last executing test programs: 6.032532031s ago: executing program 1 (id=4664): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x20000008, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004006fd0af047eeed572dc2f0000f100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='cq_schedule\x00', r3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) execve(0x0, 0x0, 0x0) syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5.504163948s ago: executing program 1 (id=4675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$eJzs3c9vI1cdAPDvTOJNmqZNCpUKCOhSCgtarZ1426jqqVxAqKqEqDhxSEPijaLYcRQ7pQkrNfkfkKjEAcGJMwckDpV64ojgBre9LAekBVagDRIHo/GPbHZjJ2HXsVX785FGM2/eeL7vrTXveb9J/AIYW1cj4iAirkTEexEx1z6ftLd4q7Vl1z24f3v16P7t1SQajXf/kTTrs3Nx4jWZZ9v3nI6I738n4kfJ6bi1vf3NlXK5tNMuF+qV7UJtb//GRmVlvbRe2ioWlxaXFt64+Xqxb319ufKbe9/eePsHH//uS3f/dPDNn2TNmm3XnexHP7W6njuOk5mMiLcvI9gQTLT7c2XYDeGJpBHxmYh4pfn8z8VE8928mC6PNQDwKdBozEVj7mQZABh1aTMHlqT5di5gNtI0n2/l8F6MmbRcrdWv36rubq21cmXzkUtvbZRLC+1c4Xzkkqy8+GF2/LBcjEfLNyPihYj46dQzzXJ+9eJ5BgCgv559bP7/91Rr/gcARtz0eRcsD6YdAMDgnDv/AwAjx/wPAOPH/A8A48f8DwDjx/wPAOPmTmf+nxh2SwCAgfjeO+9kW+Oo/f3Xa+/v7W5W37+xVqpt5iu7q/nV6s52fr1aXS+X8qvVynn3K1er24uvxe4HhXqpVi/U9vaXK9Xdrfpy83u9l0u5gfQKADjLCy9/8pckIg7efKa5xYm1HMzVMNrSYTcAGBo5fxhfvoUbxpf/4wPnreXZ81eEP3qCYI0Pn+BFQL9d+7z8P4wr+X8YX/L/ML7k/2F8NRpJrzX/0+NLAICRIscPDPTn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAiZpvb/IlymubzEc9FxHzkklsb5dJCRDwfEX+eyk1l5cWhthgAeHrp35L2+l/X5l6dfbz2SvKfqeY+In7883d/9sFKvb6zmJ3/5/H5+kft88VhtB8AOE9nnu7M4x0P7t9e7WyDbM+9b7UWF83iHrW3Vs1kTGa7P05HLiJm/pW0ym3Z55WJPsQ/OIyIz3Xrf9LMjcy3Vz59PH4W+7mBxk8fiZ8261r77N/is6fuPNUz5nlrvcK4+CQbf97q9vylcbW5n+66+PF0c4R6ep3x7+jU+Nd53qebY0238e/qRWO89vvv9qw7jPjCZLf4yXH8pEf8Vy8Y/84Xv/xKr7rGLyOuRff4J2MV6pXtQm1v/8ZGZWW9tF7aKhaXFpcW3rj5erHQzFEXOpnq0/7+5vXne/b/1xEzPeJPn9P/r53Z68bxAPyr/773w6/0in8Y8Y2vdn//XzwjfjYnfv3M+A+tzPy25/LdWfy1Vv8P/9/3//oF49/96/7aBS8FAAagtre/uVIul3b6epCLPt/wxEFySW12MOIH2efxp73PS+2UWddr/vCLj1/KKofe074cDHlgAi7dw4d+2C0BAAAAAAAAAAAAAAB6ufQ/J0qH3UMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABG2f8CAAD//zwQyy8=") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x20000008, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cc4fa949b689545c0927fa6088f798a42348c00a3fd2176cb38371f4c494e5c88ef6b1b1e4b0f695452c0988842cb6942a5b13989e5fa41c17d077a6a46f1c9c9341573c689b614d"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004006fd0af047eeed572dc2f0000f100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='cq_schedule\x00', r4}, 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r7}, 0x10) execve(0x0, 0x0, 0x0) syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x1, 0x0, r1, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000cc0)='./bus\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 4.633852954s ago: executing program 1 (id=4694): r0 = eventfd2(0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = dup3(r1, r0, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) pipe(&(0x7f0000000300)) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r3, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r7}, 0x10) mincore(&(0x7f0000ac7000/0x2000)=nil, 0x2000, &(0x7f0000000f00)=""/4096) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3.165743332s ago: executing program 0 (id=4721): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x8, 0x80, 0x6, 0x2016, {{0x2a, 0x4, 0x0, 0x5, 0xa8, 0x67, 0x0, 0xfc, 0x4, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x7, [{@empty, 0xb}, {@multicast2, 0x2}, {@multicast1, 0x2}, {@broadcast, 0x2}]}, @timestamp_prespec={0x44, 0xc, 0x7f, 0x3, 0x7, [{@local, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x89, 0x1, 0x8, [{@empty, 0x7}]}, @ssrr={0x89, 0x17, 0xd9, [@remote, @remote, @loopback, @rand_addr=0x64010100, @private=0xa010100]}, @timestamp={0x44, 0x18, 0x2e, 0x0, 0x7, [0x1, 0xfffffff1, 0xa, 0x0, 0x3]}, @lsrr={0x83, 0x27, 0x3d, [@local, @remote, @multicast2, @remote, @rand_addr=0x64010100, @private=0xa010101, @multicast2, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x10200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000400)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x14, '\x00', r1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffffffffffff95) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x64b11f98, 0x3, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000280)='percpu_destroy_chunk\x00', r0}, 0x18) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r5, 0x29, 0x4, 0x0, &(0x7f0000000940)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r7, &(0x7f00000009c0)=""/156, 0x9c, 0x0) 3.113323697s ago: executing program 0 (id=4724): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x20000008, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004006fd0af047eeed572dc2f0000f100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='cq_schedule\x00', r3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) execve(0x0, 0x0, 0x0) syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2.466311624s ago: executing program 0 (id=4732): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) r3 = creat(0x0, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) finit_module(r4, 0x0, 0x0) tkill(r1, 0x37) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7ffffffc}}], 0x38) readv(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5, 0x0, 0x4}, 0x18) r6 = socket(0x2, 0x400000000002, 0x0) setsockopt(r6, 0x0, 0x7, &(0x7f0000000280)="b1f5", 0x2) io_uring_setup(0x7c52, &(0x7f00000002c0)={0x0, 0x40fffc, 0x2}) 2.465849174s ago: executing program 0 (id=4733): socket$nl_route(0x10, 0x3, 0x0) ioperm(0x0, 0x2, 0x2) r0 = syz_clone(0x0, &(0x7f0000000540)="cc08fc67b3b2f81da5f58f6413950a3f12c039c70cb2efb11f92731c63156c36dd8af6efcc9abe346c23c5c670c34b57cbee6bca7bed2bbe90f913edbb22ac121849c042b4a0d48931031a94094284531c3bb534b369456b08b8e6881426bf809e836474be4a67323842761815ae3338ce53f11f3d3f54c59ed86d68c04b740b744f41621f895d2e1c52db2937e2dc9f", 0x90, 0x0, 0x0, 0x0) perf_event_open(0x0, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0xaa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000000}, 0x0, 0x7, 0x6, 0x0, 0x0, 0x0, 0xfffe}, r0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x62) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x253, &(0x7f00000004c0)="$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") execve(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./bus\x00') openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x104) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) socket$xdp(0x2c, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.643966056s ago: executing program 0 (id=4745): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000740)={'gretap0\x00', 0x0, 0x8, 0x80, 0x6, 0x2016, {{0x1e, 0x4, 0x0, 0x5, 0x78, 0x67, 0x0, 0xfc, 0x4, 0x0, @private=0xa010102, @empty, {[@timestamp_addr={0x44, 0x24, 0xcd, 0x1, 0x7, [{@empty, 0xb}, {@multicast2, 0x2}, {@multicast1, 0x2}, {@broadcast, 0x2}]}, @noop, @timestamp_prespec={0x44, 0xc, 0x7f, 0x3, 0x7, [{@local, 0x9}]}, @timestamp_addr={0x44, 0xc, 0x89, 0x1, 0x8, [{@empty, 0x7}]}, @ssrr={0x89, 0x17, 0xd9, [@remote, @remote, @loopback, @rand_addr=0x64010100, @private=0xa010100]}, @lsrr={0x83, 0xf, 0x3d, [@private=0xa010101, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}]}]}}}}}) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x10200, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000"], &(0x7f0000000400)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x0, 0x14, '\x00', r1, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x64b11f98, 0x3, 0x1}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000280)='percpu_destroy_chunk\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_mreq(r5, 0x29, 0x4, 0x0, &(0x7f0000000940)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r6}, 0x10) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) pread64(r7, &(0x7f00000009c0)=""/156, 0x9c, 0x0) 1.629300407s ago: executing program 3 (id=4746): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010180)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 1.60222751s ago: executing program 0 (id=4747): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) faccessat2(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x4, 0x1100) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x30, 0x20, 0x1, 0x3, 0x0, {0xa, 0x0, 0x10, 0x4, 0x0, 0x0, 0x0, 0x7, 0x1001a}, [@FRA_SRC={0x14, 0x2, @dev}]}, 0x30}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}]}, 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=@ipv4_delrule={0x2c, 0x21, 0x800, 0x70bd27, 0x25dfdbff, {0x2, 0xa0, 0x20, 0x40, 0x8, 0x0, 0x0, 0x1, 0x1}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x2c}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r4 = dup2(r2, r1) io_submit(0x0, 0x2, &(0x7f00000004c0)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0xe, 0x1, r2, &(0x7f0000000380)="6859d22405801467c3e6d4cc831dc6d446e0b587f8ae0b6189f62d6be3d4bcd69a75ee7544490068c4cdd51ca6cd115e174db183c4b810", 0x37, 0x5, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4132b04db0a4c6ba, 0x1, r2, &(0x7f0000000400)="2d01576376a27b2418098b46c7495f4d9d5c6a1e8ec0af749bfba99f0bf3e82437771e4623070ffb3e1d1cc440da59ffcfe3610c6f8d1dc393ceb53450b9ce5d7082c3b056dae488ef0949c1e480454a4b9e9a61e5a634dbf6cba206748283efbd7cae2bb41857afbeec336ad8f4265c5b83b874e4470d298092fe88a9", 0x7d, 0x43}]) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000140)='highspeed\x00', 0xa) capget(0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000640)={0x0, 0xe36a, 0x0, 0x10000, 0x8000000000000001}, &(0x7f0000000680)=0x18) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000500)=0xd845) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c000680"], 0x34}}, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0xa, &(0x7f00000005c0)=0x169, 0x4) fchmodat(r4, &(0x7f0000000540)='./file0\x00', 0x2) connect$inet(r7, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) 1.441207133s ago: executing program 3 (id=4748): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', 0x0, 0xee) 1.320698394s ago: executing program 3 (id=4750): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdir(&(0x7f0000002880)='./file0\x00', 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)='7', 0x1}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r4, 0x400000001ffffffd) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000810000000209000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) accept4(r4, 0x0, 0x0, 0x0) 464.021039ms ago: executing program 3 (id=4756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800000000e5277b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4f7, &(0x7f0000000540)="$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") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x20000008, 0x100008b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00000004006fd0af047eeed572dc2f0000f100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='cq_schedule\x00', r3}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r6}, 0x10) execve(0x0, 0x0, 0x0) syz_io_uring_setup(0xe42, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 372.636437ms ago: executing program 4 (id=4757): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r0, 0x0, 0xd, &(0x7f0000000600)='/dev/snd/seq\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xa) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, 0x0) 371.994417ms ago: executing program 2 (id=4758): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 356.609659ms ago: executing program 4 (id=4759): socket$nl_route(0x10, 0x3, 0x0) getrandom(0x0, 0x0, 0x0) 336.310941ms ago: executing program 2 (id=4760): syz_read_part_table(0x5c3, &(0x7f00000005c0)="$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") 314.733852ms ago: executing program 4 (id=4761): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x37, 0x1, 0x0, 0x0, {0x2}, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r2, r2, r2) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 314.359652ms ago: executing program 4 (id=4762): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) r3 = creat(0x0, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) finit_module(r4, 0x0, 0x0) tkill(r1, 0x37) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7ffffffc}}], 0x38) readv(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5, 0x0, 0x4}, 0x18) r6 = socket(0x2, 0x400000000002, 0x0) setsockopt(r6, 0x0, 0x7, &(0x7f0000000280)="b1f5", 0x2) io_uring_setup(0x7c52, &(0x7f00000002c0)={0x0, 0x40fffc, 0x2}) 290.040404ms ago: executing program 4 (id=4763): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00'}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) fsetxattr$security_capability(r0, &(0x7f0000000140), &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) 289.801345ms ago: executing program 4 (id=4764): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x400}, &(0x7f0000000240), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000e40)=""/4096, 0x1000}], 0x1}, 0x0) 249.397988ms ago: executing program 2 (id=4765): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000e, 0x12, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f0000000840)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/7, 0x7, 0x0, &(0x7f0000001100)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x18, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1d, 0x15, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x49, &(0x7f00000007c0)=""/73, 0x41100, 0x0, '\x00', r6, 0x2c, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000880)={0x3, 0x9, 0x3ff, 0x10}, 0x10, r7, 0xffffffffffffffff, 0x0, &(0x7f0000000940)=[r8, r2, r1, r3], 0x0, 0x10, 0x9, @void, @value}, 0x94) r9 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r4, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0), &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x33, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000002c0), &(0x7f0000000340), 0x8, 0xfc, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl2\x00', r10, 0x2f, 0x61, 0xf3, 0x3, 0x0, @private0, @private2, 0x80, 0x7, 0x9, 0x1000}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a80)={r2, r2, 0xa, 0x0, @val=@iter={&(0x7f0000000a40)=@map_fd=r8, 0x10}}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r11 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x44) write$binfmt_script(r11, &(0x7f0000000300)={'#! ', './file0'}, 0xb) execveat(r11, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 225.38222ms ago: executing program 2 (id=4766): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) fsetxattr$security_capability(r1, 0x0, &(0x7f0000000080)=@v3={0x3000000, [], 0xee00}, 0x18, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='trusted.overlay.metacopy\x00', 0x0, 0xee) 209.826361ms ago: executing program 2 (id=4767): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x1, 