serio: Serial port pts0 [ 41.630162][ T29] audit: type=1400 audit(1731908627.377:554): avc: denied { ioctl } for pid=3993 comm="syz.2.144" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 41.709431][ T29] audit: type=1400 audit(1731908627.487:555): avc: denied { write } for pid=3996 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 41.783145][ T4000] mmap: syz.1.146 (4000) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 41.845380][ T29] audit: type=1326 audit(1731908627.627:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f37ae719 code=0x7ffc0000 [ 41.868823][ T29] audit: type=1326 audit(1731908627.627:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3979 comm="syz.3.137" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11f37ae719 code=0x7ffc0000 [ 41.958252][ T29] audit: type=1400 audit(1731908627.727:558): avc: denied { ioctl } for pid=4011 comm="syz.3.151" path="socket:[5532]" dev="sockfs" ino=5532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.000722][ T29] audit: type=1326 audit(1731908627.767:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efa43e719 code=0x7ffc0000 [ 42.001379][ T4013] IPVS: Error joining to the multicast group [ 42.024019][ T29] audit: type=1326 audit(1731908627.767:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efa43e719 code=0x7ffc0000 [ 42.024048][ T29] audit: type=1326 audit(1731908627.767:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5efa43e719 code=0x7ffc0000 [ 42.024073][ T29] audit: type=1326 audit(1731908627.767:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4016 comm="syz.1.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5efa43e719 code=0x7ffc0000 [ 42.148915][ T4027] pim6reg1: entered promiscuous mode [ 42.154368][ T4027] pim6reg1: entered allmulticast mode [ 42.248111][ T4036] loop0: detected capacity change from 0 to 256 [ 42.279341][ T4036] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 42.769784][ T4060] loop1: detected capacity change from 0 to 164 [ 42.779900][ T4060] : renamed from vlan0 (while UP) [ 42.822593][ T4066] tipc: Started in network mode [ 42.822734][ T4070] x_tables: unsorted underflow at hook 4 [ 42.827555][ T4066] tipc: Node identity 1, cluster identity 4711 [ 42.839376][ T4066] tipc: Node number set to 1 [ 42.844135][ T4066] tipc: Cannot configure node identity twice [ 42.869547][ T4072] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 43.101935][ T4086] loop0: detected capacity change from 0 to 256 [ 43.108886][ T4084] tipc: Started in network mode [ 43.113847][ T4084] tipc: Node identity 86ccd2a038d3, cluster identity 4711 [ 43.121154][ T4084] tipc: Enabled bearer , priority 0 [ 43.128707][ T4084] : renamed from syzkaller0 [ 43.135106][ T4084] tipc: Disabling bearer [ 43.200171][ T4092] loop3: detected capacity change from 0 to 512 [ 43.215009][ T4092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.227604][ T4092] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 43.240287][ T4092] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.183: corrupted inode contents [ 43.252072][ T4092] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz.3.183: mark_inode_dirty error [ 43.263635][ T4092] EXT4-fs error (device loop3): ext4_do_update_inode:5121: inode #2: comm syz.3.183: corrupted inode contents [ 43.276195][ T4092] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.183: mark_inode_dirty error [ 43.297401][ T4092] netlink: 'syz.3.183': attribute type 10 has an invalid length. [ 43.305358][ T4092] bridge0: port 3(team0) entered blocking state [ 43.311761][ T4092] bridge0: port 3(team0) entered disabled state [ 43.318393][ T4092] team0: entered allmulticast mode [ 43.323553][ T4092] team_slave_0: entered allmulticast mode [ 43.329319][ T4092] team_slave_1: entered allmulticast mode [ 43.336295][ T4092] team0: entered promiscuous mode [ 43.341406][ T4092] team_slave_0: entered promiscuous mode [ 43.347116][ T4092] team_slave_1: entered promiscuous mode [ 43.353013][ T4092] bridge0: port 3(team0) entered blocking state [ 43.359405][ T4092] bridge0: port 3(team0) entered forwarding state [ 43.377662][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.399572][ T4101] loop3: detected capacity change from 0 to 128 [ 43.445596][ T3796] kworker/u8:9: attempt to access beyond end of device [ 43.445596][ T3796] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 43.457738][ T4103] loop0: detected capacity change from 0 to 512 [ 43.465906][ T4103] EXT4-fs: quotafile must be on filesystem root [ 43.487669][ T4103] loop0: detected capacity change from 0 to 512 [ 43.490027][ T4105] loop3: detected capacity change from 0 to 164 [ 43.502949][ T4105] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 43.516462][ T4103] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 43.535084][ T4103] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 43.567338][ T4103] EXT4-fs (loop0): 1 truncate cleaned up [ 43.579335][ T4103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.592584][ T4103] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.904536][ T4130] Cannot find add_set index 0 as target [ 44.061994][ T4129] loop3: detected capacity change from 0 to 512 [ 44.071834][ T4129] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 44.091511][ T4129] EXT4-fs error (device loop3): ext4_ext_check_inode:524: inode #15: comm syz.3.196: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 24833, max 4(4), depth 0(0) [ 44.116099][ T4129] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.196: couldn't read orphan inode 15 (err -117) [ 44.132832][ T4129] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.145031][ T4129] ext2 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.168576][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.240176][ T4140] loop0: detected capacity change from 0 to 164 [ 44.248617][ T4136] Illegal XDP return value 4294967294 on prog (id 180) dev N/A, expect packet loss! [ 44.263862][ T4140] syz.0.200: attempt to access beyond end of device [ 44.263862][ T4140] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.298700][ T4140] syz.0.200: attempt to access beyond end of device [ 44.298700][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.328704][ T4140] syz.0.200: attempt to access beyond end of device [ 44.328704][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.347398][ T4140] syz.0.200: attempt to access beyond end of device [ 44.347398][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.366906][ T4140] syz.0.200: attempt to access beyond end of device [ 44.366906][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.387192][ T4140] syz.0.200: attempt to access beyond end of device [ 44.387192][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.434040][ T4140] syz.0.200: attempt to access beyond end of device [ 44.434040][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.447796][ T4140] syz.0.200: attempt to access beyond end of device [ 44.447796][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.460962][ T4150] loop2: detected capacity change from 0 to 1024 [ 44.461361][ T4140] syz.0.200: attempt to access beyond end of device [ 44.461361][ T4140] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.523808][ T4150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.538565][ T4145] loop1: detected capacity change from 0 to 8192 [ 44.606240][ T4156] loop4: detected capacity change from 0 to 256 [ 44.615284][ T4145] loop1: p1[EZD] p2 p4 [ 44.620916][ T4145] loop1: p1 size 1465778176 extends beyond EOD, truncated [ 44.629733][ T4145] loop1: p2 start 65535 is beyond EOD, truncated [ 44.636234][ T4145] loop1: p4 size 65536 extends beyond EOD, truncated [ 44.688820][ T4145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.732181][ T4145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.810405][ T4177] loop3: detected capacity change from 0 to 512 [ 44.825517][ T4177] EXT4-fs: inline encryption not supported [ 44.845710][ T4177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.861787][ T4177] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.902038][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.001607][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.075885][ T4199] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3952. macoff=96 [ 45.124357][ T4208] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.140646][ T4208] bond1: entered promiscuous mode [ 45.145779][ T4208] bond1: entered allmulticast mode [ 45.153020][ T4206] loop3: detected capacity change from 0 to 8192 [ 45.159790][ T4208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.181043][ T4208] bond1 (unregistering): Released all slaves [ 45.192769][ T4211] netlink: 12 bytes leftover after parsing attributes in process `syz.2.216'. [ 45.208431][ T4211] bridge_slave_1: left allmulticast mode [ 45.214166][ T4211] bridge_slave_1: left promiscuous mode [ 45.219965][ T4211] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.228712][ T4211] bridge1: port 1(bridge_slave_1) entered blocking state [ 45.235837][ T4211] bridge1: port 1(bridge_slave_1) entered disabled state [ 45.243076][ T4211] bridge_slave_1: entered allmulticast mode [ 45.249750][ T4211] bridge_slave_1: entered promiscuous mode [ 45.345666][ T3393] udevd[3393]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 45.346220][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 45.621175][ T4229] pim6reg1: entered promiscuous mode [ 45.626536][ T4229] pim6reg1: entered allmulticast mode [ 45.719515][ T4231] loop2: detected capacity change from 0 to 512 [ 45.740188][ T4231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.752821][ T4231] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.778193][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.066267][ T4240] pim6reg1: entered promiscuous mode [ 46.071646][ T4240] pim6reg1: entered allmulticast mode [ 46.316523][ T4259] loop1: detected capacity change from 0 to 512 [ 46.324762][ T4259] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.234: invalid indirect mapped block 256 (level 2) [ 46.339855][ T4259] EXT4-fs (loop1): Remounting filesystem read-only [ 46.347186][ T4259] EXT4-fs (loop1): 2 truncates cleaned up [ 46.375207][ T4264] IPv4: Oversized IP packet from 127.202.26.0 [ 46.381686][ T4259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.395191][ T4259] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 46.402220][ T4259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.448779][ T4259] capability: warning: `syz.1.234' uses deprecated v2 capabilities in a way that may be insecure [ 46.477683][ T4269] loop4: detected capacity change from 0 to 1024 [ 46.492099][ T4269] EXT4-fs: Ignoring removed orlov option [ 46.497815][ T4269] EXT4-fs: Ignoring removed nomblk_io_submit option [ 46.556793][ T4269] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.699020][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.940051][ T4281] xt_ecn: cannot match TCP bits for non-tcp packets [ 46.977763][ T4283] loop1: detected capacity change from 0 to 2048 [ 46.988905][ T29] kauditd_printk_skb: 512 callbacks suppressed [ 46.988918][ T29] audit: type=1400 audit(1731908632.767:1075): avc: denied { append } for pid=4284 comm="syz.0.242" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.997401][ T4285] program syz.0.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.030785][ T29] audit: type=1400 audit(1731908632.777:1076): avc: denied { open } for pid=4284 comm="syz.0.242" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.084112][ T29] audit: type=1400 audit(1731908632.857:1077): avc: denied { sys_module } for pid=4282 comm="syz.1.241" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.159955][ T29] audit: type=1400 audit(1731908632.907:1078): avc: denied { read } for pid=4292 comm="syz.4.245" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.182632][ T29] audit: type=1400 audit(1731908632.907:1079): avc: denied { open } for pid=4292 comm="syz.4.245" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 47.206759][ T29] audit: type=1400 audit(1731908632.987:1080): avc: denied { read } for pid=4292 comm="syz.4.245" name="file0" dev="tmpfs" ino=225 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 47.354646][ T29] audit: type=1400 audit(1731908633.137:1081): avc: denied { setopt } for pid=4298 comm="syz.3.248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 47.413858][ T4306] syz.3.251[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.413924][ T4306] syz.3.251[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.433821][ T4306] syz.3.251[4306] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 47.450170][ T4295] serio: Serial port ptm0 [ 47.469399][ T29] audit: type=1400 audit(1731908633.247:1082): avc: denied { connect } for pid=4303 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 47.489242][ T29] audit: type=1400 audit(1731908633.247:1083): avc: denied { create } for pid=4303 comm="syz.4.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.508637][ T29] audit: type=1400 audit(1731908633.247:1084): avc: denied { ioctl } for pid=4303 comm="syz.4.250" path="socket:[5946]" dev="sockfs" ino=5946 ioctlcmd=0x9423 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 47.582986][ T4309] loop4: detected capacity change from 0 to 512 [ 47.667018][ T4309] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.679759][ T4309] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.692449][ T4309] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.252: corrupted xattr block 32: e_value out of bounds [ 47.707991][ T4309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 47.717110][ T4309] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.252: corrupted xattr block 32: e_value out of bounds [ 47.751280][ T4309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 47.765851][ T4309] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.252: corrupted xattr block 32: e_value out of bounds [ 47.782552][ T4319] pim6reg1: entered promiscuous mode [ 47.787983][ T4319] pim6reg1: entered allmulticast mode [ 47.806697][ T4309] EXT4-fs error (device loop4): ext4_xattr_block_get:596: inode #15: comm syz.4.252: corrupted xattr block 32: e_value out of bounds [ 47.820977][ T4309] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 47.846632][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.085895][ T4339] tipc: Started in network mode [ 48.090903][ T4339] tipc: Node identity ac1414aa, cluster identity 4711 [ 48.099804][ T4339] tipc: New replicast peer: 100.1.1.1 [ 48.105310][ T4339] tipc: