last executing test programs: 1.82434766s ago: executing program 4 (id=607): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) 1.583794393s ago: executing program 4 (id=610): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.145115597s ago: executing program 3 (id=625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") pipe(0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 841.774537ms ago: executing program 2 (id=630): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x4}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000000)={@val={0x0, 0x1b}, @void, @eth={@broadcast, @remote, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x15, 0x5c, 0x65, 0x0, 0x2, 0x11, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x4e22, 0x4e23, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "562d9ba90683726398023d5cc4caf4390083568d7c99bfb9", "eb835fb65c8b9ae493d4fb662704b8db08835fefb6a4d7ea9378cfc98b077903"}}}}}}}, 0x72) 795.429471ms ago: executing program 0 (id=631): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) io_getevents(0x0, 0x200, 0x0, 0x0, 0x0) 794.884541ms ago: executing program 3 (id=632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x18) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) 759.891855ms ago: executing program 0 (id=634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1000000000000}, 0x18) close(0xffffffffffffffff) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 759.340215ms ago: executing program 0 (id=635): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket(0x28, 0x801, 0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x2000}) close_range(r0, 0xffffffffffffffff, 0x0) 758.754064ms ago: executing program 4 (id=636): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="fe2ecf20a9a17bd2ed7e803f830375c150a1f848f604c2c1f932d2b7163be4b2b9a5bd521d185cfbee555b27608594beba6325923aaf5db74cff01000053db92c6c5fcbba0abd975fc76bea49b00513afc856ed89d3fadeda307ca587354322803b0983cc65725ae7f45fb95e7cdb28c6b886959b7dde2c87c73f6008cf6eed7861f24b7423704b95f3d05b92d3d7ff9d392833ecd02443320b60131a350360fcc1d659e2a03cb469caf0498bacae0735a161345b3d71a55f14ef636b6f832c7a6071fce83904dfd871b6d8e03648dbaa3a039eb5673792cae80335732030f9aeabaf3bb3cc4ca5fe75271d69b2e78beb2b81fc3cf3a18a7ae93a3cdbe6599b99408275e2b4b4477c6fcf4806134e839e13533ec000000000000006a1c000000000000000000000000000000000000000000000000000069c3288311b7414705e975eb3f1b77a120", @ANYRESHEX], 0x8, 0x2eb, &(0x7f00000004c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5412, 0x100, 0x0) 748.329846ms ago: executing program 3 (id=637): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x48, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x2, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) 715.123349ms ago: executing program 2 (id=638): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000340), &(0x7f0000000300)=r1}, 0x20) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xad, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r4}, 0x10) close(r2) 714.687189ms ago: executing program 0 (id=639): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x30e5, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0xa, 0x22002f6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 652.821165ms ago: executing program 0 (id=641): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x400008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 652.112905ms ago: executing program 2 (id=642): openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000240)=r0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0xc, 0x2, 0x803fd, 0x1, 0x800}) 585.078212ms ago: executing program 2 (id=643): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f683a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 584.551172ms ago: executing program 2 (id=644): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000900000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000400000085000000060000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_io_uring_setup(0x1239, &(0x7f0000000380)={0x0, 0x3c3, 0x80, 0x1, 0x2bc}, &(0x7f0000000040)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='fib_table_lookup\x00', r4}, 0x18) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) 456.912484ms ago: executing program 1 (id=646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8db}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x401}, 0x11) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2000, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff00000001, 0x1ff}, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x1) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) perf_event_open(&(0x7f0000000040)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x307, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x7, 0x0, 0x7, 0x4, 0x400008, 0x8000, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, r2, 0x3) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) close_range(r1, 0xffffffffffffffff, 0x0) 362.782744ms ago: executing program 0 (id=647): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 362.410744ms ago: executing program 1 (id=648): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2e, 0xb5a}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) fsetxattr$security_selinux(r0, &(0x7f0000000080), &(0x7f0000000040)='system_u:object_r:udev_var_run_t:s0\x00', 0x24, 0x0) 304.35143ms ago: executing program 3 (id=649): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}, 0x1, 0x0, 0x0, 0x14000}, 0x0) 303.90598ms ago: executing program 4 (id=650): syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) 233.140257ms ago: executing program 1 (id=651): timer_create(0x0, &(0x7f0000001180)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) openat$procfs(0xffffffffffffff9c, &(0x7f00000034c0)='/proc/consoles\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) 225.252408ms ago: executing program 4 (id=652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000040)='./file1\x00', 0x16000715) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 219.694688ms ago: executing program 3 (id=653): r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25021856ff", @ANYRES32=r2, @ANYBLOB="080002007f"], 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) recvfrom$inet6(r0, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000000)="48050000150019", 0x7}], 0x1) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 144.313176ms ago: executing program 3 (id=654): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 76.820532ms ago: executing program 2 (id=655): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x69000}], 0x1, 0x7000, 0x0, 0x3) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) sendfile(r1, r0, 0x0, 0x7ffff000) 16.225298ms ago: executing program 4 (id=656): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) bind$can_raw(r1, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r3, &(0x7f0000001540)={&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, 0x80, 0x0}, 0x100) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x4) 15.578689ms ago: executing program 1 (id=657): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)={0x24, r2, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}}, 0x18) 15.161038ms ago: executing program 1 (id=658): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x80000, 0x41) mkdirat(r0, 0x0, 0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000614000227bd9200fedbdf250800010000000000080001000100000008000100000000000800010001000000"], 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x60008080) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000000c0)=0x4, 0x4) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000200)=0x1ff, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet_opts(r1, 0x0, 0x9, &(0x7f0000002240)=""/26, &(0x7f0000000280)=0x1a) 0s ago: executing program 1 (id=659): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x8, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x400008, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 34.112697][ T29] audit: type=1400 audit(1761020909.398:62): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.137059][ T3303] cgroup: Unknown subsys name 'net' [ 34.137948][ T29] audit: type=1400 audit(1761020909.418:63): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.164522][ T29] audit: type=1400 audit(1761020909.428:64): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.297204][ T3303] cgroup: Unknown subsys name 'cpuset' [ 34.303523][ T3303] cgroup: Unknown subsys name 'rlimit' [ 34.455161][ T29] audit: type=1400 audit(1761020909.738:65): avc: denied { setattr } for pid=3303 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.478771][ T29] audit: type=1400 audit(1761020909.738:66): avc: denied { create } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.499310][ T29] audit: type=1400 audit(1761020909.738:67): avc: denied { write } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.510478][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.519793][ T29] audit: type=1400 audit(1761020909.738:68): avc: denied { read } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.548757][ T29] audit: type=1400 audit(1761020909.738:69): avc: denied { mounton } for pid=3303 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.569429][ T3303] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.573669][ T29] audit: type=1400 audit(1761020909.738:70): avc: denied { mount } for pid=3303 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.605884][ T29] audit: type=1400 audit(1761020909.818:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.664208][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.707159][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 36.737583][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.749875][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.781113][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.788322][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.795543][ T3313] bridge_slave_0: entered allmulticast mode [ 36.801977][ T3313] bridge_slave_0: entered promiscuous mode [ 36.821885][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 36.833576][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.840776][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.848063][ T3313] bridge_slave_1: entered allmulticast mode [ 36.854621][ T3313] bridge_slave_1: entered promiscuous mode [ 36.916135][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.935588][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.942712][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.950054][ T3320] bridge_slave_0: entered allmulticast mode [ 36.956707][ T3320] bridge_slave_0: entered promiscuous mode [ 36.964162][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.973419][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.980546][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.987893][ T3320] bridge_slave_1: entered allmulticast mode [ 36.994324][ T3320] bridge_slave_1: entered promiscuous mode [ 37.024169][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.031330][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.038597][ T3319] bridge_slave_0: entered allmulticast mode [ 37.045134][ T3319] bridge_slave_0: entered promiscuous mode [ 37.072360][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.079584][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.087329][ T3319] bridge_slave_1: entered allmulticast mode [ 37.093897][ T3319] bridge_slave_1: entered promiscuous mode [ 37.100195][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.107565][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.114851][ T3314] bridge_slave_0: entered allmulticast mode [ 37.121292][ T3314] bridge_slave_0: entered promiscuous mode [ 37.128033][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.135112][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.142422][ T3321] bridge_slave_0: entered allmulticast mode [ 37.149265][ T3321] bridge_slave_0: entered promiscuous mode [ 37.156523][ T3313] team0: Port device team_slave_0 added [ 37.163274][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.177079][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.184147][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.191451][ T3314] bridge_slave_1: entered allmulticast mode [ 37.198009][ T3314] bridge_slave_1: entered promiscuous mode [ 37.204792][ T3313] team0: Port device team_slave_1 added [ 37.210856][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.218004][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.225177][ T3321] bridge_slave_1: entered allmulticast mode [ 37.231775][ T3321] bridge_slave_1: entered promiscuous mode [ 37.239155][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.273507][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.303279][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.313538][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.323469][ T3320] team0: Port device team_slave_0 added [ 37.330628][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.340054][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.347137][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.373249][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.390123][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.404939][ T3320] team0: Port device team_slave_1 added [ 37.411826][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.421348][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.428346][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.454344][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.472963][ T3319] team0: Port device team_slave_0 added [ 37.495150][ T3314] team0: Port device team_slave_0 added [ 37.506269][ T3319] team0: Port device team_slave_1 added [ 37.517478][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.524496][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.550429][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.566579][ T3314] team0: Port device team_slave_1 added [ 37.573032][ T3321] team0: Port device team_slave_0 added [ 37.589328][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.596297][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.622239][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.644468][ T3313] hsr_slave_0: entered promiscuous mode [ 37.650615][ T3313] hsr_slave_1: entered promiscuous mode [ 37.662157][ T3321] team0: Port device team_slave_1 added [ 37.668223][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.675246][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.701286][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.713097][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.720285][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.746218][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.793211][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.800225][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.826211][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.844501][ T3320] hsr_slave_0: entered promiscuous mode [ 37.850708][ T3320] hsr_slave_1: entered promiscuous mode [ 37.856761][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.862495][ T3320] Cannot create hsr debugfs directory [ 37.873381][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.880375][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.906343][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.925657][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.932665][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.958596][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.969875][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.976936][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 38.002947][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.033716][ T3319] hsr_slave_0: entered promiscuous mode [ 38.039796][ T3319] hsr_slave_1: entered promiscuous mode [ 38.045639][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 38.051411][ T3319] Cannot create hsr debugfs directory [ 38.086157][ T3314] hsr_slave_0: entered promiscuous mode [ 38.092104][ T3314] hsr_slave_1: entered promiscuous mode [ 38.097966][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.103692][ T3314] Cannot create hsr debugfs directory [ 38.122103][ T3321] hsr_slave_0: entered promiscuous mode [ 38.128200][ T3321] hsr_slave_1: entered promiscuous mode [ 38.134036][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 38.139788][ T3321] Cannot create hsr debugfs directory [ 38.298028][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.306850][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.325738][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.341162][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.372733][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.383863][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.392988][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.404422][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.429679][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.438948][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.448076][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.457506][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.483479][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.516206][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.536576][ T3321] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.553741][ T3321] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.563926][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.571093][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.582834][ T3321] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.592239][ T3321] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.603214][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.612856][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.622517][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.631497][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.644304][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.651547][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.678066][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.723519][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.743103][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.750239][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.759607][ T166] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.766761][ T166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.779940][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.796304][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.832767][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.839936][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.853482][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.863333][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.870566][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.905931][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.917910][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.928447][ T1644] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.935581][ T1644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.952521][ T1644] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.959601][ T1644] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.975553][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.994300][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.020529][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.028758][ T166] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.035888][ T166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.049562][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.056705][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.145735][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.195631][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.232721][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.246151][ T3319] veth0_vlan: entered promiscuous mode [ 39.267874][ T3319] veth1_vlan: entered promiscuous mode [ 39.307464][ T3313] veth0_vlan: entered promiscuous mode [ 39.333844][ T3313] veth1_vlan: entered promiscuous mode [ 39.347715][ T3320] veth0_vlan: entered promiscuous mode [ 39.354493][ T3319] veth0_macvtap: entered promiscuous mode [ 39.368654][ T3320] veth1_vlan: entered promiscuous mode [ 39.382864][ T3313] veth0_macvtap: entered promiscuous mode [ 39.390707][ T3319] veth1_macvtap: entered promiscuous mode [ 39.402868][ T3320] veth0_macvtap: entered promiscuous mode [ 39.414779][ T3313] veth1_macvtap: entered promiscuous mode [ 39.426721][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.440757][ T3320] veth1_macvtap: entered promiscuous mode [ 39.450234][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.470575][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.479525][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.492953][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.501428][ T3321] veth0_vlan: entered promiscuous mode [ 39.507669][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.521906][ T3314] veth0_vlan: entered promiscuous mode [ 39.529568][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.539444][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.550558][ T31] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.562537][ T3314] veth1_vlan: entered promiscuous mode [ 39.570331][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.578595][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.595146][ T3321] veth1_vlan: entered promiscuous mode [ 39.605863][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.620297][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.629491][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.638502][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.649213][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.649226][ T29] audit: type=1400 audit(1761020914.938:81): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.QdAIVZ/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.681243][ T29] audit: type=1400 audit(1761020914.948:82): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.685910][ T3314] veth0_macvtap: entered promiscuous mode [ 39.703373][ T29] audit: type=1400 audit(1761020914.948:83): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.QdAIVZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.714026][ T3314] veth1_macvtap: entered promiscuous mode [ 39.734363][ T29] audit: type=1400 audit(1761020914.948:84): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.746544][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.761706][ T29] audit: type=1400 audit(1761020914.948:85): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.QdAIVZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.795518][ T29] audit: type=1400 audit(1761020914.948:86): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.QdAIVZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.823013][ T29] audit: type=1400 audit(1761020914.948:87): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.844306][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.848639][ T29] audit: type=1400 audit(1761020914.998:88): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.853769][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.875768][ T29] audit: type=1400 audit(1761020914.998:89): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="gadgetfs" ino=4003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.916722][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.934311][ T3321] veth0_macvtap: entered promiscuous mode [ 39.943015][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.961789][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.967313][ T29] audit: type=1400 audit(1761020915.248:90): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.994152][ T3321] veth1_macvtap: entered promiscuous mode [ 40.022670][ T166] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.054116][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.086122][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.098025][ T166] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.141693][ T166] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.160546][ T3491] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 40.169092][ T3491] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 40.208084][ T3498] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 40.214702][ T3498] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 40.222443][ T3498] vhci_hcd vhci_hcd.0: Device attached [ 40.230509][ T3497] netlink: 'syz.3.7': attribute type 12 has an invalid length. [ 40.244802][ T166] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.264515][ T166] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.285164][ T3501] vhci_hcd: connection closed [ 40.288322][ T31] vhci_hcd: stop threads [ 40.297330][ T31] vhci_hcd: release socket [ 40.301889][ T31] vhci_hcd: disconnect device [ 40.308132][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.324405][ T3505] syz.4.9 uses obsolete (PF_INET,SOCK_PACKET) [ 40.335212][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.358801][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.554844][ T3534] Driver unsupported XDP return value 0 on prog (id 22) dev N/A, expect packet loss! [ 40.626319][ T3540] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.648052][ T3540] xt_CT: You must specify a L4 protocol and not use inversions on it [ 40.690953][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.26'. [ 40.711593][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.719128][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.730273][ T3545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.737838][ T3545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.893217][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.900589][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.913969][ T3564] bridge0: entered allmulticast mode [ 40.922142][ T3562] netlink: 96 bytes leftover after parsing attributes in process `syz.1.34'. [ 40.948576][ T3564] bridge_slave_1: left allmulticast mode [ 40.954295][ T3564] bridge_slave_1: left promiscuous mode [ 40.960128][ T3564] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.995431][ T3564] bridge_slave_0: left allmulticast mode [ 41.001467][ T3564] bridge_slave_0: left promiscuous mode [ 41.007412][ T3564] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.044740][ T3569] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.37'. [ 41.053839][ T3569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.37'. [ 41.435937][ T3589] loop2: detected capacity change from 0 to 8192 [ 41.446015][ T3589] ======================================================= [ 41.446015][ T3589] WARNING: The mand mount option has been deprecated and [ 41.446015][ T3589] and is ignored by this kernel. Remove the mand [ 41.446015][ T3589] option from the mount to silence this warning. [ 41.446015][ T3589] ======================================================= [ 41.530318][ T3600] loop4: detected capacity change from 0 to 512 [ 41.588944][ T3600] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.591361][ T3320] FAT-fs (loop2): error, invalid access to FAT (entry 0x0000e1b1) [ 41.609312][ T3320] FAT-fs (loop2): Filesystem has been set read-only [ 41.622308][ T3600] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.000782][ T3631] loop4: detected capacity change from 0 to 512 [ 42.080629][ T3631] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 42.137373][ T3631] EXT4-fs (loop4): mount failed [ 42.340024][ C0] hrtimer: interrupt took 47109 ns [ 42.519175][ T3651] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.572040][ T3651] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.635434][ T3664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 42.656499][ T3651] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.709891][ T3651] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.818928][ T57] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.832687][ T57] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.860160][ T57] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.869391][ T57] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.407516][ T3690] netlink: 24 bytes leftover after parsing attributes in process `syz.3.82'. [ 43.419000][ T3688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.432086][ T3690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.82'. [ 43.472849][ T3688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.523431][ T3690] syz.3.82 (3690) used greatest stack depth: 10384 bytes left [ 43.564402][ T3688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.628228][ T3688] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.726344][ T3703] process 'syz.0.87' launched '/dev/fd/7' with NULL argv: empty string added [ 43.736090][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.766673][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.807279][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.815596][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.843993][ T3707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.89'. [ 43.902882][ T3705] lo speed is unknown, defaulting to 1000 [ 43.908976][ T3705] lo speed is unknown, defaulting to 1000 [ 43.928237][ T3705] lo speed is unknown, defaulting to 1000 [ 43.934486][ T3705] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.965434][ T3705] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 43.972311][ T3714] loop4: detected capacity change from 0 to 512 [ 44.002407][ T3714] EXT4-fs: Ignoring removed bh option [ 44.010785][ T3705] lo speed is unknown, defaulting to 1000 [ 44.024101][ T3705] lo speed is unknown, defaulting to 1000 [ 44.036665][ T3714] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.050114][ T3714] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.059288][ T3714] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 44.086935][ T3705] lo speed is unknown, defaulting to 1000 [ 44.093399][ T3705] lo speed is unknown, defaulting to 1000 [ 44.112320][ T3705] lo speed is unknown, defaulting to 1000 [ 44.119630][ T3714] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 44.138791][ T3714] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e002e01c, mo2=0006] [ 44.154455][ T3714] System zones: 0-2, 18-18, 34-35 [ 44.160514][ T3714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.208287][ T3714] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 44.222560][ T3728] mmap: syz.3.97 (3728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 44.238111][ T3714] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.91: path /25/file0: bad entry in directory: inode out of bounds - offset=24, inode=134217739, rec_len=20, size=2048 fake=0 [ 44.258451][ T3726] syzkaller0: entered allmulticast mode [ 44.268972][ T3729] loop1: detected capacity change from 0 to 1024 [ 44.276282][ T3726] syzkaller0: entered promiscuous mode [ 44.285346][ T3726] syzkaller0 (unregistering): left allmulticast mode [ 44.292920][ T3726] syzkaller0 (unregistering): left promiscuous mode [ 44.302182][ T3729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.326962][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.538474][ T3744] loop2: detected capacity change from 0 to 128 [ 44.778050][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 44.778068][ T29] audit: type=1400 audit(1761020920.068:237): avc: denied { sqpoll } for pid=3763 comm="syz.2.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 44.918062][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.059304][ T3836] bridge: RTM_NEWNEIGH with invalid ether address [ 45.095290][ T3838] lo speed is unknown, defaulting to 1000 [ 45.149986][ T3842] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.207889][ T29] audit: type=1400 audit(1761020920.498:238): avc: denied { read } for pid=3846 comm="syz.1.119" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 45.239537][ T29] audit: type=1400 audit(1761020920.518:239): avc: denied { connect } for pid=3846 comm="syz.1.119" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.259400][ T29] audit: type=1400 audit(1761020920.518:240): avc: denied { write } for pid=3846 comm="syz.1.119" path="socket:[6382]" dev="sockfs" ino=6382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 45.306611][ T3842] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.356012][ T3842] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.434806][ T3842] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.508364][ T3859] rdma_op ffff88811b572180 conn xmit_rdma 0000000000000000 [ 45.530192][ T3805] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.548877][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.569459][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.586821][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.605141][ T3862] loop3: detected capacity change from 0 to 1024 [ 45.611806][ T29] audit: type=1400 audit(1761020920.888:241): avc: denied { create } for pid=3863 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.637687][ T3862] EXT4-fs: Ignoring removed oldalloc option [ 45.643698][ T3862] EXT4-fs: Ignoring removed bh option [ 45.667324][ T3862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.672270][ T29] audit: type=1400 audit(1761020920.918:242): avc: denied { bind } for pid=3863 comm="syz.4.127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.699133][ T29] audit: type=1400 audit(1761020920.928:243): avc: denied { write } for pid=3863 comm="syz.4.127" path="socket:[6412]" dev="sockfs" ino=6412 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 45.738791][ T29] audit: type=1400 audit(1761020920.988:244): avc: denied { connect } for pid=3861 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.758344][ T29] audit: type=1400 audit(1761020920.988:245): avc: denied { write } for pid=3861 comm="syz.3.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 45.784695][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.807591][ T3874] sch_fq: defrate 4294967295 ignored. [ 45.872595][ T3880] loop1: detected capacity change from 0 to 2048 [ 45.888217][ T3879] loop2: detected capacity change from 0 to 1024 [ 45.908838][ T3880] Alternate GPT is invalid, using primary GPT. [ 45.915196][ T3880] loop1: p2 p3 p7 [ 45.943687][ T3879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.978971][ T29] audit: type=1400 audit(1761020921.248:246): avc: denied { create } for pid=3884 comm="syz.3.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 46.101156][ T3904] loop4: detected capacity change from 0 to 128 [ 46.108711][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.126712][ T3908] loop1: detected capacity change from 0 to 164 [ 46.154225][ T3914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.142'. [ 46.174924][ T3917] tipc: Started in network mode [ 46.179969][ T3917] tipc: Node identity ac14140f, cluster identity 4711 [ 46.207909][ T3917] tipc: New replicast peer: 255.255.255.255 [ 46.214036][ T3917] tipc: Enabled bearer , priority 10 [ 46.220973][ T3914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 46.336557][ T36] IPVS: starting estimator thread 0... [ 46.369585][ T3935] veth0: entered promiscuous mode [ 46.375725][ T3935] veth0: left promiscuous mode [ 46.392347][ T3936] netlink: 'syz.4.146': attribute type 12 has an invalid length. [ 46.420326][ T3938] loop2: detected capacity change from 0 to 512 [ 46.427757][ T3938] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.446621][ T3930] IPVS: using max 2400 ests per chain, 120000 per kthread [ 46.471717][ T3938] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 46.506881][ T3938] EXT4-fs (loop2): 1 truncate cleaned up [ 46.520650][ T3938] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.615399][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.726144][ T3966] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 46.906872][ T3984] loop4: detected capacity change from 0 to 2048 [ 46.947580][ T3984] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.064797][ T3313] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 47.115113][ T3313] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 47.145209][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.326431][ T3372] tipc: Node number set to 2886997007 [ 47.333163][ T4020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4020 comm=syz.0.183 [ 47.526240][ T4032] lo speed is unknown, defaulting to 1000 [ 47.744394][ T4046] loop0: detected capacity change from 0 to 1024 [ 47.751592][ T4046] EXT4-fs: Ignoring removed orlov option [ 47.759836][ T4046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.996102][ T4057] capability: warning: `syz.1.198' uses deprecated v2 capabilities in a way that may be insecure [ 48.020718][ T4057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.029575][ T4057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.069511][ T4063] lo speed is unknown, defaulting to 1000 [ 48.076776][ T4065] loop2: detected capacity change from 0 to 1024 [ 48.100746][ T4065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.136970][ T4069] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 48.143667][ T4069] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 48.151633][ T4069] vhci_hcd vhci_hcd.0: Device attached [ 48.187157][ T4070] vhci_hcd: connection closed [ 48.192613][ T3819] vhci_hcd: stop threads [ 48.201760][ T3819] vhci_hcd: release socket [ 48.206263][ T3819] vhci_hcd: disconnect device [ 48.213605][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.223256][ T4065] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.201: Allocating blocks 449-513 which overlap fs metadata [ 48.246983][ T4075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 48.250007][ T4064] EXT4-fs (loop2): pa ffff8881076b4150: logic 48, phys. 177, len 21 [ 48.255829][ T4075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'. [ 48.263869][ T4064] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 48.294219][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.324308][ T4079] ip6gre1: entered allmulticast mode [ 48.368817][ T4085] loop0: detected capacity change from 0 to 256 [ 48.375754][ T4085] FAT-fs (loop0): bogus number of FAT sectors [ 48.382037][ T4085] FAT-fs (loop0): Can't find a valid FAT filesystem [ 48.475872][ T4100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 48.623823][ T4111] loop1: detected capacity change from 0 to 2048 [ 48.699847][ T4116] netlink: 7 bytes leftover after parsing attributes in process `syz.2.222'. [ 48.720700][ T4116] netlink: 7 bytes leftover after parsing attributes in process `syz.2.222'. [ 48.747784][ T4111] loop1: unable to read partition table [ 48.759816][ T4111] loop1: partition table beyond EOD, truncated [ 48.766050][ T4111] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 48.845732][ T4124] SELinux: policydb version -2036594179 does not match my version range 15-35 [ 48.864344][ T4124] SELinux: failed to load policy [ 48.958149][ T4134] netlink: 'syz.0.230': attribute type 13 has an invalid length. [ 49.018536][ T4134] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.025779][ T4134] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.049941][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 49.077402][ T4139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.232'. [ 49.131630][ T4141] loop1: detected capacity change from 0 to 1024 [ 49.145338][ T4141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.175254][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.183013][ T4141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.196795][ T4141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.204257][ T4141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.230468][ T3785] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.239139][ T3785] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.248268][ T3785] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.258146][ T3785] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.334950][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.361429][ T4151] netlink: 'syz.2.236': attribute type 10 has an invalid length. [ 49.370671][ T4151] batman_adv: batadv0: Adding interface: veth1_vlan [ 49.377329][ T4151] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.406438][ T4151] batman_adv: batadv0: Interface activated: veth1_vlan [ 49.468939][ T4157] sd 0:0:1:0: device reset [ 49.622448][ T4175] loop2: detected capacity change from 0 to 512 [ 49.629449][ T4175] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 49.638207][ T4175] EXT4-fs (loop2): invalid journal inode [ 49.643966][ T4175] EXT4-fs (loop2): can't get journal size [ 49.654496][ T4175] EXT4-fs (loop2): 1 truncate cleaned up [ 49.671059][ T4175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.779592][ T4187] lo speed is unknown, defaulting to 1000 [ 49.802560][ T29] kauditd_printk_skb: 178 callbacks suppressed [ 49.802577][ T29] audit: type=1400 audit(1761020925.048:425): avc: denied { write } for pid=4184 comm="syz.0.250" name="file0" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.831859][ T29] audit: type=1400 audit(1761020925.048:426): avc: denied { open } for pid=4184 comm="syz.0.250" path="/48/file0" dev="tmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.854387][ T29] audit: type=1400 audit(1761020925.048:427): avc: denied { ioctl } for pid=4184 comm="syz.0.250" path="/48/file0" dev="tmpfs" ino=266 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 49.986842][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.020218][ T4191] loop1: detected capacity change from 0 to 8192 [ 50.027701][ T29] audit: type=1400 audit(1761020925.318:428): avc: denied { relabelfrom } for pid=4194 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 50.047678][ T29] audit: type=1400 audit(1761020925.318:429): avc: denied { relabelto } for pid=4194 comm="syz.2.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 50.072997][ T29] audit: type=1400 audit(1761020925.358:430): avc: denied { ioctl } for pid=4194 comm="syz.2.254" path="socket:[7886]" dev="sockfs" ino=7886 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.176571][ T29] audit: type=1400 audit(1761020925.458:431): avc: denied { write } for pid=4196 comm="syz.1.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 50.263470][ T29] audit: type=1326 audit(1761020925.548:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9dcefc9 code=0x7ffc0000 [ 50.286833][ T29] audit: type=1326 audit(1761020925.548:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72a9dcefc9 code=0x7ffc0000 [ 50.312741][ T29] audit: type=1326 audit(1761020925.598:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4208 comm="syz.1.261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72a9dcefc9 code=0x7ffc0000 [ 50.943355][ T4235] loop0: detected capacity change from 0 to 1024 [ 50.958520][ T4235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=842c018, mo2=0002] [ 50.970296][ T4235] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.001010][ T4235] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.270: bg 0: block 88: padding at end of block bitmap is not set [ 51.065363][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.078368][ T4239] loop3: detected capacity change from 0 to 512 [ 51.110181][ T4239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.136557][ T4239] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.183762][ T4239] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 51.228973][ T4239] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.271: corrupted inode contents [ 51.242509][ T4239] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.271: mark_inode_dirty error [ 51.271779][ T4239] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.271: corrupted inode contents [ 51.296169][ T4256] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.271: corrupted inode contents [ 51.324359][ T4256] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.271: mark_inode_dirty error [ 51.337850][ T4256] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.271: corrupted inode contents [ 51.365701][ T4256] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.271: mark_inode_dirty error [ 51.378204][ T4256] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.271: corrupted inode contents [ 51.392298][ T4256] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #2: comm syz.3.271: mark_inode_dirty error [ 51.414916][ T4239] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #2: comm syz.3.271: corrupted inode contents [ 51.457078][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.542852][ T4278] loop4: detected capacity change from 0 to 1024 [ 51.549614][ T4278] EXT4-fs: Ignoring removed orlov option [ 51.557945][ T4278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.764043][ T4292] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 51.818194][ T4292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.825980][ T4296] __nla_validate_parse: 9 callbacks suppressed [ 51.826027][ T4296] netlink: 4 bytes leftover after parsing attributes in process `syz.3.289'. [ 51.852464][ T4295] loop1: detected capacity change from 0 to 1024 [ 51.859400][ T4296] bond1 (unregistering): Released all slaves [ 51.862608][ T4295] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 51.876488][ T4295] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 51.890322][ T4295] JBD2: no valid journal superblock found [ 51.896121][ T4295] EXT4-fs (loop1): Could not load journal inode [ 51.923909][ T4295] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 51.990121][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.992181][ T4301] lo speed is unknown, defaulting to 1000 [ 52.218060][ T4311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 52.232902][ T4313] loop0: detected capacity change from 0 to 512 [ 52.240241][ C1] vcan0: j1939_session_tx_dat: 0xffff88811aee5c00: queue data error: -100 [ 52.261796][ T4313] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.283503][ T4313] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.337348][ T4313] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.296: corrupted inode contents [ 52.410902][ T4313] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.296: mark_inode_dirty error [ 52.422941][ T4313] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.296: corrupted inode contents [ 52.439877][ T4323] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.296: corrupted inode contents [ 52.452683][ T4323] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.296: mark_inode_dirty error [ 52.477220][ T4323] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.296: corrupted inode contents [ 52.553731][ T4323] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.296: mark_inode_dirty error [ 52.569100][ T4323] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.296: corrupted inode contents [ 52.581676][ T4323] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #2: comm syz.0.296: mark_inode_dirty error [ 52.596920][ T4326] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #2: comm syz.0.296: corrupted inode contents [ 52.662983][ T4337] loop1: detected capacity change from 0 to 1024 [ 52.669998][ T4337] EXT4-fs: Ignoring removed orlov option [ 52.679441][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.690775][ T4337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.748765][ T4340] loop0: detected capacity change from 0 to 2048 [ 52.768161][ T4340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.904753][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.921235][ T4349] lo speed is unknown, defaulting to 1000 [ 52.972791][ T4351] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.040007][ T4351] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.052096][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.091728][ T4351] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.140802][ T4351] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.189339][ T4367] SELinux: failed to load policy [ 53.225250][ T3803] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.237754][ T3803] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.248552][ T3803] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.260365][ T3803] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.515518][ T4384] vlan0: entered allmulticast mode [ 53.536441][ T4384] dummy0: entered allmulticast mode [ 53.606837][ T4384] Zero length message leads to an empty skb [ 53.733078][ T4393] loop3: detected capacity change from 0 to 1024 [ 53.741881][ T4393] EXT4-fs: Ignoring removed orlov option [ 53.763596][ T4393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.825799][ T4403] netlink: 24 bytes leftover after parsing attributes in process `syz.1.326'. [ 54.136968][ T4426] netlink: 3 bytes leftover after parsing attributes in process `syz.2.339'. [ 54.158364][ T4426] 0ªX¹¦À: renamed from caif0 [ 54.165053][ T4426] 0ªX¹¦À: entered allmulticast mode [ 54.170350][ T4426] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 54.204265][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.255168][ T4432] lo speed is unknown, defaulting to 1000 [ 54.294577][ T3819] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.334937][ T4439] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.400300][ T3819] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.455088][ T4439] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.587729][ T3819] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.626955][ T4439] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.678252][ T3819] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.705950][ T4447] lo speed is unknown, defaulting to 1000 [ 54.729797][ T4439] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.839178][ T3804] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.851271][ T3785] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.873990][ T3819] bridge_slave_1: left allmulticast mode [ 54.879868][ T3819] bridge_slave_1: left promiscuous mode [ 54.885727][ T3819] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.908784][ T3819] bridge_slave_0: left allmulticast mode [ 54.914503][ T3819] bridge_slave_0: left promiscuous mode [ 54.920211][ T3819] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.076605][ T3819] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 55.108377][ T3819] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 55.118316][ T3819] bond0 (unregistering): Released all slaves [ 55.133511][ T3785] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.148366][ T4447] chnl_net:caif_netlink_parms(): no params data found [ 55.161531][ T4473] loop2: detected capacity change from 0 to 1024 [ 55.187882][ T4466] lo speed is unknown, defaulting to 1000 [ 55.194259][ T4473] EXT4-fs: Ignoring removed orlov option [ 55.201724][ T3819] hsr_slave_0: left promiscuous mode [ 55.207943][ T3819] hsr_slave_1: left promiscuous mode [ 55.222085][ T4473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.235051][ T3819] veth1_macvtap: left promiscuous mode [ 55.241008][ T3819] veth0_macvtap: left promiscuous mode [ 55.247071][ T3819] veth1_vlan: left promiscuous mode [ 55.254108][ T3819] veth0_vlan: left promiscuous mode [ 55.499073][ T3819] team0 (unregistering): Port device team_slave_1 removed [ 55.512273][ T3819] team0 (unregistering): Port device team_slave_0 removed [ 55.612113][ T3804] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.624445][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.689963][ T4447] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.697257][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.706857][ T4447] bridge_slave_0: entered allmulticast mode [ 55.715129][ T4447] bridge_slave_0: entered promiscuous mode [ 55.721854][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 55.721868][ T29] audit: type=1400 audit(1761020931.008:578): avc: denied { write } for pid=4488 comm="syz.0.356" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.731250][ T4447] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.758766][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.766662][ T4447] bridge_slave_1: entered allmulticast mode [ 55.773266][ T4447] bridge_slave_1: entered promiscuous mode [ 55.800840][ T4447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.815656][ T4447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.861637][ T4447] team0: Port device team_slave_0 added [ 55.884521][ T4447] team0: Port device team_slave_1 added [ 55.907241][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.914229][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.940894][ T4447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.954012][ T4447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.961061][ T4447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.987169][ T4447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.989215][ T29] audit: type=1326 audit(1761020931.278:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.028476][ T29] audit: type=1326 audit(1761020931.298:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.051846][ T29] audit: type=1326 audit(1761020931.298:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.075192][ T29] audit: type=1326 audit(1761020931.298:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.098735][ T29] audit: type=1326 audit(1761020931.298:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.121990][ T29] audit: type=1326 audit(1761020931.298:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.145444][ T29] audit: type=1326 audit(1761020931.298:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.168812][ T29] audit: type=1326 audit(1761020931.298:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.191959][ T29] audit: type=1326 audit(1761020931.298:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4506 comm="syz.4.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f87b1efc9 code=0x7ffc0000 [ 56.219336][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 56.231129][ T4447] hsr_slave_0: entered promiscuous mode [ 56.244980][ T4447] hsr_slave_1: entered promiscuous mode [ 56.251582][ T4447] debugfs: 'hsr0' already exists in 'hsr' [ 56.257402][ T4447] Cannot create hsr debugfs directory [ 56.319873][ T4528] loop4: detected capacity change from 0 to 1024 [ 56.339502][ T4528] EXT4-fs: Ignoring removed orlov option [ 56.345463][ T4528] EXT4-fs: Ignoring removed nomblk_io_submit option [ 56.399124][ T4528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.440772][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.494204][ T4541] netlink: 24 bytes leftover after parsing attributes in process `syz.2.375'. [ 56.611544][ T4549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.378'. [ 56.736664][ T4447] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.749559][ T4557] lo speed is unknown, defaulting to 1000 [ 56.758054][ T4447] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.774296][ T4447] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.822165][ T4447] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.913422][ T4447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.922232][ T4575] loop4: detected capacity change from 0 to 2048 [ 56.940645][ T4575] ext4: Unknown parameter 'smackfsdef' [ 56.958253][ T4447] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.970851][ T3825] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.978136][ T3825] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.007082][ T3804] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.014257][ T3804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.086311][ T4575] vlan2: entered allmulticast mode [ 57.091633][ T4575] bridge_slave_0: entered allmulticast mode [ 57.247218][ T4447] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.412772][ T4447] veth0_vlan: entered promiscuous mode [ 57.439691][ T4447] veth1_vlan: entered promiscuous mode [ 57.467287][ T4597] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4597 comm=syz.2.393 [ 57.470035][ T4447] veth0_macvtap: entered promiscuous mode [ 57.488627][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.0.392'. [ 57.516607][ T4447] veth1_macvtap: entered promiscuous mode [ 57.529441][ T4447] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.557689][ T4447] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.569585][ T3825] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.593751][ T3825] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.605821][ T3825] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.629748][ T4603] loop2: detected capacity change from 0 to 8192 [ 57.633804][ T3825] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.058022][ T4630] loop0: detected capacity change from 0 to 1024 [ 58.064859][ T4630] EXT4-fs: Ignoring removed orlov option [ 58.070745][ T4630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 58.093853][ T4630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.134102][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.189541][ T4641] netlink: 'syz.0.407': attribute type 4 has an invalid length. [ 58.218752][ T4644] netlink: 28 bytes leftover after parsing attributes in process `syz.0.409'. [ 58.227829][ T4644] netlink: 'syz.0.409': attribute type 7 has an invalid length. [ 58.235495][ T4644] netlink: 'syz.0.409': attribute type 8 has an invalid length. [ 58.243203][ T4644] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'. [ 58.275444][ T4646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.410'. [ 58.303152][ T4637] lo speed is unknown, defaulting to 1000 [ 58.564602][ T4660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4660 comm=syz.3.416 [ 58.577338][ T4660] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4660 comm=syz.3.416 [ 58.691763][ T4666] loop3: detected capacity change from 0 to 8192 [ 59.029096][ T4696] loop4: detected capacity change from 0 to 2048 [ 59.050618][ T4696] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.124443][ T4680] lo speed is unknown, defaulting to 1000 [ 59.173896][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.392779][ T4713] vlan2: entered allmulticast mode [ 59.406574][ T4713] dummy0: entered allmulticast mode [ 59.579677][ T4719] netlink: 'syz.4.439': attribute type 30 has an invalid length. [ 59.628074][ T3803] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.637158][ T3803] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.651741][ T4720] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4720 comm=syz.2.438 [ 59.739199][ T4717] loop0: detected capacity change from 0 to 2048 [ 59.754319][ T3803] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.825412][ T3803] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 59.878657][ T4724] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 60.001425][ T4729] netlink: 'syz.3.443': attribute type 4 has an invalid length. [ 60.141877][ T4737] loop0: detected capacity change from 0 to 1024 [ 60.161404][ T4737] EXT4-fs: Ignoring removed orlov option [ 60.305507][ T4737] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.438542][ T4747] loop2: detected capacity change from 0 to 512 [ 60.473434][ T4747] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.449: error while reading EA inode 32 err=-116 [ 60.486997][ T4747] EXT4-fs (loop2): Remounting filesystem read-only [ 60.501283][ T4747] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 60.511713][ T4747] EXT4-fs (loop2): 1 orphan inode deleted [ 60.513978][ T4755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'. [ 60.518597][ T4747] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.572046][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.576476][ T4755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.452'. [ 60.642031][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 60.884632][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.910417][ T4772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4772 comm=syz.3.457 [ 62.013998][ T4798] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 62.222830][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 62.222862][ T29] audit: type=1326 audit(1761020937.508:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.323765][ T29] audit: type=1326 audit(1761020937.568:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.347367][ T29] audit: type=1326 audit(1761020937.568:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.374584][ T29] audit: type=1326 audit(1761020937.568:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.397870][ T29] audit: type=1326 audit(1761020937.568:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.421179][ T29] audit: type=1326 audit(1761020937.568:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.444922][ T29] audit: type=1326 audit(1761020937.568:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.468457][ T29] audit: type=1326 audit(1761020937.568:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.491835][ T29] audit: type=1326 audit(1761020937.568:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.515317][ T29] audit: type=1326 audit(1761020937.578:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4803 comm="syz.3.472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff6cf9cefc9 code=0x7ffc0000 [ 62.851300][ T4826] bridge0: entered allmulticast mode [ 62.877460][ T4826] bridge_slave_1: left allmulticast mode [ 62.883171][ T4826] bridge_slave_1: left promiscuous mode [ 62.889006][ T4826] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.897555][ T4826] bridge_slave_0: left allmulticast mode [ 62.903257][ T4826] bridge_slave_0: left promiscuous mode [ 62.908990][ T4826] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.968512][ T4830] xt_hashlimit: max too large, truncated to 1048576 [ 62.995172][ T4832] loop3: detected capacity change from 0 to 1024 [ 63.059645][ T4832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.123822][ T4832] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.486: Allocating blocks 449-513 which overlap fs metadata [ 63.206627][ T4832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.486'. [ 63.231655][ T4831] EXT4-fs (loop3): pa ffff8881076b41c0: logic 48, phys. 177, len 21 [ 63.239760][ T4831] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 63.268281][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.486252][ T4866] loop4: detected capacity change from 0 to 512 [ 63.493392][ T4866] EXT4-fs: Ignoring removed oldalloc option [ 63.500765][ T4866] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 63.551555][ T4854] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 63.599870][ T4866] EXT4-fs (loop4): 1 truncate cleaned up [ 63.630436][ T4866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.651970][ T4873] netlink: 96 bytes leftover after parsing attributes in process `syz.3.504'. [ 63.817200][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.868465][ T4885] netlink: 'syz.4.508': attribute type 1 has an invalid length. [ 63.926273][ T4885] bond1: entered promiscuous mode [ 64.001759][ T4885] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.039515][ T4885] bond1: (slave bridge0): making interface the new active one [ 64.047190][ T4885] bridge0: entered promiscuous mode [ 64.060206][ T4885] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 64.128822][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.511'. [ 64.194152][ T4912] loop4: detected capacity change from 0 to 512 [ 64.203735][ T4912] EXT4-fs: Ignoring removed nobh option [ 64.211903][ T4914] capability: warning: `syz.3.520' uses 32-bit capabilities (legacy support in use) [ 64.236871][ T4912] EXT4-fs (loop4): failed to initialize system zone (-117) [ 64.253999][ T4921] loop8: detected capacity change from 0 to 7 [ 64.254696][ T4912] EXT4-fs (loop4): mount failed [ 64.578474][ T4966] netlink: 24 bytes leftover after parsing attributes in process `syz.4.540'. [ 64.697008][ T4967] loop8: detected capacity change from 0 to 7 [ 64.786259][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.793595][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.801323][ T4976] bridge0: entered allmulticast mode [ 64.812136][ T4976] bridge_slave_1: left allmulticast mode [ 64.817889][ T4976] bridge_slave_1: left promiscuous mode [ 64.823728][ T4976] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.837007][ T4976] bridge_slave_0: left allmulticast mode [ 64.842691][ T4976] bridge_slave_0: left promiscuous mode [ 64.848408][ T4976] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.989378][ T4987] loop0: detected capacity change from 0 to 512 [ 65.003820][ T4987] EXT4-fs: Ignoring removed oldalloc option [ 65.017567][ T4987] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 65.067107][ T4987] EXT4-fs (loop0): 1 truncate