0x357, &(0x7f0000000180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xc1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0x0, r0, 0x0, 0xd, &(0x7f0000000600)='/dev/snd/seq\x00'}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a"], 0x44}}, 0x0) r5 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @local}, 0x4a, {0x2, 0x0, @dev}}) ioctl$sock_inet_SIOCSARP(r5, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c00)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xa) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000880), 0x2) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, 0x0) 177.801794ms ago: executing program 3 (id=4768): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000010180)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) 148.216937ms ago: executing program 2 (id=4769): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_open_dev$loop(0x0, 0x75f, 0x103382) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x0, 0x10}, 0xc) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)='\x00', 0x1, 0x8080, &(0x7f0000000200)={0xa, 0x4e23, 0x20, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000280)="fd", 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b000100697036677265000020000280080004000500000014000700ff02000000000000000000000000000108000300", @ANYRES32=r7], 0x58}, 0x1, 0x8}, 0x0) r8 = open(&(0x7f00000000c0)='./file0\x00', 0x81ff, 0x0) preadv2(r8, 0x0, 0x0, 0x8, 0x10, 0x12) 92.526712ms ago: executing program 1 (id=4770): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 48.567586ms ago: executing program 1 (id=4771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000040000000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x800, &(0x7f0000000c00), 0x1, 0xb9a, &(0x7f0000002340)="$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") 42.495496ms ago: executing program 3 (id=4772): mkdir(0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) socket$pppoe(0x18, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x200, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x10, &(0x7f00000014c0), 0x1, 0x793, &(0x7f0000001700)="$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") open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) (async) r0 = open(&(0x7f0000007fc0)='./bus\x00', 0x60142, 0x0) open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) (async) r1 = open(&(0x7f0000000380)='./file1\x00', 0x42042, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000211005) (async) sendfile(r0, r1, 0x0, 0x1000000211005) 0s ago: executing program 1 (id=4773): r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = getpgrp(0xffffffffffffffff) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000240)='./file0\x00', 0x8c7) r3 = creat(0x0, 0x0) pwritev2(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0x0, 0x0, 0x0) r4 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) finit_module(r4, 0x0, 0x0) tkill(r1, 0x37) write$sndseq(r0, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7ffffffc}}], 0x38) readv(r0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5, 0x0, 0x4}, 0x18) r6 = socket(0x2, 0x400000000002, 0x0) setsockopt(r6, 0x0, 0x7, &(0x7f0000000280)="b1f5", 0x2) io_uring_setup(0x7c52, &(0x7f00000002c0)={0x0, 0x40fffc, 0x2}) kernel console output (not intermixed with test programs): nregistering): Released all slaves [ 250.829642][T16846] syz.3.4268: attempt to access beyond end of device [ 250.829642][T16846] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 250.861877][T16846] syz.3.4268: attempt to access beyond end of device [ 250.861877][T16846] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 251.014759][T16872] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.085860][T16872] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.122744][T16874] loop4: detected capacity change from 0 to 2048 [ 251.130322][T16872] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.146284][T16874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.185997][T16872] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.197233][T15533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.250557][T16872] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.276819][T16872] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.289644][T16880] loop4: detected capacity change from 0 to 512 [ 251.299005][T16872] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.318114][T16880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.325630][T16872] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.330656][T16880] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 254.436330][ T9057] dummy0: left allmulticast mode [ 254.441362][ T9057] dummy0: left promiscuous mode [ 254.446629][ T9057] bridge0: port 4(dummy0) entered disabled state [ 254.493873][ T9057] bridge0: port 3(vlan0) entered disabled state [ 254.543839][ T9057] bridge_slave_1: left allmulticast mode [ 254.549564][ T9057] bridge_slave_1: left promiscuous mode [ 254.555204][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.633815][ T9057] bridge_slave_0: left allmulticast mode [ 254.639490][ T9057] bridge_slave_0: left promiscuous mode [ 254.645204][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.033891][ T9057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.074257][ T9057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.124686][ T9057] bond0 (unregistering): Released all slaves [ 255.397250][ T9057] hsr_slave_0: left promiscuous mode [ 255.416045][ T9057] hsr_slave_1: left promiscuous mode [ 255.443918][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.451375][ T9057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 255.514026][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.521473][ T9057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 255.593747][ T9057] veth1_macvtap: left promiscuous mode [ 255.599252][ T9057] veth0_macvtap: left promiscuous mode [ 255.604807][ T9057] veth1_vlan: left promiscuous mode [ 255.610011][ T9057] veth0_vlan: left allmulticast mode [ 255.615369][ T9057] veth0_vlan: left promiscuous mode [ 255.984396][ T9057] team0 (unregistering): Port device team_slave_1 removed [ 256.034026][ T9057] team0 (unregistering): Port device team_slave_0 removed [ 256.203710][ T35] lo speed is unknown, defaulting to 1000 [ 260.755912][T16880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4281'. [ 287.387210][T15533] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.537184][ T29] kauditd_printk_skb: 473 callbacks suppressed [ 287.537197][ T29] audit: type=1400 audit(1725966868.039:11804): avc: denied { mounton } for pid=16905 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 287.687948][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.797086][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.927060][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.033441][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.144273][ T28] bridge_slave_1: left allmulticast mode [ 288.149967][ T28] bridge_slave_1: left promiscuous mode [ 288.155668][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.163896][ T28] bridge_slave_0: left allmulticast mode [ 288.169549][ T28] bridge_slave_0: left promiscuous mode [ 288.175205][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.296083][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.306702][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.316763][ T28] bond0 (unregistering): Released all slaves [ 288.339134][T16906] chnl_net:caif_netlink_parms(): no params data found [ 288.370786][T16917] chnl_net:caif_netlink_parms(): no params data found [ 288.399292][T16911] chnl_net:caif_netlink_parms(): no params data found [ 288.428631][T16914] chnl_net:caif_netlink_parms(): no params data found [ 288.467917][T16906] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.475032][T16906] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.482275][T16906] bridge_slave_0: entered allmulticast mode [ 288.488803][T16906] bridge_slave_0: entered promiscuous mode [ 288.503812][ T28] hsr_slave_0: left promiscuous mode [ 288.509386][ T28] hsr_slave_1: left promiscuous mode [ 288.516799][ T28] veth1_macvtap: left promiscuous mode [ 288.522278][ T28] veth0_macvtap: left promiscuous mode [ 288.527807][ T28] veth1_vlan: left promiscuous mode [ 288.533013][ T28] veth0_vlan: left promiscuous mode [ 288.604411][ T28] team0 (unregistering): Port device team_slave_1 removed [ 288.615330][ T28] team0 (unregistering): Port device team_slave_0 removed [ 288.649875][T16905] chnl_net:caif_netlink_parms(): no params data found [ 288.660373][T16906] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.667544][T16906] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.675115][T16906] bridge_slave_1: entered allmulticast mode [ 288.681408][T16906] bridge_slave_1: entered promiscuous mode [ 288.716474][T16906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.744493][T16906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.753634][T16917] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.760731][T16917] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.768015][T16917] bridge_slave_0: entered allmulticast mode [ 288.774417][T16917] bridge_slave_0: entered promiscuous mode [ 288.789885][T16911] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.797044][T16911] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.804248][T16911] bridge_slave_0: entered allmulticast mode [ 288.810630][T16911] bridge_slave_0: entered promiscuous mode [ 288.822378][T16917] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.829446][T16917] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.836686][T16917] bridge_slave_1: entered allmulticast mode [ 288.842930][T16917] bridge_slave_1: entered promiscuous mode [ 288.853818][T16914] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.860912][T16914] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.868139][T16914] bridge_slave_0: entered allmulticast mode [ 288.874881][T16914] bridge_slave_0: entered promiscuous mode [ 288.883234][T16911] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.890392][T16911] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.897606][T16911] bridge_slave_1: entered allmulticast mode [ 288.904015][T16911] bridge_slave_1: entered promiscuous mode [ 288.915971][T16906] team0: Port device team_slave_0 added [ 288.925821][T16914] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.932928][T16914] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.940338][T16914] bridge_slave_1: entered allmulticast mode [ 288.946822][T16914] bridge_slave_1: entered promiscuous mode [ 288.960990][T16906] team0: Port device team_slave_1 added [ 288.968517][T16917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.978816][T16917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.029367][T16911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.040816][T16906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.047898][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.073796][T16906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.084996][T16906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.091928][T16906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.117913][T16906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.129544][T16917] team0: Port device team_slave_0 added [ 289.136736][T16914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.146606][T16917] team0: Port device team_slave_1 added [ 289.157993][T16911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.167180][T16905] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.174246][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.181371][T16905] bridge_slave_0: entered allmulticast mode [ 289.188129][T16905] bridge_slave_0: entered promiscuous mode [ 289.194948][T16905] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.201995][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.209336][T16905] bridge_slave_1: entered allmulticast mode [ 289.215602][T16905] bridge_slave_1: entered promiscuous mode [ 289.240703][T16914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.250258][T16917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.257259][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.283163][T16917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.294445][T16917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.301379][T16917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.327485][T16917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.377524][T16911] team0: Port device team_slave_0 added [ 289.384924][T16905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.396506][T16906] hsr_slave_0: entered promiscuous mode [ 289.402684][T16906] hsr_slave_1: entered promiscuous mode [ 289.408711][T16906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.416311][T16906] Cannot create hsr debugfs directory [ 289.428971][T16914] team0: Port device team_slave_0 added [ 289.435523][T16914] team0: Port device team_slave_1 added [ 289.447725][T16911] team0: Port device team_slave_1 added [ 289.454571][T16905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.495693][T16917] hsr_slave_0: entered promiscuous mode [ 289.501707][T16917] hsr_slave_1: entered promiscuous mode [ 289.507672][T16917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.515219][T16917] Cannot create hsr debugfs directory [ 289.520998][T16914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.528011][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.554070][T16914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.565865][T16914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.572808][T16914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.598920][T16914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.623184][T16905] team0: Port device team_slave_0 added [ 289.639402][T16911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.646376][T16911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.672330][T16911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.683579][T16911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.690896][T16911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.717002][T16911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.730651][T16905] team0: Port device team_slave_1 added [ 289.737454][ T28] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.762307][T16914] hsr_slave_0: entered promiscuous mode [ 289.768434][T16914] hsr_slave_1: entered promiscuous mode [ 289.774389][T16914] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.781919][T16914] Cannot create hsr debugfs directory [ 289.814016][T16905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.820964][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.846994][T16905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.859445][ T28] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.885080][T16905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.892024][T16905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.917921][T16905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.946808][ T28] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.991466][T16911] hsr_slave_0: entered promiscuous mode [ 289.997472][T16911] hsr_slave_1: entered promiscuous mode [ 290.003359][T16911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.010912][T16911] Cannot create hsr debugfs directory [ 290.032503][ T28] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.054117][T16906] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.069038][T16905] hsr_slave_0: entered promiscuous mode [ 290.075346][T16905] hsr_slave_1: entered promiscuous mode [ 290.081239][T16905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.088794][T16905] Cannot create hsr debugfs directory [ 290.104627][T16906] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.161654][T16906] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.215412][T16906] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.308601][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.322057][T16917] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.346851][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.386419][T16917] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.406125][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.426341][T16917] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.439861][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.466605][T16917] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.527184][ T28] dummy0: left allmulticast mode [ 290.532139][ T28] dummy0: left promiscuous mode [ 290.537077][ T28] bridge0: port 3(dummy0) entered disabled state [ 290.544078][ T28] bridge_slave_1: left allmulticast mode [ 290.549696][ T28] bridge_slave_1: left promiscuous mode [ 290.555318][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.563006][ T28] bridge_slave_0: left allmulticast mode [ 290.568655][ T28] bridge_slave_0: left promiscuous mode [ 290.574291][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.582174][ T28] dummy0: left allmulticast mode [ 290.587122][ T28] dummy0: left promiscuous mode [ 290.591992][ T28] bridge0: port 3(dummy0) entered disabled state [ 290.598847][ T28] bridge_slave_1: left allmulticast mode [ 290.604562][ T28] bridge_slave_1: left promiscuous mode [ 290.610132][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.617754][ T28] bridge_slave_0: left allmulticast mode [ 290.623366][ T28] bridge_slave_0: left promiscuous mode [ 290.629077][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.636870][ T28] dummy0: left allmulticast mode [ 290.641851][ T28] dummy0: left promiscuous mode [ 290.646773][ T28] bridge0: port 3(dummy0) entered disabled state [ 290.653585][ T28] bridge_slave_1: left allmulticast mode [ 290.659215][ T28] bridge_slave_1: left promiscuous mode [ 290.664807][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.672524][ T28] bridge_slave_0: left allmulticast mode [ 290.678215][ T28] bridge_slave_0: left promiscuous mode [ 290.683990][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.691943][ T28] dummy0: left allmulticast mode [ 290.696915][ T28] dummy0: left promiscuous mode [ 290.701769][ T28] bridge0: port 3(dummy0) entered disabled state [ 290.708688][ T28] bridge_slave_1: left allmulticast mode [ 290.714340][ T28] bridge_slave_1: left promiscuous mode [ 290.719975][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.727490][ T28] bridge_slave_0: left allmulticast mode [ 290.733102][ T28] bridge_slave_0: left promiscuous mode [ 290.738710][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.115897][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.126413][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.135981][ T28] bond0 (unregistering): Released all slaves [ 291.145209][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.155033][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.165599][ T28] bond0 (unregistering): Released all slaves [ 291.174559][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.184816][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.194810][ T28] bond0 (unregistering): Released all slaves [ 291.203146][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.213205][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.223125][ T28] bond0 (unregistering): Released all slaves [ 291.252413][T16917] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 291.261168][T16917] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 291.269881][T16917] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 291.280151][T16917] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.313840][T16917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.325840][T16917] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.334972][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.342116][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.354203][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.361355][ T9057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.418042][T16917] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.432090][ T28] hsr_slave_0: left promiscuous mode [ 291.437766][ T28] hsr_slave_1: left promiscuous mode [ 291.445464][ T28] hsr_slave_0: left promiscuous mode [ 291.451010][ T28] hsr_slave_1: left promiscuous mode [ 291.459102][ T28] hsr_slave_0: left promiscuous mode [ 291.464714][ T28] hsr_slave_1: left promiscuous mode [ 291.471903][ T28] hsr_slave_0: left promiscuous mode [ 291.479237][ T28] hsr_slave_1: left promiscuous mode [ 291.491226][ T28] veth1_macvtap: left promiscuous mode [ 291.496745][ T28] veth0_macvtap: left promiscuous mode [ 291.502339][ T28] veth1_vlan: left promiscuous mode [ 291.507560][ T28] veth0_vlan: left promiscuous mode [ 291.513225][ T28] veth1_macvtap: left promiscuous mode [ 291.518686][ T28] veth0_macvtap: left promiscuous mode [ 291.524236][ T28] veth1_vlan: left promiscuous mode [ 291.529465][ T28] veth0_vlan: left promiscuous mode [ 291.535291][ T28] veth1_macvtap: left promiscuous mode [ 291.541171][ T28] veth0_macvtap: left promiscuous mode [ 291.546655][ T28] veth1_vlan: left promiscuous mode [ 291.551847][ T28] veth0_vlan: left promiscuous mode [ 291.557503][ T28] veth1_macvtap: left promiscuous mode [ 291.562947][ T28] veth0_macvtap: left promiscuous mode [ 291.568431][ T28] veth1_vlan: left promiscuous mode [ 291.573689][ T28] veth0_vlan: left promiscuous mode [ 291.753131][ T28] team0 (unregistering): Port device team_slave_1 removed [ 291.764653][ T28] team0 (unregistering): Port device team_slave_0 removed [ 291.822291][ T28] team0 (unregistering): Port device team_slave_1 removed [ 291.831963][ T28] team0 (unregistering): Port device team_slave_0 removed [ 291.889125][ T28] team0 (unregistering): Port device team_slave_1 removed [ 291.898932][ T28] team0 (unregistering): Port device team_slave_0 removed [ 291.957396][ T28] team0 (unregistering): Port device team_slave_1 removed [ 291.967126][ T28] team0 (unregistering): Port device team_slave_0 removed [ 292.018603][T16914] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 292.028143][T16914] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 292.038940][T16914] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 292.047296][T16914] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 292.092370][T16914] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.107128][T16914] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.116978][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.124047][ T9057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.135953][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.145832][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.165706][T16917] veth0_vlan: entered promiscuous mode [ 292.175340][T16917] veth1_vlan: entered promiscuous mode [ 292.193095][T16917] veth0_macvtap: entered promiscuous mode [ 292.201611][T16917] veth1_macvtap: entered promiscuous mode [ 292.221348][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.232074][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.241977][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.252409][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.262466][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.272982][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.282920][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.293478][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.303366][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.313915][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.325096][T16917] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.334890][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.345411][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.355255][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.365758][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.375630][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.386084][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.395890][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.406298][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.416094][T16917] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.426538][T16917] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.437271][T16917] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.453687][T16917] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.462436][T16917] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.471224][T16917] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.479944][T16917] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.504109][ T29] audit: type=1400 audit(1725966872.999:11805): avc: denied { mounton } for pid=16917 comm="syz-executor" path="/root/syzkaller.YUkP82/syz-tmp" dev="sda1" ino=1982 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 292.518692][T16914] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.531387][ T29] audit: type=1400 audit(1725966873.029:11806): avc: denied { mount } for pid=16917 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 292.557737][ T29] audit: type=1400 audit(1725966873.029:11807): avc: denied { mount } for pid=16917 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 292.580713][ T29] audit: type=1400 audit(1725966873.089:11808): avc: denied { mounton } for pid=16917 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 292.606149][T16914] veth0_vlan: entered promiscuous mode [ 292.619620][T16914] veth1_vlan: entered promiscuous mode [ 292.625923][T17009] netlink: 'syz.4.4292': attribute type 10 has an invalid length. [ 292.633796][T17009] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4292'. [ 292.643247][T17009] bridge0: port 3(dummy0) entered blocking state [ 292.649624][T17009] bridge0: port 3(dummy0) entered disabled state [ 292.657086][T17009] dummy0: entered allmulticast mode [ 292.662655][T17009] dummy0: entered promiscuous mode [ 292.667900][T17009] bridge0: port 3(dummy0) entered blocking state [ 292.674300][T17009] bridge0: port 3(dummy0) entered forwarding state [ 292.694928][T16914] veth0_macvtap: entered promiscuous mode [ 292.702247][T16914] veth1_macvtap: entered promiscuous mode [ 292.715223][T17012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.729379][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.739937][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.749829][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.760263][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.770099][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.780630][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.790450][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.801031][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.810863][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.821287][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.831159][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.841624][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.852421][T16914] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.864272][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.874812][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.884657][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.895095][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.904926][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.915337][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.925133][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.935528][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.945339][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.955819][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.965614][T16914] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.976125][T16914] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.986713][T16914] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.996351][T17012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.016146][T16914] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.025016][T16914] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.033796][T16914] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.042536][T16914] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.084074][T17012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.100139][T17017] netlink: 'syz.3.4294': attribute type 10 has an invalid length. [ 293.108070][T17017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4294'. [ 293.117874][T17017] bridge0: port 3(dummy0) entered blocking state [ 293.124412][T17017] bridge0: port 3(dummy0) entered disabled state [ 293.131007][T17017] dummy0: entered allmulticast mode [ 293.136752][T17017] dummy0: entered promiscuous mode [ 293.142030][T17017] bridge0: port 3(dummy0) entered blocking state [ 293.148467][T17017] bridge0: port 3(dummy0) entered forwarding state [ 293.162197][T17012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.176723][T17020] loop3: detected capacity change from 0 to 128 [ 293.192605][T17020] bond1: entered promiscuous mode [ 293.197735][T17020] bond1: entered allmulticast mode [ 293.202978][T17020] 8021q: adding VLAN 0 to HW filter on device bond1 [ 293.215208][T17020] bond1 (unregistering): Released all slaves [ 293.249468][T16906] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 293.257918][T16906] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 293.266444][T16906] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 293.275429][T16906] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 293.303441][T16911] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 293.313385][T16911] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 293.330035][T16911] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 293.338592][ T29] audit: type=1326 audit(1725966873.839:11809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.3.