last executing test programs: 1.616320193s ago: executing program 1 (id=442): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)=ANY=[@ANYBLOB="09000000000000000200fffee0000002"], 0x190) 1.523489155s ago: executing program 1 (id=436): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.423238968s ago: executing program 4 (id=438): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x48}}, 0x0) 1.418527968s ago: executing program 3 (id=439): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.310056742s ago: executing program 1 (id=440): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.202621326s ago: executing program 4 (id=441): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x3}) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.199180667s ago: executing program 1 (id=452): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 1.147062623s ago: executing program 4 (id=443): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)={0x30, r3, 0xc4fc9e906872338b, 0xffffffff, 0xfffffffe, {{0x5}, {@void, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 1.141885404s ago: executing program 3 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000028c0)={0x30, r3, 0xc4fc9e906872338b, 0xffffffff, 0xfffffffe, {{0x5}, {@void, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x59}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 1.097850239s ago: executing program 4 (id=445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x400) r2 = dup3(r0, r1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000180)) 1.054638555s ago: executing program 0 (id=446): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x121f80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) 989.480123ms ago: executing program 3 (id=447): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000000080)=0x2) 985.821884ms ago: executing program 4 (id=448): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x6a1c2, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000380)='kmem_cache_free\x00', r2, 0x0, 0x7fffffff}, 0x18) faccessat(r0, &(0x7f0000000000)='./file0\x00', 0x5) 886.227197ms ago: executing program 0 (id=449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x694}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 663.353815ms ago: executing program 3 (id=450): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4d6, &(0x7f0000000540)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa4c42, 0x108) fallocate(r0, 0x0, 0xbf5, 0x2000402) truncate(&(0x7f0000000140)='./file2\x00', 0x6400) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x7, 0xbb, 0xa, 0xfffffffffe000001}) 663.241275ms ago: executing program 4 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ffb}]}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0xe9, 0x400) syz_usb_disconnect(r2) 661.437605ms ago: executing program 0 (id=461): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000000)=0x59cc, 0x4) recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x2, 0x0) 659.467036ms ago: executing program 1 (id=462): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 555.024289ms ago: executing program 0 (id=467): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a320000000005000400000000001400078008001240000000000500150022000000050005000200000005000100"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x3, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10) 515.830214ms ago: executing program 3 (id=456): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x72489}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) 491.357287ms ago: executing program 0 (id=457): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000240)={'sit0\x00', r1, 0x8000, 0x7800, 0xffff, 0x8001, {{0x5, 0x4, 0x0, 0x28, 0x14, 0x68, 0x0, 0x10, 0x4, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) 468.73438ms ago: executing program 2 (id=458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) 424.677566ms ago: executing program 3 (id=459): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x84}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 397.535079ms ago: executing program 2 (id=460): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @auto=[0x36, 0x61, 0x34, 0x3e, 0x65, 0x36, 0x32, 0x33, 0x61, 0x34, 0x7, 0x66, 0x33, 0x39, 0x0, 0x37]}, &(0x7f0000000300)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xfffffffffffffffe) keyctl$link(0x8, r2, r1) 348.785075ms ago: executing program 0 (id=463): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x0, &(0x7f0000000300)={[{@barrier}, {@debug}, {@lazytime}]}, 0x1, 0x5b3, &(0x7f0000001400)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) 344.433366ms ago: executing program 2 (id=464): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 147.353601ms ago: executing program 2 (id=465): lstat(&(0x7f0000001800)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$selinux_validatetrans(r2, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 0'], 0x79) 89.876799ms ago: executing program 2 (id=466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003000000018000180140002007665746830"], 0x2c}}, 0x0) 126.38µs ago: executing program 1 (id=468): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 0s ago: executing program 2 (id=469): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x74120, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x10003, 0x80000001, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap$perf(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x4000011, r0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.153' (ED25519) to the list of known hosts. [ 33.458158][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 33.458175][ T29] audit: type=1400 audit(1768572156.331:70): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.487225][ T29] audit: type=1400 audit(1768572156.361:71): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.489542][ T3306] cgroup: Unknown subsys name 'net' [ 33.515019][ T29] audit: type=1400 audit(1768572156.381:72): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.627799][ T3306] cgroup: Unknown subsys name 'cpuset' [ 33.634046][ T3306] cgroup: Unknown subsys name 'rlimit' [ 33.755671][ T29] audit: type=1400 audit(1768572156.621:73): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.785299][ T29] audit: type=1400 audit(1768572156.621:74): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.805933][ T29] audit: type=1400 audit(1768572156.621:75): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.826364][ T29] audit: type=1400 audit(1768572156.621:76): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.846756][ T29] audit: type=1400 audit(1768572156.621:77): avc: denied { read } for pid=3046 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.866197][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.867715][ T29] audit: type=1400 audit(1768572156.621:78): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.901024][ T29] audit: type=1400 audit(1768572156.621:79): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.970444][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.069596][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 35.172760][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.179969][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.187167][ T3320] bridge_slave_0: entered allmulticast mode [ 35.193814][ T3320] bridge_slave_0: entered promiscuous mode [ 35.202302][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.209418][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.216527][ T3320] bridge_slave_1: entered allmulticast mode [ 35.223118][ T3320] bridge_slave_1: entered promiscuous mode [ 35.270104][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.286288][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.303924][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 35.318478][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 35.328316][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.339470][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 35.404350][ T3320] team0: Port device team_slave_0 added [ 35.413396][ T3320] team0: Port device team_slave_1 added [ 35.445485][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.452724][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.459949][ T3316] bridge_slave_0: entered allmulticast mode [ 35.466356][ T3316] bridge_slave_0: entered promiscuous mode [ 35.488135][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.495289][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.502673][ T3316] bridge_slave_1: entered allmulticast mode [ 35.509237][ T3316] bridge_slave_1: entered promiscuous mode [ 35.525969][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.533003][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.559062][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.584510][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.591622][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.599103][ T3317] bridge_slave_0: entered allmulticast mode [ 35.605459][ T3317] bridge_slave_0: entered promiscuous mode [ 35.612247][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.619277][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.645229][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.665570][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.672699][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.680195][ T3322] bridge_slave_0: entered allmulticast mode [ 35.686748][ T3322] bridge_slave_0: entered promiscuous mode [ 35.693483][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.700638][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.707986][ T3317] bridge_slave_1: entered allmulticast mode [ 35.714405][ T3317] bridge_slave_1: entered promiscuous mode [ 35.723344][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.730481][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.737720][ T3323] bridge_slave_0: entered allmulticast mode [ 35.744240][ T3323] bridge_slave_0: entered promiscuous mode [ 35.752102][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.761337][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.768441][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.775725][ T3322] bridge_slave_1: entered allmulticast mode [ 35.782292][ T3322] bridge_slave_1: entered promiscuous mode [ 35.799877][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.806959][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.814225][ T3323] bridge_slave_1: entered allmulticast mode [ 35.820657][ T3323] bridge_slave_1: entered promiscuous mode [ 35.827969][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.858832][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.873969][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.894381][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.909660][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.919878][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.929772][ T3316] team0: Port device team_slave_0 added [ 35.942447][ T3320] hsr_slave_0: entered promiscuous mode [ 35.948530][ T3320] hsr_slave_1: entered promiscuous mode [ 35.960436][ T3316] team0: Port device team_slave_1 added [ 35.967100][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.982512][ T3322] team0: Port device team_slave_0 added [ 36.004217][ T3322] team0: Port device team_slave_1 added [ 36.010669][ T3317] team0: Port device team_slave_0 added [ 36.037839][ T3317] team0: Port device team_slave_1 added [ 36.049426][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.056398][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.082387][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.094118][ T3323] team0: Port device team_slave_0 added [ 36.112588][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.119559][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.145614][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.157722][ T3323] team0: Port device team_slave_1 added [ 