Enabled bearer , priority 10 [ 48.125460][ T4342] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 48.231405][ T4346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 48.250438][ T4346] hsr_slave_1 (unregistering): left promiscuous mode [ 48.258711][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.4.265'. [ 48.741698][ T4355] loop3: detected capacity change from 0 to 256 [ 49.055015][ T4358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.270'. [ 49.063999][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.088704][ T4358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.096227][ T4358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.113231][ T9] tipc: Node number set to 2886997162 [ 49.232969][ T4362] bond1: entered promiscuous mode [ 49.238063][ T4362] bond1: entered allmulticast mode [ 49.281154][ T4362] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.295577][ T4368] loop0: detected capacity change from 0 to 512 [ 49.312343][ T4369] loop2: detected capacity change from 0 to 256 [ 49.329562][ T4362] bond1 (unregistering): Released all slaves [ 49.343838][ T4368] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.411998][ T3319] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 49.699275][ T4384] loop1: detected capacity change from 0 to 512 [ 49.737334][ T4384] EXT4-fs: inline encryption not supported [ 49.804525][ T4384] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.278: Failed to acquire dquot type 1 [ 49.841246][ T4384] EXT4-fs (loop1): 1 truncate cleaned up [ 49.853596][ T4384] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.879735][ T4384] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.984772][ T4388] netlink: 'syz.4.279': attribute type 3 has an invalid length. [ 50.092758][ T4391] pim6reg1: entered promiscuous mode [ 50.098173][ T4391] pim6reg1: entered allmulticast mode [ 50.452794][ T4405] loop2: detected capacity change from 0 to 1024 [ 50.459741][ T4405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.626331][ T4405] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 50.702086][ T4234] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 50.784703][ T4405] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.925521][ T4415] netlink: 'syz.0.287': attribute type 10 has an invalid length. [ 50.933596][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.940773][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.950889][ T4415] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.957992][ T4415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.965353][ T4415] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.972473][ T4415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.986134][ T4415] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 51.079197][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.175929][ T4423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.291'. [ 51.233805][ T4425] loop3: detected capacity change from 0 to 2048 [ 51.293694][ T4425] loop3: p1 < > p4 [ 51.300353][ T4428] loop0: detected capacity change from 0 to 512 [ 51.308163][ T4425] loop3: p4 size 8388608 extends beyond EOD, truncated [ 51.388973][ T4431] loop4: detected capacity change from 0 to 512 [ 51.425829][ T4433] loop2: detected capacity change from 0 to 512 [ 51.432482][ T4433] EXT4-fs: Ignoring removed orlov option [ 51.439428][ T4433] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 51.452140][ T4431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.466207][ T4431] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.489515][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.500334][ T4433] EXT4-fs (loop2): 1 orphan inode deleted [ 51.506098][ T4433] EXT4-fs (loop2): 1 truncate cleaned up [ 51.512884][ T4433] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.529477][ T4433] veth0_to_team: entered promiscuous mode [ 51.535264][ T4433] veth0_to_team: entered allmulticast mode [ 51.554938][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.567566][ T4428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.590227][ T4428] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.620888][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.676260][ T3018] loop3: p1 < > p4 [ 51.680488][ T3018] loop3: p4 size 8388608 extends beyond EOD, truncated [ 51.979185][ T3546] udevd[3546]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 52.027104][ T4454] udevd[4454]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 52.084872][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 52.084889][ T29] audit: type=1326 audit(1731908637.837:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.114549][ T29] audit: type=1326 audit(1731908637.837:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.138027][ T29] audit: type=1326 audit(1731908637.837:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.161584][ T29] audit: type=1326 audit(1731908637.837:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.184786][ T29] audit: type=1326 audit(1731908637.837:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.208346][ T29] audit: type=1326 audit(1731908637.837:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.231769][ T29] audit: type=1326 audit(1731908637.837:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.255200][ T29] audit: type=1326 audit(1731908637.837:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.278550][ T29] audit: type=1326 audit(1731908637.837:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.301981][ T29] audit: type=1326 audit(1731908637.837:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4441 comm="syz.4.296" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 52.326275][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.352338][ T4463] SELinux: Context is not valid (left unmapped). [ 52.353983][ T4456] pim6reg1: entered promiscuous mode [ 52.364481][ T4456] pim6reg1: entered allmulticast mode [ 52.376517][ T4463] netlink: 'syz.0.304': attribute type 10 has an invalid length. [ 52.384593][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.391695][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.534927][ T4460] can0: slcan on ttyS3. [ 52.714516][ T4474] can0 (unregistered): slcan off ttyS3. [ 52.736212][ T4501] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 52.745294][ T4474] Falling back ldisc for ttyS3. [ 52.883057][ T4505] loop3: detected capacity change from 0 to 128 [ 53.025695][ T4508] loop3: detected capacity change from 0 to 512 [ 53.043743][ T4511] netlink: 'syz.2.313': attribute type 4 has an invalid length. [ 53.052211][ T4508] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 53.068618][ T4511] netlink: 'syz.2.313': attribute type 4 has an invalid length. [ 53.084083][ T4508] EXT4-fs warning (device loop3): ext4_enable_quotas:7097: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.108954][ T4508] sit1: entered promiscuous mode [ 53.113963][ T4508] sit1: entered allmulticast mode [ 53.185768][ T3324] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 53.210251][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 53.218026][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 53.237300][ T35] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 53.247871][ T4523] geneve2: entered