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 293.339253][T16911] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 293.371035][ T29] audit: type=1326 audit(1725966873.869:11810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.3.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 293.394738][ T29] audit: type=1326 audit(1725966873.869:11811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17025 comm="syz.3.4297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 293.449894][T16905] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 293.478660][T16906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.488268][T16905] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 293.511718][T16905] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 293.528524][T16905] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 293.564501][T16906] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.576912][ T2386] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.583988][ T2386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.615024][ T2386] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.622095][ T2386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.635471][T17033] loop3: detected capacity change from 0 to 512 [ 293.653090][T16911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.655148][T17033] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.676268][T16906] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.687617][T17033] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 293.723587][T16905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.753261][T16911] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.780084][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.787161][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.804461][T16905] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.829407][T16906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.842383][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.849422][ T9057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.862705][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.869791][ T9057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.907535][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.914658][ T9057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.939781][T16905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.950184][T16905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 294.028678][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.041480][T16906] veth0_vlan: entered promiscuous mode [ 294.058535][T16906] veth1_vlan: entered promiscuous mode [ 294.069202][T16905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.071868][ T29] audit: type=1400 audit(1725966874.569:11812): avc: denied { create } for pid=17057 comm="syz.3.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.078245][T16911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 294.102370][ T29] audit: type=1400 audit(1725966874.599:11813): avc: denied { create } for pid=17057 comm="syz.3.4301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.122014][ T29] audit: type=1400 audit(1725966874.599:11814): avc: denied { ioctl } for pid=17057 comm="syz.3.4301" path="socket:[50698]" dev="sockfs" ino=50698 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.132238][T16906] veth0_macvtap: entered promiscuous mode [ 294.179355][T17058] loop3: detected capacity change from 0 to 512 [ 294.181600][T16906] veth1_macvtap: entered promiscuous mode [ 294.210296][T17058] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 294.234328][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.244838][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.254713][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.256205][T17058] EXT4-fs (loop3): 1 orphan inode deleted [ 294.265146][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.265157][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.265170][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.265182][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.265194][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.270898][T17058] EXT4-fs (loop3): 1 truncate cleaned up [ 294.280817][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.296646][T17058] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.301000][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.331417][ T29] audit: type=1400 audit(1725966874.829:11815): avc: denied { write } for pid=17057 comm="syz.3.4301" path="/8/bus/bus" dev="loop3" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 294.337311][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.349682][ T29] audit: type=1400 audit(1725966874.829:11816): avc: denied { write } for pid=17057 comm="syz.3.4301" path="socket:[50696]" dev="sockfs" ino=50696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 294.359491][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.359502][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.436032][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.448431][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.448514][T16906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.458663][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.475205][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.485013][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.495515][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.505323][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.515775][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.525588][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.536004][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.545905][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.556402][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.566253][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.576671][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.586475][T16906] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.596939][T16906] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.609590][T16906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.632374][T16906] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.641180][T16906] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.649908][T16906] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.658716][T16906] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.674513][T16905] veth0_vlan: entered promiscuous mode [ 294.695505][T16911] veth0_vlan: entered promiscuous mode [ 294.710896][T16905] veth1_vlan: entered promiscuous mode [ 294.729389][T16911] veth1_vlan: entered promiscuous mode [ 294.744810][T16905] veth0_macvtap: entered promiscuous mode [ 294.753110][T16905] veth1_macvtap: entered promiscuous mode [ 294.776919][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.787496][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.797312][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.807860][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.817706][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.828148][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.838059][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.848657][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.858528][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.868949][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.878773][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.889253][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.899057][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.909526][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.919373][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.929806][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.943490][T16905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.953474][T16911] veth0_macvtap: entered promiscuous mode [ 294.966987][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.977559][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.987653][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.998154][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.008125][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.018686][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.028576][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.038984][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.048810][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.059302][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.059313][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.059324][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.059332][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.059343][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.109612][T16905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.120030][T16905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.132470][T16905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.141308][T16905] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.150030][T16905] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.155381][T17082] loop1: detected capacity change from 0 to 2048 [ 295.158875][T16905] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.173791][T16905] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.186879][T16911] veth1_macvtap: entered promiscuous mode [ 295.196619][T17082] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.226251][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.236882][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.246695][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.257466][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.267279][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.277775][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.287580][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.298034][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.307855][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.318496][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.328493][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.338924][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.348854][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.359271][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.369101][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.379527][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.389325][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.399824][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.410716][T16911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.416417][T17082] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.4303: reserved inode found cleared - inode=1 [ 295.432471][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.443062][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.453004][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.463528][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.473466][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.484258][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.494206][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.504743][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.514690][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.525154][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.534970][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.545403][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.555222][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.565665][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.575445][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.585913][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.595723][T16911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.606227][T16911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.619958][T16911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.628642][T16911] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.637485][T16911] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.646322][T16911] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.655011][T16911] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.768583][T17099] loop2: detected capacity change from 0 to 2048 [ 295.782439][T16906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.792969][T17105] syz.0.4311[17105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.793092][T17105] syz.0.4311[17105] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.807737][T17099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.808175][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4311'. [ 295.864907][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.010179][T17133] loop1: detected capacity change from 0 to 2048 [ 296.027124][T17133] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.071078][T17012] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.082460][T17012] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.095468][T17012] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.108552][T17012] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.175875][T17151] loop2: detected capacity change from 0 to 2048 [ 296.199187][T17151] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.230782][T17146] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.4321: reserved inode found cleared - inode=1 [ 296.243386][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.277152][T17159] loop2: detected capacity change from 0 to 512 [ 296.285535][T17161] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.306034][T17159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.325867][T17159] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 296.346779][T17161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4332'. [ 296.441158][T16906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.613274][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.984988][T17184] loop3: detected capacity change from 0 to 128 [ 297.004534][T17184] bond1: entered promiscuous mode [ 297.009822][T17184] bond1: entered allmulticast mode [ 297.017597][T17184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.034580][T17184] bond1 (unregistering): Released all slaves [ 297.038032][T17191] loop2: detected capacity change from 0 to 2048 [ 297.056572][T17191] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.077290][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.101581][T17196] loop2: detected capacity change from 0 to 2048 [ 297.123542][T17196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.179785][T17202] loop3: detected capacity change from 0 to 256 [ 297.192016][T17202] FAT-fs (loop3): Directory bread(block 64) failed [ 297.198832][T17202] FAT-fs (loop3): Directory bread(block 65) failed [ 297.207281][T17202] FAT-fs (loop3): Directory bread(block 66) failed [ 297.214540][T17202] FAT-fs (loop3): Directory bread(block 67) failed [ 297.221127][T17202] FAT-fs (loop3): Directory bread(block 68) failed [ 297.229286][T17202] FAT-fs (loop3): Directory bread(block 69) failed [ 297.237556][T17202] FAT-fs (loop3): Directory bread(block 70) failed [ 297.245855][T17202] FAT-fs (loop3): Directory bread(block 71) failed [ 297.252503][T17202] FAT-fs (loop3): Directory bread(block 72) failed [ 297.259180][T17202] FAT-fs (loop3): Directory bread(block 73) failed [ 297.281467][T17202] syz.3.4344: attempt to access beyond end of device [ 297.281467][T17202] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 297.303709][T17202] syz.3.4344: attempt to access beyond end of device [ 297.303709][T17202] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 297.325660][T17205] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.4343: reserved inode found cleared - inode=1 [ 297.388964][T17207] loop1: detected capacity change from 0 to 256 [ 297.402455][T17207] FAT-fs (loop1): Directory bread(block 64) failed [ 297.409263][T17207] FAT-fs (loop1): Directory bread(block 65) failed [ 297.416213][T17207] FAT-fs (loop1): Directory bread(block 66) failed [ 297.422790][T17207] FAT-fs (loop1): Directory bread(block 67) failed [ 297.429415][T17207] FAT-fs (loop1): Directory bread(block 68) failed [ 297.436061][T17207] FAT-fs (loop1): Directory bread(block 69) failed [ 297.442618][T17207] FAT-fs (loop1): Directory bread(block 70) failed [ 297.449547][T17207] FAT-fs (loop1): Directory bread(block 71) failed [ 297.456395][T17207] FAT-fs (loop1): Directory bread(block 72) failed [ 297.462930][T17207] FAT-fs (loop1): Directory bread(block 73) failed [ 297.482048][T17207] syz.1.4346: attempt to access beyond end of device [ 297.482048][T17207] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 297.508570][T17207] syz.1.4346: attempt to access beyond end of device [ 297.508570][T17207] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 297.558242][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.612729][T17212] loop2: detected capacity change from 0 to 128 [ 297.662142][T17212] bond1: entered promiscuous mode [ 297.667348][T17212] bond1: entered allmulticast mode [ 297.690949][T17212] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.716982][T17212] bond1 (unregistering): Released all slaves [ 297.883701][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 297.883732][ T29] audit: type=1400 audit(1725966878.379:11959): avc: denied { append } for pid=17217 comm="syz.2.4349" name="001" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 297.959710][T17221] loop2: detected capacity change from 0 to 512 [ 298.016965][T17221] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.053743][T17221] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.100958][T17230] loop4: detected capacity change from 0 to 2048 [ 298.125082][T17230] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.186344][T17236] xt_TPROXY: Can be used only with -p tcp or -p udp [ 298.198880][T16917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.226936][ T29] audit: type=1400 audit(1725966878.729:11960): avc: denied { create } for pid=17235 comm="syz.3.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.258606][ T29] audit: type=1400 audit(1725966878.729:11961): avc: denied { setopt } for pid=17235 comm="syz.3.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 298.278910][ T29] audit: type=1400 audit(1725966878.749:11962): avc: denied { create } for pid=17235 comm="syz.3.4355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 298.281056][T17241] loop4: detected capacity change from 0 to 512 [ 298.302210][ T29] audit: type=1400 audit(1725966878.759:11963): avc: denied { read } for pid=17240 comm="syz.3.4358" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 298.329450][ T29] audit: type=1400 audit(1725966878.759:11964): avc: denied { open } for pid=17240 comm="syz.3.4358" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 298.360017][T17241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.372577][T17241] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 298.438518][ T29] audit: type=1326 audit(1725966878.939:11965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.1.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fac2bdef9 code=0x7ffc0000 [ 298.462171][ T29] audit: type=1326 audit(1725966878.939:11966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.1.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fac2bdef9 code=0x7ffc0000 [ 298.485767][ T29] audit: type=1326 audit(1725966878.939:11967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.1.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4fac2bdef9 code=0x7ffc0000 [ 298.509396][ T29] audit: type=1326 audit(1725966878.939:11968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17248 comm="syz.1.4359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4fac2bdef9 code=0x7ffc0000 [ 298.609720][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.747829][T17269] loop3: detected capacity change from 0 to 256 [ 298.769314][T17269] FAT-fs (loop3): Directory bread(block 64) failed [ 298.779328][T17269] FAT-fs (loop3): Directory bread(block 65) failed [ 298.785924][T17269] FAT-fs (loop3): Directory bread(block 66) failed [ 298.792746][T17269] FAT-fs (loop3): Directory bread(block 67) failed [ 298.799351][T17269] FAT-fs (loop3): Directory bread(block 68) failed [ 298.806065][T17269] FAT-fs (loop3): Directory bread(block 69) failed [ 298.812599][T17269] FAT-fs (loop3): Directory bread(block 70) failed [ 298.827519][T17269] FAT-fs (loop3): Directory bread(block 71) failed [ 298.847087][T17269] FAT-fs (loop3): Directory bread(block 72) failed [ 298.856948][T17274] netlink: 'syz.1.4369': attribute type 10 has an invalid length. [ 298.864884][T17274] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4369'. [ 298.875004][T17269] FAT-fs (loop3): Directory bread(block 73) failed [ 298.884063][T16917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.887208][T17274] bridge0: port 3(dummy0) entered blocking state [ 298.899461][T17274] bridge0: port 3(dummy0) entered disabled state [ 298.909925][T17274] dummy0: entered allmulticast mode [ 298.912153][T17269] syz.3.4367: attempt to access beyond end of device [ 298.912153][T17269] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 298.917625][T17274] dummy0: entered promiscuous mode [ 298.937193][T17274] bridge0: port 3(dummy0) entered blocking state [ 298.941587][T17279] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4370'. [ 298.943668][T17274] bridge0: port 3(dummy0) entered forwarding state [ 298.962997][T17269] syz.3.4367: attempt to access beyond end of device [ 298.962997][T17269] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 298.963459][T17281] loop4: detected capacity change from 0 to 512 [ 299.009492][T17277] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.067572][T17281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.095618][T17281] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 299.180136][T17295] syz.2.4376[17295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.180185][T17295] syz.2.4376[17295] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.224906][T17295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4376'. [ 299.346631][T17306] loop1: detected capacity change from 0 to 2048 [ 299.384951][T17306] Alternate GPT is invalid, using primary GPT. [ 299.391435][T17306] loop1: p1 p2 p3 [ 299.491319][T16917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.507927][T17312] syz.1.4383[17312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.507981][T17312] syz.1.4383[17312] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 299.523358][T17312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4383'. [ 299.694248][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4387'. [ 299.745730][T17325] hsr_slave_1 (unregistering): left promiscuous mode [ 299.850533][T17333] loop4: detected capacity change from 0 to 128 [ 299.871004][T17333] bond1: entered promiscuous mode [ 299.876607][T17333] bond1: entered allmulticast mode [ 299.882526][T17333] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.906497][T17333] bond1 (unregistering): Released all slaves [ 300.518522][T17369] loop3: detected capacity change from 0 to 128 [ 300.535660][T17367] loop2: detected capacity change from 0 to 2048 [ 300.547112][T17369] bond1: entered promiscuous mode [ 300.552149][T17369] bond1: entered allmulticast mode [ 300.557414][T17369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 300.568887][T17369] bond1 (unregistering): Released all slaves [ 300.576639][T17367] Alternate GPT is invalid, using primary GPT. [ 300.582877][T17367] loop2: p1 p2 p3 [ 300.701362][T17387] syz.1.4410[17387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.701413][T17387] syz.1.4410[17387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 300.732367][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4410'. [ 300.845168][T17402] loop1: detected capacity change from 0 to 2048 [ 300.884754][T17402] Alternate GPT is invalid, using primary GPT. [ 300.891054][T17402] loop1: p1 p2 p3 [ 301.044064][T17414] loop4: detected capacity change from 0 to 512 [ 301.057032][T17414] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.069801][T17414] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.145745][T17421] syz.1.4423[17421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.145820][T17421] syz.1.4423[17421] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.194681][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4423'. [ 301.545408][T16917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.612756][T17445] loop3: detected capacity change from 0 to 128 [ 301.694395][T17449] loop4: detected capacity change from 0 to 2048 [ 301.736493][T17449] Alternate GPT is invalid, using primary GPT. [ 301.742731][T17449] loop4: p1 p2 p3 [ 301.816338][T17462] syz.2.4438[17462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.816393][T17462] syz.2.4438[17462] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 301.847814][T17462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4438'. [ 301.909806][T17472] loop2: detected capacity change from 0 to 512 [ 301.925066][T17472] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.938212][T17472] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 302.160540][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.191170][T17490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12 sclass=netlink_route_socket pid=17490 comm=syz.1.4447 [ 302.256367][T17499] syz.0.4450[17499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.256463][T17499] syz.0.4450[17499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 302.305877][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4450'. [ 302.378668][T17517] netlink: 'syz.0.4456': attribute type 10 has an invalid length. [ 302.386664][T17517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4456'. [ 302.396807][T17517] bridge0: port 3(dummy0) entered blocking state [ 302.403226][T17517] bridge0: port 3(dummy0) entered disabled state [ 302.409799][T17517] dummy0: entered allmulticast mode [ 302.415968][T17517] dummy0: entered promiscuous mode [ 302.422948][T17517] bridge0: port 3(dummy0) entered blocking state [ 302.429315][T17517] bridge0: port 3(dummy0) entered forwarding state [ 302.679882][T17523] FAULT_INJECTION: forcing a failure. [ 302.679882][T17523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.693341][T17523] CPU: 1 UID: 0 PID: 17523 Comm: syz.4.4458 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 302.704104][T17523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 302.714250][T17523] Call Trace: [ 302.717526][T17523] [ 302.720449][T17523] dump_stack_lvl+0xf2/0x150 [ 302.725118][T17523] dump_stack+0x15/0x20 [ 302.729297][T17523] should_fail_ex+0x229/0x230 [ 302.733981][T17523] should_fail+0xb/0x10 [ 302.738153][T17523] should_fail_usercopy+0x1a/0x20 [ 302.743238][T17523] _copy_from_user+0x1e/0xd0 [ 302.747831][T17523] copy_clone_args_from_user+0x39c/0x460 [ 302.753524][T17523] __se_sys_clone3+0x6e/0x1f0 [ 302.758290][T17523] ? fpregs_restore_userregs+0x83/0x1b0 [ 302.763914][T17523] __x64_sys_clone3+0x31/0x40 [ 302.768587][T17523] x64_sys_call+0x287d/0x2d60 [ 302.773345][T17523] do_syscall_64+0xc9/0x1c0 [ 302.777843][T17523] ? clear_bhb_loop+0x55/0xb0 [ 302.782574][T17523] ? clear_bhb_loop+0x55/0xb0 [ 302.787264][T17523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.793252][T17523] RIP: 0033:0x7ff99104def9 [ 302.797658][T17523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.817477][T17523] RSP: 002b:00007ff98fcc6f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 302.825878][T17523] RAX: ffffffffffffffda RBX: 00000000000000a0 RCX: 00007ff99104def9 [ 302.833840][T17523] RDX: 00007ff98fcc6f20 RSI: 00000000000000a0 RDI: 00007ff98fcc6f20 [ 302.841834][T17523] RBP: 00007ff98fcc7090 R08: 0000000000000000 R09: 00000000000000a0 [ 302.849821][T17523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.857925][T17523] R13: 0000000000000000 R14: 00007ff991205f80 R15: 00007ffc926129f8 [ 302.865890][T17523] [ 302.898196][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 302.898210][ T29] audit: type=1400 audit(1725966883.399:12262): avc: denied { mount } for pid=17524 comm="syz.3.4460" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 302.938562][ T29] audit: type=1400 audit(1725966883.429:12263): avc: denied { mounton } for pid=17524 comm="syz.3.4460" path="/38/bus" dev="tmpfs" ino=226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 302.961179][ T29] audit: type=1400 audit(1725966883.429:12264): avc: denied { write } for pid=17524 comm="syz.3.4460" name="protocols" dev="proc" ino=4026533472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 302.985506][ T29] audit: type=1400 audit(1725966883.469:12265): avc: denied { getopt } for pid=17525 comm="syz.0.4459" lport=33362 faddr=fc02:: fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.026384][T17538] syz.4.4464[17538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.026454][T17538] syz.4.4464[17538] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.027535][ T29] audit: type=1400 audit(1725966883.529:12266): avc: denied { watch watch_reads } for pid=17539 comm="syz.3.4465" path="/40/file0" dev="tmpfs" ino=237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 303.116435][T17543] loop3: detected capacity change from 0 to 2048 [ 303.131302][ T29] audit: type=1326 audit(1725966883.609:12267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17542 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 303.154956][ T29] audit: type=1326 