36.163551][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.170536][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.196555][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.230613][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.237666][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.263751][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.274846][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.281840][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.307875][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.335827][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.342808][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.368837][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.383533][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.390596][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.416882][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.441161][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.448249][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.474218][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.504203][ T3316] hsr_slave_0: entered promiscuous mode [ 36.510440][ T3316] hsr_slave_1: entered promiscuous mode [ 36.516388][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.522177][ T3316] Cannot create hsr debugfs directory [ 36.537637][ T3322] hsr_slave_0: entered promiscuous mode [ 36.543686][ T3322] hsr_slave_1: entered promiscuous mode [ 36.549699][ T3322] debugfs: 'hsr0' already exists in 'hsr' [ 36.555447][ T3322] Cannot create hsr debugfs directory [ 36.585847][ T3317] hsr_slave_0: entered promiscuous mode [ 36.592034][ T3317] hsr_slave_1: entered promiscuous mode [ 36.597872][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 36.603617][ T3317] Cannot create hsr debugfs directory [ 36.630486][ T3323] hsr_slave_0: entered promiscuous mode [ 36.636554][ T3323] hsr_slave_1: entered promiscuous mode [ 36.642591][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 36.648404][ T3323] Cannot create hsr debugfs directory [ 36.738798][ T3320] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.763369][ T3320] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.781606][ T3320] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.799896][ T3320] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.868103][ T3322] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.878358][ T3322] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.887756][ T3322] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.905766][ T3322] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.928234][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.940665][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.952845][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.962454][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.992812][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.001559][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.017893][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.030322][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.069114][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.078771][ T3323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.098341][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.106719][ T3323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.121567][ T3323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.133455][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.140583][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.149232][ T3323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.167079][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.178615][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.185666][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.206822][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.223477][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.230554][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.243796][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.250893][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.292179][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.313094][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.348493][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.365742][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.372861][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.382516][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.396507][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.407180][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.414263][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.428934][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.436030][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.447920][ T2627] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.455051][ T2627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.472191][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.502876][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.525033][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.545472][ T2627] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.552724][ T2627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.562197][ T2627] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.569402][ T2627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.686842][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.729476][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.769890][ T3320] veth0_vlan: entered promiscuous mode [ 37.787931][ T3320] veth1_vlan: entered promiscuous mode [ 37.796816][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.805577][ T3322] veth0_vlan: entered promiscuous mode [ 37.822002][ T3322] veth1_vlan: entered promiscuous mode [ 37.856098][ T3320] veth0_macvtap: entered promiscuous mode [ 37.869133][ T3317] veth0_vlan: entered promiscuous mode [ 37.877897][ T3320] veth1_macvtap: entered promiscuous mode [ 37.894037][ T3317] veth1_vlan: entered promiscuous mode [ 37.906090][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.919121][ T3322] veth0_macvtap: entered promiscuous mode [ 37.930258][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.948411][ T3322] veth1_macvtap: entered promiscuous mode [ 37.957459][ T959] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.973361][ T959] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.982563][ T959] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.991671][ T3317] veth0_macvtap: entered promiscuous mode [ 38.002037][ T3317] veth1_macvtap: entered promiscuous mode [ 38.010051][ T959] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.020771][ T3316] veth0_vlan: entered promiscuous mode [ 38.039961][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.048615][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.063833][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.073292][ T3323] veth0_vlan: entered promiscuous mode [ 38.079790][ T3316] veth1_vlan: entered promiscuous mode [ 38.086391][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.107131][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.119917][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.130415][ T3323] veth1_vlan: entered promiscuous mode [ 38.136408][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.153752][ T3316] veth0_macvtap: entered promiscuous mode [ 38.161459][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.177750][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.186945][ T3320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.202321][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.213027][ T3316] veth1_macvtap: entered promiscuous mode [ 38.227325][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.240172][ T3323] veth0_macvtap: entered promiscuous mode [ 38.260569][ T3323] veth1_macvtap: entered promiscuous mode [ 38.277625][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.295468][ T3489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5'. [ 38.304391][ T3489] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 38.308919][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.321350][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.339055][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.349281][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.386713][ T53] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.429207][ T53] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.466791][ T53] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.502027][ T53] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.513366][ T53] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.537996][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 38.538014][ T29] audit: type=1400 audit(1768572161.411:121): avc: denied { audit_write } for pid=3502 comm="syz.2.8" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 38.569350][ T53] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.601602][ T3511] IPv6: NLM_F_CREATE should be specified when creating new route [ 38.609799][ T3510] batadv_slave_1: entered promiscuous mode [ 38.615825][ T53] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.649690][ T3510] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.654234][ T53] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.673205][ T3517] syz.3.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.684502][ T29] audit: type=1107 audit(1768572161.411:122): pid=3502 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 38.697947][ T29] audit: type=1400 audit(1768572161.461:123): avc: denied { create } for pid=3509 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.712045][ T3510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.717784][ T29] audit: type=1400 audit(1768572161.471:124): avc: denied { ioctl } for pid=3509 comm="syz.0.1" path="socket:[4760]" dev="sockfs" ino=4760 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.749068][ T29] audit: type=1400 audit(1768572161.481:125): avc: denied { setopt } for pid=3509 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.768622][ T29] audit: type=1400 audit(1768572161.541:126): avc: denied { create } for pid=3514 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.788187][ T29] audit: type=1400 audit(1768572161.541:127): avc: denied { bind } for pid=3514 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.807407][ T29] audit: type=1400 audit(1768572161.541:128): avc: denied { setopt } for pid=3514 comm="syz.4.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 38.829411][ T3510] batadv_slave_1 (unregistering): left promiscuous mode [ 38.836034][ T29] audit: type=1326 audit(1768572161.571:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76694f749 code=0x7ffc0000 [ 38.859742][ T29] audit: type=1326 audit(1768572161.571:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3513 comm="syz.2.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76694f749 code=0x7ffc0000 [ 38.867620][ T3510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.985761][ T3531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 39.141750][ T3551] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.165555][ T3552] netlink: 76 bytes leftover after parsing attributes in process `syz.1.26'. [ 39.243075][ T3562] loop1: detected capacity change from 0 to 512 [ 39.262384][ T3562] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 39.329401][ T3562] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 39.470684][ T3578] loop2: detected capacity change from 0 to 512 [ 39.609572][ T3578] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.645745][ T3578] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.672986][ T3578] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.36: corrupted inode contents [ 39.685137][ T3578] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #18: comm syz.2.36: mark_inode_dirty error [ 39.696708][ T3578] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #18: comm syz.2.36: corrupted inode contents [ 39.709019][ T3578] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3000: inode #18: comm syz.2.36: mark_inode_dirty error [ 39.722098][ T3578] EXT4-fs error (device loop2): ext4_xattr_delete_inode:3003: inode #18: comm syz.2.36: mark inode dirty (error -117) [ 39.741277][ T3578] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -117) [ 39.758109][ T3591] vhci_hcd vhci_hcd.4: invalid