promiscuous mode [ 53.253160][ T4523] geneve2: entered allmulticast mode [ 53.259148][ T35] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 53.306232][ T4525] veth0_vlan: entered allmulticast mode [ 53.463988][ T4536] ipvlan2: entered promiscuous mode [ 53.471409][ T4536] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 53.520296][ T4540] sd 0:0:1:0: device reset [ 53.528203][ T4536] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 53.586987][ T4538] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.121789][ T4550] pim6reg1: entered promiscuous mode [ 54.127286][ T4550] pim6reg1: entered allmulticast mode [ 54.262171][ T4560] netlink: 40 bytes leftover after parsing attributes in process `syz.4.332'. [ 54.312650][ T4562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.321245][ T4562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.399676][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 54.408691][ T4565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.334'. [ 54.480553][ T4565] bond0: entered promiscuous mode [ 54.485768][ T4565] bond_slave_0: entered promiscuous mode [ 54.491659][ T4565] bond_slave_1: entered promiscuous mode [ 54.497648][ T4565] bridge0: entered promiscuous mode [ 54.511976][ T4568] loop4: detected capacity change from 0 to 2048 [ 54.538054][ T4565] bond0: left promiscuous mode [ 54.542890][ T4565] bond_slave_0: left promiscuous mode [ 54.548373][ T4565] bond_slave_1: left promiscuous mode [ 54.553833][ T4565] bridge0: left promiscuous mode [ 54.564582][ T4568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.708063][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.718396][ T4575] loop0: detected capacity change from 0 to 512 [ 54.739157][ T4575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.751890][ T4575] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.788082][ T3319] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.868077][ T4586] syz.0.341[4586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.868170][ T4586] syz.0.341[4586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.879920][ T4586] syz.0.341[4586] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.920290][ T4590] loop4: detected capacity change from 0 to 512 [ 54.940893][ T4590] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 54.949996][ T4590] EXT4-fs (loop4): invalid journal inode [ 55.309002][ T4610] futex_wake_op: syz.2.350 tries to shift op by 144; fix this program [ 55.706722][ T4538] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.766813][ T4538] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.827849][ T4538] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.839286][ T4626] wg2: left promiscuous mode [ 55.843936][ T4626] wg2: left allmulticast mode [ 55.852729][ T4626] wg2: entered promiscuous mode [ 55.892410][ T4538] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.905143][ T4538] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.916285][ T4538] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.927657][ T4538] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.965496][ T4634] loop3: detected capacity change from 0 to 164 [ 55.992172][ T4632] loop4: detected capacity change from 0 to 4096 [ 56.001233][ T4632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.096204][ T4642] loop3: detected capacity change from 0 to 1024 [ 56.116640][ T4642] EXT4-fs: Ignoring removed oldalloc option [ 56.135524][ T4642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.171574][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.198175][ T4648] netlink: 'syz.4.364': attribute type 4 has an invalid length. [ 56.233494][ T4642] loop3: detected capacity change from 1024 to 0 [ 56.243095][ T4642] bio_check_eod: 12463 callbacks suppressed [ 56.243110][ T4642] syz.3.362: attempt to access beyond end of device [ 56.243110][ T4642] loop3: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 56.263467][ T4642] syz.3.362: attempt to access beyond end of device [ 56.263467][ T4642] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 56.279565][ T4655] xfrm0: entered allmulticast mode [ 56.308240][ T4642] syz.3.362: attempt to access beyond end of device [ 56.308240][ T4642] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 56.328463][ T4665] loop4: detected capacity change from 0 to 512 [ 56.335527][ T4642] syz.3.362: attempt to access beyond end of device [ 56.335527][ T4642] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 56.346883][ T4665] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 56.367298][ T4642] syz.3.362: attempt to access beyond end of device [ 56.367298][ T4642] loop3: rw=524288, sector=20, nr_sectors = 2 limit=0 [ 56.380897][ T4642] syz.3.362: attempt to access beyond end of device [ 56.380897][ T4642] loop3: rw=524288, sector=22, nr_sectors = 2 limit=0 [ 56.382321][ T4665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.394422][ T4642] syz.3.362: attempt to access beyond end of device [ 56.394422][ T4642] loop3: rw=524288, sector=24, nr_sectors = 2 limit=0 [ 56.416872][ T4665] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.420252][ T4642] syz.3.362: attempt to access beyond end of device [ 56.420252][ T4642] loop3: rw=524288, sector=26, nr_sectors = 2 limit=0 [ 56.443885][ T4642] syz.3.362: attempt to access beyond end of device [ 56.443885][ T4642] loop3: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 56.458519][ T4642] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #15: block 8: comm syz.3.362: unable to read itable block [ 56.472053][ T4642] syz.3.362: attempt to access beyond end of device [ 56.472053][ T4642] loop3: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 56.485293][ T4642] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 56.498774][ T4642] EXT4-fs (loop3): I/O error while writing superblock [ 56.550656][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.561157][ T3324] EXT4-fs error (device loop3): ext4_get_inode_loc:4541: inode #2: block 5: comm syz-executor: unable to read itable block [ 56.586815][ T3324] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 56.604948][ T4695] loop4: detected capacity change from 0 to 512 [ 56.614999][ T3324] EXT4-fs (loop3): I/O error while writing superblock [ 56.621827][ T3324] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5780: IO failure [ 56.632255][ T3324] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 56.641242][ T4695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 56.641518][ T3324] EXT4-fs (loop3): I/O error while writing superblock [ 56.657979][ T3324] EXT4-fs error (device loop3): ext4_dirty_inode:5984: inode #2: comm syz-executor: mark_inode_dirty error [ 56.669487][ T3324] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 56.678481][ T4695] EXT4-fs (loop4): 1 truncate cleaned up [ 56.684381][ T3324] EXT4-fs (loop3): I/O error while writing superblock [ 56.697097][ T4695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.718239][ T3796] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #15: block 8: comm kworker/u8:9: unable to read itable block [ 56.732361][ T3796] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 56.740909][ T3796] EXT4-fs (loop3): I/O error while writing superblock [ 56.741889][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.763620][ T3796] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:9: unable to read itable block [ 56.793845][ T3796] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 56.812378][ T3796] EXT4-fs (loop3): I/O error while writing superblock [ 56.819769][ T4705] syzkaller0: entered promiscuous mode [ 56.825386][ T4705] syzkaller0: entered allmulticast mode [ 56.832683][ T3324] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.842940][ T3324] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 56.851262][ T3324] EXT4-fs (loop3): I/O error while writing superblock [ 56.863919][ T4645] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 56.880307][ T40] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.947158][ T40] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.968728][ T4721] ip6gre1: entered allmulticast mode [ 56.999556][ T4719] netlink: 'syz.4.384': attribute type 29 has an invalid length. [ 57.009207][ T40] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.059109][ T40] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.156479][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 57.156491][ T29] audit: type=1326 audit(1731908642.937:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.192575][ T29] audit: type=1326 audit(1731908642.967:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.216072][ T29] audit: type=1326 audit(1731908642.967:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.219472][ T4713] chnl_net:caif_netlink_parms(): no params data found [ 57.239460][ T29] audit: type=1326 audit(1731908642.967:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.269707][ T29] audit: type=1326 audit(1731908642.967:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.293089][ T29] audit: type=1326 audit(1731908642.967:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.320511][ T29] audit: type=1326 audit(1731908643.097:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.343966][ T29] audit: type=1326 audit(1731908643.097:1322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4731 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4a3a6be719 code=0x7ffc0000 [ 57.382797][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.390057][ T4713] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.421039][ T4713] bridge_slave_0: entered allmulticast mode [ 57.430013][ T4713] bridge_slave_0: entered promiscuous mode [ 57.437054][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.444294][ T4713] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.451458][ T4713] bridge_slave_1: entered allmulticast mode [ 57.458036][ T4713] bridge_slave_1: entered promiscuous mode [ 57.514496][ T4713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.526260][ T4713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.562036][ T4713] team0: Port device team_slave_0 added [ 57.577762][ T4713] team0: Port device team_slave_1 added [ 57.601457][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.608599][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.634726][ T4713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.646270][ T4713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.653259][ T4713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.679223][ T4713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.771024][ T4713] hsr_slave_0: entered promiscuous mode [ 57.786981][ T4713] hsr_slave_1: entered promiscuous mode [ 57.797396][ T4763] syz.0.397[4763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.797520][ T4763] syz.0.397[4763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.811310][ T4713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.832104][ T4763] syz.0.397[4763] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 57.870331][ T4765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4765 comm=syz.4.398 [ 57.896508][ T4713] Cannot create hsr debugfs directory [ 58.027113][ T29] audit: type=1326 audit(1731908643.807:1323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00253e719 code=0x7ffc0000 [ 58.034389][ T4713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 58.050521][ T29] audit: type=1326 audit(1731908643.807:1324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4762 comm="syz.0.397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7ff00253e719 code=0x7ffc0000 [ 58.086297][ T4763] Invalid ELF header magic: != ELF [ 58.086939][ T4713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 58.100253][ T4765] tipc: New replicast peer: 100.1.1.1 [ 58.105749][ T4765] tipc: Enabled bearer , priority 10 [ 58.111987][ T4713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 58.124068][ T4765] wireguard0: entered promiscuous mode [ 58.129544][ T4765] wireguard0: entered allmulticast mode [ 58.139746][ T4713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 58.154631][ T4713] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.161702][ T4713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.169014][ T4713] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.176128][ T4713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.209855][ T4713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.217304][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.225460][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.244734][ T4713] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.256178][ T3822] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.263298][ T3822] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.272162][ T3822] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.279308][ T3822] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.361406][ T4713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.479783][ T4791] netlink: 'syz.1.404': attribute type 2 has an invalid length. [ 58.493174][ T4791] x_tables: unsorted entry at hook 3 [ 58.506747][ T4713] veth0_vlan: entered promiscuous mode [ 58.521751][ T4713] veth1_vlan: entered promiscuous mode [ 58.541555][ T4713] veth0_macvtap: entered promiscuous mode [ 58.552997][ T4713] veth1_macvtap: entered promiscuous mode [ 58.580137][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.590783][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.600627][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.611071][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.620923][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.631456][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.644519][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.656787][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.667298][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.677232][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.687718][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.697620][ T4713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.708120][ T4713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.719701][ T4713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.728409][ T4713] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.737302][ T4713] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.746104][ T4713] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.755046][ T4713] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.791384][ T4808] netlink: 'syz.2.408': attribute type 4 has an invalid length. [ 58.815388][ T4808] netlink: 'syz.2.408': attribute type 17 has an invalid length. [ 58.878917][ T4815] syzkaller0: entered promiscuous mode [ 58.884555][ T4815] syzkaller0: entered allmulticast mode [ 58.976404][ T4827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 58.985442][ T4827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 58.995057][ T4827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 59.015762][ T4827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 59.024760][ T4827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 59.047583][ T4827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 59.111250][ T4827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.415'. [ 59.299453][ T4857] loop4: detected capacity change from 0 to 1024 [ 59.324693][ T4857] EXT4-fs: Ignoring removed mblk_io_submit option [ 59.365625][ T4857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.434046][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.166509][ T4852] kexec: Could not allocate control_code_buffer [ 60.305792][ T4900] loop7: detected capacity change from 0 to 7 [ 60.312599][ T4900] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.325708][ T4900] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.333634][ T4900] loop7: unable to read partition table [ 60.349616][ T4900] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 60.349616][ T4900] ) failed (rc=-5) [ 60.564714][ T4914] __nla_validate_parse: 2 callbacks suppressed [ 60.564729][ T4914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.446'. [ 60.579939][ T4914] netlink: 28 bytes leftover after parsing attributes in process `syz.5.446'. [ 60.800120][ T4928] bond0: entered promiscuous mode [ 60.805299][ T4928] bond_slave_0: entered promiscuous mode [ 60.811060][ T4928] bond_slave_1: entered promiscuous mode [ 60.818611][ T4928] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 60.885693][ T4928] bond0: left promiscuous mode [ 60.890523][ T4928] bond_slave_0: left promiscuous mode [ 60.896087][ T4928] bond_slave_1: left promiscuous mode [ 60.969739][ T4935] netlink: 24 bytes leftover after parsing attributes in process `syz.5.454'. [ 61.052735][ T4939] loop5: detected capacity change from 0 to 512 [ 61.094129][ T4939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.123070][ T4939] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.145132][ T4939] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 61.229299][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.277457][ T4956] loop4: detected capacity change from 0 to 512 [ 61.306651][ T4956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.328768][ T4956] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.737097][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.904093][ T4982] sit0: entered allmulticast mode [ 61.945464][ T4982] sit0: entered promiscuous mode [ 62.292286][ T4987] bond1: entered promiscuous mode [ 62.298306][ T4987] bond1: entered allmulticast mode [ 62.332600][ T4987] 8021q: adding VLAN 0 to HW filter on device bond1 [ 62.364546][ T4987] bond1 (unregistering): Released all slaves [ 62.471748][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 62.471826][ T29] audit: type=1400 audit(1731908648.247:1525): avc: denied { listen } for pid=4992 comm="syz.0.474" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.499460][ T4993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 62.726471][ T4999] pim6reg1: entered promiscuous mode [ 62.731812][ T4999] pim6reg1: entered allmulticast mode [ 62.803169][ T5000] loop5: detected capacity change from 0 to 1024 [ 63.246428][ T5000] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a843c118, mo2=0002] [ 63.247544][ T29] audit: type=1400 audit(1731908649.007:1526): avc: denied { bind } for pid=5003 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.254580][ T5000] System zones: 0-1, 3-12 [ 63.278385][ T29] audit: type=1400 audit(1731908649.007:1527): avc: denied { listen } for pid=5003 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.297930][ T29] audit: type=1400 audit(1731908649.007:1528): avc: denied { write } for pid=5003 comm="syz.4.478" path="socket:[9326]" dev="sockfs" ino=9326 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.303951][ T5008] syzkaller0: entered promiscuous mode [ 63.321039][ T29] audit: type=1400 audit(1731908649.007:1529): avc: denied { accept } for pid=5003 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.321065][ T29] audit: type=1400 audit(1731908649.007:1530): avc: denied { read } for pid=5003 comm="syz.4.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 63.326603][ T5008] syzkaller0: entered allmulticast mode [ 63.371755][ T5000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.388166][ T5011] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 63.394698][ T5011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 63.402377][ T5011] vhci_hcd vhci_hcd.0: Device attached [ 63.424390][ T5014] pim6reg1: entered promiscuous mode [ 63.429743][ T5014] pim6reg1: entered allmulticast mode [ 63.438510][ T5011] team0: Device ipvlan1 failed to register rx_handler [ 63.448495][ T5015] vhci_hcd: connection closed [ 63.448720][ T1704] vhci_hcd: stop threads [ 63.457990][ T1704] vhci_hcd: release socket [ 63.462467][ T1704] vhci_hcd: disconnect device [ 63.487721][ T29] audit: type=1400 audit(1731908649.267:1531): avc: denied { shutdown } for pid=5023 comm="syz.2.484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.508095][ T29] audit: type=1400 audit(1731908649.267:1532): avc: denied { read } for pid=5023 comm="syz.2.484" path="socket:[9356]" dev="sockfs" ino=9356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.579791][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.601313][ T5028] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'. [ 63.610381][ T5028] netlink: 'syz.0.486': attribute type 7 has an invalid length. [ 63.618274][ T5028] netlink: 'syz.0.486': attribute type 8 has an invalid length. [ 63.626085][ T5028] netlink: 4 bytes leftover after parsing attributes in process `syz.0.486'. [ 63.780580][ T5032] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.789545][ T5032] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.798530][ T5032] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.807591][ T5032] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.812114][ T29] audit: type=1326 audit(1731908649.587:1533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 63.839996][ T29] audit: type=1326 audit(1731908649.587:1534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5039 comm="syz.2.491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd51d37d0b0 code=0x7ffc0000 [ 63.966844][ T5054] loop5: detected capacity change from 0 to 1024 [ 63.974974][ T5054] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 63.989700][ T5054] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.207816][ T40] team0: left allmulticast mode [ 64.212694][ T40] team_slave_0: left allmulticast mode [ 64.218721][ T40] team_slave_1: left allmulticast mode [ 64.224348][ T40] team0: left promiscuous mode [ 64.229111][ T40] team_slave_0: left promiscuous mode [ 64.234692][ T40] team_slave_1: left promiscuous