audit(1725966883.609:12268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17542 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 303.178875][ T29] audit: type=1326 audit(1725966883.609:12269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17542 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f81dd5fdf33 code=0x7ffc0000 [ 303.202356][ T29] audit: type=1326 audit(1725966883.609:12270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17542 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f81dd5fc9df code=0x7ffc0000 [ 303.226728][ T29] audit: type=1326 audit(1725966883.619:12271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17542 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f81dd5fdf87 code=0x7ffc0000 [ 303.260882][T17555] loop1: detected capacity change from 0 to 2048 [ 303.275160][T17555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.285856][T17543] Alternate GPT is invalid, using primary GPT. [ 303.293455][T17543] loop3: p1 p2 p3 [ 303.379761][T17574] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.419816][T17555] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.4471: reserved inode found cleared - inode=1 [ 303.524618][T16906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.568110][T17580] loop1: detected capacity change from 0 to 1024 [ 303.575066][T17580] EXT4-fs: Ignoring removed nomblk_io_submit option [ 303.581767][T17580] EXT4-fs: Ignoring removed i_version option [ 303.648372][T17580] EXT4-fs: Ignoring removed nobh option [ 303.725790][T17580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.794014][T17580] loop1: detected capacity change from 1024 to 1022 [ 303.803806][T17584] EXT4-fs error (device loop1): __ext4_new_inode:1070: comm syz.1.4480: reserved inode found cleared - inode=1 [ 303.821013][T17580] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz.1.4480: path /43/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 303.845719][T17580] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 303.852284][T17580] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 303.859987][T17580] vhci_hcd vhci_hcd.0: Device attached [ 303.872780][T17585] vhci_hcd: connection closed [ 303.873170][ T28] vhci_hcd: stop threads [ 303.882132][ T28] vhci_hcd: release socket [ 303.886598][ T28] vhci_hcd: disconnect device [ 303.904234][T17588] syz.0.4481[17588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.904318][T17588] syz.0.4481[17588] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 303.916647][T17588] FAULT_INJECTION: forcing a failure. [ 303.916647][T17588] name failslab, interval 1, probability 0, space 0, times 0 [ 303.940791][T17588] CPU: 1 UID: 0 PID: 17588 Comm: syz.0.4481 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 303.951571][T17588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 303.961611][T17588] Call Trace: [ 303.965054][T17588] [ 303.968040][T17588] dump_stack_lvl+0xf2/0x150 [ 303.972621][T17588] dump_stack+0x15/0x20 [ 303.976763][T17588] should_fail_ex+0x229/0x230 [ 303.981479][T17588] ? __se_sys_mount+0xf7/0x2d0 [ 303.986345][T17588] should_failslab+0x8f/0xb0 [ 303.990987][T17588] __kmalloc_cache_noprof+0x4b/0x2a0 [ 303.996270][T17588] __se_sys_mount+0xf7/0x2d0 [ 304.000955][T17588] ? fput+0x13b/0x180 [ 304.004948][T17588] ? ksys_write+0x178/0x1b0 [ 304.009608][T17588] __x64_sys_mount+0x67/0x80 [ 304.014209][T17588] x64_sys_call+0x203e/0x2d60 [ 304.018888][T17588] do_syscall_64+0xc9/0x1c0 [ 304.023384][T17588] ? clear_bhb_loop+0x55/0xb0 [ 304.028052][T17588] ? clear_bhb_loop+0x55/0xb0 [ 304.032740][T17588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.038712][T17588] RIP: 0033:0x7f0aeadadef9 [ 304.043152][T17588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.062842][T17588] RSP: 002b:00007f0ae9a21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 304.071246][T17588] RAX: ffffffffffffffda RBX: 00007f0aeaf65f80 RCX: 00007f0aeadadef9 [ 304.079218][T17588] RDX: 0000000020000180 RSI: 0000000020000000 RDI: 0000000000000000 [ 304.087216][T17588] RBP: 00007f0ae9a21090 R08: 0000000020000080 R09: 0000000000000000 [ 304.095203][T17588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.103162][T17588] R13: 0000000000000000 R14: 00007f0aeaf65f80 R15: 00007fffe7b69738 [ 304.111130][T17588] [ 304.201761][T17602] loop4: detected capacity change from 0 to 2048 [ 304.231351][T17603] __nla_validate_parse: 1 callbacks suppressed [ 304.231364][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4485'. [ 304.246598][T17603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4485'. [ 304.287725][T17602] Alternate GPT is invalid, using primary GPT. [ 304.294186][T17602] loop4: p1 p2 p3 [ 304.328311][T17612] loop2: detected capacity change from 0 to 2048 [ 304.344870][T17612] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.430871][T16906] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 16: comm syz-executor: path /43/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 304.464250][T16906] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.588989][T17632] EXT4-fs error (device loop2): __ext4_new_inode:1070: comm syz.2.4490: reserved inode found cleared - inode=1 [ 304.660220][T17638] FAULT_INJECTION: forcing a failure. [ 304.660220][T17638] name failslab, interval 1, probability 0, space 0, times 0 [ 304.672947][T17638] CPU: 0 UID: 0 PID: 17638 Comm: syz.0.4502 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 304.683712][T17638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 304.693759][T17638] Call Trace: [ 304.697021][T17638] [ 304.699994][T17638] dump_stack_lvl+0xf2/0x150 [ 304.704640][T17638] dump_stack+0x15/0x20 [ 304.708781][T17638] should_fail_ex+0x229/0x230 [ 304.713452][T17638] ? alloc_empty_file+0xd0/0x310 [ 304.718497][T17638] should_failslab+0x8f/0xb0 [ 304.723077][T17638] kmem_cache_alloc_noprof+0x4c/0x290 [ 304.728435][T17638] alloc_empty_file+0xd0/0x310 [ 304.733181][T17638] path_openat+0x6a/0x1f10 [ 304.737583][T17638] ? mntput+0x49/0x70 [ 304.741654][T17638] ? terminate_walk+0x260/0x280 [ 304.746669][T17638] ? path_openat+0x19bc/0x1f10 [ 304.751550][T17638] ? _parse_integer_limit+0x167/0x180 [ 304.756985][T17638] do_filp_open+0xf7/0x200 [ 304.761417][T17638] alloc_bprm+0xd5/0x760 [ 304.765759][T17638] ? __check_object_size+0x35b/0x510 [ 304.771032][T17638] do_execveat_common+0x134/0x800 [ 304.776042][T17638] ? getname_flags+0x15a/0x3b0 [ 304.780862][T17638] __x64_sys_execveat+0x75/0x90 [ 304.785703][T17638] x64_sys_call+0x8ae/0x2d60 [ 304.790279][T17638] do_syscall_64+0xc9/0x1c0 [ 304.794829][T17638] ? clear_bhb_loop+0x55/0xb0 [ 304.799486][T17638] ? clear_bhb_loop+0x55/0xb0 [ 304.804261][T17638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.810145][T17638] RIP: 0033:0x7f0aeadadef9 [ 304.814590][T17638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.834229][T17638] RSP: 002b:00007f0ae9a21038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 304.842623][T17638] RAX: ffffffffffffffda RBX: 00007f0aeaf65f80 RCX: 00007f0aeadadef9 [ 304.850581][T17638] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 304.858535][T17638] RBP: 00007f0ae9a21090 R08: 0000000000001000 R09: 0000000000000000 [ 304.866489][T17638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.874470][T17638] R13: 0000000000000000 R14: 00007f0aeaf65f80 R15: 00007fffe7b69738 [ 304.882428][T17638] [ 304.937970][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.089715][ T9057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.188533][ T9057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.309589][T17661] FAULT_INJECTION: forcing a failure. [ 305.309589][T17661] name failslab, interval 1, probability 0, space 0, times 0 [ 305.313134][ T9057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.322389][T17661] CPU: 1 UID: 0 PID: 17661 Comm: syz.0.4509 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 305.343403][T17661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 305.353450][T17661] Call Trace: [ 305.356724][T17661] [ 305.359647][T17661] dump_stack_lvl+0xf2/0x150 [ 305.364319][T17661] dump_stack+0x15/0x20 [ 305.368469][T17661] should_fail_ex+0x229/0x230 [ 305.373195][T17661] ? __d_alloc+0x3d/0x340 [ 305.377534][T17661] should_failslab+0x8f/0xb0 [ 305.382163][T17661] kmem_cache_alloc_lru_noprof+0x51/0x2a0 [ 305.387998][T17661] __d_alloc+0x3d/0x340 [ 305.392224][T17661] ? __rcu_read_unlock+0x34/0x70 [ 305.397162][T17661] d_alloc_parallel+0x54/0xc80 [ 305.401975][T17661] ? selinux_inode_permission+0x337/0x400 [ 305.407692][T17661] ? lockref_get_not_dead+0x118/0x1b0 [ 305.413129][T17661] ? down_read+0x171/0x4b0 [ 305.417574][T17661] __lookup_slow+0x8d/0x250 [ 305.422102][T17661] lookup_slow+0x3c/0x60 [ 305.426341][T17661] walk_component+0x1f5/0x230 [ 305.431080][T17661] ? path_lookupat+0xfd/0x2b0 [ 305.435773][T17661] path_lookupat+0x10a/0x2b0 [ 305.440401][T17661] filename_lookup+0x127/0x300 [ 305.445164][T17661] user_path_at+0x3c/0x110 [ 305.449624][T17661] __se_sys_quotactl+0xb2/0x660 [ 305.454568][T17661] ? fput+0x13b/0x180 [ 305.458585][T17661] __x64_sys_quotactl+0x55/0x70 [ 305.463517][T17661] x64_sys_call+0x2b7f/0x2d60 [ 305.468194][T17661] do_syscall_64+0xc9/0x1c0 [ 305.472720][T17661] ? clear_bhb_loop+0x55/0xb0 [ 305.477390][T17661] ? clear_bhb_loop+0x55/0xb0 [ 305.482173][T17661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.488088][T17661] RIP: 0033:0x7f0aeadadef9 [ 305.492510][T17661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.512109][T17661] RSP: 002b:00007f0ae9a21038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 305.520624][T17661] RAX: ffffffffffffffda RBX: 00007f0aeaf65f80 RCX: 00007f0aeadadef9 [ 305.528584][T17661] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffff80000202 [ 305.536545][T17661] RBP: 00007f0ae9a21090 R08: 0000000000000000 R09: 0000000000000000 [ 305.544644][T17661] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 305.552605][T17661] R13: 0000000000000000 R14: 00007f0aeaf65f80 R15: 00007fffe7b69738 [ 305.560644][T17661] [ 305.612941][T17668] loop2: detected capacity change from 0 to 128 [ 305.630096][ T9057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.693281][T17673] loop3: detected capacity change from 0 to 2048 [ 305.726709][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4517'. [ 305.736098][T17673] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.748289][ T9057] dummy0: left allmulticast mode [ 305.753320][ T9057] dummy0: left promiscuous mode [ 305.758374][ T9057] bridge0: port 3(dummy0) entered disabled state [ 305.767797][ T9057] bridge_slave_1: left allmulticast mode [ 305.773456][ T9057] bridge_slave_1: left promiscuous mode [ 305.779321][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.789635][ T9057] bridge_slave_0: left allmulticast mode [ 305.795314][ T9057] bridge_slave_0: left promiscuous mode [ 305.801010][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.817671][ T9] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 305.817754][T17689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.834348][ T9] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 305.844330][T17689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.888553][T17692] EXT4-fs error (device loop3): ext4_search_dir:1505: inode #2: block 16: comm syz.3.4514: bad entry in directory: inode out of bounds - offset=44, inode=185, rec_len=16, size=2048 fake=0 [ 305.909759][T17692] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 305.948100][ T9057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.959359][ T9057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.972063][ T9057] bond0 (unregistering): Released all slaves [ 305.983024][T17647] chnl_net:caif_netlink_parms(): no params data found [ 305.997747][T17673] bond1: entered promiscuous mode [ 306.002800][T17673] bond1: entered allmulticast mode [ 306.008196][T17673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.026068][T17673] bond1 (unregistering): Released all slaves [ 306.077572][ T9057] hsr_slave_0: left promiscuous mode [ 306.092212][ T9057] hsr_slave_1: left promiscuous mode [ 306.098914][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.106463][ T9057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.114030][T17705] loop2: detected capacity change from 0 to 512 [ 306.120796][ T9057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.128261][ T9057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.129933][T17705] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4522: bg 0: block 393: padding at end of block bitmap is not set [ 306.150512][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.151839][T17705] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 306.167218][T17709] loop4: detected capacity change from 0 to 512 [ 306.168990][T17705] EXT4-fs (loop2): 2 truncates cleaned up [ 306.177152][T17709] ext4: Unknown parameter 'fowner' [ 306.180312][ T9057] veth1_macvtap: left promiscuous mode [ 306.190203][T17705] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.190950][ T9057] veth0_macvtap: left promiscuous mode [ 306.210892][ T9057] veth1_vlan: left promiscuous mode [ 306.216152][ T9057] veth0_vlan: left promiscuous mode [ 306.226695][T17705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4522'. [ 306.325696][ T9057] team0 (unregistering): Port device team_slave_1 removed [ 306.337701][ T9057] team0 (unregistering): Port device team_slave_0 removed [ 306.382128][T17707] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 306.392875][T17709] ip6gretap0: entered promiscuous mode [ 306.401003][T17709] bridge0: entered promiscuous mode [ 306.428955][T17723] loop3: detected capacity change from 0 to 512 [ 306.451528][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.462210][T17647] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.469482][T17647] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.478268][T17647] bridge_slave_0: entered allmulticast mode [ 306.485078][T17647] bridge_slave_0: entered promiscuous mode [ 306.485628][T17723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.492443][T17647] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.510392][T17647] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.518350][T17647] bridge_slave_1: entered allmulticast mode [ 306.524860][T17647] bridge_slave_1: entered promiscuous mode [ 306.530971][T17723] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.574344][T17647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.595681][T17647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.638926][T17647] team0: Port device team_slave_0 added [ 306.650296][T17647] team0: Port device team_slave_1 added [ 306.710332][T17647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.717478][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.743460][T17647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.764231][T17647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.771303][T17647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.797262][T17647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.852655][T17647] hsr_slave_0: entered promiscuous mode [ 306.865798][T17647] hsr_slave_1: entered promiscuous mode [ 306.877829][T17647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.891791][T17647] Cannot create hsr debugfs directory [ 306.933529][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.069465][T17775] loop3: detected capacity change from 0 to 512 [ 307.087984][T17775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.102506][T17775] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.210776][T17647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.219256][T17647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.229947][T17784] tipc: Enabling of bearer rejected, failed to enable media [ 307.238384][T17647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.248201][T17647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.258722][T17784] bridge0: port 3(hsr_slave_1) entered blocking state [ 307.265548][T17784] bridge0: port 3(hsr_slave_1) entered disabled state [ 307.272482][T17784] hsr_slave_1: entered allmulticast mode [ 307.278529][T17784] hsr_slave_1: left allmulticast mode [ 307.327249][T17647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.343212][T17647] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.354169][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.361321][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.372810][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.379887][ T9057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.410607][T17647] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.421068][T17647] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.486199][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.637220][T17647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.811257][T17821] loop4: detected capacity change from 0 to 512 [ 307.874853][T17821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.890888][T17821] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 307.923432][T17829] loop2: detected capacity change from 0 to 256 [ 307.980995][T16917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.987041][T17829] FAT-fs (loop2): Directory bread(block 64) failed [ 308.001226][T17829] FAT-fs (loop2): Directory bread(block 65) failed [ 308.008320][T17829] FAT-fs (loop2): Directory bread(block 66) failed [ 308.016311][T17829] FAT-fs (loop2): Directory bread(block 67) failed [ 308.022867][T17829] FAT-fs (loop2): Directory bread(block 68) failed [ 308.025820][T17835] loop4: detected capacity change from 0 to 512 [ 308.029650][T17829] FAT-fs (loop2): Directory bread(block 69) failed [ 308.042233][T17829] FAT-fs (loop2): Directory bread(block 70) failed [ 308.048932][T17829] FAT-fs (loop2): Directory bread(block 71) failed [ 308.052338][T17647] veth0_vlan: entered promiscuous mode [ 308.061018][T17829] FAT-fs (loop2): Directory bread(block 72) failed [ 308.067359][T17647] veth1_vlan: entered promiscuous mode [ 308.067577][T17829] FAT-fs (loop2): Directory bread(block 73) failed [ 308.074772][T17835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.092375][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 308.092392][ T29] audit: type=1400 audit(1725966888.579:12412): avc: denied { mount } for pid=17822 comm="syz.2.4561" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 308.102632][T17835] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.129138][T17647] veth0_macvtap: entered promiscuous mode [ 308.137056][T17823] syz.2.4561: attempt to access beyond end of device [ 308.137056][T17823] loop2: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 308.144959][T17647] veth1_macvtap: entered promiscuous mode [ 308.150825][T17823] syz.2.4561: attempt to access beyond end of device [ 308.150825][T17823] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 308.164407][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.180192][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.190004][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.196719][ T29] audit: type=1400 audit(1725966888.699:12413): avc: denied { create } for pid=17822 comm="syz.2.4561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 308.200455][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.200465][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.240579][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.250399][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.260855][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.270672][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.281169][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.291002][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.301439][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.311239][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.315466][ T29] audit: type=1400 audit(1725966888.819:12414): avc: denied { unmount } for pid=16911 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 308.321870][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.351750][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.362169][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.371994][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.382389][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.405342][T17647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.423431][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.433978][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.443849][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.454399][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.464323][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.474968][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.484869][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.495521][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.505387][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.515909][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.525769][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.536282][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.546128][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.556563][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.566384][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.576871][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.586810][T17647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.597250][T17647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.609198][T17647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.618969][T17647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.627903][T17647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.636705][T17647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.645467][T17647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.655746][ T29] audit: type=1400 audit(1725966889.159:12415): avc: denied { create } for pid=17844 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 308.675765][ T29] audit: type=1400 audit(1725966889.159:12416): avc: denied { bind } for pid=17844 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 308.680459][T17847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4566'. [ 308.694867][ T29] audit: type=1400 audit(1725966889.159:12417): avc: denied { name_bind } for pid=17844 comm="+}[@" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 308.694894][ T29] audit: type=1400 audit(1725966889.159:12418): avc: denied { node_bind } for pid=17844 comm="+}[@" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 308.694922][ T29] audit: type=1400 audit(1725966889.159:12419): avc: denied { listen } for pid=17844 comm="+}[@" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 308.694945][ T29] audit: type=1400 audit(1725966889.159:12420): avc: denied { connect } for pid=17844 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 308.694968][ T29] audit: type=1400 audit(1725966889.159:12421): avc: denied { name_connect } for pid=17844 comm="+}[@" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 308.891188][T17853] 9pnet_virtio: no channels available for device #0 @0 [ 308.891188][T17853] invalid module BTF object FD specified. [ 308.891188][T17853] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 308.891188][T17853] [ 308.981211][T16917] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.021999][T17860] loop1: detected capacity change from 0 to 2048 [ 309.035283][T17864] loop4: detected capacity change from 0 to 128 [ 309.066999][T17864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4571'. [ 309.108191][T17860] Alternate GPT is invalid, using primary GPT. [ 309.114713][T17860] loop1: p1 p2 p3 [ 309.166385][T17878] loop3: detected capacity change from 0 to 512 [ 309.175824][T17878] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 309.189325][T17874] loop4: detected capacity change from 0 to 512 [ 309.206090][T17874] EXT4-fs warning (device loop4): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 309.236522][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4579'. [ 309.256265][T17878] EXT4-fs (loop3): 1 truncate cleaned up [ 309.262328][T17878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.290785][T17885] loop2: detected capacity change from 0 to 128 [ 309.303379][T17878] 9pnet_fd: Insufficient options for proto=fd [ 309.319733][T17878] 9pnet_fd: Insufficient options for proto=fd [ 309.339108][T17889] 9pnet_virtio: no channels available for device #0 @0 [ 309.339108][T17889] invalid module BTF object FD specified. [ 309.339108][T17889] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 309.339108][T17889] [ 309.417799][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.455249][T17894] loop4: detected capacity change from 0 to 128 [ 309.480831][T17893] loop3: detected capacity change from 0 to 2048 [ 309.483135][T17894] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4584'. [ 309.487421][T17885] syz.2.4580[17885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.496091][T17894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4584'. [ 309.503680][T17885] syz.2.4580[17885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 309.529196][T17894] bond1: entered promiscuous mode [ 309.546043][T17894] bond1: entered allmulticast mode [ 309.554095][T17894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 309.563225][T17893] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.616993][T17882] loop1: detected capacity change from 0 to 764 [ 309.700497][T17893] EXT4-fs error (device loop3): __ext4_new_inode:1070: comm syz.3.4583: reserved inode found cleared - inode=1 [ 309.811593][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.829508][T17915] loop4: detected capacity change from 0 to 256 [ 309.839665][T17919] loop3: detected capacity change from 0 to 512 [ 309.846858][T17915] FAT-fs (loop4): Directory bread(block 64) failed [ 309.853512][T17915] FAT-fs (loop4): Directory bread(block 65) failed [ 309.860340][T17915] FAT-fs (loop4): Directory bread(block 66) failed [ 309.865437][T17919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.866929][T17915] FAT-fs (loop4): Directory bread(block 67) failed [ 309.883113][T17919] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 309.885914][T17915] FAT-fs (loop4): Directory bread(block 68) failed [ 309.902611][T17915] FAT-fs (loop4): Directory bread(block 69) failed [ 309.909269][T17915] FAT-fs (loop4): Directory bread(block 70) failed [ 309.915927][T17915] FAT-fs (loop4): Directory bread(block 71) failed [ 309.922441][T17915] FAT-fs (loop4): Directory bread(block 72) failed [ 309.928996][T17915] FAT-fs (loop4): Directory bread(block 73) failed [ 309.951284][T17915] syz.4.4590: attempt to access beyond end of device [ 309.951284][T17915] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 309.969100][T17915] syz.4.4590: attempt to access beyond end of device [ 309.969100][T17915] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 310.165651][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.199400][T17928] Invalid ELF header len 1 [ 310.283111][T17931] loop2: detected capacity change from 0 to 4096 [ 310.291340][T17931] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 310.307652][T17931] EXT4-fs (loop2): mount failed [ 310.715352][T17934] Invalid ELF header len 1 [ 311.369075][T17956] dccp_invalid_packet: P.Data Offset(100) too large [ 311.639210][T17971] 9pnet_virtio: no channels available for device #0 @0 [ 311.639210][T17971] invalid module BTF object FD specified. [ 311.639210][T17971] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 311.639210][T17971] [ 311.736228][T17982] Invalid ELF header len 1 [ 311.949234][T17986] netlink: 'syz.3.4615': attribute type 1 has an invalid length. [ 311.997960][T17992] loop3: detected capacity change from 0 to 512 [ 312.015879][T17992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.028774][T17992] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.188919][T18003] 9pnet_virtio: no channels available for device #0 @0 [ 312.188919][T18003] invalid module BTF object FD specified. [ 312.188919][T18003] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 312.188919][T18003] [ 312.270506][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.297099][T18012] loop2: detected capacity change from 0 to 2048 [ 312.305036][T18019] loop3: detected capacity change from 0 to 128 [ 312.315851][T18009] loop1: detected capacity change from 0 to 256 [ 312.329298][T18009] FAT-fs (loop1): Directory bread(block 64) failed [ 312.336566][T18009] FAT-fs (loop1): Directory bread(block 65) failed [ 312.343315][T18009] FAT-fs (loop1): Directory bread(block 66) failed [ 312.352848][T18012] Alternate GPT is invalid, using primary GPT. [ 312.359292][T18012] loop2: p1 p2 p3 [ 312.363102][T18009] FAT-fs (loop1): Directory bread(block 67) failed [ 312.371340][T18009] FAT-fs (loop1): Directory bread(block 68) failed [ 312.377990][T18009] FAT-fs (loop1): Directory bread(block 69) failed [ 312.386701][T18009] FAT-fs (loop1): Directory bread(block 70) failed [ 312.393381][T18009] FAT-fs (loop1): Directory bread(block 71) failed [ 312.400114][T18009] FAT-fs (loop1): Directory bread(block 72) failed [ 312.408458][T18009] FAT-fs (loop1): Directory bread(block 73) failed [ 312.423013][T18009] syz.1.4624: attempt to access beyond end of device [ 312.423013][T18009] loop1: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 312.433232][T18022] loop2: detected capacity change from 0 to 512 [ 312.439924][T18009] syz.1.4624: attempt to access beyond end of device [ 312.439924][T18009] loop1: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 312.478846][T18020] syz.3.4627[18020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.478902][T18020] syz.3.4627[18020] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 312.490797][T18022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.515851][T18022] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 312.530895][T18033] 9pnet_virtio: no channels available for device #0 @0 [ 312.530895][T18033] invalid module BTF object FD specified. [ 312.530895][T18033] processed 0 insns (limit 1000000) max_states_per_insn 0 total_states 0 peak_states 0 mark_read 0 [ 312.530895][T18033] [ 312.638874][T18049] loop4: detected capacity change from 0 to 128 [ 312.648980][T18049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4639'. [ 312.664484][T18049] bond2: entered promiscuous mode [ 312.669604][T18049] bond2: entered allmulticast mode [ 312.675227][T18049] 8021q: adding VLAN 0 to HW filter on device bond2 [ 312.735222][T18057] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.815684][T18062] loop4: detected capacity change from 0 to 4096 [ 312.823575][T18062] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 312.838463][T18062] EXT4-fs (loop4): mount failed [ 312.877458][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.117402][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 313.117415][ T29] audit: type=1400 audit(1725966893.569:12582): avc: denied { create } for pid=18064 comm="syz.2.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 313.143158][ T29] audit: type=1400 audit(1725966893.569:12583): avc: denied { write } for pid=18064 comm="syz.2.4643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 313.162879][ T29] audit: type=1400 audit(1725966893.569:12584): avc: denied { checkpoint_restore } for pid=18064 comm="syz.2.4643" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 313.286766][ T29] audit: type=1400 audit(1725966893.789:12585): avc: denied { bind } for pid=18073 comm="syz.0.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.342837][ T29] audit: type=1400 audit(1725966893.819:12586): avc: denied { ioctl } for pid=18073 comm="syz.0.4646" path="socket:[55743]" dev="sockfs" ino=55743 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.367923][ T29] audit: type=1326 audit(1725966893.829:12587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 313.391695][ T29] audit: type=1326 audit(1725966893.829:12588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 313.415450][ T29] audit: type=1326 audit(1725966893.829:12589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 313.439098][ T29] audit: type=1326 audit(1725966893.829:12590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 313.462915][ T29] audit: type=1326 audit(1725966893.829:12591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18075 comm="syz.3.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f81dd5fdef9 code=0x7ffc0000 [ 313.517569][T18086] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4651'. [ 313.531340][T18086] bond1: entered promiscuous mode [ 313.536588][T18086] bond1: entered allmulticast mode [ 313.541983][T18086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.586001][T18091] loop4: detected capacity change from 0 to 2048 [ 313.594050][T18057] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.606007][T18091] Alternate GPT is invalid, using primary GPT. [ 313.612432][T18091] loop4: p1 p2 p3 [ 313.646404][T18057] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.699716][T18100] netlink: 'syz.4.4657': attribute type 1 has an invalid length. [ 313.719468][T18057] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.810336][T18057] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.822080][T18057] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.833148][T18057] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.848466][T18057] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.869563][T18116] loop2: detected capacity change from 0 to 128 [ 313.895739][T18116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4663'. [ 313.906014][T18118] loop1: detected capacity change from 0 to 512 [ 313.923282][T18116] bond1: entered promiscuous mode [ 313.928439][T18116] bond1: entered allmulticast mode [ 313.943366][T18116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 313.958818][T18118] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.991866][T18118] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.027006][T18130] Invalid ELF header len 1 [ 314.415459][T17647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.647008][T18158] Invalid ELF header len 1 [ 314.827963][T18162] loop1: detected capacity change from 0 to 512 [ 314.856639][T18162] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.858488][T18168] loop4: detected capacity change from 0 to 256 [ 314.882770][T18168] FAT-fs (loop4): Directory bread(block 64) failed [ 314.883739][T18162] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.889423][T18168] FAT-fs (loop4): Directory bread(block 65) failed [ 314.907048][T18168] FAT-fs (loop4): Directory bread(block 66) failed [ 314.914438][T18168] FAT-fs (loop4): Directory bread(block 67) failed [ 314.921046][T18168] FAT-fs (loop4): Directory bread(block 68) failed [ 314.928491][T18168] FAT-fs (loop4): Directory bread(block 69) failed [ 314.935561][T18168] FAT-fs (loop4): Directory bread(block 70) failed [ 314.942304][T18168] FAT-fs (loop4): Directory bread(block 71) failed [ 314.948996][T18168] FAT-fs (loop4): Directory bread(block 72) failed [ 314.961261][T18168] FAT-fs (loop4): Directory bread(block 73) failed [ 314.987839][T18178] loop3: detected capacity change from 0 to 512 [ 315.014206][T18168] syz.4.4683: attempt to access beyond end of device [ 315.014206][T18168] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 315.044565][T18178] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.047536][T18168] syz.4.4683: attempt to access beyond end of device [ 315.047536][T18168] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 315.071009][T18178] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.074732][T18182] loop2: detected capacity change from 0 to 2048 [ 315.140512][T18182] Alternate GPT is invalid, using primary GPT. [ 315.147065][T18182] loop2: p1 p2 p3 [ 315.237113][T18199] Invalid ELF header len 1 [ 315.246214][T18197] loop2: detected capacity change from 0 to 4096 [ 315.265888][T18197] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 315.284570][T17647] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.294907][T18197] EXT4-fs (loop2): mount failed [ 315.366768][T18206] syz.1.4694[18206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.366828][T18206] syz.1.4694[18206] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 315.391711][T18206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4694'. [ 315.765496][T18221] loop3: detected capacity change from 0 to 512 [ 315.826216][T18221] ext4 filesystem being mounted at /87/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.968215][T18230] loop4: detected capacity change from 0 to 256 [ 315.982582][T18230] FAT-fs (loop4): Directory bread(block 64) failed [ 316.002063][T18230] FAT-fs (loop4): Directory bread(block 65) failed [ 316.011719][T18230] FAT-fs (loop4): Directory bread(block 66) failed [ 316.023746][T18230] FAT-fs (loop4): Directory bread(block 67) failed [ 316.030424][T18230] FAT-fs (loop4): Directory bread(block 68) failed [ 316.039340][T18230] FAT-fs (loop4): Directory bread(block 69) failed [ 316.046273][T18230] FAT-fs (loop4): Directory bread(block 70) failed [ 316.052806][T18230] FAT-fs (loop4): Directory bread(block 71) failed [ 316.061642][T18230] FAT-fs (loop4): Directory bread(block 72) failed [ 316.068250][T18230] FAT-fs (loop4): Directory bread(block 73) failed [ 316.085421][T18230] syz.4.4704: attempt to access beyond end of device [ 316.085421][T18230] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 316.099960][T18230] syz.4.4704: attempt to access beyond end of device [ 316.099960][T18230] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 316.278286][T18254] loop3: detected capacity change from 0 to 256 [ 316.284904][T18252] loop2: detected capacity change from 0 to 2048 [ 316.343067][T18254] FAT-fs (loop3): Directory bread(block 64) failed [ 316.360637][T18254] FAT-fs (loop3): Directory bread(block 65) failed [ 316.382655][T18254] FAT-fs (loop3): Directory bread(block 66) failed [ 316.407289][T18254] FAT-fs (loop3): Directory bread(block 67) failed [ 316.430058][T18254] FAT-fs (loop3): Directory bread(block 68) failed [ 316.451195][T18254] FAT-fs (loop3): Directory bread(block 69) failed [ 316.471590][T18254] FAT-fs (loop3): Directory bread(block 70) failed [ 316.487115][T18266] bond2: entered promiscuous mode [ 316.492217][T18266] bond2: entered allmulticast mode [ 316.503658][T18254] FAT-fs (loop3): Directory bread(block 71) failed [ 316.520625][T18254] FAT-fs (loop3): Directory bread(block 72) failed [ 316.529759][T18266] 8021q: adding VLAN 0 to HW filter on device bond2 [ 316.543685][T18254] FAT-fs (loop3): Directory bread(block 73) failed [ 316.593748][T18254] syz.3.4713: attempt to access beyond end of device [ 316.593748][T18254] loop3: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 316.608508][T18254] syz.3.4713: attempt to access beyond end of device [ 316.608508][T18254] loop3: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 316.823480][T18282] loop2: detected capacity change from 0 to 4096 [ 316.897255][T18282] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 316.913489][T18282] EXT4-fs (loop2): mount failed [ 317.256919][T18293] Invalid ELF header len 1 [ 317.310962][T18299] loop2: detected capacity change from 0 to 512 [ 317.325260][T18299] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.586666][T16911] EXT4-fs unmount: 6 callbacks suppressed [ 317.586680][T16911] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.791252][T18338] loop2: detected capacity change from 0 to 128 [ 317.808412][T18338] bond2: entered promiscuous mode [ 317.813478][T18338] bond2: entered allmulticast mode [ 317.818839][T18338] 8021q: adding VLAN 0 to HW filter on device bond2 [ 318.240147][T18343] loop3: detected capacity change from 0 to 4096 [ 318.249449][T18343] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 318.265851][T18343] EXT4-fs (loop3): mount failed [ 318.325746][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 318.325760][ T29] audit: type=1326 audit(1725966898.829:12800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.360251][ T29] audit: type=1326 audit(1725966898.859:12801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.367752][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4747'. [ 318.384001][ T29] audit: type=1326 audit(1725966898.859:12802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.416273][ T29] audit: type=1326 audit(1725966898.859:12803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.440048][ T29] audit: type=1326 audit(1725966898.859:12804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.463713][ T29] audit: type=1326 audit(1725966898.859:12805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.487465][ T29] audit: type=1326 audit(1725966898.859:12806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.510943][ T29] audit: type=1326 audit(1725966898.859:12807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.534679][ T29] audit: type=1326 audit(1725966898.859:12808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 318.558379][ T29] audit: type=1326 audit(1725966898.859:12809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18350 comm="syz.0.4747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0aeadadef9 code=0x7ffc0000 [ 319.458052][T18377] loop3: detected capacity change from 0 to 512 [ 319.476169][T18377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.488916][T18377] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 319.516735][T18382] loop4: detected capacity change from 0 to 128 [ 319.598731][T18388] loop2: detected capacity change from 0 to 2048 [ 319.645099][T18388] Alternate GPT is invalid, using primary GPT. [ 319.651427][T18388] loop2: p1 p2 p3 [ 319.709561][T18406] loop2: detected capacity change from 0 to 128 [ 319.726268][T18406] bond3: entered promiscuous mode [ 319.731311][T18406] bond3: entered allmulticast mode [ 319.736726][T18406] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.743987][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.865481][T18417] loop1: detected capacity change from 0 to 4096 [ 319.875585][T18417] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 319.893012][T18417] EXT4-fs (loop1): mount failed [ 319.901975][T18420] loop3: detected capacity change from 0 to 2048 [ 319.915628][T18420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 319.952133][T18420] ================================================================== [ 319.960192][T18420] BUG: KCSAN: data-race in read_pages / read_pages [ 319.966678][T18420] [ 319.968978][T18420] write to 0xffff8881045a8284 of 4 bytes by task 18421 on cpu 1: [ 319.976669][T18420] read_pages+0x287/0x540 [ 319.980980][T18420] page_cache_ra_unbounded+0x22c/0x2e0 [ 319.986417][T18420] page_cache_sync_ra+0x652/0x670 [ 319.991424][T18420] filemap_get_pages+0x252/0xfb0 [ 319.996345][T18420] filemap_splice_read+0x360/0x920 [ 320.001457][T18420] ext4_file_splice_read+0x95/0xc0 [ 320.006546][T18420] splice_direct_to_actor+0x26c/0x670 [ 320.011905][T18420] do_splice_direct+0xd7/0x150 [ 320.016651][T18420] do_sendfile+0x3ab/0x950 [ 320.021049][T18420] __x64_sys_sendfile64+0x110/0x150 [ 320.026228][T18420] x64_sys_call+0xed5/0x2d60 [ 320.030796][T18420] do_syscall_64+0xc9/0x1c0 [ 320.035279][T18420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.041158][T18420] [ 320.043462][T18420] read to 0xffff8881045a8284 of 4 bytes by task 18420 on cpu 0: [ 320.051064][T18420] read_pages+0x25c/0x540 [ 320.055376][T18420] page_cache_ra_unbounded+0x22c/0x2e0 [ 320.060815][T18420] page_cache_sync_ra+0x652/0x670 [ 320.065818][T18420] filemap_get_pages+0x252/0xfb0 [ 320.070739][T18420] filemap_splice_read+0x360/0x920 [ 320.075832][T18420] ext4_file_splice_read+0x95/0xc0 [ 320.080925][T18420] splice_direct_to_actor+0x26c/0x670 [ 320.086295][T18420] do_splice_direct+0xd7/0x150 [ 320.091053][T18420] do_sendfile+0x3ab/0x950 [ 320.095445][T18420] __x64_sys_sendfile64+0x110/0x150 [ 320.100624][T18420] x64_sys_call+0xed5/0x2d60 [ 320.105197][T18420] do_syscall_64+0xc9/0x1c0 [ 320.109680][T18420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.115575][T18420] [ 320.117874][T18420] value changed: 0x0000000a -> 0x00000006 [ 320.123568][T18420] [ 320.125869][T18420] Reported by Kernel Concurrency Sanitizer on: [ 320.131991][T18420] CPU: 0 UID: 0 PID: 18420 Comm: syz.3.4772 Not tainted 6.11.0-rc7-syzkaller-00017-gbc83b4d1f086 #0 [ 320.142725][T18420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 320.152774][T18420] ================================================================== [ 320.213615][T16914] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.