port number 253 [ 39.764343][ T3591] vhci_hcd vhci_hcd.4: default hub control req: 0011 v0102 i00fd l0 [ 39.776073][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.895106][ T3602] syz.3.46 (3602) used greatest stack depth: 9832 bytes left [ 40.001992][ T3615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 40.030582][ T3621] loop1: detected capacity change from 0 to 512 [ 40.074475][ T3621] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 40.087824][ T3621] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 40.100836][ T3620] xt_hashlimit: max too large, truncated to 1048576 [ 40.114014][ T3624] process 'syz.0.56' launched '/dev/fd/6' with NULL argv: empty string added [ 40.130324][ T3620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.166569][ T3621] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.52: bad orphan inode 131083 [ 40.207480][ T3621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.255498][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.291207][ T3648] netlink: 'syz.1.66': attribute type 1 has an invalid length. [ 40.298939][ T3648] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.66'. [ 40.310202][ T3649] sctp: [Deprecated]: syz.2.64 (pid 3649) Use of struct sctp_assoc_value in delayed_ack socket option. [ 40.310202][ T3649] Use struct sctp_sack_info instead [ 40.350423][ T3644] hub 9-0:1.0: USB hub found [ 40.361098][ T3644] hub 9-0:1.0: 8 ports detected [ 40.407730][ T3655] netlink: 27 bytes leftover after parsing attributes in process `syz.3.71'. [ 40.434990][ T3660] loop4: detected capacity change from 0 to 164 [ 40.452934][ T3660] ISOFS: unable to read i-node block [ 40.586342][ T3683] netlink: 12 bytes leftover after parsing attributes in process `syz.4.80'. [ 40.598134][ T3683] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 40.772532][ T3706] SELinux: Context system_u:object_r:userio_device_t:s0 is not valid (left unmapped). [ 40.894621][ T3723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.85'. [ 41.119710][ T3761] loop2: detected capacity change from 0 to 1024 [ 41.126366][ T3761] ======================================================= [ 41.126366][ T3761] WARNING: The mand mount option has been deprecated and [ 41.126366][ T3761] and is ignored by this kernel. Remove the mand [ 41.126366][ T3761] option from the mount to silence this warning. [ 41.126366][ T3761] ======================================================= [ 41.169035][ T3761] EXT4-fs: Ignoring removed oldalloc option [ 41.201185][ T3761] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.219853][ T3775] netlink: 28 bytes leftover after parsing attributes in process `syz.1.99'. [ 41.229001][ T3761] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.270074][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.338816][ T3787] SELinux: failed to load policy [ 41.363754][ T3794] netlink: 'syz.2.107': attribute type 1 has an invalid length. [ 41.448707][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 41.456681][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 41.472129][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 41.479954][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.487853][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.495640][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.503443][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.511218][ T9] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 41.536169][ T9] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 41.572194][ T3817] loop1: detected capacity change from 0 to 512 [ 41.591109][ T3817] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.118: bg 0: block 248: padding at end of block bitmap is not set [ 41.606821][ T3817] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.118: Failed to acquire dquot type 1 [ 41.618735][ T3817] EXT4-fs (loop1): 1 truncate cleaned up [ 41.624833][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.637604][ T3817] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.651846][ T3817] syz.1.118 (3817) used greatest stack depth: 9088 bytes left [ 41.671676][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.365588][ T3914] SELinux: failed to load policy [ 42.552412][ C0] hrtimer: interrupt took 27232 ns [ 42.853054][ T3925] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.149913][ T3925] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.333232][ T3833] syz.2.125 (3833) used greatest stack depth: 7448 bytes left [ 43.416680][ T3925] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.498003][ T3989] netlink: 'syz.2.166': attribute type 1 has an invalid length. [ 43.588557][ T3925] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.645466][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 43.645482][ T29] audit: type=1400 audit(1768572422.500:399): avc: denied { setcurrent } for pid=4001 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 43.671417][ T29] audit: type=1401 audit(1768572422.500:400): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 43.715707][ T3916] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.735258][ T3916] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.771817][ T3916] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.787199][ T3916] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.799259][ T4006] loop4: detected capacity change from 0 to 2048 [ 43.815133][ T29] audit: type=1400 audit(1768572422.680:401): avc: denied { ioctl } for pid=4011 comm="syz.2.175" path="socket:[6483]" dev="sockfs" ino=6483 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.859387][ T4006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 43.873369][ T29] audit: type=1400 audit(1768572422.720:402): avc: denied { name_connect } for pid=4009 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 43.893474][ T29] audit: type=1400 audit(1768572422.730:403): avc: denied { create } for pid=4015 comm="syz.3.