cleaned up [ 65.073360][ T4987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.121833][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.161007][ T4994] loop0: detected capacity change from 0 to 512 [ 65.192770][ T4994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.220421][ T4994] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.307507][ T3321] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.487667][ T5015] loop8: detected capacity change from 0 to 7 [ 65.495342][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.502628][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.513450][ T5017] bridge0: entered allmulticast mode [ 65.538980][ T5017] bridge_slave_1: left allmulticast mode [ 65.544802][ T5017] bridge_slave_1: left promiscuous mode [ 65.550605][ T5017] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.586649][ T5017] bridge_slave_0: left allmulticast mode [ 65.592362][ T5017] bridge_slave_0: left promiscuous mode [ 65.598221][ T5017] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.722175][ T5026] loop3: detected capacity change from 0 to 512 [ 65.723234][ T5027] loop0: detected capacity change from 0 to 512 [ 65.729406][ T5026] EXT4-fs: Ignoring removed oldalloc option [ 65.740230][ T5027] EXT4-fs: Ignoring removed nobh option [ 65.748354][ T5027] EXT4-fs (loop0): failed to initialize system zone (-117) [ 65.749637][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 65.755935][ T5027] EXT4-fs (loop0): mount failed [ 65.764592][ T5029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.564'. [ 65.785982][ T5026] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 65.802448][ T5026] EXT4-fs (loop3): 1 truncate cleaned up [ 65.811356][ T5026] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.859011][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.008204][ T5058] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.579'. [ 66.138526][ T5073] netem: change failed [ 66.243077][ T5086] 9pnet: Could not find request transport: uyix [ 66.340269][ T5106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.595'. [ 66.375433][ T5112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.597'. [ 66.679570][ T5139] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 66.715646][ T5139] team0: Port device dummy0 added [ 66.733965][ T5144] netlink: 'syz.4.607': attribute type 10 has an invalid length. [ 66.747079][ T5144] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.777910][ T5144] team0: Failed to send options change via netlink (err -105) [ 66.786410][ T5144] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 66.806185][ T5144] team0: Port device dummy0 removed [ 66.818646][ T5144] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 66.839824][ T5139] syz.4.607 (5139) used greatest stack depth: 9920 bytes left [ 66.863733][ T5148] netlink: 240 bytes leftover after parsing attributes in process `syz.2.609'. [ 67.052333][ T10] kernel read not supported for file /sg0 (pid: 10 comm: kworker/0:1) [ 67.260664][ T5179] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 67.309497][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 67.309515][ T29] audit: type=1400 audit(1761020942.598:808): avc: denied { create } for pid=5180 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.354581][ T5183] loop3: detected capacity change from 0 to 512 [ 67.359749][ T29] audit: type=1400 audit(1761020942.628:809): avc: denied { ioctl } for pid=5180 comm="syz.0.623" path="socket:[12134]" dev="sockfs" ino=12134 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.385611][ T29] audit: type=1400 audit(1761020942.628:810): avc: denied { bind } for pid=5180 comm="syz.0.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 67.404866][ T29] audit: type=1326 audit(1761020942.638:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99403aefc9 code=0x7ffc0000 [ 67.428223][ T29] audit: type=1326 audit(1761020942.638:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f99403aefc9 code=0x7ffc0000 [ 67.451574][ T29] audit: type=1326 audit(1761020942.638:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99403aefc9 code=0x7ffc0000 [ 67.475113][ T29] audit: type=1326 audit(1761020942.638:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f99403aefc9 code=0x7ffc0000 [ 67.498374][ T29] audit: type=1326 audit(1761020942.638:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99403aefc9 code=0x7ffc0000 [ 67.521728][ T29] audit: type=1326 audit(1761020942.638:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f99403aefc9 code=0x7ffc0000 [ 67.522803][ T5183] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.625: inode has both inline data and extents flags [ 67.545379][ T29] audit: type=1326 audit(1761020942.638:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.2.624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f99403aefc9 code=0x7ffc0000 [ 67.593300][ T5183] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.625: couldn't read orphan inode 15 (err -117) [ 67.606271][ T5183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.666927][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.762634][ T5213] loop4: detected capacity change from 0 to 128 [ 67.808533][ T5216] loop1: detected capacity change from 0 to 256 [ 67.848732][ T5216] vfat: Deprecated parameter 'posix' [ 67.854070][ T5216] FAT-fs: "posix" option is obsolete, not supported now [ 67.971784][ T5230] syz.4.636: attempt to access beyond end of device [ 67.971784][ T5230] loop4: rw=2049, sector=145, nr_sectors = 3 limit=128 [ 68.135383][ T5238] SELinux: Context system_u:object_r:udev_var_run_t:s0 is not valid (left unmapped). [ 68.191565][ T5241] vlan0: entered allmulticast mode [ 68.196775][ T5241] bridge_slave_0: entered allmulticast mode [ 68.278258][ T5248] __nla_validate_parse: 2 callbacks suppressed [ 68.278277][ T5248] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.653'. [ 68.439727][ T5253] loop2: detected capacity change from 0 to 1024 [ 68.446870][ T5253] EXT4-fs: Ignoring removed orlov option [ 68.454688][ T5253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.488583][ T5261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.656'. [ 68.529119][ T5253] ================================================================== [ 68.537279][ T5253] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 68.544629][ T5253] [ 68.546974][ T5253] read-write to 0xffff8881077bcda0 of 8 bytes by task 5264 on cpu 0: [ 68.555063][ T5253] xas_clear_mark+0x91/0x180 [ 68.559693][ T5253] __folio_start_writeback+0x24a/0x390 [ 68.565174][ T5253] ext4_bio_write_folio+0x5ad/0x9f0 [ 68.570385][ T5253] mpage_process_page_bufs+0x4a1/0x620 [ 68.575886][ T5253] mpage_prepare_extent_to_map+0x786/0xc00 [ 68.581716][ T5253] ext4_do_writepages+0x708/0x2750 [ 68.586842][ T5253] ext4_writepages+0x176/0x300 [ 68.591632][ T5253] do_writepages+0x1c6/0x310 [ 68.596237][ T5253] filemap_write_and_wait_range+0x144/0x340 [ 68.602139][ T5253] filemap_invalidate_pages+0xa4/0x1a0 [ 68.607619][ T5253] kiocb_invalidate_pages+0x6e/0x80 [ 68.612827][ T5253] __iomap_dio_rw+0x5d1/0x1240 [ 68.617589][ T5253] iomap_dio_rw+0x40/0x90 [ 68.622022][ T5253] ext4_file_write_iter+0xb3a/0xf60 [ 68.627237][ T5253] do_iter_readv_writev+0x4a1/0x540 [ 68.632451][ T5253] vfs_writev+0x2df/0x8b0 [ 68.636793][ T5253] __se_sys_pwritev2+0xfc/0x1c0 [ 68.641819][ T5253] __x64_sys_pwritev2+0x67/0x80 [ 68.646803][ T5253] x64_sys_call+0x2c59/0x3000 [ 68.651495][ T5253] do_syscall_64+0xd2/0x200 [ 68.656020][ T5253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.661918][ T5253] [ 68.664243][ T5253] read to 0xffff8881077bcda0 of 8 bytes by task 5253 on cpu 1: [ 68.671782][ T5253] xas_find_marked+0x218/0x620 [ 68.676562][ T5253] find_get_entry+0x5d/0x380 [ 68.681182][ T5253] filemap_get_folios_tag+0x13b/0x210 [ 68.686568][ T5253] mpage_prepare_extent_to_map+0x320/0xc00 [ 68.692390][ T5253] ext4_do_writepages+0x708/0x2750 [ 68.697514][ T5253] ext4_writepages+0x176/0x300 [ 68.702293][ T5253] do_writepages+0x1c6/0x310 [ 68.706899][ T5253] file_write_and_wait_range+0x156/0x2c0 [ 68.712542][ T5253] generic_buffers_fsync_noflush+0x45/0x120 [ 68.718473][ T5253] ext4_sync_file+0x1ab/0x690 [ 68.723186][ T5253] vfs_fsync_range+0x10d/0x130 [ 68.727961][ T5253] ext4_buffered_write_iter+0x34f/0x3c0 [ 68.733574][ T5253] ext4_file_write_iter+0x387/0xf60 [ 68.738787][ T5253] do_iter_readv_writev+0x4a1/0x540 [ 68.744020][ T5253] vfs_writev+0x2df/0x8b0 [ 68.748361][ T5253] __se_sys_pwritev2+0xfc/0x1c0 [ 68.753225][ T5253] __x64_sys_pwritev2+0x67/0x80 [ 68.758091][ T5253] x64_sys_call+0x2c59/0x3000 [ 68.762788][ T5253] do_syscall_64+0xd2/0x200 [ 68.767330][ T5253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.773226][ T5253] [ 68.775554][ T5253] value changed: 0xffffffffffffff80 -> 0xffffffffffffe180 [ 68.782666][ T5253] [ 68.784991][ T5253] Reported by Kernel Concurrency Sanitizer on: [ 68.791159][ T5253] CPU: 1 UID: 0 PID: 5253 Comm: syz.2.655 Not tainted syzkaller #0 PREEMPT(voluntary) [ 68.800930][ T5253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 68.811095][ T5253] ================================================================== [ 68.857665][ T5253] syz.2.655 (5253) used greatest stack depth: 9360 bytes left [ 68.886093][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.