mode [ 64.240214][ T40] bridge0: port 3(team0) entered disabled state [ 64.247172][ T40] bridge_slave_1: left allmulticast mode [ 64.252832][ T40] bridge_slave_1: left promiscuous mode [ 64.258508][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.266457][ T40] bridge_slave_0: left allmulticast mode [ 64.272139][ T40] bridge_slave_0: left promiscuous mode [ 64.277777][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.387918][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.398872][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.410434][ T40] bond0 (unregistering): Released all slaves [ 64.465546][ T40] tipc: Left network mode [ 64.484159][ T40] hsr_slave_0: left promiscuous mode [ 64.489875][ T40] hsr_slave_1: left promiscuous mode [ 64.498765][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.506217][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.514170][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.521605][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.532137][ T40] veth1_macvtap: left promiscuous mode [ 64.537883][ T40] veth0_macvtap: left promiscuous mode [ 64.543552][ T40] veth1_vlan: left promiscuous mode [ 64.548867][ T40] veth0_vlan: left promiscuous mode [ 64.697422][ T40] team0 (unregistering): Port device team_slave_1 removed [ 64.719137][ T40] team0 (unregistering): Port device team_slave_0 removed [ 64.832893][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.406283][ T5140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.512'. [ 65.415348][ T5140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.512'. [ 65.424280][ T5140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.512'. [ 65.435469][ T5140] netlink: 36 bytes leftover after parsing attributes in process `syz.1.512'. [ 65.729998][ T5189] netlink: 'syz.0.516': attribute type 4 has an invalid length. [ 65.968418][ T5230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.250382][ T5273] : renamed from bond0 [ 67.305842][ T5281] syz.1.535[5281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.305991][ T5281] syz.1.535[5281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.341869][ T5281] syz.1.535[5281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.569798][ T29] kauditd_printk_skb: 377 callbacks suppressed [ 67.569839][ T29] audit: type=1326 audit(1731908653.347:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.612468][ T29] audit: type=1326 audit(1731908653.397:1913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.635938][ T29] audit: type=1326 audit(1731908653.397:1914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.659267][ T29] audit: type=1326 audit(1731908653.397:1915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.682551][ T29] audit: type=1326 audit(1731908653.397:1916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.705867][ T29] audit: type=1326 audit(1731908653.397:1917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.822006][ T29] audit: type=1326 audit(1731908653.597:1918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.845402][ T29] audit: type=1326 audit(1731908653.597:1919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.868789][ T29] audit: type=1326 audit(1731908653.597:1920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.891996][ T29] audit: type=1326 audit(1731908653.597:1921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5284 comm="syz.5.536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf59a6e719 code=0x7ffc0000 [ 67.926798][ T5289] Invalid ELF header magic: != ELF [ 68.002629][ T5300] team0: Device ipvlan2 failed to register rx_handler [ 68.018013][ T5295] netlink: '+}[@': attribute type 2 has an invalid length. [ 68.025290][ T5295] netlink: '+}[@': attribute type 8 has an invalid length. [ 68.032502][ T5295] netlink: 132 bytes leftover after parsing attributes in process `+}[@'. [ 68.053590][ T5302] netlink: 260 bytes leftover after parsing attributes in process `syz.2.537'. [ 68.069370][ T5302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.537'. [ 68.102637][ T5310] loop4: detected capacity change from 0 to 128 [ 68.113703][ T1059] IPVS: starting estimator thread 0... [ 68.120370][ T5310] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 68.120435][ T5315] netlink: 32 bytes leftover after parsing attributes in process `syz.2.549'. [ 68.141649][ T5310] ext4 filesystem being mounted at /103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 68.187817][ T3320] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 68.243361][ T5311] IPVS: using max 2880 ests per chain, 144000 per kthread [ 68.270769][ T5326] syzkaller0: entered promiscuous mode [ 68.276375][ T5326] syzkaller0: entered allmulticast mode [ 68.487997][ T5340] loop4: detected capacity change from 0 to 764 [ 68.620700][ T5344] can0: slcan on ttyS3. [ 68.673350][ T5342] can0 (unregistered): slcan off ttyS3. [ 68.766513][ T5358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.559'. [ 68.932847][ T5383] tipc: Started in network mode [ 68.937813][ T5383] tipc: Node identity 48c4, cluster identity 4711 [ 68.944302][ T5383] tipc: Node number set to 18628 [ 68.983484][ T5384] Falling back ldisc for ttyS3. [ 69.039491][ T5396] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 69.047920][ T5396] team0: Port device netdevsim1 added [ 69.054304][ T5396] netlink: 'syz.0.569': attribute type 10 has an invalid length. [ 69.064032][ T5396] team0: Port device netdevsim1 removed [ 69.071596][ T5396] : (slave netdevsim1): Enslaving as an active interface with an up link [ 69.082985][ T5400] loop5: detected capacity change from 0 to 512 [ 69.102658][ T5400] EXT4-fs: Ignoring removed orlov option [ 69.111543][ T5400] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 69.128995][ T5402] pim6reg1: entered promiscuous mode [ 69.134331][ T5402] pim6reg1: entered allmulticast mode [ 69.141105][ T5400] EXT4-fs (loop5): 1 orphan inode deleted [ 69.146933][ T5400] EXT4-fs (loop5): 1 truncate cleaned up [ 69.154993][ T5400] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.169521][ T5400] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 69.193565][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.292785][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.575'. [ 69.340661][ T5418] loop5: detected capacity change from 0 to 512 [ 69.371191][ T5418] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.384749][ T5418] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.411950][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.496731][ T5430] netlink: 8 bytes leftover after parsing attributes in process `syz.1.580'. [ 69.943264][ T5447] pim6reg: entered allmulticast mode [ 70.263089][ T5465] geneve0: entered allmulticast mode [ 70.280461][ T5467] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 70.383097][ T5480] geneve0: entered allmulticast mode [ 70.398105][ T5477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 70.425724][ T3370] hid (null): unknown global tag 0xe [ 70.431057][ T3370] hid (null): unknown global tag 0xd [ 70.436468][ T3370] hid (null): unknown global tag 0xe [ 70.441763][ T3370] hid (null): unknown global tag 0xc [ 70.447111][ T3370] hid (null): invalid report_size -897589302 [ 70.453340][ T3370] hid (null): global environment stack underflow [ 70.461026][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 70.465181][ T3370] hid-generic 0006:0006:0001.0002: unknown main item tag 0xd [ 70.474638][ T3370] hid-generic 0006:0006:0001.0002: unknown global tag 0xe [ 70.481780][ T3370] hid-generic 0006:0006:0001.0002: item 0 0 1 14 parsing failed [ 70.490589][ T3370] hid-generic 0006:0006:0001.0002: probe with driver hid-generic failed with error -22 [ 70.500644][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 70.507940][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 70.563404][ T5486] infiniband syz2: set down [ 70.567978][ T5486] infiniband syz2: added geneve0 [ 70.572915][ T1059] geneve0 speed is unknown, defaulting to 1000 [ 70.595782][ T5486] RDS/IB: syz2: added [ 70.602453][ T5486] smc: adding ib device syz2 with port count 1 [ 70.982075][ T5486] smc: ib device syz2 port 1 has pnetid [ 70.999111][ T8] geneve0 speed is unknown, defaulting to 1000 [ 71.031287][ T5497] @: renamed from vlan0 (while UP) [ 71.063537][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 71.354244][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 71.490706][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 71.611827][ T5515] ALSA: seq fatal error: cannot create timer (-22) [ 71.637845][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 71.756844][ T5486] geneve0 speed is unknown, defaulting to 1000 [ 71.806335][ T5519] SELinux: Context system_u:object_r:default_context_t:s0 is not valid (left unmapped). [ 71.868965][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 72.193849][ T5530] 9pnet_fd: Insufficient options for proto=fd [ 72.226957][ T5545] syzkaller0: entered allmulticast mode [ 72.381935][ T5556] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'. [ 72.405138][ T5556] team0: entered promiscuous mode [ 72.410219][ T5556] team_slave_0: entered promiscuous mode [ 72.415948][ T5556] team_slave_1: entered promiscuous mode [ 72.421662][ T5556] geneve0: entered promiscuous mode [ 72.447153][ T5556] team0: left promiscuous mode [ 72.451982][ T5556] team_slave_0: left promiscuous mode [ 72.457678][ T5556] team_slave_1: left promiscuous mode [ 72.463273][ T5556] geneve0: left promiscuous mode [ 72.545451][ T5562] : renamed from vlan1 (while UP) [ 72.573212][ T29] kauditd_printk_skb: 468 callbacks suppressed [ 72.573226][ T29] audit: type=1326 audit(1731908658.347:2390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.603489][ T29] audit: type=1326 audit(1731908658.377:2391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.628469][ T29] audit: type=1326 audit(1731908658.387:2392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.651756][ T29] audit: type=1400 audit(1731908658.387:2393): avc: denied { listen } for pid=5563 comm="syz.2.627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 72.671241][ T29] audit: type=1326 audit(1731908658.387:2394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.694702][ T29] audit: type=1326 audit(1731908658.387:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.706025][ T5569] option changes via remount are deprecated (pid=5565 comm=syz.0.628) [ 72.718070][ T29] audit: type=1326 audit(1731908658.387:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.749446][ T29] audit: type=1326 audit(1731908658.387:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.772743][ T29] audit: type=1326 audit(1731908658.387:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.795954][ T29] audit: type=1326 audit(1731908658.387:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5563 comm="syz.2.627" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd51d37e719 code=0x7ffc0000 [ 72.862566][ T5580] loop5: detected capacity change from 0 to 512 [ 72.880190][ T5580] EXT4-fs error (device loop5): ext4_expand_extra_isize_ea:2813: inode #11: comm syz.5.632: corrupted xattr block 95: invalid header [ 72.895073][ T5580] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.632: bg 0: block 7: invalid block bitmap [ 72.907453][ T5580] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 72.917995][ T5580] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2977: inode #11: comm syz.5.632: corrupted xattr block 95: invalid header [ 72.931692][ T5580] EXT4-fs warning (device loop5): ext4_evict_inode:276: xattr delete (err -117) [ 72.952702][ T5580] EXT4-fs (loop5): 1 orphan inode deleted [ 72.959696][ T5580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.959795][ T5584] Falling back ldisc for ttyS3. [ 72.994666][ T5580] 9pnet: Could not find request transport: virt yio [ 73.023949][ T5594] team_slave_0: entered promiscuous mode [ 73.029697][ T5594] team_slave_1: entered promiscuous mode [ 73.035421][ T5594] geneve0: entered promiscuous mode [ 73.043594][ T5594] vlan1: entered promiscuous mode [ 73.044080][ T4713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.048923][ T5594] team0: entered promiscuous mode [ 73.065702][ T5594] team0: Device vlan1 is already an upper device of the team interface [ 73.078843][ T5594] team0: left promiscuous mode [ 73.084210][ T5594] team_slave_0: left promiscuous mode [ 73.089632][ T5594] team_slave_1: left promiscuous mode [ 73.095138][ T5594] geneve0: left promiscuous mode [ 73.150158][ T5601] syz_tun: entered promiscuous mode [ 73.164650][ T5601] batadv_slave_0: entered promiscuous mode [ 73.333451][ T5604] ================================================================== [ 73.341593][ T5604] BUG: KCSAN: data-race in atime_needs_update / inode_update_timestamps [ 73.349930][ T5604] [ 73.352254][ T5604] write to 0xffff888104a3db1c of 4 bytes by task 5595 on cpu 0: [ 73.359915][ T5604] inode_update_timestamps+0x166/0x280 [ 73.365392][ T5604] file_update_time+0x220/0x2b0 [ 73.370262][ T5604] shmem_file_write_iter+0x99/0xe0 [ 73.375387][ T5604] iter_file_splice_write+0x5f1/0x980 [ 73.380780][ T5604] direct_splice_actor+0x160/0x2c0 [ 73.385905][ T5604] splice_direct_to_actor+0x302/0x670 [ 73.391284][ T5604] do_splice_direct+0xd7/0x150 [ 73.396054][ T5604] do_sendfile+0x39b/0x970 [ 73.400482][ T5604] __x64_sys_sendfile64+0x110/0x150 [ 73.405710][ T5604] x64_sys_call+0xed5/0x2d60 [ 73.410314][ T5604] do_syscall_64+0xc9/0x1c0 [ 73.414827][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.420742][ T5604] [ 73.423068][ T5604] read to 0xffff888104a3db1c of 4 bytes by task 5604 on cpu 1: [ 73.430605][ T5604] atime_needs_update+0x2aa/0x3e0 [ 73.435674][ T5604] touch_atime+0x4a/0x350 [ 73.440009][ T5604] shmem_file_splice_read+0x561/0x5c0 [ 73.445393][ T5604] splice_direct_to_actor+0x269/0x670 [ 73.450794][ T5604] do_splice_direct+0xd7/0x150 [ 73.455603][ T5604] do_sendfile+0x39b/0x970 [ 73.460063][ T5604] __x64_sys_sendfile64+0x110/0x150 [ 73.465279][ T5604] x64_sys_call+0xed5/0x2d60 [ 73.469898][ T5604] do_syscall_64+0xc9/0x1c0 [ 73.474511][ T5604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.480450][ T5604] [ 73.482766][ T5604] value changed: 0x066419d0 -> 0x06fcb050 [ 73.488491][ T5604] [ 73.490815][ T5604] Reported by Kernel Concurrency Sanitizer on: [ 73.496966][ T5604] CPU: 1 UID: 0 PID: 5604 Comm: syz.0.636 Not tainted 6.12.0-syzkaller #0 [ 73.505504][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 73.515572][ T5604] ==================================================================