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.920565][ T4006] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 43.927359][ T29] audit: type=1400 audit(1768572422.790:404): avc: denied { read append open } for pid=4005 comm="syz.4.172" path="/35/file2/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.959343][ T29] audit: type=1400 audit(1768572422.790:405): avc: denied { map } for pid=4005 comm="syz.4.172" path="/35/file2/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.982496][ T29] audit: type=1400 audit(1768572422.790:406): avc: denied { write } for pid=4005 comm="syz.4.172" path="/35/file2/memory.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.018535][ T29] audit: type=1326 audit(1768572422.890:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb76694f749 code=0x7ffc0000 [ 44.047107][ T29] audit: type=1326 audit(1768572422.890:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4019 comm="syz.2.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fb76694f749 code=0x7ffc0000 [ 44.088711][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 44.133084][ T4035] __nla_validate_parse: 3 callbacks suppressed [ 44.133098][ T4035] netlink: 96 bytes leftover after parsing attributes in process `syz.3.185'. [ 44.278868][ T4052] loop1: detected capacity change from 0 to 512 [ 44.286729][ T4054] netlink: 'syz.0.194': attribute type 1 has an invalid length. [ 44.294630][ T4054] netlink: 'syz.0.194': attribute type 4 has an invalid length. [ 44.302590][ T4054] netlink: 15334 bytes leftover after parsing attributes in process `syz.0.194'. [ 44.321467][ T4055] loop3: detected capacity change from 0 to 2048 [ 44.332678][ T4052] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 44.341682][ T4052] System zones: 1-20 [ 44.346362][ T4052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.392183][ T4055] Alternate GPT is invalid, using primary GPT. [ 44.398625][ T4055] loop3: p2 p3 p7 [ 44.725810][ T4079] loop0: detected capacity change from 0 to 128 [ 44.734883][ T4079] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 44.747323][ T4079] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 44.783287][ T4079] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 44.792762][ T4079] EXT4-fs (loop0): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 44.814284][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.881530][ T4089] loop2: detected capacity change from 0 to 512 [ 44.896901][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.897452][ T4089] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 44.935831][ T4089] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 44.975067][ T3317] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 44.984296][ T4094] loop1: detected capacity change from 0 to 512 [ 44.991193][ T4094] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 45.001854][ T4094] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.209: invalid block [ 45.017230][ T4094] EXT4-fs (loop1): Remounting filesystem read-only [ 45.027701][ T4094] EXT4-fs (loop1): 2 truncates cleaned up [ 45.041347][ T4097] Zero length message leads to an empty skb [ 45.044890][ T4094] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.073913][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.299890][ T4120] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.466890][ T4128] netlink: 'syz.0.222': attribute type 4 has an invalid length. [ 45.563459][ T4132] SELinux: ebitmap start bit (280) is not a multiple of the map unit size (64) [ 45.595826][ T4132] SELinux: failed to load policy [ 45.818606][ T4152] loop4: detected capacity change from 0 to 256 [ 45.825708][ T4152] FAT-fs (loop4): bogus number of FAT sectors [ 45.831874][ T4152] FAT-fs (loop4): Can't find a valid FAT filesystem [ 45.909048][ T4163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.918106][ T4163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.023384][ T4170] ip6gre2: entered promiscuous mode [ 46.028662][ T4170] ip6gre2: entered allmulticast mode [ 46.160052][ T4176] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 46.265855][ T3565] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 46.273644][ T3565] hid-generic 0000:0000:FFFFFFFC.0002: unknown main item tag 0x0 [ 46.283186][ T3565] hid-generic 0000:0000:FFFFFFFC.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 46.293744][ T4191] syz.4.249 uses obsolete (PF_INET,SOCK_PACKET) [ 46.359692][ T3859] Bluetooth: hci1: Frame reassembly failed (-84) [ 46.411123][ T4202] loop4: detected capacity change from 0 to 512 [ 46.418482][ T4202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 46.449315][ T4202] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.462404][ T4202] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.498798][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.586628][ T4223] ip6gre1: entered promiscuous mode [ 46.591951][ T4223] ip6gre1: entered allmulticast mode [ 46.614199][ T4227] netlink: 'syz.0.266': attribute type 3 has an invalid length. [ 46.732866][ T4250] io-wq is not configured for unbound workers [ 46.734066][ T4248] IPv6: NLM_F_CREATE should be specified when creating new route [ 46.831048][ T4266] netlink: 28 bytes leftover after parsing attributes in process `wÞ£ÿ'. [ 46.948437][ T4282] netdevsim netdevsim2: Direct firmware load for ./file1 failed with error -2 [ 46.982802][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 46.993242][ T4288] netlink: 312 bytes leftover after parsing attributes in process `syz.4.294'. [ 47.002321][ T4288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.294'. [ 47.102204][ T4304] netlink: 56 bytes leftover after parsing attributes in process `syz.0.302'. [ 47.135213][ T4311] Driver unsupported XDP return value 0 on prog (id 205) dev N/A, expect packet loss! [ 47.167828][ T4315] ipvlan1: entered promiscuous mode [ 47.174103][ T4315] ipvlan1: left promiscuous mode [ 47.201884][ T4320] sd 0:0:1:0: device reset [ 47.264181][ T4334] netlink: 'syz.0.313': attribute type 15 has an invalid length. [ 47.956730][ T4348] syzkaller1: entered promiscuous mode [ 47.962341][ T4348] syzkaller1: entered allmulticast mode [ 47.968190][ T3923] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.974377][ T4161] Bluetooth: hci0: command 0x1003 tx timeout [ 