last executing test programs: 1m10.346011224s ago: executing program 4 (id=5): r0 = socket(0x26, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r5}]}, 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x38, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8, 0x1, r5}]}}}]}, 0x6c}}, 0x0) 1m10.217065926s ago: executing program 4 (id=6): bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pid(r1, &(0x7f0000000980), 0x20000992) 1m9.673472559s ago: executing program 4 (id=15): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0xff) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r1, 0x5412, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28010000060a010400000000000000000200000048000480440001800a0001006d61746368000000340002800900010074696d65000000001c00030007682c020b7b37f27f5101007f51010049f4e34e86f469eb08000240000000000900010073797a30000000000900020073797a3200000000ab0007"], 0x150}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2cc, &(0x7f0000000240)={[{@errors_remount}, {@nomblk_io_submit}]}, 0xfd, 0x4c3, &(0x7f0000000d80)="$eJzs3M1rHOUfAPDvbDZJ35P215/aWm20isWXpEmrFhSsguBBQdBDPUlM0lKbNtJEaEswqZR6EbTgXQQvon+BJ0+ingSvepdCkV5aPa3M7sy6SXbztkk2L58PTDJP5tl9nu888+w8M89OAtiyetIfScSuiPg9IroiolCbYXtlSfPduzM59PedyaEkSqW3/krSl8XdO5NDedYk+72zkiimb1S4nsSpOuWOX7l6fnB0dORSlu6buPBB3/iVq8+cuzB4duTsyMWBkydPHO9//rmBZ1ckzrROdw9+NHbowGvv3Hxj6PTN937+LonYkW+vjaNJL3RVVyer+2S2x1eosPVid816Upy9ddvaVoZF64yItLnay/2/K9qu76lu64pXP25p5YBVVSqVSgONN0+XgE0siVbXAGiN/ESfXv/myxoNPdaF2y9XLoDSuO9lS2VLsXIfpLNybbR7lcrviYjT0/98mS6x5PsQ7atUKwBgM/shHf88XWf8V4y4rybfnmxuqDsi9kbEvoj4X0Tsj4j/RyXv/RHxwOwC9pZnQHrebVB+z6z03PFP4VazMc4nHf+9mM1tzRz/VWfButuy1O5y/O3JmXOjI8eyfXI02jvTdH/dd08iptPfv33WqPza8V+6pOXnY8GsHreKnTNfMzw4Mdh04Jnb1yIOFuvFn0TxvyjiQEQcXGYZ55785tDMv7RV1xaOfx5z5pmWrvRVxBOV9p+OWfGXZft+LBrOT/Zti9GRY335UTHXL7/eeLNR+ZX4CzF//NubD7SBtP131Dv+X8riz/Zxdb52fM5bdCxUxo0/Pml4TbPc478jeXtG4ZcHJyYu9Ud0JK/P/XvNDe48fXn423L+NP6jR+r3/33Za9I98WBEpAfxQxHxcEQczur+SEQ8GhFH5on/p1cee79h/IebOP6j1Gh6edHS+Ifrfv5V37o7mdH+S1jJp33P//h9o/Kr7Z83WN32P5EnypUqf/4t0CUWW9Pl7TUAAADYWAoRsSuSQm91vVDo7a18X35/7CiMjo1PPHVm7MOLw5VnBLqjvZDf6eqquR/an90bztMDWXoqSx/P7ht/0ba9nO4dGhsdbnXwsMXtjDgVdfp/6s+2VtcOWHVz5tFKXa2pCLDmVmAeHdiglt//fXLARrdALy6sVT2AtecsDltXvf4/VZtIovIteWDTcf6Hrava/z9fROaax71mP7wJbDzznf99FQA2N+N/2JKW9Vz/elqJryPmz5Osl6ouaeXTZl5eXDjPVDRZwyi0cP90tKRRBtoiWnhIFBf7Xy3iSmmq6UIbfWJcq/mvoQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOvfvwEAAP//vX/hVQ==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x104) ioctl$BTRFS_IOC_QUOTA_RESCAN(r2, 0x4040942c, &(0x7f0000000180)={0x0, 0x3, [0x8, 0xfffffffffffffe01, 0xeee, 0x2, 0x8, 0x2]}) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x1018488, 0x0) 1m9.174446692s ago: executing program 4 (id=23): openat$nvram(0xffffffffffffff9c, 0x0, 0x88002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x4, 0x1, 0x7ffc1ff9}]}) timerfd_create(0x7, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c0000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r2, &(0x7f00000000c0)=""/91, 0x5b, 0xfff) 1m8.043894679s ago: executing program 4 (id=40): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110350000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000540)={[{@grpjquota, 0x4a}, {@data_ordered}, {@resuid={'resuid', 0x3d, r0}}, {@usrjquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@user_xattr}, {@grpquota}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 1m8.022111639s ago: executing program 32 (id=40): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000007110350000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) statx(0xffffffffffffff9c, 0x0, 0x2000, 0x4, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000540)={[{@grpjquota, 0x4a}, {@data_ordered}, {@resuid={'resuid', 0x3d, r0}}, {@usrjquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@user_xattr}, {@grpquota}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) close(r2) open(&(0x7f0000000000)='./file0\x00', 0x400, 0x1a1) r3 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r3, &(0x7f0000000340)={'#! ', './file0'}, 0xb) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) 36.919440037s ago: executing program 0 (id=355): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) utime(&(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000180)={@private2, 0x0}, 0x0) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x0, 0x8}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000780)={{r2, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000740)='%pB \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x14, &(0x7f00000004c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @generic={0xf, 0x3, 0xc, 0x3, 0xf}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x46, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x7, 0x0, 0x200000}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000007c0)=[r4, r0, r0, r2, r5, r0, r0], &(0x7f0000000800)=[{0x1, 0x4, 0x10, 0xe}, {0x2, 0x1, 0x2, 0x4}, {0x4, 0x3, 0x6, 0xa}, {0x4, 0x5, 0x2, 0xb}]}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) set_mempolicy_home_node(&(0x7f0000124000/0x3000)=nil, 0x3000, 0x0, 0x0) 36.918387657s ago: executing program 0 (id=356): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000080), 0x4a) socket$packet(0x11, 0x3, 0x300) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x8000) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r2 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20) pipe2$9p(0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) close(r1) 36.787001667s ago: executing program 0 (id=360): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = open(0x0, 0x0, 0x0) renameat2(r1, 0x0, 0xffffffffffffffff, 0x0, 0x4) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], 0x0, 0x0, 0x55, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) shmget$private(0x0, 0x4000, 0x100, &(0x7f0000ffa000/0x4000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00'}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 36.584254459s ago: executing program 0 (id=363): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) r4 = dup(r3) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) fsetxattr$trusted_overlay_upper(r4, &(0x7f0000000000), 0x0, 0x0, 0x2) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)) 35.961774082s ago: executing program 0 (id=373): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r3 = syz_pidfd_open(r2, 0x0) pidfd_send_signal(r3, 0x2, 0x0, 0x0) 35.787527134s ago: executing program 0 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 35.756050084s ago: executing program 33 (id=375): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 1.770016699s ago: executing program 6 (id=974): open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x18) unshare(0x62040200) 1.499340451s ago: executing program 5 (id=976): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1000, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") mkdirat(0xffffffffffffff9c, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000140)=ANY=[@ANYRES8=0x0, @ANYRES32], 0x1, 0x256, &(0x7f0000000bc0)="$eJzs2s9rHGUYB/Bn0takqclG/EUL4ose1MvQ5OyhQVoQA4o2QhWkUzPRJeNuyCyBFaE56dWjR8/i0YMgSI9ecvEv6MFbLjn2II6ku9ZtE0sx224pn89lH3jmu/sM8zI8h91789svNtbrfL3oxVSWxdSF2IlbWSzEVPxjJ9547cpvL31w5aN3lldWLr6f0qXly4tLKaX5l3/9+KsfX7nRO/PhT/O/TMfuwid7+0t/7L6we3bvr8uft+vUrlOn20tFutbt9oprVZnW2vVGntJ7VVnUZWp36nLrrv561d3c7KeiszY3u7lV1nUqOv20UfZTr5t6W/1UfFa0OynP8zQ3GxzH6g+3mib2m1NXo2ma09/HmRsxdzNakT2TsmcvZM9fzV7cyc5+Nz3pQXlIHuj57zdNa9KD8lCMvNRnIqpvtle3Vwefg/7yerSjijLORyv+jINjMjSoL729cvF8um0hvq6uD/PXt1dPDPIxzC9GKxaOzi8O8unu/HTMjv7+UrTiuaPzS0fmZ+L1V0fyebTi90+jG1WsxUH2Tv7niEhvvbtyT/7c7esAAJ40ebrj0P5286Cf/1d/kL/ffjgTESP74T371ck4d3LSd0/d/3KjqKpySzG+4uDwPwZjTKg4dZz46eG5vM81Tx9uTcV4hn/qeN8zP6Yxxlec+P/xCb+YeCT+feiHe9kkBgIAAAAAAAAAAOCBPIo/IU76HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMfb3wEAAP//R7zIZg==") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.363170942s ago: executing program 3 (id=977): socket$l2tp6(0xa, 0x2, 0x73) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0xe}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00008000", @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x4000) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 1.287150073s ago: executing program 3 (id=979): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000000000000000000000008510000006000000180200", @ANYRES32, @ANYBLOB], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.273338092s ago: executing program 5 (id=981): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x7fffffe, 0x218, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xd0, 0xffffffc5}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x278) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x1f9}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) recvmmsg(r2, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}, {{0x0, 0x0, 0x0}, 0x1a83}], 0x2, 0x100, 0x0) 1.073178414s ago: executing program 3 (id=985): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x52}}, 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x12141, 0x0) 1.070309464s ago: executing program 1 (id=986): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) getpid() socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.015670144s ago: executing program 3 (id=987): r0 = socket$kcm(0xa, 0x922000000003, 0x11) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x8, @mcast1, 0x3, 0xffffffff}, 0x80, &(0x7f0000001880)=[{&(0x7f0000000600)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6f911b51430437121d", 0x28}], 0x1}, 0x0) 1.011884224s ago: executing program 1 (id=988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="01000000040000000800000008", @ANYRES32], 0x50) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)) readv(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) 950.402204ms ago: executing program 1 (id=989): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x26f2e217, 0x4ba}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000280), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x29, 0x0, 0x0) 907.273775ms ago: executing program 3 (id=990): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$int_in(r1, 0x5452, &(0x7f00000002c0)=0x6) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x75fd, &(0x7f0000000040)={0x0, 0x8002ce0, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x6dd7, 0x7721, 0x16, 0x0, 0x0) write(r1, 0x0, 0x0) shutdown(r1, 0x0) 705.419496ms ago: executing program 1 (id=991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000140), &(0x7f0000000040)='%+9llu \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e1d, 0x1, @mcast1={0xff, 0x5}, 0x8}, 0x7a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 704.707866ms ago: executing program 6 (id=1001): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r0, 0x1, 0x24, 0x0, &(0x7f00000002c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r1, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0x16, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000f77600000000000000000000000000000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff000000818cec9000000000000200000004"], 0xfc}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001004000000000000000fc020000000000000000000000fdff01fe8000000000f054f79700000000003a000000004e2100000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) mlockall(0x7) 538.399547ms ago: executing program 1 (id=992): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) lstat(0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0x7fff, r0}, 0x38) kexec_load(0x0, 0x0, &(0x7f00000002c0), 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = gettid() r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r3, r2, 0xde6c8001d5ed5ea6, 0xffffffffffffffff, 0xffffffffffffffff) 486.245457ms ago: executing program 6 (id=993): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r5, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) 422.640568ms ago: executing program 5 (id=994): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$inet6(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket(0x8000000010, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") open(0x0, 0x145142, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000b40)='neigh_create\x00'}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10) write(r0, &(0x7f00000002c0)="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", 0xfc) 308.502569ms ago: executing program 2 (id=995): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000800b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000280), 0x84, r0}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000, 0x0, 0x32}, 0x1e) 308.004709ms ago: executing program 1 (id=996): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x48a9, &(0x7f0000001480)={0x0, 0x40f5, 0x80, 0x0, 0x20000224}, &(0x7f0000000600), &(0x7f0000000280)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000000)={0x5, 0x9, 0x3, 0x3}) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000580)={0x8001, 0x10, 0x148}) 307.357058ms ago: executing program 5 (id=997): r0 = io_uring_setup(0x1c88, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x8, 0x196}) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r0, r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b000000000000"], 0x48) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) 268.361899ms ago: executing program 6 (id=998): kexec_load(0x50001a2c, 0x6, &(0x7f0000000900)=[{&(0x7f0000000380)="e1542eb4d11a930ec3d9c3ea7f4d804d588f754e9f987bd491600171516c00fdef858ceb178c59949ef7da222a3735d5f2c99b284f7750cfe9ff5b035ea4423a2ba3419864310119e1cfa001738c7fe48701c09350e542fc756c229bfe0d86d26179b76a77ac81d2193e5a6f2714ccbd08bd50037e1380038a00d963ea1df081b0a320ec855203acf8153b", 0x8b, 0x0, 0x166fa00000000000}, {&(0x7f0000000480)="71e78cbb8503706ee299951849126b1903d197ee1a2f9236b6b5741a06410a1a3db20fa8bbd93e7e16320e604037db206c3e01f92b15a55a3764adc9fadef544650bf58a3cd0ce8afe639efdd44b86141e5e6e4a99ec62569644a00798d23293212a95b6e2b7a54fdf67558c2894cad8811ad4ca968b4a45e46f2e50c87ecd5a869fc86691f95f60447b7e4727f7be194284da921c5b26a3df52db5a75cd953dd801f8c7baa697a073532083d256be7acf9817edbf9a14dd67263fbf6b8967bac7ed6d6e42f5c9b69e3e10f31fdb885d70efa470526a3d823b9a2782aa0ea56d6f2ff23dfd172db76c2db8735b23c9abd7edae663352", 0xf6, 0xd6a, 0x9e3}, {&(0x7f0000000580)="f500af09137eaa10833aca6fe3ff332dfbcf496b69cd5b577df28aff01f21967d482fd75f062e625082c816543a41d6009de950edd0bc789033c3d8d84d16e4ccf0886e5d58ee359f23d68d3c190ed9f669db08af36630781265f7c96e7764b602b895a1b46d2ec5b9e75e6d9cb1d7f27fa082e8355b5434ecd5f885853f92f73f9150a8ef1d8d0b344c0fc7d8b04838e27f2e239d91f0d6862a18066842479da55ae51f982f620218b4b8ce312115d72eebe2104de17d70bbf4ab24f942ed4ee5f7", 0xc2, 0xd3d4, 0x5}, {&(0x7f0000000680)="4e1913a253214dd9c970ec93f6df56550e942fc6798430cfa4a504e406983f7d2ebcfca173b72727501a28d90a74ea35343b6e38ec38264bf548bf2af8f3c613da43ac7e7fa0450e90c09dd15db69ea5a8511b84a827ca7e92be4708be431de5e7030000f03b4910", 0x68, 0x61, 0x6}, {0x0, 0x0, 0x2, 0xfffffffffffff26c}, {&(0x7f0000001040)="21fdd3833667b8c8433ab3fdd92bccaf05ce4b49b641d814dc99a6520a3da89a149549ad228cf2fc2ccb6b9c962f5c4e3c06e3fed9fd05df1d6a2e1e128e1b807584d03aab46d6f9349ebf8ceef0f63ab0deb85bc31fe6b3f6b58814a885270410d9120329f148e571e7d0109228622a69ecae07da030ba757c98aaf5ae6311bdd82b0e62088db4605387e76ca8c16982ae95c4db54d7dccc484fd15698a8d9ad6094ea95e15f74097b6086bf22b709765a8640c46508cc1dc1bc6821e07952876c19fce8ed461cd2496e09c214c68", 0xcf, 0xffffffffffffff80, 0x1}], 0x2a0000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000700)={[{@grpid}, {@orlov}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x3}, &(0x7f0000010080), &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, 0xfffffffffffffffe, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r3) sendfile(r2, r0, 0x0, 0xfffa83) 242.800899ms ago: executing program 5 (id=999): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10024, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0xb8b}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x21, 0xfffffff2, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$DCCPDIAG_GETSOCK(r2, 0x0, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90224fc602f0000000a0c0100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 242.007629ms ago: executing program 2 (id=1010): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400004005000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000c5e444a1"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe99}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xfffffd26) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f4, &(0x7f0000000080)) 213.394069ms ago: executing program 5 (id=1000): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x5}, 0x18) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7da, &(0x7f0000000fc0)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 160.452639ms ago: executing program 2 (id=1002): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x883a}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 102.74271ms ago: executing program 2 (id=1003): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', r6}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x20040844) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, r0, 0x80000) 98.25893ms ago: executing program 6 (id=1004): socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) pipe(&(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="3c34000000000000040100c910fc02000000000000000000000000000107", @ANYRES32=r0], 0x1b0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x0) 29.97327ms ago: executing program 2 (id=1005): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000000080)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x16, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000280), 0x8, 0x1c, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x4, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_x_sa2={0x2, 0x13, 0x3, 0x0, 0x0, 0x70bd29, 0x3503}]}, 0x98}, 0x1, 0x7}, 0x0) 7.95109ms ago: executing program 3 (id=1006): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='fib6_table_lookup\x00', r4}, 0x10) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x118800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe, 0x0, 0x0, 0xfffffffffff7bbfe, 0x3, 0x0, 0x0, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) 7.197951ms ago: executing program 6 (id=1007): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) getdents64(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 2 (id=1008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x6) write(r4, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): atadv_slave_1 (retrying later): interface not active [ 36.101471][ T3321] team0: Port device team_slave_1 added [ 36.113212][ T3317] hsr_slave_0: entered promiscuous mode [ 36.119138][ T3317] hsr_slave_1: entered promiscuous mode [ 36.125078][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.130809][ T3317] Cannot create hsr debugfs directory [ 36.149808][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.156757][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.182667][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.207589][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.214646][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.240534][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.266416][ T3313] hsr_slave_0: entered promiscuous mode [ 36.272483][ T3313] hsr_slave_1: entered promiscuous mode [ 36.278246][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.283997][ T3313] Cannot create hsr debugfs directory [ 36.305854][ T3314] hsr_slave_0: entered promiscuous mode [ 36.311979][ T3314] hsr_slave_1: entered promiscuous mode [ 36.317783][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 36.323520][ T3314] Cannot create hsr debugfs directory [ 36.383672][ T3321] hsr_slave_0: entered promiscuous mode [ 36.389916][ T3321] hsr_slave_1: entered promiscuous mode [ 36.395712][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 36.401471][ T3321] Cannot create hsr debugfs directory [ 36.530016][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.538506][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.556530][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.565337][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.584764][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.597388][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.608865][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.628425][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.637474][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.647663][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.660433][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.674006][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.700221][ T3313] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.710200][ T3313] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.720396][ T3313] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.734143][ T3313] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.781819][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.794173][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.803231][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.814692][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.824377][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.861362][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.873619][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.887261][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.894355][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.907168][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.919867][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.927054][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.936648][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.946726][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.953777][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.969184][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.989864][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.000076][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.007124][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.017591][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.029865][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.036919][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.047843][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.054987][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.074416][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.081492][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.094652][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.101756][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.135754][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.153147][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.175926][ T387] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.183064][ T387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.191846][ T387] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.198959][ T387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.217274][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.252945][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.278096][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.288577][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.335353][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.357010][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.369528][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.383735][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.418379][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.537732][ T3313] veth0_vlan: entered promiscuous mode [ 37.544815][ T3316] veth0_vlan: entered promiscuous mode [ 37.560598][ T3313] veth1_vlan: entered promiscuous mode [ 37.573922][ T3316] veth1_vlan: entered promiscuous mode [ 37.613307][ T3313] veth0_macvtap: entered promiscuous mode [ 37.623554][ T3321] veth0_vlan: entered promiscuous mode [ 37.631386][ T3316] veth0_macvtap: entered promiscuous mode [ 37.639576][ T3316] veth1_macvtap: entered promiscuous mode [ 37.652079][ T3313] veth1_macvtap: entered promiscuous mode [ 37.662836][ T3317] veth0_vlan: entered promiscuous mode [ 37.670149][ T3321] veth1_vlan: entered promiscuous mode [ 37.683022][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.703185][ T3314] veth0_vlan: entered promiscuous mode [ 37.711062][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.718921][ T3317] veth1_vlan: entered promiscuous mode [ 37.726515][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.741218][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.749389][ T3314] veth1_vlan: entered promiscuous mode [ 37.758301][ T3321] veth0_macvtap: entered promiscuous mode [ 37.771698][ T60] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.782274][ T60] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.799502][ T3321] veth1_macvtap: entered promiscuous mode [ 37.806398][ T3314] veth0_macvtap: entered promiscuous mode [ 37.814193][ T3314] veth1_macvtap: entered promiscuous mode [ 37.822612][ T60] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.836723][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.849889][ T60] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.862697][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 37.862709][ T29] audit: type=1400 audit(1762264360.577:81): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.izatUS/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.894370][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.899899][ T29] audit: type=1400 audit(1762264360.577:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.902036][ T3317] veth0_macvtap: entered promiscuous mode [ 37.923516][ T29] audit: type=1400 audit(1762264360.577:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.izatUS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.934698][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.954300][ T29] audit: type=1400 audit(1762264360.577:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.961825][ T60] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.983464][ T29] audit: type=1400 audit(1762264360.577:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.izatUS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.996276][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.018585][ T29] audit: type=1400 audit(1762264360.577:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.izatUS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.026056][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.053062][ T29] audit: type=1400 audit(1762264360.577:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.086277][ T29] audit: type=1400 audit(1762264360.797:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.109129][ T29] audit: type=1400 audit(1762264360.797:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.137157][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.153645][ T3317] veth1_macvtap: entered promiscuous mode [ 38.163175][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.172020][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.185831][ T29] audit: type=1400 audit(1762264360.897:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.221668][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.231020][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.244845][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.257644][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.281490][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.296548][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.304852][ T60] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.318374][ T60] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.348520][ T60] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.373846][ T60] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.405505][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.435176][ T60] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.472694][ T60] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.488491][ T60] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.628798][ T3515] netlink: 'syz.0.11': attribute type 1 has an invalid length. [ 38.644850][ T3515] bond1 (unregistering): Released all slaves [ 38.747714][ T3515] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11'. [ 38.819442][ T3520] netlink: 774 bytes leftover after parsing attributes in process `syz.0.12'. [ 39.058769][ T3528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15'. [ 39.086333][ T3528] xt_time: unknown flags 0xf4 [ 39.098571][ T3528] loop4: detected capacity change from 0 to 512 [ 39.105296][ T3528] ======================================================= [ 39.105296][ T3528] WARNING: The mand mount option has been deprecated and [ 39.105296][ T3528] and is ignored by this kernel. Remove the mand [ 39.105296][ T3528] option from the mount to silence this warning. [ 39.105296][ T3528] ======================================================= [ 39.141214][ T3528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 39.192338][ T3534] process 'syz.3.19' launched './file1' with NULL argv: empty string added [ 39.204920][ T3528] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2803: inode #11: comm syz.4.15: corrupted xattr block 95: invalid header [ 39.219220][ T3528] EXT4-fs (loop4): Remounting filesystem read-only [ 39.225839][ T3528] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 39.238953][ T3528] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 39.253606][ T3528] EXT4-fs (loop4): 1 orphan inode deleted [ 39.260416][ T3528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.277666][ T3528] EXT4-fs (loop4): shut down requested (1) [ 39.290954][ T3528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 39.300129][ T3528] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 39.496261][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22'. [ 39.513607][ T3547] team0: Port device team_slave_1 removed [ 39.998737][ T3551] tipc: Started in network mode [ 40.003707][ T3551] tipc: Node identity ac14140f, cluster identity 4711 [ 40.010802][ T3551] tipc: New replicast peer: 255.255.255.83 [ 40.016665][ T3551] tipc: Enabled bearer , priority 10 [ 40.102739][ T3559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.151603][ T3562] capability: warning: `syz.0.28' uses deprecated v2 capabilities in a way that may be insecure [ 40.368629][ T3580] loop2: detected capacity change from 0 to 256 [ 40.571369][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.584002][ T60] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.595911][ T3314] syz-executor (3314) used greatest stack depth: 10544 bytes left [ 40.666246][ T3604] veth2: entered promiscuous mode [ 40.671440][ T3604] veth2: entered allmulticast mode [ 40.862660][ T60] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.941556][ T60] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.955777][ T3612] chnl_net:caif_netlink_parms(): no params data found [ 40.998365][ T60] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.009708][ T3422] tipc: Node number set to 2886997007 [ 41.022944][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.030213][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.038118][ T3612] bridge_slave_0: entered allmulticast mode [ 41.045207][ T3612] bridge_slave_0: entered promiscuous mode [ 41.052810][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.059922][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.067683][ T3612] bridge_slave_1: entered allmulticast mode [ 41.075657][ T3612] bridge_slave_1: entered promiscuous mode [ 41.137893][ T3674] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.151738][ T3612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.162550][ T3612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.216278][ T3612] team0: Port device team_slave_0 added [ 41.228284][ T3612] team0: Port device team_slave_1 added [ 41.258201][ T3612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.265211][ T3612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.291363][ T3612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.302567][ T60] bridge_slave_1: left allmulticast mode [ 41.308289][ T60] bridge_slave_1: left promiscuous mode [ 41.314180][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.357490][ T60] bridge_slave_0: left allmulticast mode [ 41.363218][ T60] bridge_slave_0: left promiscuous mode [ 41.369032][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.534492][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.545539][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.555338][ T60] bond0 (unregistering): Released all slaves [ 41.563627][ T3612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.570934][ T3612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 41.596865][ T3612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.622323][ T60] hsr_slave_0: left promiscuous mode [ 41.628096][ T60] hsr_slave_1: left promiscuous mode [ 41.636327][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.643875][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.678405][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.686040][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.740234][ T60] veth1_macvtap: left promiscuous mode [ 41.745872][ T60] veth0_macvtap: left promiscuous mode [ 41.751605][ T60] veth1_vlan: left promiscuous mode [ 41.762026][ T60] veth0_vlan: left promiscuous mode [ 41.839957][ T60] team0 (unregistering): Port device team_slave_1 removed [ 41.849185][ T60] team0 (unregistering): Port device team_slave_0 removed [ 41.926260][ T3612] hsr_slave_0: entered promiscuous mode [ 41.933641][ T3612] hsr_slave_1: entered promiscuous mode [ 41.939947][ T3612] debugfs: 'hsr0' already exists in 'hsr' [ 41.945690][ T3612] Cannot create hsr debugfs directory [ 41.982027][ T3753] tipc: Started in network mode [ 41.986949][ T3753] tipc: Node identity de8c85a333a7, cluster identity 4711 [ 41.994202][ T3753] tipc: Enabled bearer , priority 0 [ 42.019913][ T3762] netlink: 'syz.1.52': attribute type 1 has an invalid length. [ 42.027662][ T3752] tipc: Resetting bearer [ 42.073760][ T3752] tipc: Disabling bearer [ 42.117438][ T3773] ip6erspan0: entered promiscuous mode [ 42.167353][ T3781] loop2: detected capacity change from 0 to 2048 [ 42.203832][ T3559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.239877][ T3682] loop2: p1 < > p4 [ 42.252868][ T3682] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.266910][ T3781] loop2: p1 < > p4 [ 42.276070][ T3559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.279938][ T3781] loop2: p4 size 8388608 extends beyond EOD, truncated [ 42.313195][ T3612] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 42.363072][ T3612] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 42.377143][ T3559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.400664][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.412058][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.423519][ T3612] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 42.444240][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 42.456020][ T3682] udevd[3682]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 42.457349][ T3612] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 42.525766][ T3707] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.550706][ T3713] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.579500][ T3713] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.607879][ T3713] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.631234][ T3612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 42.668599][ T3612] 8021q: adding VLAN 0 to HW filter on device team0 [ 42.732222][ T3817] syzkaller0: entered promiscuous mode [ 42.737828][ T3817] syzkaller0: entered allmulticast mode [ 42.761468][ T3713] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.768668][ T3713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.792814][ T3713] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.799989][ T3713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.920317][ T3612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.929252][ T3834] xt_hashlimit: max too large, truncated to 1048576 [ 42.951836][ T29] kauditd_printk_skb: 432 callbacks suppressed [ 42.951849][ T29] audit: type=1400 audit(1762264365.667:523): avc: denied { create } for pid=3832 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 43.112004][ T29] audit: type=1400 audit(1762264365.827:524): avc: denied { write } for pid=3849 comm="syz.3.61" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 43.168004][ T3612] veth0_vlan: entered promiscuous mode [ 43.180940][ T3612] veth1_vlan: entered promiscuous mode [ 43.198952][ T3612] veth0_macvtap: entered promiscuous mode [ 43.208902][ T3612] veth1_macvtap: entered promiscuous mode [ 43.247748][ T3612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 43.263181][ T3855] loop2: detected capacity change from 0 to 164 [ 43.285890][ T3612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 43.311972][ T29] audit: type=1400 audit(1762264366.017:525): avc: denied { mount } for pid=3854 comm="syz.2.62" name="/" dev="loop2" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 43.355006][ T3855] syz.2.62: attempt to access beyond end of device [ 43.355006][ T3855] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 43.370641][ T3711] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.386383][ T3711] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.397132][ T3711] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.406370][ T3855] syz.2.62: attempt to access beyond end of device [ 43.406370][ T3855] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 43.407387][ T29] audit: type=1326 audit(1762264366.047:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 43.421152][ T3711] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.443159][ T29] audit: type=1326 audit(1762264366.047:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 43.475846][ T29] audit: type=1326 audit(1762264366.047:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 43.499061][ T29] audit: type=1326 audit(1762264366.047:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 43.522452][ T29] audit: type=1326 audit(1762264366.047:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 43.545591][ T29] audit: type=1326 audit(1762264366.047:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 43.568757][ T29] audit: type=1326 audit(1762264366.047:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3853 comm="syz.3.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 43.693492][ T3862] loop1: detected capacity change from 0 to 1024 [ 43.843321][ T3866] loop3: detected capacity change from 0 to 2048 [ 43.858989][ T3866] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.865586][ T3866] EXT4-fs: Ignoring removed i_version option [ 44.427456][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.493265][ T3842] syz.1.59 (3842) used greatest stack depth: 9992 bytes left [ 44.504166][ T3872] netlink: 7 bytes leftover after parsing attributes in process `syz.2.68'. [ 44.535700][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.607311][ T3834] syz.1.59 (3834) used greatest stack depth: 7304 bytes left [ 44.662335][ T3889] loop2: detected capacity change from 0 to 128 [ 44.757116][ T3895] syz.2.72: attempt to access beyond end of device [ 44.757116][ T3895] loop2: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 44.782479][ T3895] syz.2.72: attempt to access beyond end of device [ 44.782479][ T3895] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 44.802534][ T3895] syz.2.72: attempt to access beyond end of device [ 44.802534][ T3895] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 44.818524][ T3895] syz.2.72: attempt to access beyond end of device [ 44.818524][ T3895] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 44.835141][ T3895] syz.2.72: attempt to access beyond end of device [ 44.835141][ T3895] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 44.848699][ T3895] syz.2.72: attempt to access beyond end of device [ 44.848699][ T3895] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 44.865747][ T3895] syz.2.72: attempt to access beyond end of device [ 44.865747][ T3895] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 44.880428][ T3895] syz.2.72: attempt to access beyond end of device [ 44.880428][ T3895] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 44.926318][ T3897] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.986932][ T3897] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.050390][ C1] hrtimer: interrupt took 57355 ns [ 45.103153][ T3897] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.134241][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.79'. [ 45.182501][ T3897] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.220814][ T3912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.80'. [ 45.230243][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.237696][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.246646][ T3912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.254056][ T3912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.280616][ T387] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.294203][ T387] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.313606][ T387] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.334241][ T387] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.509008][ T3925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.517415][ T3925] bond0: (slave bond1): Enslaving as an active interface with an up link [ 46.322077][ T3943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 46.331019][ T3943] hsr_slave_0: left promiscuous mode [ 46.336742][ T3943] hsr_slave_1: left promiscuous mode [ 46.422476][ T3945] tipc: Started in network mode [ 46.427419][ T3945] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 46.439328][ T3945] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 46.447661][ T3945] tipc: Enabled bearer , priority 10 [ 47.786681][ T23] tipc: Node number set to 1 [ 47.903686][ T3975] netlink: 'syz.5.105': attribute type 10 has an invalid length. [ 47.924630][ T3975] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 47.951110][ T3978] netlink: 24 bytes leftover after parsing attributes in process `syz.2.107'. [ 47.978543][ T3975] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.003404][ T3975] bond_slave_0: entered promiscuous mode [ 48.009165][ T3975] bond_slave_1: entered promiscuous mode [ 48.014869][ T3975] syz_tun: entered promiscuous mode [ 48.028493][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 48.028507][ T29] audit: type=1400 audit(1762264370.737:658): avc: denied { create } for pid=3981 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.067964][ T3975] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 48.086381][ T3975] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 48.095663][ T3975] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 48.110605][ T29] audit: type=1400 audit(1762264370.767:659): avc: denied { accept } for pid=3981 comm="syz.2.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.133829][ T3975] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 48.221353][ T29] audit: type=1400 audit(1762264370.937:660): avc: denied { read } for pid=3984 comm="syz.5.109" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.271090][ T29] audit: type=1400 audit(1762264370.937:661): avc: denied { open } for pid=3984 comm="syz.5.109" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 48.421175][ T29] audit: type=1400 audit(1762264371.117:662): avc: denied { ioctl } for pid=3992 comm="syz.0.113" path="socket:[6600]" dev="sockfs" ino=6600 ioctlcmd=0x943a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.881126][ T3998] netlink: 3 bytes leftover after parsing attributes in process `syz.2.114'. [ 48.933450][ T3998] 0ªX¹¦À: renamed from caif0 [ 48.952702][ T4000] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 48.964612][ T3998] 0ªX¹¦À: entered allmulticast mode [ 48.969870][ T3998] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 49.033245][ T4000] veth5: entered promiscuous mode [ 49.058679][ T4003] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 49.089164][ T4001] veth5: entered promiscuous mode [ 49.113118][ T4003] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.140757][ T4003] veth5: entered promiscuous mode [ 49.220724][ T4003] bond1: (slave veth5): Enslaving as an active interface with a down link [ 49.294091][ T4003] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 49.410750][ T29] audit: type=1326 audit(1762264372.127:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 49.439702][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 49.471545][ T4020] bridge_slave_1: left allmulticast mode [ 49.477376][ T4020] bridge_slave_1: left promiscuous mode [ 49.483359][ T4020] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.494772][ T29] audit: type=1326 audit(1762264372.157:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 49.520113][ T4020] bridge_slave_0: left allmulticast mode [ 49.525793][ T4020] bridge_slave_0: left promiscuous mode [ 49.531509][ T4020] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.653547][ T29] audit: type=1326 audit(1762264372.367:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 49.676855][ T29] audit: type=1326 audit(1762264372.367:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.1.120" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 49.770360][ T4034] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 49.833985][ T4035] netlink: 'syz.1.124': attribute type 10 has an invalid length. [ 49.841833][ T4035] netlink: 40 bytes leftover after parsing attributes in process `syz.1.124'. [ 49.882841][ T4035] team0: Port device geneve1 added [ 49.929939][ T29] audit: type=1400 audit(1762264372.627:667): avc: denied { rename } for pid=4032 comm="syz.0.125" name="file1" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 50.170405][ T4038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 50.188969][ T4038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.126'. [ 50.371213][ T4038] hsr_slave_1 (unregistering): left promiscuous mode [ 50.559781][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 50.587156][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.133'. [ 51.349825][ T4120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 51.373732][ T4120] hsr_slave_0: left promiscuous mode [ 51.387633][ T4120] hsr_slave_1: left promiscuous mode [ 51.454158][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.142'. [ 51.482664][ T4126] team0: Port device team_slave_1 removed [ 52.346921][ T4139] tipc: Started in network mode [ 52.351870][ T4139] tipc: Node identity 965cf4d2883b, cluster identity 4711 [ 52.359066][ T4139] tipc: Enabled bearer , priority 0 [ 52.438443][ T4135] tipc: Resetting bearer [ 52.451352][ T4141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.460349][ T4141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.494668][ T4135] tipc: Disabling bearer [ 52.514579][ T4141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.147'. [ 52.555513][ T4150] hsr_slave_0: left promiscuous mode [ 52.682925][ T4161] Zero length message leads to an empty skb [ 53.034759][ T4132] loop2: detected capacity change from 0 to 128 [ 53.138975][ T4164] loop0: detected capacity change from 0 to 2048 [ 53.205063][ T4164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.228052][ T4164] EXT4-fs (loop0): shut down requested (0) [ 53.247982][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 53.248037][ T29] audit: type=1400 audit(1762264375.937:723): avc: denied { append } for pid=4163 comm="syz.0.155" path="/27/file1/blkio.bfq.idle_time" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.277994][ T29] audit: type=1400 audit(1762264375.937:724): avc: denied { ioctl } for pid=4163 comm="syz.0.155" path="/27/file1/blkio.bfq.idle_time" dev="loop0" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.361050][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.427181][ T29] audit: type=1400 audit(1762264376.137:725): avc: denied { write } for pid=4181 comm="syz.2.160" name="ip6_flowlabel" dev="proc" ino=4026532768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 53.439942][ T4182] syzkaller0: entered allmulticast mode [ 53.468510][ T4182] syzkaller0 (unregistering): left allmulticast mode [ 53.656649][ T29] audit: type=1326 audit(1762264376.317:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 53.680004][ T29] audit: type=1326 audit(1762264376.317:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 53.703340][ T29] audit: type=1326 audit(1762264376.327:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 53.726720][ T29] audit: type=1326 audit(1762264376.327:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 53.749887][ T29] audit: type=1326 audit(1762264376.327:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 53.773198][ T29] audit: type=1326 audit(1762264376.327:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 53.796434][ T29] audit: type=1326 audit(1762264376.327:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4189 comm="syz.3.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 54.008408][ T4222] netlink: 'syz.0.171': attribute type 1 has an invalid length. [ 54.057958][ T4222] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.106100][ T4222] gretap1: entered promiscuous mode [ 54.119202][ T4222] bond1: (slave gretap1): making interface the new active one [ 54.127459][ T4222] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 54.260014][ T4238] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 54.500492][ T4265] loop5: detected capacity change from 0 to 512 [ 54.553258][ T4265] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.579757][ T4265] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 54.642244][ T4265] SELinux: Context @ is not valid (left unmapped). [ 54.707807][ T4284] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4284 comm=syz.3.183 [ 54.727189][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.861727][ T4290] netlink: 'syz.3.186': attribute type 13 has an invalid length. [ 54.986468][ T4290] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.993884][ T4290] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.183722][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.237672][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.345465][ T4084] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.354132][ T4084] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.381483][ T4084] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.534524][ T4084] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.591937][ T4310] __nla_validate_parse: 7 callbacks suppressed [ 55.591949][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.1.191'. [ 55.626341][ T4295] netlink: 'syz.0.188': attribute type 2 has an invalid length. [ 55.835690][ T4322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.192'. [ 55.858533][ T4324] loop3: detected capacity change from 0 to 1024 [ 55.901660][ T4322] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4322 comm=syz.1.192 [ 55.950129][ T4324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.962289][ T4294] loop0: detected capacity change from 0 to 8192 [ 56.061437][ T4294] netlink: 44 bytes leftover after parsing attributes in process `syz.0.188'. [ 56.091491][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.132210][ T4344] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 56.140418][ T4340] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 56.175406][ T4347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.198'. [ 56.176577][ T4342] netlink: 4 bytes leftover after parsing attributes in process `syz.2.199'. [ 56.217319][ T4344] 8021q: adding VLAN 0 to HW filter on device bond2 [ 56.264647][ T4347] bond0: (slave syz_tun): Releasing backup interface [ 56.302197][ T4344] gretap1: entered promiscuous mode [ 56.308101][ T4351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 56.312783][ T4344] bond2: (slave gretap1): making interface the new active one [ 56.325094][ T4344] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 56.371823][ T4355] loop2: detected capacity change from 0 to 1024 [ 56.389975][ T4355] EXT4-fs: Ignoring removed orlov option [ 56.420253][ T4363] netlink: 'syz.5.204': attribute type 13 has an invalid length. [ 56.439418][ T4355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.475102][ T4084] Bluetooth: hci0: Frame reassembly failed (-84) [ 56.489415][ T4369] Bluetooth: hci0: Frame reassembly failed (-90) [ 56.515042][ T4363] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.522226][ T4363] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.582520][ T4363] bond_slave_0: left promiscuous mode [ 56.587957][ T4363] bond_slave_1: left promiscuous mode [ 56.655510][ T4373] EXT4-fs (loop2): shut down requested (0) [ 56.723864][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.756712][ T4363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.773673][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.406924][ T4379] loop1: detected capacity change from 0 to 128 [ 57.454842][ T4084] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.463853][ T4084] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.473014][ T4084] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.483123][ T4084] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.717346][ T4388] loop1: detected capacity change from 0 to 1024 [ 57.760151][ T4388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.791040][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.800601][ T4397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 57.862054][ T4402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'. [ 57.871054][ T4402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'. [ 57.900443][ T4402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.213'. [ 57.977361][ T4408] hsr_slave_0: left promiscuous mode [ 57.987757][ T4408] hsr_slave_1: left promiscuous mode [ 58.079709][ T4410] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 58.388086][ T4422] netlink: 'syz.5.220': attribute type 1 has an invalid length. [ 58.406171][ T4422] 8021q: adding VLAN 0 to HW filter on device bond2 [ 58.531837][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 58.577048][ T4422] veth3: entered promiscuous mode [ 58.598613][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 58.598627][ T29] audit: type=1326 audit(1762264381.307:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.635682][ T4422] bond2: (slave veth3): Enslaving as an active interface with a down link [ 58.657357][ T4427] loop3: detected capacity change from 0 to 512 [ 58.673863][ T4428] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 58.700420][ T29] audit: type=1326 audit(1762264381.347:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.723809][ T29] audit: type=1326 audit(1762264381.357:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.747030][ T29] audit: type=1326 audit(1762264381.357:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.770378][ T29] audit: type=1326 audit(1762264381.357:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.793660][ T29] audit: type=1326 audit(1762264381.357:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.816802][ T29] audit: type=1326 audit(1762264381.357:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.840171][ T29] audit: type=1326 audit(1762264381.357:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.863307][ T29] audit: type=1326 audit(1762264381.357:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.886521][ T29] audit: type=1326 audit(1762264381.357:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4426 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 58.914134][ T4427] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.926865][ T4427] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.975323][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.998304][ T4434] loop1: detected capacity change from 0 to 512 [ 59.075526][ T4434] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.224: inode has both inline data and extents flags [ 59.130443][ T4434] EXT4-fs (loop1): get root inode failed [ 59.136114][ T4434] EXT4-fs (loop1): mount failed [ 59.167425][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.175935][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.242575][ T4449] netlink: 'syz.3.238': attribute type 1 has an invalid length. [ 59.268390][ T4449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 59.304763][ T4449] veth3: entered promiscuous mode [ 59.316843][ T4449] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 59.714326][ T4462] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 59.762967][ T4468] loop0: detected capacity change from 0 to 256 [ 59.834416][ T4470] loop2: detected capacity change from 0 to 2048 [ 59.853105][ T4470] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.867683][ T4470] EXT4-fs (loop2): shut down requested (0) [ 59.884913][ T4475] loop0: detected capacity change from 0 to 512 [ 59.920751][ T4475] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.962248][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.970671][ T4475] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.983979][ T4482] loop3: detected capacity change from 0 to 128 [ 60.006395][ T4482] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 60.024310][ T4482] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.037681][ T4486] bridge_slave_1: left allmulticast mode [ 60.043390][ T4486] bridge_slave_1: left promiscuous mode [ 60.049097][ T4486] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.057735][ T4486] bridge_slave_0: left allmulticast mode [ 60.063441][ T4486] bridge_slave_0: left promiscuous mode [ 60.069116][ T4486] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.077915][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.103036][ T4489] loop0: detected capacity change from 0 to 1024 [ 60.110698][ T4489] EXT4-fs: Ignoring removed orlov option [ 60.123691][ T4482] ªªªªªªÿÿòÿÿÿòÿÿ: renamed from wg2 [ 60.125314][ T4489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.232659][ T3313] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 60.260846][ T4494] EXT4-fs (loop0): shut down requested (0) [ 60.387224][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.410789][ T4503] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.495491][ T4509] Driver unsupported XDP return value 0 on prog (id 209) dev N/A, expect packet loss! [ 60.521175][ T4511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.528967][ T4511] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.540464][ T4511] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 60.659858][ T4515] loop1: detected capacity change from 0 to 2048 [ 60.672324][ T4515] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.687067][ T4515] EXT4-fs (loop1): shut down requested (0) [ 60.729444][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.088818][ T4529] __nla_validate_parse: 22 callbacks suppressed [ 62.088832][ T4529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.255'. [ 62.147917][ T4531] loop0: detected capacity change from 0 to 128 [ 62.148296][ T4529] bridge_slave_1: left allmulticast mode [ 62.159959][ T4529] bridge_slave_1: left promiscuous mode [ 62.165681][ T4529] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.188202][ T4533] loop2: detected capacity change from 0 to 512 [ 62.215416][ T4529] bridge_slave_0: left allmulticast mode [ 62.221206][ T4529] bridge_slave_0: left promiscuous mode [ 62.226991][ T4529] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.244876][ T4533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.357422][ T4533] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.405147][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.730467][ T4548] loop3: detected capacity change from 0 to 1024 [ 62.773280][ T4548] EXT4-fs: Ignoring removed orlov option [ 62.841191][ T4548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.138957][ T4554] EXT4-fs (loop3): shut down requested (0) [ 63.178541][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 63.336320][ T4556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.261'. [ 63.364069][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.754002][ T4565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.794485][ T4565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.890421][ T29] kauditd_printk_skb: 166 callbacks suppressed [ 63.890433][ T29] audit: type=1400 audit(1762264386.607:1061): avc: denied { create } for pid=4574 comm="syz.3.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 64.295724][ T29] audit: type=1326 audit(1762264387.007:1062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.319113][ T29] audit: type=1326 audit(1762264387.007:1063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.325111][ T4580] loop1: detected capacity change from 0 to 512 [ 64.342543][ T29] audit: type=1326 audit(1762264387.007:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.372208][ T29] audit: type=1326 audit(1762264387.007:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.395614][ T29] audit: type=1326 audit(1762264387.007:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.424916][ T29] audit: type=1326 audit(1762264387.027:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.448346][ T29] audit: type=1326 audit(1762264387.027:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.449695][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.273'. [ 64.471746][ T29] audit: type=1326 audit(1762264387.037:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.480573][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.273'. [ 64.503884][ T29] audit: type=1326 audit(1762264387.037:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4579 comm="syz.1.272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 64.544337][ T4580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.566137][ T4580] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.587417][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.273'. [ 64.596446][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.273'. [ 64.623565][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.273'. [ 64.632499][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.5.273'. [ 64.657161][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.689905][ T4596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.278'. [ 64.698954][ T4596] bridge_slave_1: left allmulticast mode [ 64.704753][ T4596] bridge_slave_1: left promiscuous mode [ 64.710527][ T4596] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.742382][ T4596] bridge_slave_0: left allmulticast mode [ 64.748113][ T4596] bridge_slave_0: left promiscuous mode [ 64.753901][ T4596] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.794949][ T4598] netlink: 'syz.5.279': attribute type 12 has an invalid length. [ 64.833717][ T4607] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 64.880953][ T4605] netdevsim netdevsim1: Direct firmware load for þ failed with error -2 [ 64.950525][ T4612] loop5: detected capacity change from 0 to 1024 [ 64.967868][ T4612] EXT4-fs: Ignoring removed orlov option [ 64.984564][ T4612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.259370][ T4621] EXT4-fs (loop5): shut down requested (0) [ 65.417571][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.443913][ T4618] netlink: 'syz.1.287': attribute type 2 has an invalid length. [ 65.538000][ T4618] loop1: detected capacity change from 0 to 8192 [ 65.654722][ T4628] loop5: detected capacity change from 0 to 512 [ 65.695994][ T4632] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4632 comm=syz.1.291 [ 65.718985][ T4628] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.734245][ T4628] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.771301][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 65.778029][ T4634] syz.3.292 uses obsolete (PF_INET,SOCK_PACKET) [ 65.785062][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 65.791556][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 65.843016][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.865909][ T4636] infiniband syz1: set active [ 65.870767][ T4636] infiniband syz1: added vcan0 [ 65.875588][ T3388] vcan0 speed is unknown, defaulting to 1000 [ 65.912550][ T4636] RDS/IB: syz1: added [ 65.916764][ T4636] smc: adding ib device syz1 with port count 1 [ 65.932429][ T4636] smc: ib device syz1 port 1 has no pnetid [ 65.944129][ T3388] vcan0 speed is unknown, defaulting to 1000 [ 65.946105][ T4641] syzkaller0: entered allmulticast mode [ 65.955746][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 65.992617][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 66.029264][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 66.075337][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 66.112098][ T4636] vcan0 speed is unknown, defaulting to 1000 [ 66.169184][ T4641] syzkaller0 (unregistering): left allmulticast mode [ 67.006069][ T3388] IPVS: starting estimator thread 0... [ 67.180700][ T4659] IPVS: using max 2352 ests per chain, 117600 per kthread [ 67.475081][ T4667] netlink: 'syz.5.303': attribute type 4 has an invalid length. [ 67.491256][ T4667] netlink: 'syz.5.303': attribute type 4 has an invalid length. [ 67.502173][ T4668] loop1: detected capacity change from 0 to 1024 [ 67.532126][ T4668] EXT4-fs: Ignoring removed orlov option [ 67.603175][ T4672] loop5: detected capacity change from 0 to 512 [ 67.619226][ T4674] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1551 sclass=netlink_xfrm_socket pid=4674 comm=syz.0.306 [ 67.634005][ T4668] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.674325][ T4672] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.702830][ T4679] netlink: 'syz.2.301': attribute type 10 has an invalid length. [ 67.710749][ T4679] __nla_validate_parse: 2 callbacks suppressed [ 67.710830][ T4679] netlink: 40 bytes leftover after parsing attributes in process `syz.2.301'. [ 67.730905][ T4672] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.854322][ T4684] EXT4-fs (loop1): shut down requested (0) [ 67.893264][ T4679] team0: Port device geneve1 added [ 67.907493][ T4687] syzkaller0: entered allmulticast mode [ 67.937901][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.993532][ T4687] syzkaller0 (unregistering): left allmulticast mode [ 68.033952][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.052322][ T4664] vcan0 speed is unknown, defaulting to 1000 [ 68.604225][ T4698] xt_hashlimit: Unknown mode mask 100000, kernel too old? [ 69.030493][ T4710] netlink: 40 bytes leftover after parsing attributes in process `syz.1.318'. [ 69.062163][ T4710] ip6gre1: entered promiscuous mode [ 69.067407][ T4710] ip6gre1: entered allmulticast mode [ 69.128667][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 69.128764][ T29] audit: type=1326 audit(1762264391.837:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 69.184658][ T4688] vcan0 speed is unknown, defaulting to 1000 [ 69.236742][ T29] audit: type=1326 audit(1762264391.877:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.3.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a775f6c9 code=0x7ffc0000 [ 69.390505][ T4723] loop3: detected capacity change from 0 to 512 [ 69.425414][ T4723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 69.438613][ T4723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.628363][ T29] audit: type=1400 audit(1762264392.337:1255): avc: denied { write } for pid=4724 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 69.701054][ T4723] EXT4-fs (loop3): 1 truncate cleaned up [ 69.708817][ T4723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.733244][ T4685] Set syz1 is full, maxelem 65536 reached [ 69.768075][ T29] audit: type=1400 audit(1762264392.477:1256): avc: denied { read write } for pid=4722 comm="syz.3.322" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.791013][ T29] audit: type=1400 audit(1762264392.477:1257): avc: denied { open } for pid=4722 comm="syz.3.322" path="/71/file2/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.826907][ T4735] loop5: detected capacity change from 0 to 1024 [ 69.840816][ T4735] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 69.850495][ T29] audit: type=1400 audit(1762264392.557:1258): avc: denied { mounton } for pid=4727 comm="syz.5.324" path="/52/file0" dev="tmpfs" ino=293 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.882585][ T4735] JBD2: no valid journal superblock found [ 69.888472][ T4735] EXT4-fs (loop5): Could not load journal inode [ 69.924593][ T4730] vcan0 speed is unknown, defaulting to 1000 [ 69.933337][ T4739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 69.942388][ T4739] tipc: Started in network mode [ 69.947273][ T4739] tipc: Node identity 7, cluster identity 4711 [ 69.953461][ T4739] tipc: Node number set to 7 [ 70.044793][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.314907][ T4752] Bluetooth: hci0: Frame reassembly failed (-90) [ 70.316605][ T29] audit: type=1326 audit(1762264393.027:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7106cef6c9 code=0x7ffc0000 [ 70.378772][ T29] audit: type=1326 audit(1762264393.077:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7106cef6c9 code=0x7ffc0000 [ 70.402175][ T29] audit: type=1326 audit(1762264393.077:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f7106cef6c9 code=0x7ffc0000 [ 70.425484][ T29] audit: type=1326 audit(1762264393.077:1262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4754 comm="syz.0.331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7106cef6c9 code=0x7ffc0000 [ 70.456130][ T4758] loop5: detected capacity change from 0 to 512 [ 70.497382][ T4758] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 70.611654][ T4766] netlink: 'syz.5.337': attribute type 12 has an invalid length. [ 70.881002][ T4789] loop5: detected capacity change from 0 to 512 [ 70.923719][ T4789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.007021][ T4789] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 71.042376][ T4808] netlink: 28 bytes leftover after parsing attributes in process `syz.3.346'. [ 71.382508][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.461973][ T4847] netlink: 24 bytes leftover after parsing attributes in process `syz.5.348'. [ 71.496599][ T4847] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4847 comm=syz.5.348 [ 71.511127][ T4843] tipc: New replicast peer: 255.255.255.83 [ 71.517105][ T4843] tipc: Enabled bearer , priority 10 [ 71.714552][ T4857] syzkaller0: entered promiscuous mode [ 71.720098][ T4857] syzkaller0: entered allmulticast mode [ 71.780985][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 71.806545][ T4903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 71.866277][ T4909] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 71.890695][ T4912] netlink: 'syz.0.360': attribute type 13 has an invalid length. [ 71.892372][ T4909] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 71.909272][ T4909] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 71.984647][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.995523][ T4912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.032942][ T4913] bond4: (slave bridge0): Enslaving as an active interface with a down link [ 72.049057][ T4909] macvlan2: entered promiscuous mode [ 72.054498][ T4909] macvlan2: entered allmulticast mode [ 72.072993][ T4909] bond4: entered promiscuous mode [ 72.079181][ T4909] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 72.098279][ T4909] bond4: left promiscuous mode [ 72.104208][ T4921] loop5: detected capacity change from 0 to 512 [ 72.115745][ T4925] loop0: detected capacity change from 0 to 512 [ 72.122715][ T4921] EXT4-fs: Ignoring removed orlov option [ 72.131377][ T4921] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.364: inode has both inline data and extents flags [ 72.145668][ T4925] EXT4-fs: Ignoring removed nobh option [ 72.151898][ T4921] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.364: couldn't read orphan inode 15 (err -117) [ 72.170546][ T4064] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.172290][ T4925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.363: corrupted inode contents [ 72.190783][ T4102] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.191604][ T4921] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.199487][ T4102] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.216218][ T4925] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #3: comm syz.0.363: mark_inode_dirty error [ 72.221907][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.366'. [ 72.247798][ T3701] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.252239][ T4925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #3: comm syz.0.363: corrupted inode contents [ 72.279712][ T4925] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.363: mark_inode_dirty error [ 72.293007][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.366'. [ 72.304020][ T4925] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.363: Failed to acquire dquot type 0 [ 72.315841][ T4925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.363: corrupted inode contents [ 72.330940][ T4925] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #16: comm syz.0.363: mark_inode_dirty error [ 72.343555][ T4925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.363: corrupted inode contents [ 72.355440][ T4370] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 72.362105][ T4925] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.363: mark_inode_dirty error [ 72.373931][ T4925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.363: corrupted inode contents [ 72.435523][ T4925] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 72.445964][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.489729][ T4925] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #16: comm syz.0.363: corrupted inode contents [ 72.509685][ T36] tipc: Node number set to 3979052451 [ 72.523316][ T4939] vcan0 speed is unknown, defaulting to 1000 [ 72.534117][ T4925] EXT4-fs error (device loop0): ext4_truncate:4637: inode #16: comm syz.0.363: mark_inode_dirty error [ 72.554484][ T4925] EXT4-fs error (device loop0) in ext4_process_orphan:343: Corrupt filesystem [ 72.563978][ T4925] EXT4-fs (loop0): 1 truncate cleaned up [ 72.631375][ T4925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.650969][ T4925] ext4 filesystem being mounted at /69/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.814818][ T4951] loop1: detected capacity change from 0 to 512 [ 72.822495][ T4360] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.847707][ T4952] tipc: Enabled bearer , priority 0 [ 72.866160][ T4952] tipc: Disabling bearer [ 72.972145][ T4951] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.374: couldn't read orphan inode 26 (err -116) [ 72.989339][ T4951] EXT4-fs (loop1): Remounting filesystem read-only [ 72.996845][ T4951] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.009973][ T4951] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.170560][ T4972] netlink: 4 bytes leftover after parsing attributes in process `syz.5.378'. [ 73.180761][ T4972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.238833][ T4962] vcan0 speed is unknown, defaulting to 1000 [ 73.260330][ T4980] lo: entered allmulticast mode [ 73.283862][ T4980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.380'. [ 73.293151][ T4979] lo: left allmulticast mode [ 73.358851][ T4962] chnl_net:caif_netlink_parms(): no params data found [ 73.442983][ T4962] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.450325][ T4962] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.465638][ T4962] bridge_slave_0: entered allmulticast mode [ 73.480536][ T4962] bridge_slave_0: entered promiscuous mode [ 73.487856][ T4962] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.495088][ T4962] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.502417][ T4962] bridge_slave_1: entered allmulticast mode [ 73.508875][ T4962] bridge_slave_1: entered promiscuous mode [ 73.528085][ T4962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.538685][ T4962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.561453][ T4962] team0: Port device team_slave_0 added [ 73.568420][ T4962] team0: Port device team_slave_1 added [ 73.586668][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.593659][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.619712][ T4962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.631049][ T4962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.637998][ T4962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.664386][ T4962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.701136][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.733685][ T4962] hsr_slave_0: entered promiscuous mode [ 73.746776][ T4962] hsr_slave_1: entered promiscuous mode [ 73.798860][ T5006] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 73.834698][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 73.864185][ T4962] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 73.873483][ T4962] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 73.882920][ T4962] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 73.892586][ T4962] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 73.938533][ T4962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.967106][ T4962] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.977407][ T4102] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.984571][ T4102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.008621][ T4102] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.015767][ T4102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.053205][ T5023] netlink: 4 bytes leftover after parsing attributes in process `GPL'. [ 74.097662][ T4962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.110696][ T5028] loop1: detected capacity change from 0 to 512 [ 74.118488][ T5028] ext4: Unknown parameter 'euid>00000000000000000000' [ 74.195557][ T5028] $Hÿ: renamed from bond0 (while UP) [ 74.208594][ T5035] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 74.217118][ T5028] $Hÿ: entered promiscuous mode [ 74.222307][ T5028] bond_slave_0: entered promiscuous mode [ 74.228134][ T5028] bond_slave_1: entered promiscuous mode [ 74.284499][ T4064] bond1 (unregistering): (slave gretap1): Releasing active interface [ 74.305956][ T5045] netlink: 'syz.1.394': attribute type 16 has an invalid length. [ 74.313796][ T5045] netlink: 156 bytes leftover after parsing attributes in process `syz.1.394'. [ 74.328671][ T4064] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.391803][ T4064] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.410313][ T4064] bond0 (unregistering): Released all slaves [ 74.425983][ T4064] bond1 (unregistering): Released all slaves [ 74.442304][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 74.442316][ T29] audit: type=1326 audit(1762264397.157:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.497044][ T5051] lo: entered allmulticast mode [ 74.520729][ T5044] lo: left allmulticast mode [ 74.525961][ T4064] tipc: Disabling bearer [ 74.530967][ T4064] tipc: Left network mode [ 74.549690][ T29] audit: type=1326 audit(1762264397.187:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.573142][ T29] audit: type=1326 audit(1762264397.187:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.596596][ T29] audit: type=1326 audit(1762264397.187:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.620107][ T29] audit: type=1326 audit(1762264397.187:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.643492][ T29] audit: type=1326 audit(1762264397.187:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.666829][ T29] audit: type=1326 audit(1762264397.187:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.679769][ T5069] netlink: 64 bytes leftover after parsing attributes in process `syz.2.398'. [ 74.690204][ T29] audit: type=1326 audit(1762264397.187:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.690276][ T29] audit: type=1326 audit(1762264397.187:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.745812][ T29] audit: type=1326 audit(1762264397.187:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5043 comm="syz.1.394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc329baf6c9 code=0x7ffc0000 [ 74.782043][ T4064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.843031][ T4064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.931567][ T4064] team0 (unregistering): Port device team_slave_1 removed [ 74.949941][ T5081] coredump: 232(syz.2.400): Core dump to core aborted: cannot preserve file permissions [ 75.178841][ T4064] team0 (unregistering): Port device team_slave_0 removed [ 75.351241][ T4962] veth0_vlan: entered promiscuous mode [ 75.384319][ T4962] veth1_vlan: entered promiscuous mode [ 75.443750][ T4962] veth0_macvtap: entered promiscuous mode [ 75.468569][ T4962] veth1_macvtap: entered promiscuous mode [ 75.523957][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.558541][ T5100] loop2: detected capacity change from 0 to 512 [ 75.563545][ T4962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.602749][ T5100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.616028][ T4060] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.641307][ T4060] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.650636][ T5100] ext4 filesystem being mounted at /98/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.650784][ T4060] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.669898][ T4060] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.688982][ T5100] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 75.709234][ T5100] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.405: corrupted inode contents [ 75.771758][ T5100] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.405: mark_inode_dirty error [ 75.821185][ T5114] sctp: [Deprecated]: syz.6.407 (pid 5114) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.821185][ T5114] Use struct sctp_sack_info instead [ 75.864355][ T5100] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.405: corrupted inode contents [ 75.897737][ T5109] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.405: corrupted inode contents [ 75.926441][ T5109] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.405: mark_inode_dirty error [ 75.960872][ T5109] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.405: corrupted inode contents [ 75.979818][ T5109] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.405: mark_inode_dirty error [ 76.008093][ T5109] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.405: corrupted inode contents [ 76.017623][ T5125] netlink: 16 bytes leftover after parsing attributes in process `syz.6.412'. [ 76.039935][ T5109] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.405: mark_inode_dirty error [ 76.080676][ T5112] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.405: corrupted inode contents [ 76.134489][ T5132] loop6: detected capacity change from 0 to 136 [ 76.142298][ T5132] iso9660: Unknown parameter 'sessidn' [ 76.204154][ T5135] loop6: detected capacity change from 0 to 512 [ 76.235421][ T5135] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.309719][ T5135] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.360159][ T5135] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.415: corrupted inode contents [ 76.379390][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.409838][ T5135] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.415: mark_inode_dirty error [ 76.449819][ T5135] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.415: corrupted inode contents [ 76.498052][ T5135] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.415: mark_inode_dirty error [ 76.571579][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.422'. [ 76.591799][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.705378][ T5155] wireguard0: entered promiscuous mode [ 76.711015][ T5155] wireguard0: entered allmulticast mode [ 76.899434][ T5165] xt_hashlimit: size too large, truncated to 1048576 [ 77.047998][ T5179] loop2: detected capacity change from 0 to 512 [ 77.055779][ T5179] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 77.095926][ T5182] netlink: 'syz.6.431': attribute type 4 has an invalid length. [ 77.110855][ T5179] EXT4-fs (loop2): 1 truncate cleaned up [ 77.122241][ T5179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.159875][ T5179] netlink: 'syz.2.432': attribute type 12 has an invalid length. [ 77.186187][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.207325][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 77.222570][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.437'. [ 78.159050][ T5225] loop6: detected capacity change from 0 to 2048 [ 78.181344][ T5225] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 78.633465][ T5225] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 78.678835][ T5225] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 78.691378][ T5225] EXT4-fs (loop6): This should not happen!! Data will be lost [ 78.691378][ T5225] [ 78.701051][ T5225] EXT4-fs (loop6): Total free blocks count 0 [ 78.707071][ T5225] EXT4-fs (loop6): Free/Dirty block details [ 78.712992][ T5225] EXT4-fs (loop6): free_blocks=2415919104 [ 78.718714][ T5225] EXT4-fs (loop6): dirty_blocks=8208 [ 78.724081][ T5225] EXT4-fs (loop6): Block reservation details [ 78.730543][ T5225] EXT4-fs (loop6): i_reserved_data_blocks=513 [ 78.769612][ T5234] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.448'. [ 78.785667][ T5234] netlink: zone id is out of range [ 78.790876][ T5234] netlink: zone id is out of range [ 78.796818][ T5234] netlink: zone id is out of range [ 78.802286][ T5234] netlink: zone id is out of range [ 78.807573][ T5234] netlink: zone id is out of range [ 78.836844][ T5234] netlink: del zone limit has 8 unknown bytes [ 78.881435][ T5237] loop2: detected capacity change from 0 to 128 [ 78.891879][ T5237] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 78.905312][ T5237] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.921790][ T60] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 78.937150][ T5237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.449'. [ 78.958678][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 78.989695][ T5168] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 79.042716][ T5240] pim6reg: entered allmulticast mode [ 79.049988][ T5240] pim6reg: left allmulticast mode [ 79.088971][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 79.097942][ T5244] netlink: 'syz.3.453': attribute type 12 has an invalid length. [ 79.133280][ T4051] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.133329][ T5244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.453'. [ 79.149745][ T4051] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.150481][ T5244] netlink: 'syz.3.453': attribute type 12 has an invalid length. [ 79.174619][ T4051] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.200474][ T4051] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 79.248561][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'. [ 79.420485][ T5260] loop3: detected capacity change from 0 to 4096 [ 79.447883][ T5260] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.819664][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 79.819718][ T29] audit: type=1400 audit(1762264402.527:1659): avc: denied { read } for pid=5284 comm="syz.5.466" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.850078][ T29] audit: type=1400 audit(1762264402.527:1660): avc: denied { open } for pid=5284 comm="syz.5.466" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.910797][ T29] audit: type=1400 audit(1762264402.627:1661): avc: denied { ioctl } for pid=5284 comm="syz.5.466" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 79.968578][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.452346][ T5295] loop3: detected capacity change from 0 to 512 [ 80.490820][ T5295] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.467: bad orphan inode 11862016 [ 80.515856][ T5295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.531283][ T5295] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.546279][ T29] audit: type=1326 audit(1762264403.257:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 80.569700][ T29] audit: type=1326 audit(1762264403.257:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 80.593072][ T29] audit: type=1326 audit(1762264403.257:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 80.616416][ T29] audit: type=1326 audit(1762264403.257:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 80.639749][ T29] audit: type=1326 audit(1762264403.257:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 80.663108][ T29] audit: type=1326 audit(1762264403.257:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 80.686551][ T29] audit: type=1326 audit(1762264403.257:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5300 comm="syz.6.471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 80.863288][ T5309] netlink: 56 bytes leftover after parsing attributes in process `syz.1.473'. [ 81.009957][ T5311] vcan0 speed is unknown, defaulting to 1000 [ 81.484713][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.677373][ T5321] loop2: detected capacity change from 0 to 512 [ 81.708691][ T5321] EXT4-fs: Ignoring removed bh option [ 81.740776][ T5321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-008c-000000000000 r/w without journal. Quota mode: writeback. [ 81.768175][ T5321] ext4 filesystem being mounted at /117/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.972116][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-008c-000000000000. [ 81.995014][ T5335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 82.476072][ T5340] loop2: detected capacity change from 0 to 512 [ 82.503794][ T5338] loop6: detected capacity change from 0 to 1024 [ 82.517618][ T5340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.547469][ T5338] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.559994][ T5338] EXT4-fs: inline encryption not supported [ 82.572388][ T5340] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.593249][ T5338] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.611330][ T5338] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.629856][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.653916][ T5338] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #11: comm syz.6.484: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 82.785090][ T5350] netlink: 104 bytes leftover after parsing attributes in process `syz.3.488'. [ 82.795926][ T5338] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.484: couldn't read orphan inode 11 (err -117) [ 82.823664][ T5338] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.841097][ T5338] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.484: Invalid block bitmap block 0 in block_group 0 [ 82.855564][ T5338] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.484: Failed to acquire dquot type 0 [ 82.933295][ T4962] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.503082][ T5375] netlink: 'syz.6.496': attribute type 1 has an invalid length. [ 83.671383][ T5377] vcan0 speed is unknown, defaulting to 1000 [ 83.938216][ T5381] bond1: entered promiscuous mode [ 84.015905][ T5381] bond1 (unregistering): Released all slaves [ 84.363562][ T5388] loop5: detected capacity change from 0 to 512 [ 84.432061][ T5388] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 84.463057][ T5388] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.499: attempt to clear invalid blocks 2 len 1 [ 84.509653][ T5388] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 84.573597][ T5388] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.499: invalid indirect mapped block 1819239214 (level 0) [ 84.601274][ T5396] netlink: 'syz.2.502': attribute type 4 has an invalid length. [ 84.619757][ T5388] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.499: invalid indirect mapped block 1819239214 (level 1) [ 84.675924][ T5388] EXT4-fs (loop5): 1 truncate cleaned up [ 84.704910][ T5388] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.812540][ T5392] bridge0: port 3(gretap0) entered blocking state [ 84.819046][ T5392] bridge0: port 3(gretap0) entered disabled state [ 84.825976][ T5392] gretap0: entered allmulticast mode [ 84.831912][ T5392] gretap0: entered promiscuous mode [ 84.837320][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 84.837330][ T29] audit: type=1400 audit(1762264407.547:1771): avc: denied { setopt } for pid=5401 comm="syz.1.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.927214][ T5392] bridge0: port 3(gretap0) entered blocking state [ 84.933697][ T5392] bridge0: port 3(gretap0) entered forwarding state [ 85.152027][ T29] audit: type=1400 audit(1762264407.867:1772): avc: denied { map } for pid=5415 comm="syz.6.509" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.176181][ T29] audit: type=1400 audit(1762264407.867:1773): avc: denied { read write } for pid=5415 comm="syz.6.509" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=12137 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.231109][ T29] audit: type=1400 audit(1762264407.887:1774): avc: denied { create } for pid=5410 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.250837][ T29] audit: type=1400 audit(1762264407.887:1775): avc: denied { connect } for pid=5410 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.270650][ T29] audit: type=1400 audit(1762264407.887:1776): avc: denied { bind } for pid=5410 comm="syz.2.507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 85.290124][ T29] audit: type=1400 audit(1762264407.917:1777): avc: denied { map } for pid=5415 comm="syz.6.509" path="/proc/57/smaps_rollup" dev="proc" ino=12138 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 85.313164][ T29] audit: type=1400 audit(1762264407.937:1778): avc: denied { mount } for pid=5410 comm="syz.2.507" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 85.420780][ T29] audit: type=1400 audit(1762264408.107:1779): avc: denied { write } for pid=5417 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 85.440137][ T29] audit: type=1400 audit(1762264408.107:1780): avc: denied { kexec_image_load } for pid=5417 comm="syz.3.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 85.581834][ T5388] Set syz1 is full, maxelem 65536 reached [ 85.598569][ T3612] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.608775][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.6.513'. [ 85.696150][ T5433] loop5: detected capacity change from 0 to 136 [ 85.724206][ T5435] loop3: detected capacity change from 0 to 512 [ 85.765050][ T5435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.779552][ T5435] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 85.880563][ T5444] vcan0 speed is unknown, defaulting to 1000 [ 86.263231][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.454026][ T5458] loop3: detected capacity change from 0 to 512 [ 86.510601][ T5458] EXT4-fs: Ignoring removed i_version option [ 86.516626][ T5458] EXT4-fs: Ignoring removed bh option [ 86.545195][ T5460] loop5: detected capacity change from 0 to 256 [ 86.558970][ T5462] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.596702][ T5458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.611769][ T5460] @: renamed from vlan0 [ 86.616247][ T5458] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.653978][ T5462] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.675100][ T5464] loop2: detected capacity change from 0 to 1024 [ 86.681976][ T5464] ext4: Unknown parameter 'euid>00000000000000000000' [ 86.699171][ T5464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.527'. [ 86.788601][ T5462] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.842173][ T3313] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.863435][ T5462] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.941559][ T4053] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.971280][ T4053] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.990482][ T4053] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.012602][ T4060] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.801732][ T5533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.548'. [ 89.023817][ T5541] bridge1: entered promiscuous mode [ 89.830475][ T5548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.850819][ T5548] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.863260][ T5548] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.913011][ T5550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 89.940094][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 89.940110][ T29] audit: type=1400 audit(1762264412.657:1830): avc: denied { execute_no_trans } for pid=5556 comm="syz.1.556" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.949135][ T5553] tipc: New replicast peer: 255.255.255.255 [ 89.982031][ T5553] tipc: Enabled bearer , priority 10 [ 90.029634][ T29] audit: type=1400 audit(1762264412.737:1831): avc: denied { bind } for pid=5558 comm="syz.5.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 90.048911][ T29] audit: type=1400 audit(1762264412.737:1832): avc: denied { name_bind } for pid=5558 comm="syz.5.557" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 90.070556][ T29] audit: type=1400 audit(1762264412.737:1833): avc: denied { node_bind } for pid=5558 comm="syz.5.557" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 90.115555][ T29] audit: type=1400 audit(1762264412.827:1834): avc: denied { name_bind } for pid=5563 comm="syz.6.559" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 90.137321][ T29] audit: type=1400 audit(1762264412.827:1835): avc: denied { node_bind } for pid=5563 comm="syz.6.559" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 90.163883][ T5566] loop2: detected capacity change from 0 to 512 [ 90.170484][ T5566] EXT4-fs: inline encryption not supported [ 90.176548][ T5566] EXT4-fs (loop2): Number of reserved GDT blocks insanely large: 935 [ 90.194924][ T29] audit: type=1400 audit(1762264412.897:1836): avc: denied { create } for pid=5563 comm="syz.6.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.213784][ T5568] veth0: entered promiscuous mode [ 90.214345][ T29] audit: type=1400 audit(1762264412.897:1837): avc: denied { bind } for pid=5563 comm="syz.6.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 90.273733][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.561'. [ 90.316541][ T5572] program syz.2.563 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.318402][ T29] audit: type=1400 audit(1762264413.027:1838): avc: denied { read } for pid=5571 comm="syz.2.563" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.349290][ T29] audit: type=1400 audit(1762264413.027:1839): avc: denied { open } for pid=5571 comm="syz.2.563" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 91.010710][ T5593] vcan0 speed is unknown, defaulting to 1000 [ 91.027518][ T5595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.573'. [ 91.036475][ T5595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.573'. [ 91.186002][ T5606] netlink: 16 bytes leftover after parsing attributes in process `syz.2.578'. [ 91.237047][ T5614] bond0: (slave bond_slave_0): Releasing backup interface [ 91.251316][ T5614] bond0: (slave bond_slave_1): Releasing backup interface [ 91.263187][ T5614] team0: Port device team_slave_0 removed [ 91.271008][ T5614] team0: Port device team_slave_1 removed [ 91.277275][ T5614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 91.281912][ T5620] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 91.292189][ T5620] netlink: 40 bytes leftover after parsing attributes in process `syz.3.582'. [ 91.301811][ T5614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 91.311008][ T5614] bond0: (slave bond1): Releasing backup interface [ 91.320543][ T5614] bond2: (slave gretap1): Releasing active interface [ 91.331710][ T5614] bond3: (slave veth3): Releasing backup interface [ 91.340985][ T5614] bond4: (slave bridge0): Releasing active interface [ 91.349275][ T5621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 91.349304][ T5620] veth1_vlan: left promiscuous mode [ 91.358239][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 91.365567][ T5620] batman_adv: batadv0: Adding interface: veth1_vlan [ 91.378771][ T5620] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.404541][ T5620] batman_adv: batadv0: Interface activated: veth1_vlan [ 91.423542][ T5621] netlink: 20 bytes leftover after parsing attributes in process `syz.2.585'. [ 91.432522][ T5621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.585'. [ 91.450415][ T5628] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 91.457446][ T5625] syzkaller0: entered promiscuous mode [ 91.463642][ T5625] syzkaller0: entered allmulticast mode [ 91.489093][ T5628] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 91.500235][ T5628] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 91.514665][ T5631] netlink: 'syz.2.589': attribute type 1 has an invalid length. [ 91.534162][ T5631] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.545215][ T5633] macvlan2: entered promiscuous mode [ 91.550602][ T5633] macvlan2: entered allmulticast mode [ 91.556598][ T5633] bond5: entered promiscuous mode [ 91.561952][ T5633] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.570102][ T5633] bond5: left promiscuous mode [ 91.579058][ T5631] vlan2: entered promiscuous mode [ 91.584131][ T5631] bond2: entered promiscuous mode [ 91.589379][ T5631] vlan2: entered allmulticast mode [ 91.594543][ T5631] bond2: entered allmulticast mode [ 92.027726][ T5650] netlink: 24 bytes leftover after parsing attributes in process `syz.3.596'. [ 92.060072][ T5650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.596'. [ 92.203439][ T5666] netlink: 'syz.5.604': attribute type 4 has an invalid length. [ 92.214653][ T5666] netlink: 'syz.5.604': attribute type 4 has an invalid length. [ 92.729442][ T5718] 0ªX¹¦À: left allmulticast mode [ 92.802307][ T5718] veth5: left promiscuous mode [ 92.815536][ T5718] vlan2: left promiscuous mode [ 92.820396][ T5718] bond2: left promiscuous mode [ 92.825330][ T5718] vlan2: left allmulticast mode [ 92.830223][ T5718] bond2: left allmulticast mode [ 92.835356][ T4079] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.844788][ T4079] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.854155][ T4079] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.858702][ T5726] Bluetooth: hci0: Frame reassembly failed (-90) [ 92.870072][ T4069] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.871060][ T4079] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.117291][ T5747] netlink: 'syz.2.640': attribute type 4 has an invalid length. [ 93.126231][ T5747] netlink: 'syz.2.640': attribute type 4 has an invalid length. [ 93.239724][ T5755] bridge0: entered allmulticast mode [ 93.256050][ T5755] bridge_slave_1: left allmulticast mode [ 93.261872][ T5755] bridge_slave_1: left promiscuous mode [ 93.267545][ T5755] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.279664][ T5755] bridge_slave_0: left allmulticast mode [ 93.285362][ T5755] bridge_slave_0: left promiscuous mode [ 93.291131][ T5755] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.659505][ T5802] syz.5.666 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 93.702076][ T5807] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 93.796099][ T5822] netlink: 'syz.6.675': attribute type 13 has an invalid length. [ 94.164565][ T5852] capability: warning: `syz.3.690' uses 32-bit capabilities (legacy support in use) [ 94.301126][ T5863] veth1_macvtap: left promiscuous mode [ 94.314698][ T5863] macsec0: entered allmulticast mode [ 94.690497][ T5899] sch_fq: defrate 4294967295 ignored. [ 94.861924][ T5913] sch_fq: defrate 8 ignored. [ 94.883497][ T5915] sock: sock_set_timeout: `syz.6.717' (pid 5915) tries to set negative timeout [ 94.893250][ T5915] netlink: 'syz.6.717': attribute type 10 has an invalid length. [ 94.903826][ T5915] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.911953][ T5915] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.920468][ T4370] Bluetooth: hci0: command 0x1003 tx timeout [ 94.920514][ T3731] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.942558][ T5917] netlink: 'syz.1.718': attribute type 4 has an invalid length. [ 94.950385][ T29] kauditd_printk_skb: 1645 callbacks suppressed [ 94.950474][ T29] audit: type=1326 audit(1762264417.657:3485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 94.971917][ T5917] .`: renamed from $Hÿ [ 94.980106][ T29] audit: type=1326 audit(1762264417.657:3486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.007668][ T29] audit: type=1326 audit(1762264417.657:3487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.031068][ T29] audit: type=1326 audit(1762264417.657:3488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.054385][ T29] audit: type=1326 audit(1762264417.657:3489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.077845][ T29] audit: type=1326 audit(1762264417.657:3490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.104583][ T29] audit: type=1326 audit(1762264417.667:3491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.127909][ T29] audit: type=1326 audit(1762264417.667:3492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.151199][ T29] audit: type=1326 audit(1762264417.667:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.174502][ T29] audit: type=1326 audit(1762264417.667:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.2.706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f454a8f1f85 code=0x7ffc0000 [ 95.211542][ T5924] xfrm0: entered promiscuous mode [ 95.216613][ T5924] xfrm0: entered allmulticast mode [ 95.485642][ T5944] team0: Port device dummy0 added [ 95.723210][ T5964] 8021q: VLANs not supported on ip6tnl0 [ 95.731213][ T5963] vcan0 speed is unknown, defaulting to 1000 [ 96.451810][ T6010] vcan0 speed is unknown, defaulting to 1000 [ 96.872337][ T6028] __nla_validate_parse: 10 callbacks suppressed [ 96.872355][ T6028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 97.139662][ T6053] validate_nla: 1 callbacks suppressed [ 97.139677][ T6053] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 97.166757][ T6053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.191310][ T6053] bond0: (slave geneve2): making interface the new active one [ 97.201102][ T6053] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 97.501889][ T6066] ip6tnl0: entered promiscuous mode [ 97.507163][ T6066] ip6tnl0: entered allmulticast mode [ 98.013011][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 98.037522][ T6090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.790'. [ 98.133535][ T6088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.789'. [ 98.304326][ T6096] vcan0 speed is unknown, defaulting to 1000 [ 98.332154][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.793'. [ 98.341131][ T6098] netlink: 28 bytes leftover after parsing attributes in process `syz.5.793'. [ 98.354120][ T6098] erspan0: entered promiscuous mode [ 98.360247][ T6098] gretap0: entered promiscuous mode [ 98.614924][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.797'. [ 99.120378][ T6140] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 99.637634][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.6.822'. [ 99.962068][ T29] kauditd_printk_skb: 1118 callbacks suppressed [ 99.962164][ T29] audit: type=1400 audit(3909748070.672:4601): avc: denied { create } for pid=6179 comm="syz.1.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 100.065895][ T29] audit: type=1400 audit(3909748070.772:4602): avc: denied { map_create } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.225413][ T29] audit: type=1400 audit(3909748070.932:4603): avc: denied { create } for pid=6184 comm="syz.1.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 100.266516][ T29] audit: type=1400 audit(3909748070.952:4604): avc: denied { prog_load } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.285716][ T29] audit: type=1400 audit(3909748070.952:4605): avc: denied { prog_load } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.304716][ T29] audit: type=1400 audit(3909748070.952:4606): avc: denied { map_create } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.323999][ T29] audit: type=1400 audit(3909748070.952:4607): avc: denied { prog_load } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.343023][ T29] audit: type=1400 audit(3909748070.952:4608): avc: denied { prog_load } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.362146][ T29] audit: type=1400 audit(3909748070.952:4609): avc: denied { prog_load } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 100.381141][ T29] audit: type=1400 audit(3909748070.952:4610): avc: denied { create } for pid=6182 comm="syz.5.827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 100.477585][ T6195] vcan0 speed is unknown, defaulting to 1000 [ 101.834184][ T6234] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 101.966821][ T6235] mmap: syz.5.848 (6235) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.423226][ T6245] wg2: entered promiscuous mode [ 102.428166][ T6245] wg2: entered allmulticast mode [ 102.744123][ T6256] vcan0 speed is unknown, defaulting to 1000 [ 102.840915][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.861'. [ 102.999394][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.870'. [ 103.631903][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.3.885'. [ 104.130147][ T6351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.897'. [ 104.148862][ T6351] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6351 comm=syz.3.897 [ 104.475141][ T6376] netlink: 'syz.3.910': attribute type 13 has an invalid length. [ 104.478744][ T6372] syzkaller0: entered promiscuous mode [ 104.488577][ T6372] syzkaller0: entered allmulticast mode [ 104.552678][ T6376] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 104.569262][ T4053] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.586479][ T4053] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.595023][ T4053] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.604132][ T4053] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.623850][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 104.639484][ T6382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.912'. [ 104.712833][ T6384] vcan0 speed is unknown, defaulting to 1000 [ 104.748076][ T6390] netlink: 'syz.1.915': attribute type 1 has an invalid length. [ 104.793475][ T6390] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 104.804613][ T6390] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 104.843464][ T6394] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 104.866443][ T6394] macvlan2: entered promiscuous mode [ 104.871937][ T6394] macvlan2: entered allmulticast mode [ 104.877910][ T6394] bond1: entered promiscuous mode [ 104.883268][ T6394] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 104.892254][ T6394] bond1: left promiscuous mode [ 104.995694][ T29] kauditd_printk_skb: 730 callbacks suppressed [ 104.995705][ T29] audit: type=1400 audit(3909748075.702:5341): avc: denied { prog_load } for pid=6400 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.021161][ T29] audit: type=1400 audit(3909748075.712:5342): avc: denied { create } for pid=6400 comm="syz.1.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=0 [ 105.047692][ T29] audit: type=1400 audit(3909748075.732:5343): avc: denied { prog_load } for pid=6395 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.066812][ T29] audit: type=1400 audit(3909748075.732:5344): avc: denied { create } for pid=6395 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 105.087388][ T29] audit: type=1326 audit(3909748075.732:5345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.6.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 105.110704][ T29] audit: type=1326 audit(3909748075.732:5346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.6.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 105.134149][ T29] audit: type=1400 audit(3909748075.732:5347): avc: denied { map_create } for pid=6395 comm="syz.6.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.153219][ T29] audit: type=1326 audit(3909748075.732:5348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.6.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 105.176560][ T29] audit: type=1326 audit(3909748075.732:5349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.6.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 105.199930][ T29] audit: type=1326 audit(3909748075.732:5350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6395 comm="syz.6.916" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f15e25ff6c9 code=0x7ffc0000 [ 105.599167][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.5.930'. [ 105.608926][ T6429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.930'. [ 105.637631][ T6433] xt_l2tp: v2 sid > 0xffff: 4294901760 [ 105.666793][ T6437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.933'. [ 105.681412][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.933'. [ 105.887494][ T6462] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 107.016548][ T6534] vcan0 speed is unknown, defaulting to 1000 [ 107.392394][ T6546] vcan0 speed is unknown, defaulting to 1000 [ 107.666271][ T6565] wireguard0: entered promiscuous mode [ 107.672027][ T6565] wireguard0: entered allmulticast mode [ 107.963705][ T6577] netlink: 'syz.1.991': attribute type 4 has an invalid length. [ 108.191275][ T6585] __nla_validate_parse: 4 callbacks suppressed [ 108.191289][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.993'. [ 108.244489][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.993'. [ 108.323498][ T6587] netlink: 'syz.5.994': attribute type 12 has an invalid length. [ 108.609373][ T6572] ================================================================== [ 108.609410][ T6572] BUG: KCSAN: data-race in fasync_remove_entry / sock_wake_async [ 108.609446][ T6572] [ 108.609451][ T6572] write to 0xffff88811941f458 of 8 bytes by task 6573 on cpu 1: [ 108.609467][ T6572] fasync_remove_entry+0xcc/0x120 [ 108.609485][ T6572] fasync_helper+0x97/0xc0 [ 108.609502][ T6572] sock_fasync+0x58/0xc0 [ 108.609524][ T6572] __fput+0x5e6/0x650 [ 108.609545][ T6572] ____fput+0x1c/0x30 [ 108.609571][ T6572] task_work_run+0x131/0x1a0 [ 108.609612][ T6572] exit_to_user_mode_loop+0xed/0x110 [ 108.609645][ T6572] do_syscall_64+0x1d6/0x200 [ 108.609668][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.609691][ T6572] [ 108.609698][ T6572] read to 0xffff88811941f458 of 8 bytes by task 6572 on cpu 0: [ 108.609717][ T6572] sock_wake_async+0x29/0x110 [ 108.609746][ T6572] unix_write_space+0x13b/0x140 [ 108.609778][ T6572] sock_wfree+0x14b/0x3c0 [ 108.609813][ T6572] unix_destruct_scm+0xc3/0xf0 [ 108.609851][ T6572] skb_release_head_state+0xba/0x1a0 [ 108.609885][ T6572] __kfree_skb+0x18/0x150 [ 108.609913][ T6572] sk_skb_reason_drop+0xbd/0x270 [ 108.609942][ T6572] unix_release_sock+0x661/0x7b0 [ 108.609969][ T6572] unix_release+0x58/0x80 [ 108.609995][ T6572] sock_close+0x6b/0x150 [ 108.610020][ T6572] __fput+0x29b/0x650 [ 108.610040][ T6572] ____fput+0x1c/0x30 [ 108.610061][ T6572] task_work_run+0x131/0x1a0 [ 108.610089][ T6572] exit_to_user_mode_loop+0xed/0x110 [ 108.610115][ T6572] do_syscall_64+0x1d6/0x200 [ 108.610137][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.610163][ T6572] [ 108.610168][ T6572] value changed: 0xffff888109a37f90 -> 0x0000000000000000 [ 108.610182][ T6572] [ 108.610187][ T6572] Reported by Kernel Concurrency Sanitizer on: [ 108.610212][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.3.990 Not tainted syzkaller #0 PREEMPT(voluntary) [ 108.610243][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 108.610259][ T6572] ==================================================================