last executing test programs: 5.768744466s ago: executing program 3 (id=485): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}], 0x2, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r4) 4.877621433s ago: executing program 3 (id=486): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x7cb641, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x1, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r6, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000940)=""/74, 0x4a}], 0x4}, 0x5d}], 0x1b00, 0x10022, 0x0) 3.822091314s ago: executing program 2 (id=498): syz_open_dev$tty1(0xc, 0x4, 0x1) getresuid(0x0, 0x0, &(0x7f00000004c0)=0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x5f) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r3 = dup2(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000", @ANYRES32=r3, @ANYRES8=0x0], &(0x7f0000000180)='GPL\x00', 0x200, 0x29, &(0x7f00000001c0)=""/41, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x9, 0x3}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001cc0)=[{0x40, 0x5, 0xd, 0x4}, {0x2, 0x5, 0x9, 0x9}, {0x4, 0x2, 0x9, 0x5}, {0x1, 0x1, 0x5, 0x7}, {0x3, 0x0, 0xf, 0xc}, {0x1, 0x2, 0xb}, {0x5, 0x3, 0xd, 0x3}, {0x0, 0x2, 0x9, 0x6}, {0x3, 0x3, 0x0, 0x6}, {0x2, 0x5, 0x6, 0x1}], 0x10, 0x4}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, r0, &(0x7f0000000480)='./file0\x00') r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001e80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001e40), 0x13f, 0x2}}, 0x20) write(r4, &(0x7f00000004c0)="06", 0x1) sendfile(r4, r4, &(0x7f0000001000), 0xffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) 3.51217944s ago: executing program 4 (id=503): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x400, 0x8, 0x20000fe}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4040044) socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 3.418808082s ago: executing program 4 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 2.938760282s ago: executing program 2 (id=507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = io_uring_setup(0x5286, &(0x7f0000000140)={0x0, 0xad0b, 0x2, 0x1, 0x52}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x20010, r1, 0x8000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) r4 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x18}}], 0x1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$nl_route_sched(r3, 0x0, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) 2.938541372s ago: executing program 4 (id=508): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='workqueue_activate_work\x00', r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005f"], 0x0, 0xfc5f}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 2.937150062s ago: executing program 1 (id=517): getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_clone(0x48020000, 0x0, 0x0, 0x0, 0x0, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) 2.844923674s ago: executing program 4 (id=509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x6}, 0x18) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.844281904s ago: executing program 0 (id=520): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60010020, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) 2.839065044s ago: executing program 2 (id=510): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "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"}, 0x157) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 2.749244445s ago: executing program 2 (id=511): open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open(&(0x7f00000001c0)='./file0\x00', 0x300, 0x40) 2.694043107s ago: executing program 2 (id=512): socket$kcm(0x10, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000404) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@val={0x0, 0x6}, @void, @x25={0x2, 0x3, 0xf1, "13c0fab6c234804a97d0b19c54a1c140d944e7b2a5801e40f7daf7a1f14bbc9a19c0bdbc4c499ba31b07720d75efe9ecc0b815550afbdac136045ff5a70150c0ae90a2baf66037ccd80fffb29d3aa198ed2f7b99228fa9695f57da9bd537bbfe095ebe30b12d97137def4bb10159e0762bf7cd13d3245e525cbac222b921d19407b216bf6a80e8f33634ed8ca3e4b63b1cfecfc98258b8ab13808b1384ba4cec80599ca1f2ca687f9c1ebf42d54df21c5e751a9373cd9e1d49b2a9ffdeafe6a391b773f584d1579fed552b12c9151e84a03952b8a12b81ce220ae8cb893e402a80e3f0f425f1900b"}}, 0xef) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x78, 0x0, 0x1, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.596399668s ago: executing program 1 (id=513): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) r3 = gettid() process_vm_writev(r3, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmmsg$inet(r1, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)='\b', 0x1}], 0x1}}], 0x2, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r4) 1.596233208s ago: executing program 2 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_clone(0xe2840480, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffd, 0x5}, 0x48) 1.596076688s ago: executing program 3 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000000000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000006c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0xffffffff}}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}]}}, &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xfffffffffffffff8}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xe}, 0x94) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) writev(r3, 0x0, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x6, 0x3}, {0x0}, &(0x7f0000000280)=[{&(0x7f0000002ec0)=""/123, 0x7b}], 0x1, 0x40, 0x4}}], 0x48}, 0x0) 1.50117633s ago: executing program 0 (id=516): clock_settime(0x2, &(0x7f0000001380)={0x0, 0x3938700}) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000008c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0xb40000000000000, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) 1.50104028s ago: executing program 4 (id=518): socket$packet(0x11, 0x3, 0x300) unshare(0x60060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x1, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x1f00}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x4, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103, 0x1}) sendto(r3, &(0x7f0000001680)="9b", 0x1, 0x1c015, 0x0, 0x0) io_uring_enter(r0, 0x46f6, 0x0, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448dd, 0x0) 1.451890671s ago: executing program 3 (id=519): syz_open_dev$tty1(0xc, 0x4, 0x1) getresuid(0x0, 0x0, &(0x7f00000004c0)=0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x5f) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r3 = dup2(r2, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x17, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000", @ANYRES32=r3, @ANYRES8=0x0], &(0x7f0000000180)='GPL\x00', 0x200, 0x29, &(0x7f00000001c0)=""/41, 0x41100, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000003c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x3, 0x9, 0x3}, 0x10, 0x0, 0x0, 0xa, 0x0, &(0x7f0000001cc0)=[{0x40, 0x5, 0xd, 0x4}, {0x2, 0x5, 0x9, 0x9}, {0x4, 0x2, 0x9, 0x5}, {0x1, 0x1, 0x5, 0x7}, {0x3, 0x0, 0xf, 0xc}, {0x1, 0x2, 0xb}, {0x5, 0x3, 0xd, 0x3}, {0x0, 0x2, 0x9, 0x6}, {0x3, 0x3, 0x0, 0x6}, {0x2, 0x5, 0x6, 0x1}], 0x10, 0x4}, 0x94) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000440)=@sr0, r0, &(0x7f0000000480)='./file0\x00') r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000001e80)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000001e40), 0x13f, 0x2}}, 0x20) write(r4, &(0x7f00000004c0)="06", 0x1) sendfile(r4, r4, &(0x7f0000001000), 0xffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r5, 0x0, 0x4804}, 0x18) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) 667.107546ms ago: executing program 1 (id=521): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000380)='workqueue_activate_work\x00', r1}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="9feb01005f"], 0x0, 0xfc5f}, 0x28) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 665.761247ms ago: executing program 0 (id=531): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x6c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f00000000c0)={0x0, 0x7a120, 0xac47, {0x0, 0x10000}}) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$eJzs3UtrXFUcAPD/nUzS9KFJoRR1IYEurNROmsRHBRd1KVos6L4OyTSUTDolMylNLNgu7MaNFEHEgujOhXuXxS/gpyhooUgJunATuZM76bSZaV4zmdT5/eC259xzZ/7nzL3nzLmPIQH0rbH0n1zEyxHxdRIx0lSWj6xwbG27lUc3ptMlidXVT/5KIsnWNbZPsv8PZ5mXIuK3LyNO5TbGrS4tzxXL5dJClh+vzV8dry4tn748X5wtzZauTE5NnX1ravLdd97uWFtfv/DPdx/f++DsVydWvv3lwdE7SZyLI1lZczt24WZzZizGss9kMM49teFEB4LtJ0mvK8CODGT9fDDSMWAkBtZzLayO7HX1gC76Iu3WQJ9K9H/oU415QOPcvkPnwc+Nh++vnQBtbH9+7dpIDNfPhg6tJNn1kDXp+e5oB+KnMX798+6ddInOXYcA2NTNWxFxJp/fOP4l2fi3c2e2sM3TMbL4bS5AAZ10L53/vNFq/pNbn/9Ei/nP4RZ9dyfa9P8muQcdCNNWOv97r+X8d/2m1ehAlnuhPucbTC5dLpfSse3FiDgZgwfS/DPu53yWW7m/2q6wef6XLmn8xlwwq8eD/IEnXzNTrBV31egmD29FvNJy/pus7/+kxf5PP48LW4xxvHT31XZlm7d/XVduMa3+GPFay/2fPBH4Gfcnx+vHw3jjqNjo79vHf28Xfxvt74qHP2eJ9u0fTZrv11a3H+OH4X9L7cp2evwPJZ/W00PZuuvFWm1hImIo+Wjj+snHr23kG9unx//JE88e/1od/wfTjr3F9t8+drt50+Httb+70vbPtD/+Bzbu/+0n7n/4+fft4m9t/79ZT53M1mxl/NtqBXf7+QEAAAAAAMB+kouII5HkCuvpXK5QWHu+41gcypUr1dqpS5XFKzNR/63saAzmGne6R5qeh5jInodt5Cefyk9FxNGI+GbgYD1fmK6UZ3rdeAAAAAAAAAAAAAAAAAAAANgnDkcMt/r9f+qPgV7XDui6fK8rAPRM+/6flXTiLz0B+9KOv/+HO1sPYO+Z/0P/0v+hf+n/0L/0f+hf+j/0r+b+P9TDegB7bzvf/z+d72JFAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/hwvnz6bK68ujGdJqfuba0OFe5dnqmVJ0rzC9OF6YrC1cLs5XKbLlUmK7Mb/Z+5Url6sRkLF4fr5WqtfHq0vLF+crildrFy/PF2dLF0uCetAoAAAAAAAAAAAAAAAAAAACeL9Wl5bliuVxakJDYUSK/P6oh0ZwY2v379HpkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDH/gsAAP//3Kw5xQ==") bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, 0x0) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x80000008) readv(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, 0x0) statfs(&(0x7f0000000000)='./file1\x00', 0x0) pipe2(0x0, 0x84080) 507.618ms ago: executing program 4 (id=522): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000000)='./bus\x00', 0xd931d3864d39ddd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x24403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @lowpan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket(0x10, 0x803, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) 503.2323ms ago: executing program 1 (id=523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) statfs(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0x99, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80040, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xa, 0x7}, 0x8781, 0x2000000, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='.\x00', 0x4000423) r5 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r6, 0xffffffffffffffff, 0x0) 452.540511ms ago: executing program 0 (id=524): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="fa", 0x1}], 0x1}}], 0x1, 0x24040890) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000600)={'#! ', './file0', [], 0xa, "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"}, 0x157) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(0xffffffffffffffff, &(0x7f0000000100), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 368.611803ms ago: executing program 1 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5800000000090101000000000000000000000000100004800800014000000004240002000c0002800500010a0000000014000280080001000000000008000200ac1414000800054000000000090001"], 0x58}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) 368.128373ms ago: executing program 3 (id=526): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a000000040000000c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 292.806974ms ago: executing program 0 (id=527): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 148.876257ms ago: executing program 0 (id=528): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_setup(0x5, &(0x7f0000000540)=0x0) io_submit(r2, 0x1, &(0x7f0000000240)=[&(0x7f0000000340)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$inet6(0xa, 0x3, 0x84) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='net/mcfilter6\x00') writev(r5, &(0x7f0000000740), 0x0) write$cgroup_devices(r5, &(0x7f0000000080)={'b', ' *:* ', 'r\x00'}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x7, 0x0, 0xfffffffffffffffb, 0x9, 0x6, 0x0, 0x40000000000000}, {0xffffffffffffffff, 0x1000000000, 0x53e5, 0x20}, 0xfffffff7, 0x1, 0x1, 0x0, 0x3, 0x2}, {{@in=@broadcast, 0x1, 0x32}, 0xa, @in=@private=0xa010100, 0x1502, 0x4, 0x0, 0x0, 0xc36, 0xfffffffd}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_usb_disconnect(r0) 148.014627ms ago: executing program 1 (id=539): socket$kcm(0x10, 0x2, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x1, 0x2000404) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00'}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x2}}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000540)={@val={0x0, 0x6}, @void, @x25={0x2, 0x3, 0xf1, "13c0fab6c234804a97d0b19c54a1c140d944e7b2a5801e40f7daf7a1f14bbc9a19c0bdbc4c499ba31b07720d75efe9ecc0b815550afbdac136045ff5a70150c0ae90a2baf66037ccd80fffb29d3aa198ed2f7b99228fa9695f57da9bd537bbfe095ebe30b12d97137def4bb10159e0762bf7cd13d3245e525cbac222b921d19407b216bf6a80e8f33634ed8ca3e4b63b1cfecfc98258b8ab13808b1384ba4cec80599ca1f2ca687f9c1ebf42d54df21c5e751a9373cd9e1d49b2a9ffdeafe6a391b773f584d1579fed552b12c9151e84a03952b8a12b81ce220ae8cb893e402a80e3f0f425f1900b"}}, 0xef) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x78, 0x0, 0x1, 0x8, 0x1, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x20000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x7, 0xfff1}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4020080) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 24.742063][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 24.742079][ T29] audit: type=1400 audit(1758537915.705:57): avc: denied { transition } for pid=3284 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.746738][ T29] audit: type=1400 audit(1758537915.705:58): avc: denied { noatsecure } for pid=3284 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.750038][ T29] audit: type=1400 audit(1758537915.715:59): avc: denied { write } for pid=3284 comm="sh" path="pipe:[653]" dev="pipefs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 24.753925][ T29] audit: type=1400 audit(1758537915.715:60): avc: denied { rlimitinh } for pid=3284 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.757232][ T29] audit: type=1400 audit(1758537915.715:61): avc: denied { siginh } for pid=3284 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. [ 32.090321][ T29] audit: type=1400 audit(1758537923.055:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.091216][ T3294] cgroup: Unknown subsys name 'net' [ 32.113337][ T29] audit: type=1400 audit(1758537923.055:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.140679][ T29] audit: type=1400 audit(1758537923.095:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.314286][ T3294] cgroup: Unknown subsys name 'cpuset' [ 32.320480][ T3294] cgroup: Unknown subsys name 'rlimit' [ 32.412221][ T29] audit: type=1400 audit(1758537923.375:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.435515][ T29] audit: type=1400 audit(1758537923.385:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.456019][ T29] audit: type=1400 audit(1758537923.385:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.476441][ T29] audit: type=1400 audit(1758537923.385:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 32.497232][ T29] audit: type=1400 audit(1758537923.395:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 32.522235][ T29] audit: type=1400 audit(1758537923.395:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 32.529358][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 32.554611][ T29] audit: type=1400 audit(1758537923.525:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 32.634206][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.784146][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 33.827192][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 33.852157][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 33.869961][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 33.927944][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.935148][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.942427][ T3315] bridge_slave_0: entered allmulticast mode [ 33.948988][ T3315] bridge_slave_0: entered promiscuous mode [ 33.955528][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.962635][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.969932][ T3304] bridge_slave_0: entered allmulticast mode [ 33.976459][ T3304] bridge_slave_0: entered promiscuous mode [ 33.983128][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.990253][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.997922][ T3304] bridge_slave_1: entered allmulticast mode [ 34.004456][ T3304] bridge_slave_1: entered promiscuous mode [ 34.016132][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.023187][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.030984][ T3315] bridge_slave_1: entered allmulticast mode [ 34.037393][ T3315] bridge_slave_1: entered promiscuous mode [ 34.082747][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.100943][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.108228][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.115393][ T3310] bridge_slave_0: entered allmulticast mode [ 34.122072][ T3310] bridge_slave_0: entered promiscuous mode [ 34.130242][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.137527][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.144820][ T3310] bridge_slave_1: entered allmulticast mode [ 34.151293][ T3310] bridge_slave_1: entered promiscuous mode [ 34.158281][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.168340][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.177639][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.184727][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.191878][ T3309] bridge_slave_0: entered allmulticast mode [ 34.198159][ T3309] bridge_slave_0: entered promiscuous mode [ 34.206784][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.213909][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.221264][ T3309] bridge_slave_1: entered allmulticast mode [ 34.227917][ T3309] bridge_slave_1: entered promiscuous mode [ 34.239062][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.253184][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 34.287964][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.298393][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.313184][ T3304] team0: Port device team_slave_0 added [ 34.322170][ T3304] team0: Port device team_slave_1 added [ 34.328913][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.344989][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.359205][ T3315] team0: Port device team_slave_0 added [ 34.386979][ T3315] team0: Port device team_slave_1 added [ 34.393407][ T3310] team0: Port device team_slave_0 added [ 34.400042][ T3309] team0: Port device team_slave_0 added [ 34.406800][ T3309] team0: Port device team_slave_1 added [ 34.421256][ T3310] team0: Port device team_slave_1 added [ 34.438465][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.445513][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.471588][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.505944][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.512892][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.538831][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.557002][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.564018][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.590563][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.601755][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.609326][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.636206][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.647097][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.654343][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.661736][ T3305] bridge_slave_0: entered allmulticast mode [ 34.668637][ T3305] bridge_slave_0: entered promiscuous mode [ 34.676016][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.683167][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.690411][ T3305] bridge_slave_1: entered allmulticast mode [ 34.696845][ T3305] bridge_slave_1: entered promiscuous mode [ 34.703263][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.710252][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.736494][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.747332][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.754390][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.780347][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.791576][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.798574][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.824891][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.853098][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.860125][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.886118][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.920789][ T3304] hsr_slave_0: entered promiscuous mode [ 34.926943][ T3304] hsr_slave_1: entered promiscuous mode [ 34.934274][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.945024][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.970961][ T3309] hsr_slave_0: entered promiscuous mode [ 34.977134][ T3309] hsr_slave_1: entered promiscuous mode [ 34.983251][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 34.989030][ T3309] Cannot create hsr debugfs directory [ 35.008902][ T3305] team0: Port device team_slave_0 added [ 35.016021][ T3305] team0: Port device team_slave_1 added [ 35.036733][ T3315] hsr_slave_0: entered promiscuous mode [ 35.042766][ T3315] hsr_slave_1: entered promiscuous mode [ 35.048645][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 35.054587][ T3315] Cannot create hsr debugfs directory [ 35.062082][ T3310] hsr_slave_0: entered promiscuous mode [ 35.068292][ T3310] hsr_slave_1: entered promiscuous mode [ 35.074197][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 35.079989][ T3310] Cannot create hsr debugfs directory [ 35.109783][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.116820][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.142855][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.169215][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.176269][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.202460][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.300211][ T3305] hsr_slave_0: entered promiscuous mode [ 35.306526][ T3305] hsr_slave_1: entered promiscuous mode [ 35.312372][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 35.318135][ T3305] Cannot create hsr debugfs directory [ 35.418280][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 35.434222][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 35.445200][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 35.456420][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 35.473258][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 35.482621][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 35.491551][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 35.501854][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.535214][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 35.551693][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 35.567060][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 35.588822][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 35.608878][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 35.617508][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 35.628326][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 35.639922][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.654426][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 35.678135][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.691652][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.698832][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.709708][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 35.726051][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.733184][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.741327][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 35.749917][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 35.758933][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 35.791545][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.813506][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.832655][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.839848][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.860370][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.878338][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.885471][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.906646][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.926322][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.954256][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.965558][ T1626] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.972621][ T1626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.982921][ T1626] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.990125][ T1626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.004371][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.020241][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.035042][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.048732][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.055913][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.066316][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.073682][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.088447][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.095546][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.111356][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.118468][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.170030][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.199188][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.242435][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.279298][ T3304] veth0_vlan: entered promiscuous mode [ 36.305357][ T3304] veth1_vlan: entered promiscuous mode [ 36.339963][ T3304] veth0_macvtap: entered promiscuous mode [ 36.355810][ T3304] veth1_macvtap: entered promiscuous mode [ 36.373267][ T3309] veth0_vlan: entered promiscuous mode [ 36.404968][ T3309] veth1_vlan: entered promiscuous mode [ 36.417670][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.431634][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.440210][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.455069][ T3310] veth0_vlan: entered promiscuous mode [ 36.461354][ T3305] veth0_vlan: entered promiscuous mode [ 36.470094][ T3310] veth1_vlan: entered promiscuous mode [ 36.480472][ T3309] veth0_macvtap: entered promiscuous mode [ 36.489494][ T3309] veth1_macvtap: entered promiscuous mode [ 36.496546][ T2794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.508843][ T2794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.522090][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.534490][ T3305] veth1_vlan: entered promiscuous mode [ 36.543635][ T2794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.557851][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.566951][ T42] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.593963][ T3310] veth0_macvtap: entered promiscuous mode [ 36.615150][ T416] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.626545][ T3305] veth0_macvtap: entered promiscuous mode [ 36.636760][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.643164][ T3305] veth1_macvtap: entered promiscuous mode [ 36.659777][ T3310] veth1_macvtap: entered promiscuous mode [ 36.666469][ T416] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.699463][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.711340][ T416] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.722926][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.733003][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.753349][ T416] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.772371][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.784928][ T3315] veth0_vlan: entered promiscuous mode [ 36.791103][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.798610][ T3315] veth1_vlan: entered promiscuous mode [ 36.809597][ T416] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.825318][ T1626] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.836711][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 36.848486][ T1626] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.857409][ T1626] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.872024][ T3315] veth0_macvtap: entered promiscuous mode [ 36.889145][ T1626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.902066][ T3315] veth1_macvtap: entered promiscuous mode [ 36.925734][ T1626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.937923][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.958900][ T1626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.969588][ T1626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.979772][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.026924][ T1626] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.043118][ T3488] loop2: detected capacity change from 0 to 2048 [ 37.050673][ T3488] ======================================================= [ 37.050673][ T3488] WARNING: The mand mount option has been deprecated and [ 37.050673][ T3488] and is ignored by this kernel. Remove the mand [ 37.050673][ T3488] option from the mount to silence this warning. [ 37.050673][ T3488] ======================================================= [ 37.087532][ T3488] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.114088][ T3488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.131501][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 37.131516][ T29] audit: type=1400 audit(1758537928.095:107): avc: denied { mount } for pid=3484 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.167876][ T1626] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.177188][ T1626] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.190588][ T3488] netlink: '': attribute type 4 has an invalid length. [ 37.194855][ T1626] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.208597][ T29] audit: type=1400 audit(1758537928.155:108): avc: denied { create } for pid=3484 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 37.210080][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8'. [ 37.228769][ T29] audit: type=1400 audit(1758537928.175:109): avc: denied { create } for pid=3486 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.228855][ T29] audit: type=1400 audit(1758537928.175:110): avc: denied { write } for pid=3486 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.283554][ T29] audit: type=1400 audit(1758537928.175:111): avc: denied { read } for pid=3486 comm="syz.1.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.303733][ T29] audit: type=1400 audit(1758537928.245:112): avc: denied { firmware_load } for pid=3486 comm="syz.1.8" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 37.361201][ T3488] (3488) used greatest stack depth: 10720 bytes left [ 37.369031][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.398676][ T29] audit: type=1400 audit(1758537928.365:113): avc: denied { open } for pid=3500 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.419301][ T29] audit: type=1400 audit(1758537928.365:114): avc: denied { kernel } for pid=3500 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.439373][ T29] audit: type=1400 audit(1758537928.365:115): avc: denied { tracepoint } for pid=3500 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 37.446007][ T3502] sch_fq: defrate 4294967295 ignored. [ 37.470551][ T3489] syz.1.8 (3489) used greatest stack depth: 10176 bytes left [ 37.535356][ T3504] serio: Serial port ptm0 [ 37.543697][ T29] audit: type=1400 audit(1758537928.495:116): avc: denied { create } for pid=3500 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 37.697167][ T3516] capability: warning: `syz.3.14' uses deprecated v2 capabilities in a way that may be insecure [ 38.218510][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.226951][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.234388][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.242023][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.249545][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.257176][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.264765][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.272156][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.279604][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.287371][ T3393] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 38.296303][ T3393] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 38.312011][ T3526] loop3: detected capacity change from 0 to 512 [ 38.323394][ T3526] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.339849][ T3526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.343879][ T3530] fido_id[3530]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 38.369154][ T3526] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.399543][ T3526] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.18: corrupted xattr block 19: overlapping e_value [ 38.413836][ T3526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.423118][ T3526] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.18: corrupted xattr block 19: overlapping e_value [ 38.446725][ T3526] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.457449][ T3534] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.18: corrupted xattr block 19: overlapping e_value [ 38.484468][ T3534] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.18: corrupted xattr block 19: overlapping e_value [ 38.523191][ T3534] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 38.537582][ T3542] netlink: 'syz.1.22': attribute type 4 has an invalid length. [ 38.561840][ T3544] netlink: 12 bytes leftover after parsing attributes in process `syz.2.24'. [ 38.635596][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.883155][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 39.126386][ T3567] bridge_slave_0: left allmulticast mode [ 39.132106][ T3567] bridge_slave_0: left promiscuous mode [ 39.138027][ T3567] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.158504][ T3567] bridge_slave_1: left allmulticast mode [ 39.164253][ T3567] bridge_slave_1: left promiscuous mode [ 39.170047][ T3567] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.178264][ T3568] netlink: 'syz.0.33': attribute type 10 has an invalid length. [ 39.186352][ T3568] netlink: 40 bytes leftover after parsing attributes in process `syz.0.33'. [ 39.197451][ T3567] bond0: (slave bond_slave_0): Releasing backup interface [ 39.207096][ T3567] bond0: (slave bond_slave_1): Releasing backup interface [ 39.219726][ T3567] team0: Port device team_slave_0 removed [ 39.229466][ T3567] team0: Port device team_slave_1 removed [ 39.236420][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.244186][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.252967][ T3567] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.260611][ T3567] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.286629][ T3568] batman_adv: batadv0: Adding interface: veth1_vlan [ 39.293811][ T3568] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.321165][ T3568] batman_adv: batadv0: Interface activated: veth1_vlan [ 39.349678][ T3570] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 39.362171][ T3570] netlink: 'syz.0.34': attribute type 4 has an invalid length. [ 39.421203][ C0] hrtimer: interrupt took 37596 ns [ 39.517831][ T3575] loop4: detected capacity change from 0 to 512 [ 39.656051][ T3575] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 39.689111][ T3575] EXT4-fs (loop4): mount failed [ 40.005759][ T3590] loop1: detected capacity change from 0 to 1024 [ 40.060361][ T3590] EXT4-fs: Ignoring removed orlov option [ 40.173963][ T3590] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.189106][ T3596] loop3: detected capacity change from 0 to 512 [ 40.214601][ T3596] vfat: Invalid gid '0x00000000ffffffff' [ 40.324614][ T3603] netlink: 'syz.3.42': attribute type 83 has an invalid length. [ 40.520457][ T3613] netlink: 4 bytes leftover after parsing attributes in process `'. [ 40.639089][ T3617] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 40.838023][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.916350][ T3632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'. [ 40.977324][ T1103] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 40.984041][ T3640] loop4: detected capacity change from 0 to 512 [ 41.022892][ T3642] fido_id[3642]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 41.068540][ T3640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.104642][ T3640] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.217745][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.516798][ T3637] loop1: detected capacity change from 0 to 32768 [ 41.609877][ T3637] loop1: p1 p3 < > [ 41.672215][ T2994] loop1: p1 p3 < > [ 41.738807][ T3656] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.822441][ T3637] syz.1.54 (3637) used greatest stack depth: 10056 bytes left [ 41.999572][ T3664] netlink: 'syz.4.67': attribute type 4 has an invalid length. [ 42.246278][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 42.246294][ T29] audit: type=1400 audit(1758537933.215:270): avc: denied { execute } for pid=3666 comm="syz.3.68" name="file0" dev="tmpfs" ino=119 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 42.282737][ T3667] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.558585][ T29] audit: type=1400 audit(1758537933.525:271): avc: denied { sqpoll } for pid=3674 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 42.768121][ T3634] syz.1.54 (3634) used greatest stack depth: 7144 bytes left [ 42.986447][ T29] audit: type=1400 audit(1758537933.945:272): avc: denied { accept } for pid=3744 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.006263][ T29] audit: type=1400 audit(1758537933.945:273): avc: denied { shutdown } for pid=3744 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.042537][ T3715] syzkaller0: entered promiscuous mode [ 43.048181][ T3715] syzkaller0: entered allmulticast mode [ 43.586686][ T3754] loop2: detected capacity change from 0 to 512 [ 44.249754][ T3770] SELinux: Context is not valid (left unmapped). [ 44.913581][ T29] audit: type=1400 audit(1758537935.875:274): avc: denied { read write } for pid=3781 comm="syz.3.86" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 44.934719][ T29] audit: type=1400 audit(1758537935.875:275): avc: denied { open } for pid=3781 comm="syz.3.86" path="/21/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 45.349138][ T29] audit: type=1400 audit(1758537936.315:276): avc: denied { read } for pid=3793 comm="syz.2.91" name="usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.372776][ T29] audit: type=1400 audit(1758537936.315:277): avc: denied { open } for pid=3793 comm="syz.2.91" path="/dev/usbmon7" dev="devtmpfs" ino=163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 45.622391][ T3803] loop3: detected capacity change from 0 to 1024 [ 45.630739][ T3803] EXT4-fs: Ignoring removed bh option [ 45.674790][ T3803] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.708306][ T3803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 45.717005][ T3803] System zones: 0-1, 3-12 [ 45.896561][ T29] audit: type=1400 audit(1758537936.695:278): avc: denied { ioctl } for pid=3800 comm="syz.1.93" path="socket:[6145]" dev="sockfs" ino=6145 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.920865][ T29] audit: type=1400 audit(1758537936.755:279): avc: denied { cpu } for pid=3800 comm="syz.1.93" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 45.965050][ T3803] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.94: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.057492][ T3815] loop0: detected capacity change from 0 to 512 [ 46.063933][ T3803] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.94: Failed to acquire dquot type 0 [ 46.064342][ T3815] EXT4-fs: Ignoring removed bh option [ 46.086576][ T3803] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.94: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.100844][ T3803] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.94: Invalid inode bitmap blk 0 in block_group 0 [ 46.114812][ T3703] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:27: lblock 1 mapped to illegal pblock 1 (length 1) [ 46.129850][ T3803] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 46.131804][ T3703] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:27: Failed to release dquot type 0 [ 46.151299][ T3803] EXT4-fs (loop3): 1 orphan inode deleted [ 46.172713][ T3803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.196877][ T3815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.214095][ T3815] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.284063][ T3822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.99'. [ 46.292787][ T3822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.300276][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.335616][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.351443][ T3822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.359023][ T3822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.464378][ T3830] tipc: Started in network mode [ 46.469352][ T3830] tipc: Node identity 1ebef6d45743, cluster identity 4711 [ 46.476750][ T3830] tipc: Enabled bearer , priority 0 [ 46.504506][ T3829] tipc: Resetting bearer [ 46.522883][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.532817][ T3829] tipc: Disabling bearer [ 46.696216][ T3842] veth0: entered promiscuous mode [ 46.731433][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.106'. [ 46.820308][ T3845] bridge0: entered promiscuous mode [ 46.825726][ T3845] macsec1: entered promiscuous mode [ 46.831356][ T3845] bridge0: port 1(macsec1) entered blocking state [ 46.837945][ T3845] bridge0: port 1(macsec1) entered disabled state [ 46.844668][ T3845] macsec1: entered allmulticast mode [ 46.849999][ T3845] bridge0: entered allmulticast mode [ 46.914004][ T3845] macsec1: left allmulticast mode [ 46.919676][ T3845] bridge0: left allmulticast mode [ 46.925419][ T3845] bridge0: left promiscuous mode [ 47.265738][ T3856] netlink: '+}[@': attribute type 2 has an invalid length. [ 47.273047][ T3856] netlink: '+}[@': attribute type 1 has an invalid length. [ 47.280304][ T3856] netlink: 179948 bytes leftover after parsing attributes in process `+}[@'. [ 47.342235][ T3854] loop3: detected capacity change from 0 to 512 [ 47.348617][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 47.348677][ T29] audit: type=1400 audit(1758537938.305:319): avc: denied { read } for pid=3860 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 47.376035][ T3854] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 47.385465][ T3854] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 47.478819][ T3868] loop0: detected capacity change from 0 to 1024 [ 47.494982][ T3868] EXT4-fs: Ignoring removed orlov option [ 47.504002][ T3866] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 47.504013][ T29] audit: type=1400 audit(1758537938.475:320): avc: denied { bind } for pid=3865 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.513664][ T3868] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.658337][ T3874] netlink: 7 bytes leftover after parsing attributes in process `syz.1.115'. [ 47.691901][ T3874] netlink: 32 bytes leftover after parsing attributes in process `syz.1.115'. [ 47.739645][ T3868] netlink: 196 bytes leftover after parsing attributes in process `syz.0.117'. [ 47.781781][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.874906][ T29] audit: type=1400 audit(1758537938.845:321): avc: denied { read write } for pid=3871 comm="syz.4.118" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 47.877616][ T3883] program syz.4.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 47.948961][ T3884] bridge0: entered allmulticast mode [ 48.020018][ T29] audit: type=1400 audit(1758537938.845:322): avc: denied { open } for pid=3871 comm="syz.4.118" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 48.091975][ T3886] loop0: detected capacity change from 0 to 4096 [ 48.164908][ T3886] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.219045][ T3886] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.737007][ T29] audit: type=1326 audit(1758537939.705:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cec185d67 code=0x7ffc0000 [ 48.760215][ T29] audit: type=1326 audit(1758537939.705:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cec12af79 code=0x7ffc0000 [ 48.818525][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.827693][ T29] audit: type=1326 audit(1758537939.705:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8cec185d67 code=0x7ffc0000 [ 48.852911][ T29] audit: type=1326 audit(1758537939.705:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8cec12af79 code=0x7ffc0000 [ 48.876126][ T29] audit: type=1326 audit(1758537939.705:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cec18eec9 code=0x7ffc0000 [ 48.899360][ T29] audit: type=1326 audit(1758537939.705:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3890 comm="syz.3.124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8cec18eec9 code=0x7ffc0000 [ 49.305343][ T3914] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'. [ 49.390857][ T3920] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.436585][ T3920] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.496058][ T3920] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.524214][ T3925] loop3: detected capacity change from 0 to 512 [ 49.532696][ T3925] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 49.555077][ T3925] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 49.563172][ T3925] EXT4-fs (loop3): orphan cleanup on readonly fs [ 49.572172][ T3920] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.584226][ T3925] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.135: corrupted inode contents [ 49.596234][ T3925] EXT4-fs (loop3): Remounting filesystem read-only [ 49.603026][ T3925] EXT4-fs (loop3): 1 truncate cleaned up [ 49.608804][ T3702] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.619507][ T3702] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 49.631254][ T3702] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 49.642110][ T3925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.654820][ T3702] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.663040][ T3702] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.687045][ T3925] bridge_slave_0: left allmulticast mode [ 49.692823][ T3925] bridge_slave_0: left promiscuous mode [ 49.698667][ T3925] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.711748][ T3925] bridge_slave_1: left allmulticast mode [ 49.717470][ T3925] bridge_slave_1: left promiscuous mode [ 49.723186][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.801634][ T3925] bond0: (slave bond_slave_0): Releasing backup interface [ 49.813561][ T3925] bond0: (slave bond_slave_1): Releasing backup interface [ 49.839161][ T3925] team0: Port device team_slave_0 removed [ 49.849134][ T3934] loop0: detected capacity change from 0 to 1024 [ 49.854515][ T3925] team0: Port device team_slave_1 removed [ 49.856318][ T3934] EXT4-fs: Ignoring removed orlov option [ 49.866980][ T3925] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.866997][ T3925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.974487][ T3925] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.982243][ T3925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.093250][ T3702] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.117635][ T3934] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.184297][ T3941] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.250335][ T3702] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.296952][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.316768][ T3941] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.336952][ T3936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'. [ 50.347358][ T3936] netlink: 28 bytes leftover after parsing attributes in process `syz.2.139'. [ 50.433558][ T3941] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.533732][ T3941] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.778740][ T3703] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.810550][ T3703] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.249364][ T3966] random: crng reseeded on system resumption [ 51.266832][ T3703] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.275273][ T3703] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.297785][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.398199][ T3976] tipc: Enabled bearer , priority 0 [ 51.406223][ T3976] syzkaller0: entered promiscuous mode [ 51.411751][ T3976] syzkaller0: entered allmulticast mode [ 51.442763][ T3976] tipc: Resetting bearer [ 51.454513][ T3974] tipc: Resetting bearer [ 51.464707][ T3974] tipc: Disabling bearer [ 51.473910][ T3982] process 'syz.1.156' launched './file1' with NULL argv: empty string added [ 51.514505][ T3984] loop1: detected capacity change from 0 to 164 [ 51.533544][ T3984] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 51.558529][ T3986] Zero length message leads to an empty skb [ 51.578960][ T3986] loop0: detected capacity change from 0 to 512 [ 51.579585][ T3984] __nla_validate_parse: 2 callbacks suppressed [ 51.579597][ T3984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'. [ 51.616688][ T3986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.641087][ T3986] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.676021][ T3997] loop1: detected capacity change from 0 to 1024 [ 51.700406][ T3997] EXT4-fs: Ignoring removed orlov option [ 51.706364][ T3997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 51.727264][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.757204][ T4000] loop0: detected capacity change from 0 to 512 [ 51.766250][ T3997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.837982][ T4000] EXT4-fs (loop0): orphan cleanup on readonly fs [ 51.864090][ T4000] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.163: iget: bad extended attribute block 1 [ 51.884579][ T4000] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.163: couldn't read orphan inode 15 (err -117) [ 51.907502][ T4000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 51.936700][ T4000] syz.0.163 uses obsolete (PF_INET,SOCK_PACKET) [ 51.977793][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.018837][ T4010] mmap: syz.4.165 (4010) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.064813][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.145642][ T4020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.169'. [ 52.379558][ T4026] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 52.386824][ T4026] batman_adv: batadv0: Removing interface: veth1_vlan [ 52.446905][ T29] kauditd_printk_skb: 315 callbacks suppressed [ 52.446966][ T29] audit: type=1400 audit(1758537943.415:638): avc: denied { create } for pid=4028 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 52.477370][ T4029] netlink: 'syz.4.171': attribute type 1 has an invalid length. [ 52.521240][ T4029] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 52.533692][ T4029] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 52.543994][ T4029] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 52.553769][ T29] audit: type=1400 audit(1758537943.445:639): avc: denied { write } for pid=4028 comm="syz.4.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 52.582443][ T4031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.171'. [ 52.693392][ T4033] loop0: detected capacity change from 0 to 8192 [ 52.704651][ T4035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.173'. [ 52.731140][ T29] audit: type=1400 audit(1758537943.695:640): avc: denied { mount } for pid=4032 comm="syz.0.172" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.766745][ T29] audit: type=1400 audit(1758537943.735:641): avc: denied { mount } for pid=4036 comm="syz.4.174" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 52.998988][ T29] audit: type=1400 audit(1758537943.965:642): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.069142][ T4046] serio: Serial port ptm0 [ 53.083984][ T29] audit: type=1400 audit(1758537944.055:643): avc: denied { bind } for pid=4053 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.103484][ T29] audit: type=1400 audit(1758537944.055:644): avc: denied { node_bind } for pid=4053 comm="syz.4.181" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 53.123463][ T29] audit: type=1400 audit(1758537944.055:645): avc: denied { ioctl } for pid=4053 comm="syz.4.181" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 53.649569][ T29] audit: type=1400 audit(1758537944.615:646): avc: denied { create } for pid=4060 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 53.659895][ T4061] netlink: 100 bytes leftover after parsing attributes in process `syz.2.183'. [ 53.908106][ T29] audit: type=1400 audit(1758537944.875:647): avc: denied { write } for pid=4070 comm="syz.0.187" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 53.934855][ T4071] usb usb8: usbfs: process 4071 (syz.0.187) did not claim interface 0 before use [ 54.030503][ T4075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.188'. [ 54.058377][ T4077] netlink: 24 bytes leftover after parsing attributes in process `syz.4.189'. [ 54.078463][ T4077] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4077 comm=syz.4.189 [ 54.709755][ T4097] loop3: detected capacity change from 0 to 764 [ 54.733150][ T4097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.823732][ T4097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.892219][ T4097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.934151][ T4100] loop1: detected capacity change from 0 to 512 [ 54.946507][ T4100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 54.955537][ T4100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.199'. [ 54.984495][ T4097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.991915][ T4103] hub 9-0:1.0: USB hub found [ 55.000502][ T4103] hub 9-0:1.0: 8 ports detected [ 55.042249][ T4103] loop1: detected