48.037022][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 48.045998][ T4352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.318'. [ 48.185207][ T4373] loop4: detected capacity change from 0 to 128 [ 48.215223][ T4373] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 48.228011][ T4373] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.269662][ T53] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 48.305840][ T4382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.329'. [ 48.324412][ T4382] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 48.367091][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 48.368339][ T3923] Bluetooth: hci1: command 0x1003 tx timeout [ 48.421505][ T4394] netlink: 'syz.3.336': attribute type 1 has an invalid length. [ 48.648333][ T53] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x49 [ 48.693953][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 48.693972][ T29] audit: type=1400 audit(1768572427.560:757): avc: denied { create } for pid=4429 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 48.736540][ T29] audit: type=1400 audit(1768572427.590:758): avc: denied { bind } for pid=4429 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 48.755699][ T29] audit: type=1400 audit(1768572427.590:759): avc: denied { connect } for pid=4429 comm="syz.3.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 48.825068][ T29] audit: type=1326 audit(1768572427.670:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f115f749 code=0x7ffc0000 [ 48.848456][ T29] audit: type=1326 audit(1768572427.670:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fb0f115f749 code=0x7ffc0000 [ 48.871884][ T29] audit: type=1326 audit(1768572427.670:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f115f749 code=0x7ffc0000 [ 48.895194][ T29] audit: type=1326 audit(1768572427.670:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0f115f749 code=0x7ffc0000 [ 48.918477][ T29] audit: type=1326 audit(1768572427.670:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f115f749 code=0x7ffc0000 [ 48.941826][ T29] audit: type=1326 audit(1768572427.670:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fb0f115f749 code=0x7ffc0000 [ 48.965116][ T29] audit: type=1326 audit(1768572427.670:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4433 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0f115f749 code=0x7ffc0000 [ 49.056713][ T4456] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 49.242829][ T4490] loop1: detected capacity change from 0 to 512 [ 49.264935][ T4490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.285487][ T4490] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.354888][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.401538][ T4517] __nla_validate_parse: 1 callbacks suppressed [ 49.401554][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 49.435587][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.444555][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.458341][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.467690][ T4517] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 49.507643][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.516568][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.536334][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.573493][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.582615][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.593122][ T4537] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 49.621550][ T4523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 49.747451][ T3852] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x49 [ 49.780712][ T4573] loop0: detected capacity change from 0 to 512 [ 49.804522][ T4573] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.853164][ T4573] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 49.910964][ T3323] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 50.080585][ T4616] loop3: detected capacity change from 0 to 512 [ 50.102290][ T4616] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 50.117112][ T4616] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 50.150072][ T3322] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 50.169870][ T4633] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 50.198401][ T3852] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x49 [ 50.280650][ T4654] loop0: detected capacity change from 0 to 512 [ 50.309712][ T4654] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.327760][ T4654] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.372704][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.428253][ T4676] vhci_hcd vhci_hcd.0: default hub control req: 6712 v03f8 i0007 l0 [ 50.536841][ T4698] loop0: detected capacity change from 0 to 2048 [ 50.550239][ T4698] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 50.568981][ T4698] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 50.592992][ T53] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x49 [ 50.624935][ T4718] loop3: detected capacity change from 0 to 512 [ 50.655572][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 50.666817][ T4718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 50.675164][ T4718] System zones: 1-20 [ 50.685920][ T4718] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.871995][ T4741] loop2: detected capacity change from 0 to 512 [ 50.889482][ T4741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.902099][ T4741] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.933705][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.954014][ T4748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 50.972096][ T4748] bond1: (slave batadv1): Opening slave failed [ 51.062575][ T4760] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 51.170137][ T4771] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.232849][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.272446][ T4771] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.291575][ T4777] loop4: detected capacity change from 0 to 512 [ 51.329209][ T4784] netlink: 'syz.1.436': attribute