capacity change from 0 to 2048 [ 55.079075][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.091159][ T31] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.166274][ T31] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.175920][ T4103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.189457][ T31] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.262627][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.665279][ T4148] netlink: 'syz.0.215': attribute type 10 has an invalid length. [ 56.804914][ T4160] netlink: 12 bytes leftover after parsing attributes in process `syz.0.221'. [ 56.813833][ T4160] netlink: 24 bytes leftover after parsing attributes in process `syz.0.221'. [ 57.141245][ T4178] loop0: detected capacity change from 0 to 512 [ 57.157541][ T4178] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 57.172775][ T4178] EXT4-fs (loop0): mount failed [ 57.200133][ T4183] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.228'. [ 57.397336][ T4190] netlink: 'syz.2.229': attribute type 4 has an invalid length. [ 57.405887][ T4190] netlink: 'syz.2.229': attribute type 4 has an invalid length. [ 57.488691][ T4203] netlink: 256 bytes leftover after parsing attributes in process `syz.4.233'. [ 57.600684][ T4210] loop2: detected capacity change from 0 to 512 [ 57.614164][ T4210] EXT4-fs (loop2): orphan cleanup on readonly fs [ 57.639603][ T4210] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.235: iget: bad extended attribute block 1 [ 57.754690][ T4210] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.235: couldn't read orphan inode 15 (err -117) [ 57.815275][ T4210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 58.832915][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.862452][ T4226] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 58.894106][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 58.902739][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 58.902754][ T29] audit: type=1400 audit(1758537949.855:676): avc: denied { ioctl } for pid=4228 comm="syz.0.243" path="socket:[7605]" dev="sockfs" ino=7605 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 58.973769][ T29] audit: type=1400 audit(1758537949.935:677): avc: denied { write } for pid=4230 comm="syz.4.242" name="ip_vs" dev="proc" ino=4026532548 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.086211][ T4241] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=4241 comm=syz.4.248 [ 59.132114][ T4244] netlink: 'syz.4.250': attribute type 21 has an invalid length. [ 59.159724][ T4244] netlink: 156 bytes leftover after parsing attributes in process `syz.4.250'. [ 59.168764][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.250'. [ 59.402415][ T4266] blktrace: Concurrent blktraces are not allowed on loop7 [ 59.409012][ T29] audit: type=1400 audit(1758537950.375:678): avc: denied { watch } for pid=4261 comm="syz.4.257" path="/57/control" dev="tmpfs" ino=319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 60.062012][ T29] audit: type=1400 audit(1758537951.025:679): avc: denied { kexec_image_load } for pid=4279 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 60.543489][ T4288] loop1: detected capacity change from 0 to 512 [ 60.586025][ T4288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.613629][ T4288] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.648484][ T29] audit: type=1400 audit(1758537951.615:680): avc: denied { create } for pid=4287 comm=ACED name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 60.779744][ T29] audit: type=1326 audit(1758537951.745:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834ec6eec9 code=0x7ffc0000 [ 60.830373][ T4303] loop0: detected capacity change from 0 to 512 [ 60.858139][ T29] audit: type=1326 audit(1758537951.805:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f834ec6eec9 code=0x7ffc0000 [ 60.917407][ T4303] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.930598][ T4303] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.941823][ T29] audit: type=1326 audit(1758537951.915:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834ec6eec9 code=0x7ffc0000 [ 60.964760][ T29] audit: type=1326 audit(1758537951.915:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f834ec6eec9 code=0x7ffc0000 [ 61.000056][ T29] audit: type=1400 audit(1758537951.915:685): avc: denied { setattr } for pid=4302 comm="syz.0.269" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.005001][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.040217][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.041832][ T4307] syzkaller0: entered promiscuous mode [ 61.054889][ T4307] syzkaller0: entered allmulticast mode [ 61.083029][ T4318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 61.135365][ T4312] infiniband !yz!: set active [ 61.135429][ T4312] infiniband !yz!: added team_slave_0 [ 61.145935][ T4312] RDS/IB: !yz!: added [ 61.145955][ T4312] smc: adding ib device !yz! with port count 1 [ 61.145969][ T4312] smc: ib device !yz! port 1 has pnetid [ 61.218612][ T36] IPVS: starting estimator thread 0... [ 61.314512][ T4327] IPVS: using max 2736 ests per chain, 136800 per kthread [ 61.388127][ T4340] loop2: detected capacity change from 0 to 1024 [ 61.413963][ T4340] EXT4-fs: Ignoring removed orlov option [ 61.475386][ T4340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.491101][ T4348] loop4: detected capacity change from 0 to 512 [ 61.504764][ T4348] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.550399][ T4348] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 61.582280][ T4348] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 61.607227][ T4348] EXT4-fs (loop4): 1 truncate cleaned up [ 61.613822][ T4348] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.692158][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.722533][ T4356] loop1: detected capacity change from 0 to 128 [ 61.725146][ T4357] loop4: detected capacity change from 0 to 512 [ 61.747394][ T4356] sch_fq: defrate 9 ignored. [ 61.792153][ T4357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.821726][ T4357] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.837400][ T4357] EXT4-fs (loop4): shut down requested (0) [ 61.871998][ T4368] pimreg: entered allmulticast mode [ 61.880189][ T4357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 61.899358][ T4357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 61.910156][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.915994][ T4357] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 62.128440][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.137982][ T4380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 62.144844][ T4376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 62.170897][ T4380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 62.219044][ T4388] loop1: detected capacity change from 0 to 512 [ 62.258165][ T4388] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.273760][ T4388] ext4 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.313999][ T4390] loop0: detected capacity change from 0 to 1764 [ 62.333783][ T4386] loop4: detected capacity change from 0 to 1024 [ 62.347535][ T4386] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.540853][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.560530][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 62.589629][ T4406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.305'. [ 62.622232][ T4408] loop4: detected capacity change from 0 to 2048 [ 62.666924][ T4408] Alternate GPT is invalid, using primary GPT. [ 62.673374][ T4408] loop4: p2 p3 p7 [ 62.740055][ T4408] netlink: 'syz.4.304': attribute type 3 has an invalid length. [ 62.861163][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.942374][ T4419] netlink: 20 bytes leftover after parsing attributes in process `syz.4.309'. [ 62.951448][ T4419] netlink: 32 bytes leftover after parsing attributes in process `syz.4.309'. [ 63.015240][ T4422] syz.0.310 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 63.073063][ T4422] SELinux: ebitmap: truncated map [ 63.080036][ T4422] SELinux: failed to load policy [ 63.109292][ T4428] veth0: entered promiscuous mode [ 63.115765][ T4428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.312'. [ 63.316278][ T4447] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'. [ 63.368923][ T4447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.321'. [ 63.385836][ T4454] loop9: detected capacity change from 0 to 7 [ 63.397971][ T4454] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.407145][ T4454] Buffer I/O error on dev loop9, logical block 0, async page read [ 63.416089][ T4454] loop9: unable to read partition table [ 63.425457][ T4454] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 63.425457][ T4454] ) failed (rc=-5) [ 63.682079][ T4480] loop1: detected capacity change from 0 to 2048 [ 63.712087][ T4480] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.742397][ T4488] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.775095][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.799872][ T1103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1103 comm=kworker/1:2 [ 63.813131][ T4492] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 63.825936][ T4488] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.894282][ T4494] syzkaller0: entered promiscuous mode [ 63.899835][ T4494] syzkaller0: entered allmulticast mode [ 63.917371][ T4488] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.968530][ T4488] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.038803][ T3701] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.057644][ T3701] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.071432][ T3701] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.081727][ T3701] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.100424][ T4497] netlink: zone id is out of range [ 64.118203][ T4497] netlink: zone id is out of range [ 64.135782][ T4497] netlink: zone id is out of range [ 64.153621][ T4497] netlink: zone id is out of range [ 64.159118][ T4497] netlink: zone id is out of range [ 64.181842][ T4497] netlink: zone id is out of range [ 64.188217][ T4497] netlink: zone id is out of range [ 64.196158][ T4497] netlink: zone id is out of range [ 64.202265][ T4497] netlink: zone id is out of range [ 64.211529][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 64.211546][ T29] audit: type=1400 audit(1758537955.175:748): avc: denied { getopt } for pid=4499 comm="syz.2.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.213582][ T4497] netlink: zone id is out of range [ 64.282010][ T4507] loop3: detected capacity change from 0 to 512 [ 64.303047][ T4507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.370205][ T4515] netlink: 'syz.1.345': attribute type 15 has an invalid length. [ 64.491601][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.590816][ T4525] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 64.590816][ T4525] The task syz.1.349 (4525) triggered the difference, watch for misbehavior. [ 65.817989][ T4550] loop2: detected capacity change from 0 to 512 [ 65.852901][ T4550] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 65.886709][ T4550] EXT4-fs (loop2): 1 truncate cleaned up [ 65.909898][ T4550] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.943948][ T4554] loop0: detected capacity change from 0 to 1024 [ 65.977056][ T4554] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.028497][ T4554] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #11: comm syz.0.353: iget: bogus i_mode (1) [ 66.063890][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.093231][ T4554] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.353: couldn't read orphan inode 11 (err -117) [ 66.165526][ T4554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.396099][ T4536] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.459808][ T4566] netlink: 'syz.2.363': attribute type 13 has an invalid length. [ 66.575548][ T4569] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 66.582109][ T4569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 66.590559][ T4569] vhci_hcd vhci_hcd.0: Device attached [ 66.645852][ T4575] netlink: 'syz.2.366': attribute type 5 has an invalid length. [ 66.753979][ T4533] syz.0.353 (4533) used greatest stack depth: 7096 bytes left [ 66.755857][ T4579] smc: net device bond0 applied user defined pnetid SYZ0 [ 66.803735][ T29] audit: type=1400 audit(1758537957.765:749): avc: denied { execute } for pid=4578 comm="syz.1.367" dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.804564][ T3393] vhci_hcd: vhci_device speed not set [ 66.824762][ T29] audit: type=1400 audit(1758537957.775:750): avc: denied { execute_no_trans } for pid=4578 comm="syz.1.367" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 66.861857][ T4570] vhci_hcd: connection closed [ 66.862255][ T3720] vhci_hcd: stop threads [ 66.871264][ T3720] vhci_hcd: release socket [ 66.873148][ T4579] smc: net device bond0 erased user defined pnetid SYZ0 [ 66.875749][ T3720] vhci_hcd: disconnect device [ 66.888810][ T3393] usb 7-1: new full-speed USB device number 2 using vhci_hcd [ 66.897914][ T3393] usb 7-1: enqueue for inactive port 0 [ 66.903918][ T3393] usb 7-1: enqueue for inactive port 0 [ 66.909434][ T3393] usb 7-1: enqueue for inactive port 0 [ 67.033028][ T4592] Driver unsupported XDP return value 0 on prog (id 282) dev N/A, expect packet loss! [ 67.058955][ T3393] vhci_hcd: vhci_device speed not set [ 67.122325][ T4604] bridge_slave_0: left allmulticast mode [ 67.128925][ T4604] bridge_slave_0: left promiscuous mode [ 67.135929][ T4604] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.148780][ T4604] bridge_slave_1: left allmulticast mode [ 67.154505][ T4604] bridge_slave_1: left promiscuous mode [ 67.160246][ T4604] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.169849][ T4605] netlink: 'syz.2.377': attribute type 10 has an invalid length. [ 67.178492][ T4605] __nla_validate_parse: 6 callbacks suppressed [ 67.178505][ T4605] netlink: 40 bytes leftover after parsing attributes in process `syz.2.377'. [ 67.195265][ T4604] bond0: (slave bond_slave_0): Releasing backup interface [ 67.214465][ T4604] bond0: (slave bond_slave_1): Releasing backup interface [ 67.231409][ T4604] team0: Port device team_slave_0 removed [ 67.240824][ T4604] team0: Port device team_slave_1 removed [ 67.248913][ T4604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.256518][ T4604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.266267][ T4604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.274012][ T4604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.354918][ T29] audit: type=1326 audit(1758537958.325:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4606 comm="syz.4.378" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f625580eec9 code=0x0 [ 67.378223][ T4609] loop2: detected capacity change from 0 to 512 [ 67.395941][ T4609] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.408737][ T4609] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.559343][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.823640][ T4627] loop0: detected capacity change from 0 to 512 [ 67.846107][ T4627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.858825][ T4627] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.911185][ T29] audit: type=1326 audit(1758537958.875:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78eb1aeec9 code=0x7ffc0000 [ 67.934091][ T29] audit: type=1326 audit(1758537958.875:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78eb1aeec9 code=0x7ffc0000 [ 67.957375][ T29] audit: type=1326 audit(1758537958.875:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f78eb1aeec9 code=0x7ffc0000 [ 67.981740][ T29] audit: type=1326 audit(1758537958.925:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78eb1aeec9 code=0x7ffc0000 [ 68.004937][ T29] audit: type=1326 audit(1758537958.925:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f78eb1aeec9 code=0x7ffc0000 [ 68.028628][ T29] audit: type=1326 audit(1758537958.925:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4626 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f78eb1aeec9 code=0x7ffc0000 [ 68.053213][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.073108][ T4631] netlink: 'syz.0.384': attribute type 5 has an invalid length. [ 68.092656][ T1103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1103 comm=kworker/1:2 [ 68.107033][ T4633] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 68.278811][ T4644] serio: Serial port ptm0 [ 68.298548][ T4646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.389'. [ 68.409504][ T4654] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 68.416111][ T4654] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 68.423683][ T4654] vhci_hcd vhci_hcd.0: Device attached [ 68.434948][ T4654] netlink: 172 bytes leftover after parsing attributes in process `wޣ'. [ 68.445527][ T4656] vhci_hcd: connection closed [ 68.445752][ T3702] vhci_hcd: stop threads [ 68.454859][ T3702] vhci_hcd: release socket [ 68.459298][ T3702] vhci_hcd: disconnect device [ 68.468663][ T4659] loop2: detected capacity change from 0 to 512 [ 68.486589][ T4659] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.501879][ T4659] EXT4-fs (loop2): mount failed [ 69.033068][ T4670] loop0: detected capacity change from 0 to 512 [ 69.040808][ T4670] vfat: Invalid gid '0x00000000ffffffff' [ 69.130510][ T4676] loop4: detected capacity change from 0 to 512 [ 69.161647][ T4676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.174642][ T4676] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.299906][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 69.299932][ T29] audit: type=1326 audit(1758537960.265:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.330839][ T29] audit: type=1326 audit(1758537960.265:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.353601][ T29] audit: type=1326 audit(1758537960.265:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.454490][ T29] audit: type=1326 audit(1758537960.305:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.478246][ T29] audit: type=1326 audit(1758537960.305:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.500969][ T29] audit: type=1326 audit(1758537960.385:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.524553][ T29] audit: type=1326 audit(1758537960.385:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.548431][ T29] audit: type=1326 audit(1758537960.395:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.572304][ T29] audit: type=1326 audit(1758537960.395:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.596112][ T29] audit: type=1326 audit(1758537960.395:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4675 comm=ACED exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f625580eec9 code=0x7ffc0000 [ 69.623629][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.703197][ T4693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.413'. [ 69.717030][ T3366] hid_parser_main: 18 callbacks suppressed [ 69.717047][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.731295][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.739787][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.748281][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.756735][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.765301][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.772722][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.781149][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.789445][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x3 [ 69.797852][ T3366] hid-generic 0003:0004:0000.0003: unknown main item tag 0x0 [ 69.837313][ T3366] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 69.900809][ T4698] netlink: 4 bytes leftover after parsing attributes in process `'. [ 69.991171][ T4706] veth0: entered promiscuous mode [ 70.005549][ T4706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.402'. [ 70.028693][ T4708] loop0: detected capacity change from 0 to 512 [ 70.079184][ T4708] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.097326][ T4710] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.129756][ T4714] loop4: detected capacity change from 0 to 512 [ 70.142955][ T4708] EXT4-fs (loop0): mount failed [ 70.165977][ T4710] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.166171][ T4714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.236648][ T4714] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.256165][ T4710] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.305868][ T4710] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.389493][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.406161][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.431862][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.450435][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.667357][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.476618][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 71.493221][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 71.744705][ T4754] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.817538][ T4754] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.872216][ T4754] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.918543][ T4754] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.973002][ T3702] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.985890][ T3702] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.998781][ T3702] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.011294][ T3702] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.246433][ T4767] syzkaller0: entered promiscuous mode [ 72.251967][ T4767] syzkaller0: entered allmulticast mode [ 72.603354][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 72.637411][ T4786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.436'. [ 73.242210][ T4798] loop4: detected capacity change from 0 to 512 [ 73.270294][ T4804] loop0: detected capacity change from 0 to 1024 [ 73.328671][ T4804] EXT4-fs: Ignoring removed orlov option [ 73.388820][ T4804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.497872][ T4808] netlink: 'syz.4.441': attribute type 83 has an invalid length. [ 74.148616][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.495063][ T4823] syzkaller0: entered promiscuous mode [ 74.500560][ T4823] syzkaller0: entered allmulticast mode [ 74.709893][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 74.709906][ T29] audit: type=1326 audit(1758537965.675:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.739256][ T29] audit: type=1326 audit(1758537965.675:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.765824][ T29] audit: type=1326 audit(1758537965.735:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.789120][ T29] audit: type=1326 audit(1758537965.735:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.812521][ T29] audit: type=1326 audit(1758537965.735:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.835907][ T29] audit: type=1326 audit(1758537965.735:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.859173][ T29] audit: type=1326 audit(1758537965.735:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.882424][ T29] audit: type=1326 audit(1758537965.735:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.905678][ T29] audit: type=1326 audit(1758537965.735:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 74.928918][ T29] audit: type=1326 audit(1758537965.735:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4826 comm="syz.2.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12dfa5eec9 code=0x7ffc0000 [ 75.421332][ T4851] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.525916][ T4851] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.537116][ T4853] SELinux: ebitmap: truncated map [ 75.546095][ T4853] SELinux: failed to load policy [ 75.585618][ T4851] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.656435][ T4851] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.712693][ T3694] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.724541][ T3702] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.736946][ T3702] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.751088][ T3702] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.791588][ T4861] netlink: 20 bytes leftover after parsing attributes in process `syz.0.464'. [ 75.801634][ T4861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.464'. [ 76.006258][ T4866] loop1: detected capacity change from 0 to 512 [ 77.427727][ T4889] SELinux: ebitmap: truncated map [ 77.434189][ T4889] SELinux: failed to load policy [ 77.851683][ T4902] syzkaller0: entered promiscuous mode [ 77.857308][ T4902] syzkaller0: entered allmulticast mode [ 78.345307][ T4910] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.426087][ T4910] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.486948][ T4910] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.519854][ T4907] loop0: detected capacity change from 0 to 512 [ 78.545465][ T4910] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.617953][ T3694] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.647752][ T3694] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.672461][ T3694] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.691475][ T3694] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.056220][ T4943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.488'. [ 80.058100][ T4935] syzkaller0: entered promiscuous mode [ 80.071678][ T4935] syzkaller0: entered allmulticast mode [ 80.071871][ T4939] loop4: detected capacity change from 0 to 4096 [ 80.080641][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.092066][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.103983][ T4939] EXT4-fs: Ignoring removed nomblk_io_submit option [ 80.105323][ T4943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.119083][ T4943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.126602][ T4939] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.221856][ T4940] tipc: Started in network mode [ 80.227803][ T4940] tipc: Node identity 5e14c3dfa1dc, cluster identity 4711 [ 80.236093][ T4940] tipc: Enabled bearer , priority 0 [ 80.257188][ T4938] tipc: Resetting bearer [ 80.284363][ T4938] tipc: Disabling bearer [ 80.307352][ T4953] pimreg: entered allmulticast mode [ 80.357333][ T4958] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 80.442028][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 80.442045][ T29] audit: type=1326 audit(1758537971.405:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4954 comm="syz.0.502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f78eb1aeec9 code=0x0 [ 80.481281][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.830055][ T4971] netlink: 'syz.2.495': attribute type 13 has an invalid length. [ 80.994543][ T3697] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.002943][ T3697] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.027860][ T3697] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.036421][ T3697] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.203777][ T29] audit: type=1400 audit(1758537972.165:834): avc: denied { ioctl } for pid=4982 comm="syz.1.501" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 81.395729][ T29] audit: type=1400 audit(1758537972.365:835): avc: denied { write } for pid=4986 comm="syz.1.504" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.431929][ T29] audit: type=1400 audit(1758537972.395:836): avc: denied { ioctl } for pid=4986 comm="syz.1.504" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 81.540650][ T4996] tipc: Started in network mode [ 81.545778][ T4996] tipc: Node identity 4ec0c9b4e12c, cluster identity 4711 [ 81.553043][ T4996] tipc: Enabled bearer , priority 0 [ 81.561504][ T4995] tipc: Resetting bearer [ 81.580050][ T4995] tipc: Disabling bearer [ 81.969010][ T29] audit: type=1400 audit(1758537972.935:837): avc: denied { getopt } for pid=4999 comm="syz.1.517" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 82.003002][ T5000] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.010331][ T5000] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.023637][ T5000] bridge0: entered allmulticast mode [ 82.037386][ T5002] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 83.575426][ T29] audit: type=1326 audit(1758537974.545:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5027 comm="syz.1.513" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f834ec6eec9 code=0x0 [ 84.242199][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.249642][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.329758][ T5048] bridge0: entered allmulticast mode [ 84.349075][ T5047] loop0: detected capacity change from 0 to 1024 [ 84.399122][ T5051] loop4: detected capacity change from 0 to 1024 [ 84.404079][ T5047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.445508][ T5051] EXT4-fs: Ignoring removed orlov option [ 84.452193][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.472069][ T5051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.557323][ T5062] netlink: 'syz.1.525': attribute type 1 has an invalid length. [ 84.566069][ T5062] netlink: 'syz.1.525': attribute type 2 has an invalid length. [ 84.589241][ T5061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 84.649606][ T5062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.525'. [ 84.660210][ T5066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.526'. [ 84.763532][ T29] audit: type=1400 audit(1758537975.725:839): avc: denied { setopt } for pid=5068 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.929179][ T5063] ================================================================== [ 84.937302][ T5063] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 84.944446][ T5063] [ 84.946773][ T5063] write to 0xffff88810a9ed3ec of 4 bytes by task 5051 on cpu 1: [ 84.954396][ T5063] xas_set_mark+0x12b/0x140 [ 84.958914][ T5063] __folio_start_writeback+0x1dd/0x440 [ 84.964391][ T5063] ext4_bio_write_folio+0x5ad/0x9f0 [ 84.969602][ T5063] mpage_process_page_bufs+0x4a1/0x620 [ 84.975161][ T5063] mpage_prepare_extent_to_map+0x786/0xc00 [ 84.980966][ T5063] ext4_do_writepages+0xa05/0x2750 [ 84.986094][ T5063] ext4_writepages+0x176/0x300 [ 84.990868][ T5063] do_writepages+0x1c3/0x310 [ 84.995464][ T5063] file_write_and_wait_range+0x156/0x2c0 [ 85.001118][ T5063] generic_buffers_fsync_noflush+0x45/0x120 [ 85.007022][ T5063] ext4_sync_file+0x1ab/0x690 [ 85.011708][ T5063] vfs_fsync_range+0x10a/0x130 [ 85.016480][ T5063] ext4_buffered_write_iter+0x34f/0x3c0 [ 85.022044][ T5063] ext4_file_write_iter+0x383/0xf00 [ 85.027253][ T5063] iter_file_splice_write+0x666/0xa60 [ 85.032629][ T5063] direct_splice_actor+0x156/0x2a0 [ 85.037736][ T5063] splice_direct_to_actor+0x312/0x680 [ 85.043108][ T5063] do_splice_direct+0xda/0x150 [ 85.047878][ T5063] do_sendfile+0x380/0x650 [ 85.052304][ T5063] __x64_sys_sendfile64+0x105/0x150 [ 85.057530][ T5063] x64_sys_call+0x2bb0/0x2ff0 [ 85.062242][ T5063] do_syscall_64+0xd2/0x200 [ 85.066772][ T5063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.072674][ T5063] [ 85.074996][ T5063] read to 0xffff88810a9ed3ec of 4 bytes by task 5063 on cpu 0: [ 85.082535][ T5063] xas_find_marked+0x5dc/0x620 [ 85.087314][ T5063] find_get_entry+0x5d/0x380 [ 85.091919][ T5063] filemap_get_folios_tag+0x92/0x210 [ 85.097211][ T5063] mpage_prepare_extent_to_map+0x320/0xc00 [ 85.103022][ T5063] ext4_do_writepages+0x708/0x2750 [ 85.108139][ T5063] ext4_writepages+0x176/0x300 [ 85.112907][ T5063] do_writepages+0x1c3/0x310 [ 85.117510][ T5063] file_write_and_wait_range+0x156/0x2c0 [ 85.123153][ T5063] generic_buffers_fsync_noflush+0x45/0x120 [ 85.129059][ T5063] ext4_sync_file+0x1ab/0x690 [ 85.133747][ T5063] vfs_fsync_range+0x10a/0x130 [ 85.138517][ T5063] ext4_buffered_write_iter+0x34f/0x3c0 [ 85.144074][ T5063] ext4_file_write_iter+0x383/0xf00 [ 85.149293][ T5063] iter_file_splice_write+0x666/0xa60 [ 85.154677][ T5063] direct_splice_actor+0x156/0x2a0 [ 85.159802][ T5063] splice_direct_to_actor+0x312/0x680 [ 85.165182][ T5063] do_splice_direct+0xda/0x150 [ 85.169946][ T5063] do_sendfile+0x380/0x650 [ 85.174378][ T5063] __x64_sys_sendfile64+0x105/0x150 [ 85.179591][ T5063] x64_sys_call+0x2bb0/0x2ff0 [ 85.184275][ T5063] do_syscall_64+0xd2/0x200 [ 85.188809][ T5063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.194711][ T5063] [ 85.197041][ T5063] value changed: 0x0a000021 -> 0x04000021 [ 85.202757][ T5063] [ 85.205076][ T5063] Reported by Kernel Concurrency Sanitizer on: [ 85.211272][ T5063] CPU: 0 UID: 0 PID: 5063 Comm: syz.4.522 Not tainted syzkaller #0 PREEMPT(voluntary) [ 85.221020][ T5063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 85.231079][ T5063] ================================================================== [ 85.382727][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.