type 1 has an invalid length. [ 51.339051][ T4777] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.359324][ T4777] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.369523][ T4784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 51.411357][ T3320] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.443159][ T4771] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.476327][ T4784] bond2: (slave geneve2): making interface the new active one [ 51.485750][ T4784] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 51.507437][ T4793] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.525390][ T4793] bond1: (slave batadv1): Opening slave failed [ 51.581896][ T4771] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.653923][ T4800] loop1: detected capacity change from 0 to 128 [ 51.713023][ T4800] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 51.752046][ T4800] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 51.798000][ T3852] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.844266][ T3852] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.891207][ T4800] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 51.906840][ T3848] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.917458][ T4811] SELinux: failed to load policy [ 51.959094][ T4800] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 51.974408][ T3848] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.997256][ T3316] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.199447][ T4827] loop3: detected capacity change from 0 to 512 [ 52.234852][ T4827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.252407][ T4827] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.267919][ T4833] sd 0:0:1:0: device reset [ 52.300459][ T4835] ipvlan1: entered promiscuous mode [ 52.321161][ T4835] ipvlan1: left promiscuous mode [ 52.330433][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.439995][ T4847] loop3: detected capacity change from 0 to 1024 [ 52.487470][ T4847] EXT4-fs: Ignoring removed orlov option [ 52.502362][ T4847] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.528537][ T4854] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.541468][ T4852] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c018, mo2=0002] [ 52.549893][ T4852] System zones: 1-20 [ 52.554836][ T4854] ext4 filesystem being mounted at /99/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 52.588043][ T4852] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.615145][ T4854] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro. [ 52.627280][ T4854] EXT4-fs (loop2): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w. [ 52.697953][ T3317] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 52.848199][ T4858] ================================================================== [ 52.856341][ T4858] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 52.863506][ T4858] [ 52.865846][ T4858] write to 0xffff88811a4a8b5c of 4 bytes by task 4847 on cpu 1: [ 52.873492][ T4858] xas_set_mark+0x12b/0x140 [ 52.878030][ T4858] __folio_start_writeback+0x155/0x340 [ 52.883602][ T4858] ext4_bio_write_folio+0x5ad/0x9f0 [ 52.888829][ T4858] mpage_process_page_bufs+0x4a1/0x620 [ 52.894309][ T4858] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 52.900138][ T4858] ext4_do_writepages+0x9f6/0x27e0 [ 52.905288][ T4858] ext4_writepages+0x179/0x300 [ 52.910070][ T4858] do_writepages+0x1c6/0x310 [ 52.914686][ T4858] file_write_and_wait_range+0x156/0x2c0 [ 52.920343][ T4858] generic_buffers_fsync_noflush+0x45/0x130 [ 52.926275][ T4858] ext4_sync_file+0x1ab/0x690 [ 52.930967][ T4858] vfs_fsync_range+0x10d/0x130 [ 52.935756][ T4858] ext4_buffered_write_iter+0x34f/0x3c0 [ 52.941335][ T4858] ext4_file_write_iter+0x387/0xf60 [ 52.946566][ T4858] iter_file_splice_write+0x66b/0xa20 [ 52.952052][ T4858] direct_splice_actor+0x156/0x2a0 [ 52.957182][ T4858] splice_direct_to_actor+0x312/0x680 [ 52.962636][ T4858] do_splice_direct+0xda/0x150 [ 52.967427][ T4858] do_sendfile+0x380/0x650 [ 52.971883][ T4858] __x64_sys_sendfile64+0x105/0x150 [ 52.977105][ T4858] x64_sys_call+0x2db1/0x3000 [ 52.981812][ T4858] do_syscall_64+0xca/0x2b0 [ 52.986380][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.992293][ T4858] [ 52.994632][ T4858] read to 0xffff88811a4a8b5c of 4 bytes by task 4858 on cpu 0: [ 53.002186][ T4858] xas_find_marked+0x5dc/0x620 [ 53.006982][ T4858] find_get_entry+0x5d/0x380 [ 53.011605][ T4858] filemap_get_folios_tag+0x92/0x210 [ 53.016917][ T4858] mpage_prepare_extent_to_map+0x308/0xc20 [ 53.022748][ T4858] ext4_do_writepages+0x9f6/0x27e0 [ 53.027891][ T4858] ext4_writepages+0x179/0x300 [ 53.032672][ T4858] do_writepages+0x1c6/0x310 [ 53.037288][ T4858] file_write_and_wait_range+0x156/0x2c0 [ 53.042937][ T4858] generic_buffers_fsync_noflush+0x45/0x130 [ 53.048855][ T4858] ext4_sync_file+0x1ab/0x690 [ 53.053548][ T4858] vfs_fsync_range+0x10d/0x130 [ 53.058331][ T4858] ext4_buffered_write_iter+0x34f/0x3c0 [ 53.063913][ T4858] ext4_file_write_iter+0x387/0xf60 [ 53.069143][ T4858] iter_file_splice_write+0x66b/0xa20 [ 53.074531][ T4858] direct_splice_actor+0x156/0x2a0 [ 53.079663][ T4858] splice_direct_to_actor+0x312/0x680 [ 53.085051][ T4858] do_splice_direct+0xda/0x150 [ 53.089831][ T4858] do_sendfile+0x380/0x650 [ 53.094274][ T4858] __x64_sys_sendfile64+0x105/0x150 [ 53.099491][ T4858] x64_sys_call+0x2db1/0x3000 [ 53.104189][ T4858] do_syscall_64+0xca/0x2b0 [ 53.108713][ T4858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.114621][ T4858] [ 53.116952][ T4858] value changed: 0x0a000021 -> 0x04000021 [ 53.122766][ T4858] [ 53.125102][ T4858] Reported by Kernel Concurrency Sanitizer on: [ 53.131278][ T4858] CPU: 0 UID: 0 PID: 4858 Comm: syz.3.459 Not tainted syzkaller #0 PREEMPT(voluntary) [ 53.140928][ T4858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.151001][ T4858] ================================================================== [ 53.337822][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.468237][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.567257][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog