last executing test programs: 12.145388821s ago: executing program 1 (id=217): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) 12.126305623s ago: executing program 1 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405}, 0x0, 0x0, 0xffffffffffffffff, 0xd) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 12.035469861s ago: executing program 1 (id=219): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x1, 0x0, 0x1) 12.019243153s ago: executing program 1 (id=220): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="17000000000000000400", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r1, @ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="8342f763f112", @ANYBLOB="a9f83be560bed80eb0e47e30c8a8fb29bb8274a853c1d4295da9470ce14f605c63207001104c6ddf24e13f35ac083777783f08f2c7918cbbc830de650b565673843c16278c4f0f051825b71515dc11443cf823fe5118afe8a58889144fa5be80849d0e52f12f8558351ef3fbfec9412a659533ffdcbe1e2b538509f5a1f525c48c636297623f35d8767654e830cd653888d0c4de99402641ad6ecd8fa421ca33f013a12535842ac39ca7e4416c0e11dab2fea6b652aa14ef70d46818a02d3575f8f1ef7e76a1c0de548fcfbdc1b717738d603692ecc93f8a356db7963f19e8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYRES64=0x0], 0x1c}}, 0x48000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'veth0_macvtap\x00'}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r4, @ANYBLOB="05100000bab4ef26000082308ada0000c44687f0cc713539c70450302a91047100000000941b4f6466cf2ee8390975899ff28a9fb531920c217094c9d56ccd6f159d4708b3f49b70e56dcf24950bf85c2e92998417cdde115113ae4ea81526a796b5730fff559518b44dbcbd4b9d76ab0bb82cee41f8f7b2ae3c893a78f8", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="03000000040000000100"/28], 0x48) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000f81900"/28], 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r7}, 0x10) acct(0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) epoll_create1(0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) bind$bt_hci(r10, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 11.127234136s ago: executing program 1 (id=227): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000500), &(0x7f0000000200)}, 0x20) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r4, 0xffffffffffffffff, 0x0) 11.045211253s ago: executing program 1 (id=228): r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0xb, 0x0, @void}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000080)={r0}, 0x8) lsetxattr$system_posix_acl(0x0, &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x5c, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) close(r1) socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d08", 0x13}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000001680)={&(0x7f00000000c0)={0x2, 0x0, @dev}, 0xe, &(0x7f0000000100)=[{&(0x7f0000000180)="c7", 0x1}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="2000000000000000840000bd280d536d85e5ba32747908b019cad77e846cf5efd0ec68dca5aa527723be42b083ba6ccd5d5794336bdba5a250bb469fadebf8fca7b5838a7eeb25d72f85e0d5c0a9337e6d8458c1aa71210dddbad71ab0554484ddd2e07121b52e8f1cdc013e6046af343746ca99a5956b021b919e34b814a2495a6663c85d1dc2a9d8c6051b36480ad2b87ca562eb9a3dde008837a085ae0217b7d864b0d712c2b5322c5ccf2d5aeacaf0d81cbebdfc9d2c35b6cef4f554da2b5196e53e412b3bf9098336333e9636268ffe64655845"], 0x20}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000040)={0x3d15, 0xfffffffb, 0x0, 0x8, 0x0, "dadd1023b1df022dace17a32d21100000000de"}) r3 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r3, &(0x7f0000000080)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00'], 0x28}}], 0x1, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000480)={0x0, 0x7, 0x0, [0xfffffffffffffffc, 0xa, 0xe4, 0x7, 0x80], [0xaa6a, 0x7fff, 0x9, 0x4, 0x1, 0x5, 0x48, 0x4, 0x9, 0x3, 0x2, 0x7, 0x1, 0x5, 0x3, 0x8, 0x3, 0x5, 0x494c, 0x6, 0xa, 0x6, 0x9, 0x7f, 0x10, 0xffffffffffffc35d, 0x4, 0x5, 0x7fff, 0x800, 0x7fffffff, 0x5, 0xfff, 0x17e, 0x8e, 0x4, 0x4, 0x9, 0x4, 0xf38c, 0x4d, 0x6, 0x5, 0x7ff, 0x2, 0xb, 0x4, 0xfffffffffffffffb, 0x80, 0x8, 0x6, 0x10001, 0x23d, 0x0, 0x8001, 0x7, 0x7ff, 0x0, 0x9, 0x7, 0x5, 0x7fffffff, 0x7, 0x3, 0x1, 0x2, 0x7, 0x9, 0x2, 0x7, 0x5, 0xfffffffffffffffe, 0x6, 0xbc, 0x7e, 0x8e00, 0x1, 0x5, 0xfffffffffffffff6, 0x5, 0x1000, 0x7, 0x7, 0x3, 0x1000000000000000, 0x80, 0x6b4, 0x401, 0x3, 0x7, 0x7, 0x6, 0x3, 0xc98f, 0x1, 0x9, 0x3, 0x1, 0x4, 0x94, 0x0, 0x7, 0x6, 0xb419, 0x7, 0x755, 0x5, 0x5, 0xc, 0x0, 0x1, 0x853, 0x9, 0x4, 0x5, 0x8, 0x10, 0x101, 0x1, 0xfffffffffffffff2, 0x8]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f00000008c0)={r4, 0x5, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) ptrace(0x10, 0x1) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r5, &(0x7f0000000400)=[{0x0}], 0x1, 0x0, 0xc) 2.131001952s ago: executing program 3 (id=336): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x24d8, @void, @value}, 0x94) unshare(0x28000400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/150, 0x96, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000380)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1, 0x40}, {0x2, 0x0, 0x4, @loopback}}}, 0x48) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x40, 0x0, "12c693ed380fe24aed2aff23079c0be441de43d45d4c86ec67b942272bd770da43821664e971890cd307f88d59f2e965d168f1c7653532997382501bed136ebfcd4070bf811a998fd55d5d24e8883b6f"}, 0xd8) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r5, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.116607533s ago: executing program 0 (id=337): socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000500), &(0x7f0000000200)}, 0x20) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) close_range(r1, 0xffffffffffffffff, 0x0) 2.030102261s ago: executing program 0 (id=339): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000340)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa0100fe}}], 0x1c) shutdown(r1, 0xb2b6d39ce7fe7c6d) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x30}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x9, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x21, 0x0, 0x34) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) io_uring_setup(0x270a, &(0x7f00000002c0)={0x0, 0x4, 0x80}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x19, 0x4, 0x8, 0x7fff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) 1.311256738s ago: executing program 3 (id=346): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@delalloc}, {@debug_want_extra_isize}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_io_uring_setup(0x3f74, 0x0, &(0x7f0000000080), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000004c0)=ANY=[], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) ftruncate(0xffffffffffffffff, 0xee72) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001200)=ANY=[@ANYBLOB="b003ffff", @ANYRES16, @ANYBLOB="080025bd7000ffdbdf2507000000240007800c00030000040000000000000c00030005000000000000000800020001040000c0000580240002800800030009000000080003005d000000080001001c000000080002000300000044000280080002000700000008000300030000000800010005000000080001001f0000000800030080000000080003000500000008000200080000000800030008000000440002800800020004000000080003000600000008000200000800000800010013000000080001001c000000080002000200000008000300080000000800010009000000080001007564700008000100756470005000028008000200ffffffff3c000380080002000008000008000100630600000800010001000000080002000800000008000200070000000800020003000000080002000200000008000100809a00004000028004000400040004002c000380080001000600000008000100130b000008000100c8000000080001000700000008000100f600000008000200060000003c00038008000200ffffff7f08000300d400000008000300050000000800030006000000080002007f00000008000100010000000800030005000000f00004800900010073797a31000000002400078008000400010400000800020036f8ffff080003000700000008000200d703a2732c00078008000300d600000008000300faffffff0800020007000000080003001fb6000008000200fcffffff44000780080003000300000008000100100000000800020010000000080001000f00000008000100020000000800020003000000080001001f00000008000300000000001400078008000400ff070000080003000e0000000c00078008000400f7ffffff1300010062726f6164636173742d6c696e6b00000900010073797a30000000000900010073797a3100000000fc0006804800040067636d28616573290000000000000000000000000000000000000000000000002000000052139ed1ee15ea3e0bb950bed2a998e3f5f255cc48d37f592637a7e72d1a4b774900040067636d28616573290000000000000000000000000000000000000000000000002100000093a1a863aaf68b5ac8d74951bb454077e26757ceb1be33d3f2ea38cb3df327b94c0000000400020008000600ff7f0000040002000400020004000500040002004500040067636d28616573290000000000000000000000000000000000000000000000001d0000004006d252e974a3d164f7850f6407b34a96bb0a1d070900d2dd58fe715b000000"], 0x3b0}, 0x1, 0x0, 0x0, 0x20000001}, 0x44004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r5, @ANYBLOB="20002bbd7000fbdbdf251400000008", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="080001000200000208", @ANYRES32, @ANYBLOB="0c000600030000000000000008001d00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32=r2, @ANYBLOB="0800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0xeda96d82d0cba86b}, 0x4800) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r7, 0x0, 0x61000006, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 1.167965752s ago: executing program 0 (id=348): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000007840)=[{{&(0x7f00000003c0)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f0000000280)=""/44, 0x2c}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/180, 0xb4}, {&(0x7f0000007b00)=""/196, 0xc4}, {&(0x7f0000000800)=""/220, 0xdc}, {0x0}, {&(0x7f0000000940)=""/238, 0xee}], 0x8}, 0xffff}, {{&(0x7f0000000b40)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000bc0)=""/70, 0x46}], 0x1, &(0x7f0000000c40)=""/169, 0xa9}, 0x7d19}, {{&(0x7f0000000d00)=@tipc=@id, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000ac0)=""/14, 0xe}, {&(0x7f0000000d80)=""/52, 0x34}, {&(0x7f0000000dc0)=""/193, 0xc1}, {&(0x7f0000000ec0)=""/23, 0x17}], 0x4}, 0x6}, {{&(0x7f0000007a80)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000fc0)=""/112, 0x70}, {&(0x7f00000010c0)=""/45, 0x2d}, {&(0x7f0000001100)=""/16, 0x10}, {&(0x7f0000001140)=""/67, 0x43}], 0x4}, 0x2}, {{&(0x7f0000001200)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001280)=""/17, 0x11}, {&(0x7f00000012c0)=""/154, 0x9a}, {&(0x7f0000001380)=""/134, 0x86}, {&(0x7f0000001440)=""/105, 0x69}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000001540)=""/60, 0x3c}, {&(0x7f0000001580)=""/218, 0xda}, {&(0x7f0000001680)=""/195, 0xc3}, {&(0x7f0000001780)=""/1, 0x1}, {&(0x7f00000017c0)=""/13, 0xd}], 0xa}, 0x80000000}, {{&(0x7f0000001940)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000002c80)=[{&(0x7f00000019c0)=""/172, 0xac}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/156, 0x9c}, {&(0x7f00000018c0)=""/24, 0x18}, {&(0x7f0000002b40)=""/77, 0x4d}, {&(0x7f0000002bc0)=""/183, 0xb7}], 0x6}, 0x7fffffff}, {{&(0x7f0000002d00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000004080)=[{&(0x7f0000002d80)=""/113, 0x71}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/90, 0x5a}, {&(0x7f0000003e80)=""/78, 0x4e}, {&(0x7f0000003f00)=""/143, 0x8f}, {&(0x7f0000003fc0)=""/163, 0xa3}], 0x6, &(0x7f0000004100)=""/4096, 0x1000}, 0x5e}, {{&(0x7f0000005100)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000007240)=[{&(0x7f0000005180)=""/46, 0x2e}, {&(0x7f00000051c0)=""/4096, 0x1000}, {&(0x7f00000061c0)=""/4096, 0x1000}, {&(0x7f00000071c0)=""/71, 0x47}], 0x4, &(0x7f0000007280)=""/10, 0xa}, 0xf32f}, {{&(0x7f00000072c0)=@qipcrtr, 0x80, &(0x7f00000076c0)=[{&(0x7f0000007340)=""/116, 0x74}, {&(0x7f00000073c0)=""/31, 0x1f}, {&(0x7f0000007400)=""/105, 0x69}, {&(0x7f0000007480)=""/123, 0x7b}, {&(0x7f0000007500)=""/4, 0x4}, {&(0x7f0000007c00)=""/159, 0x9f}, {&(0x7f0000007600)=""/63, 0x3f}, {&(0x7f0000007640)=""/118, 0x76}], 0x8, &(0x7f0000007740)=""/218, 0xda}, 0xffff}], 0x9, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000080)={0x0, 0x6}) ioctl$MON_IOCX_GETX(r5, 0x80089203, 0x0) 1.090348709s ago: executing program 3 (id=349): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x6200c0, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000380)={0x8, &(0x7f0000000340)=[{0x6, 0x17, 0x0, 0x9}, {0x4, 0x4, 0x4, 0x1}, {0x5, 0x40, 0x3, 0xfffffff8}, {0xf1ed, 0x0, 0x6, 0x2be1}, {0xfe89, 0x5, 0xc, 0x3}, {0x6, 0x8, 0x80, 0x91}, {0x4, 0xc, 0x1, 0x5}, {0x194f, 0x4, 0x1, 0x7b33}]}) r1 = inotify_init() r2 = inotify_add_watch(r1, 0x0, 0x64000811) inotify_rm_watch(r1, r2) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000020000905000000000000000002000000", @ANYRES32=r8, @ANYBLOB="140006000056bc00ffffffff000000000000000008000200ac1e0001"], 0x34}}, 0x0) 929.167864ms ago: executing program 4 (id=351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$null(0xffffff9c, &(0x7f00000004c0), 0x40800, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="92"], 0x20}}, 0x0) 813.522064ms ago: executing program 4 (id=352): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 787.843176ms ago: executing program 4 (id=354): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x6, 0x1, 0x6, 0x5}) 764.923089ms ago: executing program 4 (id=355): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r1}, 0x10) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 750.53656ms ago: executing program 2 (id=356): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405}, 0x0, 0x0, 0xffffffffffffffff, 0xd) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 635.733561ms ago: executing program 4 (id=357): sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="89f0260000000000006add0000000000000000000000000000c0f91c7fe586d84f4f3c6a000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) ioctl$HIDIOCGFEATURE(0xffffffffffffffff, 0xc0404807, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x7, 0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='attr/keycreate\x00') mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = syz_io_uring_setup(0x4174, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1}) r7 = socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000b00000000000a000900aaaaaaaaaaaa000008000300", @ANYRES32=r10], 0x30}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r13], 0x20}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x50, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffff0}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040001) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000009060102000009b7df296d251eb446000000000000ffff0800094000000039090088c198318583c59e0000040001000700c2a31d4600000000000004000000000000000100"/87], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) 634.649331ms ago: executing program 2 (id=358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fdatasync(r1) 614.018863ms ago: executing program 2 (id=359): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000001780)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@delalloc}, {@debug_want_extra_isize}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") syz_io_uring_setup(0x3f74, 0x0, &(0x7f0000000080), &(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x110, 0xffffffffffffffff, 0x10000000) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f00000004c0)=ANY=[], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) ftruncate(0xffffffffffffffff, 0xee72) sendmsg$TIPC_NL_PUBL_GET(r6, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000001200)=ANY=[@ANYBLOB="b003ffff", @ANYRES16, @ANYBLOB="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"], 0x3b0}, 0x1, 0x0, 0x0, 0x20000001}, 0x44004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000fffffffe) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000380)={&(0x7f0000000100), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='l\x00\x00', @ANYRES16=r5, @ANYBLOB="20002bbd7000fbdbdf251400000008", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=0x0, @ANYBLOB="080001000200000208", @ANYRES32, @ANYBLOB="0c000600030000000000000008001d00", @ANYRES32, @ANYBLOB="08001d00", @ANYRES32=r2, @ANYBLOB="0800010000000000"], 0x6c}, 0x1, 0x0, 0x0, 0xeda96d82d0cba86b}, 0x4800) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r7, 0x0, 0x61000006, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) 531.827661ms ago: executing program 4 (id=360): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYRES32=r2], 0x1, 0x35b, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x8e54}, 0x10) write(r1, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000e400dfff000000000500000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r7, @ANYRES32=r0, @ANYBLOB="260000734c01000000000017", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x3c56, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0) sendfile(r9, r1, &(0x7f0000000340)=0x8, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000640), 0xffffffff, r8}, 0x38) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r10}, 0x10) perf_event_open(&(0x7f0000000240)={0x2, 0x78, 0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 364.120686ms ago: executing program 2 (id=361): syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000f8a5000000000000000000000000000000000058497801270e3c41bf428808285fb2482016290bc2a1f17b52c98b7aa0224ab872d9c41934edfa5e43c3eb6a3d0e4dfdb9a520931cc1d54f150dc794907a4e7e260021082d2fa2af0ce017e3cdbc744c43129d506141ab2a39cf6fb216a130d83242a571eedfef10c18168e59da77892f1"], 0x48) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=[@rthdrdstopts={{0x18}}, @dstopts_2292={{0x10, 0x29, 0xb}}], 0x30}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0xeac01, 0x0) syz_open_pts(r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) setgroups(0x4000000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0xf, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) futex_waitv(&(0x7f0000001080)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) 223.274179ms ago: executing program 2 (id=362): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xec) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$null(0xffffff9c, &(0x7f00000004c0), 0x40800, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="92"], 0x20}}, 0x0) 214.13416ms ago: executing program 0 (id=363): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) rt_sigpending(0x0, 0x0) 192.627912ms ago: executing program 3 (id=364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$selinux_checkreqprot(0xffffff9c, &(0x7f0000000040), 0x290000, 0x0) sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000040a05000000000000000000110000000900030073797a300000000008000a400000000047fe030073797a30008000000c000240000000000000000408000b4000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lseek(0xffffffffffffffff, 0x9, 0xffffffff80000001) 155.556615ms ago: executing program 0 (id=365): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={'\x00', 0x2, 0x6, 0x1, 0x6, 0x5}) 129.817178ms ago: executing program 3 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600010000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f0000000000000000"], 0x254}}, 0x0) 80.094722ms ago: executing program 0 (id=367): perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x86041, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x280, 0x100000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x28, 0x5, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x7e1, &(0x7f0000001100)="$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") open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000005000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) 44.690026ms ago: executing program 3 (id=368): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x2405}, 0x0, 0x0, 0xffffffffffffffff, 0xd) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 2 (id=369): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$selinux_checkreqprot(0xffffff9c, &(0x7f0000000040), 0x290000, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000040a05000000000000000000110000000900030073797a300000000008000a400000000047fe030073797a30008000000c000240000000000000000408000b4000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) lseek(0xffffffffffffffff, 0x9, 0xffffffff80000001) kernel console output (not intermixed with test programs): [ 21.596996][ T29] audit: type=1400 audit(1727412650.038:81): avc: denied { read } for pid=2949 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. [ 26.149647][ T29] audit: type=1400 audit(1727412654.598:82): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.150958][ T3254] cgroup: Unknown subsys name 'net' [ 26.172563][ T29] audit: type=1400 audit(1727412654.598:83): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.199945][ T29] audit: type=1400 audit(1727412654.618:84): avc: denied { unmount } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.340195][ T3254] cgroup: Unknown subsys name 'cpuset' [ 26.346552][ T3254] cgroup: Unknown subsys name 'rlimit' [ 26.474115][ T29] audit: type=1400 audit(1727412654.918:85): avc: denied { setattr } for pid=3254 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.499454][ T29] audit: type=1400 audit(1727412654.918:86): avc: denied { create } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.519958][ T29] audit: type=1400 audit(1727412654.918:87): avc: denied { write } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.525065][ T3257] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.540404][ T29] audit: type=1400 audit(1727412654.918:88): avc: denied { read } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.569305][ T29] audit: type=1400 audit(1727412654.918:89): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.594121][ T29] audit: type=1400 audit(1727412654.918:90): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.610318][ T3254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.617972][ T29] audit: type=1400 audit(1727412654.988:91): avc: denied { relabelto } for pid=3257 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.551420][ T3274] chnl_net:caif_netlink_parms(): no params data found [ 28.562866][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 28.580680][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 28.697326][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.704621][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.711837][ T3265] bridge_slave_0: entered allmulticast mode [ 28.718239][ T3265] bridge_slave_0: entered promiscuous mode [ 28.727158][ T3274] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.734296][ T3274] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.741747][ T3274] bridge_slave_0: entered allmulticast mode [ 28.748292][ T3274] bridge_slave_0: entered promiscuous mode [ 28.756543][ T3272] chnl_net:caif_netlink_parms(): no params data found [ 28.765826][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.772933][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.780206][ T3265] bridge_slave_1: entered allmulticast mode [ 28.786511][ T3265] bridge_slave_1: entered promiscuous mode [ 28.803691][ T3274] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.810880][ T3274] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.818031][ T3274] bridge_slave_1: entered allmulticast mode [ 28.824655][ T3274] bridge_slave_1: entered promiscuous mode [ 28.848170][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.855293][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.862438][ T3264] bridge_slave_0: entered allmulticast mode [ 28.868864][ T3264] bridge_slave_0: entered promiscuous mode [ 28.885148][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 28.895285][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.904681][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.912065][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.919845][ T3264] bridge_slave_1: entered allmulticast mode [ 28.926777][ T3264] bridge_slave_1: entered promiscuous mode [ 28.943601][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.958795][ T3274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.971938][ T3274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.014939][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.024822][ T3265] team0: Port device team_slave_0 added [ 29.040917][ T3274] team0: Port device team_slave_0 added [ 29.052541][ T3265] team0: Port device team_slave_1 added [ 29.059492][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.071321][ T3274] team0: Port device team_slave_1 added [ 29.082027][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.089096][ T3272] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.096328][ T3272] bridge_slave_0: entered allmulticast mode [ 29.102929][ T3272] bridge_slave_0: entered promiscuous mode [ 29.128426][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.135560][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.142894][ T3272] bridge_slave_1: entered allmulticast mode [ 29.149676][ T3272] bridge_slave_1: entered promiscuous mode [ 29.174005][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.181242][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.188422][ T3268] bridge_slave_0: entered allmulticast mode [ 29.194830][ T3268] bridge_slave_0: entered promiscuous mode [ 29.206186][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.213183][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.239199][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.250594][ T3264] team0: Port device team_slave_0 added [ 29.256560][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.263544][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.289738][ T3274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.300642][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.307710][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.315066][ T3268] bridge_slave_1: entered allmulticast mode [ 29.321646][ T3268] bridge_slave_1: entered promiscuous mode [ 29.328852][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.343170][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.350171][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.376478][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.390500][ T3264] team0: Port device team_slave_1 added [ 29.396608][ T3274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.403662][ T3274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.429678][ T3274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.441461][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.461210][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.487784][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.511767][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.518726][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.544800][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.556288][ T3272] team0: Port device team_slave_0 added [ 29.562977][ T3272] team0: Port device team_slave_1 added [ 29.575325][ T3265] hsr_slave_0: entered promiscuous mode [ 29.581493][ T3265] hsr_slave_1: entered promiscuous mode [ 29.593068][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.600131][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.626132][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.661065][ T3274] hsr_slave_0: entered promiscuous mode [ 29.667103][ T3274] hsr_slave_1: entered promiscuous mode [ 29.673207][ T3274] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.680913][ T3274] Cannot create hsr debugfs directory [ 29.691451][ T3268] team0: Port device team_slave_0 added [ 29.708462][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.715455][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.741464][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.752899][ T3268] team0: Port device team_slave_1 added [ 29.768110][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.775189][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.801245][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.823403][ T3264] hsr_slave_0: entered promiscuous mode [ 29.829468][ T3264] hsr_slave_1: entered promiscuous mode [ 29.835443][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.843076][ T3264] Cannot create hsr debugfs directory [ 29.864419][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.871446][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.897494][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.908758][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.915762][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.941760][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.985909][ T3272] hsr_slave_0: entered promiscuous mode [ 29.992126][ T3272] hsr_slave_1: entered promiscuous mode [ 29.998099][ T3272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.005762][ T3272] Cannot create hsr debugfs directory [ 30.025820][ T3268] hsr_slave_0: entered promiscuous mode [ 30.031953][ T3268] hsr_slave_1: entered promiscuous mode [ 30.038000][ T3268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.045816][ T3268] Cannot create hsr debugfs directory [ 30.185187][ T3265] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.209790][ T3265] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.223091][ T3265] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.235970][ T3265] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.249393][ T3274] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.258063][ T3274] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.267542][ T3274] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.279027][ T3274] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.303964][ T3264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.312946][ T3264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.333113][ T3264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.347386][ T3264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.376352][ T3268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.385376][ T3268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.401026][ T3268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.418210][ T3268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.430101][ T3272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.438953][ T3272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.460056][ T3272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.474953][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.484123][ T3272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.502618][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.526242][ T3274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.536475][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.543640][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.565119][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.572192][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.597658][ T3274] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.617865][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.624975][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.652210][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.659303][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.670364][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.694835][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.703244][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.718203][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.725356][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.745863][ T1849] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.752981][ T1849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.769569][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.781780][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.788906][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.798496][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.820321][ T3272] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.833933][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.842646][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.864859][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.871990][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.880920][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.888100][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.909200][ T3268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.919639][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.933594][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.994112][ T3274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.052147][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.100002][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.125099][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.144782][ T3274] veth0_vlan: entered promiscuous mode [ 31.175861][ T3274] veth1_vlan: entered promiscuous mode [ 31.218580][ T3274] veth0_macvtap: entered promiscuous mode [ 31.256766][ T3274] veth1_macvtap: entered promiscuous mode [ 31.291115][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.307437][ T3265] veth0_vlan: entered promiscuous mode [ 31.314857][ T3274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.323314][ T3264] veth0_vlan: entered promiscuous mode [ 31.337762][ T3274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.346675][ T3274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.355684][ T3274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.365076][ T3274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.386000][ T3265] veth1_vlan: entered promiscuous mode [ 31.397787][ T3268] veth0_vlan: entered promiscuous mode [ 31.409856][ T3264] veth1_vlan: entered promiscuous mode [ 31.422159][ T3268] veth1_vlan: entered promiscuous mode [ 31.432237][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 31.432253][ T29] audit: type=1400 audit(1727412659.878:111): avc: denied { mounton } for pid=3274 comm="syz-executor" path="/root/syzkaller.DH1BCN/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.443321][ T3264] veth0_macvtap: entered promiscuous mode [ 31.471014][ T3272] veth0_vlan: entered promiscuous mode [ 31.476615][ T29] audit: type=1400 audit(1727412659.878:112): avc: denied { mount } for pid=3274 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.479886][ T3272] veth1_vlan: entered promiscuous mode [ 31.498882][ T29] audit: type=1400 audit(1727412659.878:113): avc: denied { mounton } for pid=3274 comm="syz-executor" path="/root/syzkaller.DH1BCN/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.529596][ T29] audit: type=1400 audit(1727412659.878:114): avc: denied { mount } for pid=3274 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.549568][ T3268] veth0_macvtap: entered promiscuous mode [ 31.551607][ T29] audit: type=1400 audit(1727412659.878:115): avc: denied { unmount } for pid=3274 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.558880][ T3264] veth1_macvtap: entered promiscuous mode [ 31.576899][ T29] audit: type=1400 audit(1727412659.918:116): avc: denied { mounton } for pid=3274 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.603397][ T3265] veth0_macvtap: entered promiscuous mode [ 31.613834][ T3274] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.614379][ T3265] veth1_macvtap: entered promiscuous mode [ 31.641205][ T3268] veth1_macvtap: entered promiscuous mode [ 31.662717][ T29] audit: type=1400 audit(1727412660.098:117): avc: denied { read write } for pid=3274 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.687135][ T29] audit: type=1400 audit(1727412660.098:118): avc: denied { open } for pid=3274 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.711220][ T29] audit: type=1400 audit(1727412660.098:119): avc: denied { ioctl } for pid=3274 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.725384][ T3407] loop1: detected capacity change from 0 to 512 [ 31.742516][ T29] audit: type=1400 audit(1727412660.108:120): avc: denied { prog_load } for pid=3402 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.747878][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.763436][ T3407] ======================================================= [ 31.763436][ T3407] WARNING: The mand mount option has been deprecated and [ 31.763436][ T3407] and is ignored by this kernel. Remove the mand [ 31.763436][ T3407] option from the mount to silence this warning. [ 31.763436][ T3407] ======================================================= [ 31.773142][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.780391][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.827047][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.837690][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.848533][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.857741][ T3264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.866507][ T3264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.875320][ T3264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.884162][ T3264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.903150][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.905028][ T3407] EXT4-fs (loop1): orphan cleanup on readonly fs [ 31.913739][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.913752][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.913776][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.914528][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.931481][ T3407] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7: bg 0: block 248: padding at end of block bitmap is not set [ 31.942973][ T3272] veth0_macvtap: entered promiscuous mode [ 31.978276][ T3407] EXT4-fs error (device loop1): ext4_acquire_dquot:6879: comm syz.1.7: Failed to acquire dquot type 1 [ 31.991245][ T3407] EXT4-fs (loop1): 1 truncate cleaned up [ 31.994928][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.007479][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.017494][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.027944][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.037919][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.048480][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.059778][ T3407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.060533][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.081406][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.091953][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.101997][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.106853][ T3407] netlink: zone id is out of range [ 32.112541][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.115383][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.117772][ T3407] netlink: set zone limit has 8 unknown bytes [ 32.129003][ T3272] veth1_macvtap: entered promiscuous mode [ 32.151682][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.162334][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.172184][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.182632][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.192527][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.202990][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.212866][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.223317][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.234343][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.251963][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.262564][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.272647][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.283148][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.293060][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.303559][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.314876][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.323936][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.334440][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.344373][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.354827][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.364799][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.375429][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.385524][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.395972][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.406694][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.416895][ T3268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.425779][ T3268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.434532][ T3268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.443265][ T3268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.454692][ T3265] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.463551][ T3265] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.472459][ T3265] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.481288][ T3265] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.493173][ T3272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.502006][ T3272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.510866][ T3272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.512245][ T3407] syz.1.7 (3407) used greatest stack depth: 9376 bytes left [ 32.519639][ T3272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.543872][ T3413] loop0: detected capacity change from 0 to 1024 [ 32.550716][ T3413] EXT4-fs: Ignoring removed orlov option [ 32.555612][ T3274] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.556392][ T3413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.592269][ T3416] loop1: detected capacity change from 0 to 512 [ 32.609839][ T3413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.625160][ T3416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.639323][ T3416] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.707415][ T3425] loop3: detected capacity change from 0 to 512 [ 32.727794][ T3425] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.728193][ T3425] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4: bg 0: block 248: padding at end of block bitmap is not set [ 32.732381][ T3425] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.4: Failed to acquire dquot type 1 [ 32.733032][ T3425] EXT4-fs (loop3): 1 truncate cleaned up [ 32.734701][ T3427] loop2: detected capacity change from 0 to 512 [ 32.741102][ T3425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.745177][ T3425] netlink: zone id is out of range [ 32.745186][ T3425] netlink: set zone limit has 8 unknown bytes [ 32.804830][ T3427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 32.817525][ T3431] netlink: 56 bytes leftover after parsing attributes in process `+}[@'. [ 32.856642][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.908801][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 32.916610][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 32.939325][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 32.947026][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 32.954764][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 32.962740][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 32.970445][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 32.978156][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 32.986099][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 32.993847][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 33.001733][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 33.009440][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 33.017139][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 33.024837][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 33.032603][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 33.040316][ T3344] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 33.053467][ T3441] loop4: detected capacity change from 0 to 512 [ 33.064692][ T3441] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.074962][ T3344] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 33.094695][ T3438] loop3: detected capacity change from 0 to 8192 [ 33.106640][ T3274] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.113188][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.117216][ T3441] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5: bg 0: block 64: padding at end of block bitmap is not set [ 33.140238][ T3441] EXT4-fs error (device loop4): ext4_acquire_dquot:6879: comm syz.4.5: Failed to acquire dquot type 0 [ 33.141910][ T3438] loop3: p4 [ 33.154659][ T3438] loop3: p4 size 16776960 extends beyond EOD, truncated [ 33.154920][ T3441] EXT4-fs (loop4): 1 truncate cleaned up [ 33.174443][ T3441] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.195982][ T3446] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 33.216372][ T3449] macvtap0: entered promiscuous mode [ 33.232285][ T3449] macvtap0: left promiscuous mode [ 33.270534][ T3452] loop3: detected capacity change from 0 to 2048 [ 33.296161][ T3453] loop1: detected capacity change from 0 to 512 [ 33.298110][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.311799][ T3453] EXT4-fs: Ignoring removed orlov option [ 33.317857][ T3453] EXT4-fs: Invalid want_extra_isize 9 [ 33.340577][ T3433] udevd[3433]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 33.357652][ T3452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.374261][ T3458] loop4: detected capacity change from 0 to 160 [ 33.384444][ T3458] iso9660: Unknown parameter '' [ 33.428662][ T333] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 33.435799][ C1] hrtimer: interrupt took 43509 ns [ 33.441119][ T333] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.441119][ T333] [ 33.455897][ T333] EXT4-fs (loop3): Total free blocks count 0 [ 33.461928][ T333] EXT4-fs (loop3): Free/Dirty block details [ 33.467945][ T333] EXT4-fs (loop3): free_blocks=0 [ 33.472969][ T333] EXT4-fs (loop3): dirty_blocks=0 [ 33.478077][ T333] EXT4-fs (loop3): Block reservation details [ 33.484106][ T333] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 33.503121][ T3460] batman_adv: batadv0: Adding interface: dummy0 [ 33.509497][ T3460] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.535100][ T3460] batman_adv: batadv0: Interface activated: dummy0 [ 33.543190][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.555242][ T3460] batadv0: mtu less than device minimum [ 33.561421][ T3460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.572122][ T3460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.582905][ T3460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.593785][ T3460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.604562][ T3460] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 33.620927][ T3463] batman_adv: batadv0: Adding interface: dummy0 [ 33.627280][ T3463] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.657268][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.657900][ T3463] batman_adv: batadv0: Interface activated: dummy0 [ 33.776569][ T3468] loop3: detected capacity change from 0 to 2048 [ 33.784414][ T3472] loop2: detected capacity change from 0 to 764 [ 33.829383][ T3472] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 33.845568][ T3471] loop0: detected capacity change from 0 to 8192 [ 33.853554][ T3468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.896832][ T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 33.909355][ T11] EXT4-fs (loop3): This should not happen!! Data will be lost [ 33.909355][ T11] [ 33.919087][ T11] EXT4-fs (loop3): Total free blocks count 0 [ 33.925121][ T11] EXT4-fs (loop3): Free/Dirty block details [ 33.931045][ T11] EXT4-fs (loop3): free_blocks=0 [ 33.936078][ T11] EXT4-fs (loop3): dirty_blocks=0 [ 33.941174][ T11] EXT4-fs (loop3): Block reservation details [ 33.947255][ T11] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 33.961697][ T3471] loop0: p4 [ 33.965095][ T3471] loop0: p4 size 16776960 extends beyond EOD, truncated [ 33.983768][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.296515][ T3487] loop3: detected capacity change from 0 to 512 [ 34.489514][ T3487] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.502786][ T3487] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 34.676286][ T3487] EXT4-fs (loop3): 1 truncate cleaned up [ 34.682598][ T3487] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.711365][ T3506] netlink: 268 bytes leftover after parsing attributes in process `syz.1.25'. [ 34.720492][ T3506] unsupported nla_type 65024 [ 34.818115][ T3522] loop2: detected capacity change from 0 to 1024 [ 34.829786][ T3522] EXT4-fs: Invalid want_extra_isize 0 [ 34.854071][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'. [ 34.921644][ T3529] block device autoloading is deprecated and will be removed. [ 34.930406][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.310610][ T3592] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.424603][ T3597] syz.2.46[3597] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.434141][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.555946][ T3600] loop2: detected capacity change from 0 to 512 [ 35.573244][ T3600] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.586694][ T3600] EXT4-fs (loop2): 1 truncate cleaned up [ 35.593460][ T3600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.715480][ T3607] loop1: detected capacity change from 0 to 1024 [ 35.726383][ T3607] EXT4-fs: Invalid want_extra_isize 0 [ 35.738829][ T3607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.50'. [ 35.804083][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.826535][ T3611] loop3: detected capacity change from 0 to 256 [ 35.840598][ T3611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 36.045999][ T3627] syz.1.58[3627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.046324][ T3627] syz.1.58[3627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.061746][ T3627] syz.1.58[3627] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.079163][ T3627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.156497][ T3632] loop1: detected capacity change from 0 to 2048 [ 36.192313][ T3632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.198887][ T3638] loop0: detected capacity change from 0 to 512 [ 36.216406][ T3638] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.234511][ T3638] EXT4-fs (loop0): 1 truncate cleaned up [ 36.244456][ T3638] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.264992][ T3561] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 36.279582][ T3561] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.279582][ T3561] [ 36.291924][ T3561] EXT4-fs (loop1): Total free blocks count 0 [ 36.298453][ T3561] EXT4-fs (loop1): Free/Dirty block details [ 36.306441][ T3561] EXT4-fs (loop1): free_blocks=0 [ 36.314359][ T3561] EXT4-fs (loop1): dirty_blocks=0 [ 36.321602][ T3561] EXT4-fs (loop1): Block reservation details [ 36.330591][ T3561] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 36.342845][ T3274] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.443901][ T3647] loop1: detected capacity change from 0 to 1024 [ 36.463411][ T3647] EXT4-fs: Invalid want_extra_isize 0 [ 36.483290][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.495819][ T3647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 36.541853][ T3652] loop0: detected capacity change from 0 to 256 [ 36.554348][ T3652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.67'. [ 36.634032][ T29] kauditd_printk_skb: 693 callbacks suppressed [ 36.634051][ T29] audit: type=1326 audit(1727412665.078:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.670703][ T29] audit: type=1326 audit(1727412665.078:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.694090][ T29] audit: type=1326 audit(1727412665.078:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.717549][ T29] audit: type=1326 audit(1727412665.078:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.740797][ T29] audit: type=1326 audit(1727412665.078:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.764154][ T29] audit: type=1326 audit(1727412665.078:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.787611][ T29] audit: type=1326 audit(1727412665.078:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.793538][ T3658] 9pnet_fd: Insufficient options for proto=fd [ 36.811391][ T29] audit: type=1326 audit(1727412665.078:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.840292][ T29] audit: type=1326 audit(1727412665.078:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.864108][ T29] audit: type=1326 audit(1727412665.078:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3655 comm="syz.0.68" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ffb50df39 code=0x7ffc0000 [ 36.880164][ T3660] netlink: 60 bytes leftover after parsing attributes in process `syz.1.69'. [ 36.942770][ T3664] syz.3.71[3664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.942919][ T3664] syz.3.71[3664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.962061][ T3664] syz.3.71[3664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.975331][ T3664] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.078368][ T3675] loop3: detected capacity change from 0 to 2048 [ 37.106369][ T3679] loop1: detected capacity change from 0 to 512 [ 37.119740][ T3679] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.142421][ T3675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.155053][ T3679] EXT4-fs (loop1): 1 truncate cleaned up [ 37.178324][ T3679] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.192983][ T3502] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 37.205332][ T3502] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.205332][ T3502] [ 37.215072][ T3502] EXT4-fs (loop3): Total free blocks count 0 [ 37.221252][ T3502] EXT4-fs (loop3): Free/Dirty block details [ 37.227172][ T3502] EXT4-fs (loop3): free_blocks=0 [ 37.232171][ T3502] EXT4-fs (loop3): dirty_blocks=0 [ 37.237207][ T3502] EXT4-fs (loop3): Block reservation details [ 37.243374][ T3502] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 37.275841][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.330166][ T3688] loop3: detected capacity change from 0 to 1024 [ 37.340682][ T3688] EXT4-fs: Invalid want_extra_isize 0 [ 37.362126][ T3688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 37.402005][ T3274] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.423115][ T3692] blktrace: Concurrent blktraces are not allowed on loop3 [ 37.852983][ T3711] netlink: 268 bytes leftover after parsing attributes in process `syz.2.86'. [ 37.921883][ T3717] loop2: detected capacity change from 0 to 2048 [ 37.940593][ T3717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.970193][ T3580] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 37.982702][ T3580] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.982702][ T3580] [ 37.992407][ T3580] EXT4-fs (loop2): Total free blocks count 0 [ 37.992426][ T3580] EXT4-fs (loop2): Free/Dirty block details [ 37.992440][ T3580] EXT4-fs (loop2): free_blocks=0 [ 37.992455][ T3580] EXT4-fs (loop2): dirty_blocks=0 [ 37.992530][ T3580] EXT4-fs (loop2): Block reservation details [ 37.992544][ T3580] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 37.994247][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.056425][ T3721] loop2: detected capacity change from 0 to 512 [ 38.068006][ T3721] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 38.080194][ T3721] EXT4-fs (loop2): 1 truncate cleaned up [ 38.083025][ T3723] loop4: detected capacity change from 0 to 256 [ 38.086421][ T3721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.109388][ T3723] netlink: 12 bytes leftover after parsing attributes in process `syz.4.91'. [ 38.204591][ T3727] blktrace: Concurrent blktraces are not allowed on loop9 [ 38.257127][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.363939][ T3740] netlink: 268 bytes leftover after parsing attributes in process `syz.2.98'. [ 39.170280][ T3771] netlink: 268 bytes leftover after parsing attributes in process `syz.1.110'. [ 39.241371][ T3781] syz.4.115[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.241505][ T3781] syz.4.115[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.253583][ T3781] syz.4.115[3781] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.274265][ T3783] loop1: detected capacity change from 0 to 1024 [ 39.292672][ T3783] EXT4-fs: Invalid want_extra_isize 0 [ 39.314355][ T3785] loop4: detected capacity change from 0 to 2048 [ 39.380585][ T3785] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.396218][ T3794] loop3: detected capacity change from 0 to 256 [ 39.398122][ T3793] loop0: detected capacity change from 0 to 512 [ 39.416982][ T3793] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 39.428822][ T3793] EXT4-fs (loop0): 1 truncate cleaned up [ 39.435217][ T3793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.450497][ T3495] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 39.462908][ T3495] EXT4-fs (loop4): This should not happen!! Data will be lost [ 39.462908][ T3495] [ 39.472664][ T3495] EXT4-fs (loop4): Total free blocks count 0 [ 39.478666][ T3495] EXT4-fs (loop4): Free/Dirty block details [ 39.484637][ T3495] EXT4-fs (loop4): free_blocks=0 [ 39.489696][ T3495] EXT4-fs (loop4): dirty_blocks=0 [ 39.494730][ T3495] EXT4-fs (loop4): Block reservation details [ 39.500948][ T3495] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 39.533461][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.566925][ T3802] netlink: 268 bytes leftover after parsing attributes in process `syz.1.122'. [ 39.738126][ T3822] loop2: detected capacity change from 0 to 2048 [ 39.820300][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.843922][ T3822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.877315][ T3495] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 39.889689][ T3495] EXT4-fs (loop2): This should not happen!! Data will be lost [ 39.889689][ T3495] [ 39.899399][ T3495] EXT4-fs (loop2): Total free blocks count 0 [ 39.905396][ T3495] EXT4-fs (loop2): Free/Dirty block details [ 39.911348][ T3495] EXT4-fs (loop2): free_blocks=0 [ 39.916336][ T3495] EXT4-fs (loop2): dirty_blocks=0 [ 39.921495][ T3495] EXT4-fs (loop2): Block reservation details [ 39.927487][ T3495] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 39.935220][ T3828] loop0: detected capacity change from 0 to 1024 [ 39.942713][ T3828] EXT4-fs: Invalid want_extra_isize 0 [ 39.946110][ T3268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.977795][ T3831] loop2: detected capacity change from 0 to 256 [ 40.146357][ T3844] netlink: 268 bytes leftover after parsing attributes in process `syz.0.137'. [ 40.436071][ T3862] loop3: detected capacity change from 0 to 1024 [ 40.443024][ T3862] EXT4-fs: Invalid want_extra_isize 0 [ 40.606686][ T3866] loop1: detected capacity change from 0 to 256 [ 40.624739][ T3868] loop4: detected capacity change from 0 to 764 [ 40.634963][ T3868] rock: directory entry would overflow storage [ 40.641307][ T3868] rock: sig=0x4654, size=5, remaining=4 [ 40.660171][ T3870] netlink: 268 bytes leftover after parsing attributes in process `syz.3.149'. [ 40.700257][ T3874] bpf_get_probe_write_proto: 6 callbacks suppressed [ 40.700277][ T3874] syz.3.151[3874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.707176][ T3874] syz.3.151[3874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.718638][ T3874] syz.3.151[3874] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.032985][ T3898] loop2: detected capacity change from 0 to 1024 [ 41.051912][ T3898] EXT4-fs: Invalid want_extra_isize 0 [ 41.066499][ T3898] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 41.252160][ T3904] netlink: 268 bytes leftover after parsing attributes in process `syz.2.161'. [ 41.308325][ T3910] syz.2.164[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.308407][ T3910] syz.2.164[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.319880][ T3910] syz.2.164[3910] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 41.351347][ T3912] loop2: detected capacity change from 0 to 256 [ 41.690031][ T29] kauditd_printk_skb: 917 callbacks suppressed [ 41.690049][ T29] audit: type=1326 audit(1727412670.138:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f428c3f4ee7 code=0x7ffc0000 [ 41.719767][ T29] audit: type=1326 audit(1727412670.138:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428c3998a9 code=0x7ffc0000 [ 41.743244][ T29] audit: type=1326 audit(1727412670.138:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f428c3f4ee7 code=0x7ffc0000 [ 41.770787][ T29] audit: type=1326 audit(1727412670.138:1738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f428c3998a9 code=0x7ffc0000 [ 41.794540][ T29] audit: type=1326 audit(1727412670.138:1739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 41.818169][ T29] audit: type=1326 audit(1727412670.138:1740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 41.841931][ T29] audit: type=1326 audit(1727412670.138:1741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 41.865407][ T29] audit: type=1326 audit(1727412670.138:1742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 41.888956][ T29] audit: type=1326 audit(1727412670.138:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 41.912815][ T29] audit: type=1326 audit(1727412670.138:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.3.170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 41.967418][ T3929] loop3: detected capacity change from 0 to 1024 [ 41.981670][ T3929] EXT4-fs: Invalid want_extra_isize 0 [ 42.028927][ T3929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.171'. [ 42.051535][ T3936] syz.4.176[3936] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.082245][ T3939] loop4: detected capacity change from 0 to 256 [ 42.489049][ T3966] blktrace: Concurrent blktraces are not allowed on loop5 [ 42.518310][ T3968] syz.2.189[3968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.518404][ T3968] syz.2.189[3968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.530077][ T3968] syz.2.189[3968] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.588997][ T3972] loop2: detected capacity change from 0 to 1024 [ 42.607273][ T3972] EXT4-fs: Invalid want_extra_isize 0 [ 42.874878][ T3982] loop2: detected capacity change from 0 to 256 [ 43.295166][ T4003] loop4: detected capacity change from 0 to 764 [ 43.318254][ T4003] rock: directory entry would overflow storage [ 43.324537][ T4003] rock: sig=0x4654, size=5, remaining=4 [ 44.026234][ T4033] loop1: detected capacity change from 0 to 764 [ 44.033893][ T4033] rock: directory entry would overflow storage [ 44.040195][ T4033] rock: sig=0x4654, size=5, remaining=4 [ 44.581239][ T4053] loop4: detected capacity change from 0 to 2048 [ 44.604396][ T4053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.633083][ T3544] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 44.645481][ T3544] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.645481][ T3544] [ 44.655223][ T3544] EXT4-fs (loop4): Total free blocks count 0 [ 44.661245][ T3544] EXT4-fs (loop4): Free/Dirty block details [ 44.667203][ T3544] EXT4-fs (loop4): free_blocks=0 [ 44.674123][ T3544] EXT4-fs (loop4): dirty_blocks=0 [ 44.681605][ T3544] EXT4-fs (loop4): Block reservation details [ 44.692254][ T3544] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 44.701224][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.367798][ T4073] loop3: detected capacity change from 0 to 1024 [ 45.376361][ T4073] EXT4-fs: Invalid want_extra_isize 0 [ 46.507398][ T4097] blktrace: Concurrent blktraces are not allowed on loop9 [ 46.523304][ T4098] loop3: detected capacity change from 0 to 2048 [ 46.544173][ T4098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.572840][ T3501] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 46.585271][ T3501] EXT4-fs (loop3): This should not happen!! Data will be lost [ 46.585271][ T3501] [ 46.595056][ T3501] EXT4-fs (loop3): Total free blocks count 0 [ 46.595149][ T3501] EXT4-fs (loop3): Free/Dirty block details [ 46.595162][ T3501] EXT4-fs (loop3): free_blocks=0 [ 46.595209][ T3501] EXT4-fs (loop3): dirty_blocks=0 [ 46.617256][ T3501] EXT4-fs (loop3): Block reservation details [ 46.623423][ T3501] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 46.631124][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.660462][ T4104] loop3: detected capacity change from 0 to 1024 [ 46.667239][ T4104] EXT4-fs: Invalid want_extra_isize 0 [ 46.703702][ T29] kauditd_printk_skb: 832 callbacks suppressed [ 46.703717][ T29] audit: type=1326 audit(1727412675.148:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb446554ee7 code=0x7ffc0000 [ 46.741936][ T29] audit: type=1326 audit(1727412675.188:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4464f98a9 code=0x7ffc0000 [ 46.765340][ T29] audit: type=1326 audit(1727412675.188:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb446554ee7 code=0x7ffc0000 [ 46.788938][ T29] audit: type=1326 audit(1727412675.188:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb4464f98a9 code=0x7ffc0000 [ 46.812312][ T29] audit: type=1326 audit(1727412675.188:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44655df39 code=0x7ffc0000 [ 46.835844][ T29] audit: type=1326 audit(1727412675.188:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44655df39 code=0x7ffc0000 [ 46.859266][ T29] audit: type=1326 audit(1727412675.188:2583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7fb44655df39 code=0x7ffc0000 [ 46.882626][ T29] audit: type=1326 audit(1727412675.188:2584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4108 comm="syz.4.243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb44655df39 code=0x7ffc0000 [ 46.914165][ T29] audit: type=1326 audit(1727412675.238:2585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd1aa734ee7 code=0x7ffc0000 [ 46.937646][ T29] audit: type=1326 audit(1727412675.238:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4106 comm="syz.2.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd1aa6d98a9 code=0x7ffc0000 [ 47.957968][ T4138] loop3: detected capacity change from 0 to 2048 [ 47.971489][ T4138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.000131][ T3479] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 48.012809][ T3479] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.012809][ T3479] [ 48.022534][ T3479] EXT4-fs (loop3): Total free blocks count 0 [ 48.028528][ T3479] EXT4-fs (loop3): Free/Dirty block details [ 48.034499][ T3479] EXT4-fs (loop3): free_blocks=0 [ 48.039466][ T3479] EXT4-fs (loop3): dirty_blocks=0 [ 48.044557][ T3479] EXT4-fs (loop3): Block reservation details [ 48.050633][ T3479] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 48.057994][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.185457][ T4147] loop3: detected capacity change from 0 to 1024 [ 48.192504][ T4147] EXT4-fs: Invalid want_extra_isize 0 [ 48.653985][ T4163] loop4: detected capacity change from 0 to 764 [ 48.661933][ T4163] rock: directory entry would overflow storage [ 48.668163][ T4163] rock: sig=0x4654, size=5, remaining=4 [ 49.241695][ T4172] loop3: detected capacity change from 0 to 2048 [ 49.260824][ T4172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.290210][ T3479] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 49.302880][ T3479] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.302880][ T3479] [ 49.312546][ T3479] EXT4-fs (loop3): Total free blocks count 0 [ 49.318621][ T3479] EXT4-fs (loop3): Free/Dirty block details [ 49.324572][ T3479] EXT4-fs (loop3): free_blocks=0 [ 49.329560][ T3479] EXT4-fs (loop3): dirty_blocks=0 [ 49.334905][ T3479] EXT4-fs (loop3): Block reservation details [ 49.340944][ T3479] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 49.344094][ T4176] bpf_get_probe_write_proto: 2 callbacks suppressed [ 49.344113][ T4176] syz.2.267[4176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.348452][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.353685][ T4176] syz.2.267[4176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.373940][ T4176] syz.2.267[4176] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.644686][ T4186] __nla_validate_parse: 1 callbacks suppressed [ 49.644708][ T4186] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'. [ 49.690603][ T4190] netlink: 348 bytes leftover after parsing attributes in process `syz.4.272'. [ 49.781041][ T4196] loop4: detected capacity change from 0 to 1024 [ 49.789932][ T4196] EXT4-fs: Invalid want_extra_isize 0 [ 49.989612][ T4200] loop4: detected capacity change from 0 to 2048 [ 50.002023][ T4200] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.030650][ T3582] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 50.043013][ T3582] EXT4-fs (loop4): This should not happen!! Data will be lost [ 50.043013][ T3582] [ 50.052792][ T3582] EXT4-fs (loop4): Total free blocks count 0 [ 50.058825][ T3582] EXT4-fs (loop4): Free/Dirty block details [ 50.064791][ T3582] EXT4-fs (loop4): free_blocks=0 [ 50.069797][ T3582] EXT4-fs (loop4): dirty_blocks=0 [ 50.074845][ T3582] EXT4-fs (loop4): Block reservation details [ 50.080950][ T3582] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 50.087927][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.498606][ T4228] netlink: 348 bytes leftover after parsing attributes in process `syz.3.284'. [ 50.578510][ T4210] chnl_net:caif_netlink_parms(): no params data found [ 50.599618][ T3491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.641009][ T4210] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.648178][ T4210] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.655559][ T4210] bridge_slave_0: entered allmulticast mode [ 50.662848][ T4210] bridge_slave_0: entered promiscuous mode [ 50.675628][ T3491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.686848][ T4210] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.693996][ T4210] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.701270][ T4210] bridge_slave_1: entered allmulticast mode [ 50.707899][ T4210] bridge_slave_1: entered promiscuous mode [ 50.724659][ T3491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.742282][ T4210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.753027][ T4210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.772514][ T4210] team0: Port device team_slave_0 added [ 50.779781][ T4210] team0: Port device team_slave_1 added [ 50.796627][ T3491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.813564][ T4210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.820622][ T4210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.846691][ T4210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.857994][ T4210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.865143][ T4210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.891185][ T4210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.918292][ T4210] hsr_slave_0: entered promiscuous mode [ 50.924579][ T4210] hsr_slave_1: entered promiscuous mode [ 50.930478][ T4210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.938160][ T4210] Cannot create hsr debugfs directory [ 50.972689][ T3491] bridge_slave_1: left allmulticast mode [ 50.978460][ T3491] bridge_slave_1: left promiscuous mode [ 50.984209][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.993824][ T3491] bridge_slave_0: left allmulticast mode [ 50.999576][ T3491] bridge_slave_0: left promiscuous mode [ 51.005291][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.018310][ T4246] 9pnet_fd: Insufficient options for proto=fd [ 51.086013][ T4257] netlink: 60 bytes leftover after parsing attributes in process `syz.4.288'. [ 51.132244][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.142747][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.153099][ T3491] bond0 (unregistering): Released all slaves [ 51.209761][ T3491] hsr_slave_0: left promiscuous mode [ 51.216159][ T3491] hsr_slave_1: left promiscuous mode [ 51.222475][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.229985][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.238073][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.245608][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.254813][ T3491] veth1_macvtap: left promiscuous mode [ 51.260339][ T3491] veth0_macvtap: left promiscuous mode [ 51.265916][ T3491] veth1_vlan: left promiscuous mode [ 51.271193][ T3491] veth0_vlan: left promiscuous mode [ 51.438312][ T3491] team0 (unregistering): Port device team_slave_1 removed [ 51.462527][ T3491] team0 (unregistering): Port device team_slave_0 removed [ 51.587196][ T4283] loop3: detected capacity change from 0 to 2048 [ 51.611070][ T4283] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.643835][ T3498] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 51.656443][ T3498] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.656443][ T3498] [ 51.666229][ T3498] EXT4-fs (loop3): Total free blocks count 0 [ 51.672247][ T3498] EXT4-fs (loop3): Free/Dirty block details [ 51.678202][ T3498] EXT4-fs (loop3): free_blocks=0 [ 51.683275][ T3498] EXT4-fs (loop3): dirty_blocks=0 [ 51.688317][ T3498] EXT4-fs (loop3): Block reservation details [ 51.694335][ T3498] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 51.701711][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.724178][ T29] kauditd_printk_skb: 749 callbacks suppressed [ 51.724193][ T29] audit: type=1326 audit(1727412680.168:3336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 51.754602][ T29] audit: type=1326 audit(1727412680.168:3337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 51.778238][ T29] audit: type=1326 audit(1727412680.168:3338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 51.801634][ T29] audit: type=1326 audit(1727412680.168:3339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 51.825113][ T29] audit: type=1326 audit(1727412680.168:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 51.848366][ T29] audit: type=1326 audit(1727412680.168:3341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4301 comm="syz.3.298" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f428c3fdf39 code=0x7ffc0000 [ 51.988690][ T4210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 51.998743][ T4210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 52.007797][ T4210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 52.016961][ T4210] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 52.085171][ T4210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.100166][ T4210] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.110701][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.117938][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.129987][ T3479] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.137206][ T3479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.235770][ T4361] 9pnet_fd: Insufficient options for proto=fd [ 52.239330][ T29] audit: type=1326 audit(1727412680.628:3342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4263 comm="syz.2.289" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1aa73df39 code=0x7ffc0000 [ 52.295413][ T4210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.317239][ T4368] netlink: 60 bytes leftover after parsing attributes in process `syz.2.300'. [ 52.366794][ T4210] veth0_vlan: entered promiscuous mode [ 52.375625][ T4210] veth1_vlan: entered promiscuous mode [ 52.390577][ T4210] veth0_macvtap: entered promiscuous mode [ 52.397982][ T4210] veth1_macvtap: entered promiscuous mode [ 52.409800][ T4210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.420327][ T4210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.438592][ T4210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.457224][ T4210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.457343][ T4377] loop4: detected capacity change from 0 to 764 [ 52.467727][ T4210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.467741][ T4210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.467760][ T4210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.467774][ T4210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.504282][ T4210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.504298][ T4210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.504313][ T4210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.518320][ T4210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.555480][ T4377] rock: directory entry would overflow storage [ 52.557965][ T4210] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.561739][ T4377] rock: sig=0x4654, size=5, remaining=4 [ 52.576107][ T4210] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.584870][ T4210] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.593687][ T4210] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.671538][ T29] audit: type=1326 audit(1727412681.118:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09698fdf39 code=0x7ffc0000 [ 52.695277][ T29] audit: type=1326 audit(1727412681.118:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f09698fdf39 code=0x7ffc0000 [ 52.718746][ T29] audit: type=1326 audit(1727412681.118:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4388 comm="syz.0.305" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f09698fdf39 code=0x7ffc0000 [ 52.760310][ T4393] netlink: 348 bytes leftover after parsing attributes in process `syz.0.308'. [ 52.767319][ T4398] 9pnet_fd: Insufficient options for proto=fd [ 52.824896][ T4405] loop4: detected capacity change from 0 to 2048 [ 52.842766][ T4405] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.842872][ T4409] netlink: 60 bytes leftover after parsing attributes in process `syz.3.311'. [ 52.879423][ T3491] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 52.891772][ T3491] EXT4-fs (loop4): This should not happen!! Data will be lost [ 52.891772][ T3491] [ 52.901573][ T3491] EXT4-fs (loop4): Total free blocks count 0 [ 52.907565][ T3491] EXT4-fs (loop4): Free/Dirty block details [ 52.913594][ T3491] EXT4-fs (loop4): free_blocks=0 [ 52.918541][ T3491] EXT4-fs (loop4): dirty_blocks=0 [ 52.923688][ T3491] EXT4-fs (loop4): Block reservation details [ 52.929745][ T3491] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 52.931781][ T4415] loop2: detected capacity change from 0 to 764 [ 52.937315][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.951252][ T4415] rock: directory entry would overflow storage [ 52.957484][ T4415] rock: sig=0x4654, size=5, remaining=4 [ 53.003324][ T4419] loop3: detected capacity change from 0 to 160 [ 53.018534][ T4419] iso9660: Unknown parameter '' [ 53.414798][ T4437] netlink: 348 bytes leftover after parsing attributes in process `syz.3.323'. [ 53.553430][ T4445] loop3: detected capacity change from 0 to 2048 [ 53.581444][ T4445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.610331][ T3491] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 28 with max blocks 2 with error 28 [ 53.622715][ T3491] EXT4-fs (loop3): This should not happen!! Data will be lost [ 53.622715][ T3491] [ 53.632498][ T3491] EXT4-fs (loop3): Total free blocks count 0 [ 53.638607][ T3491] EXT4-fs (loop3): Free/Dirty block details [ 53.644587][ T3491] EXT4-fs (loop3): free_blocks=0 [ 53.649655][ T3491] EXT4-fs (loop3): dirty_blocks=0 [ 53.654778][ T3491] EXT4-fs (loop3): Block reservation details [ 53.660920][ T3491] EXT4-fs (loop3): i_reserved_data_blocks=0 [ 53.670457][ T3272] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.694524][ T4451] 9pnet_fd: Insufficient options for proto=fd [ 53.718474][ T4455] loop0: detected capacity change from 0 to 764 [ 53.727060][ T4455] rock: directory entry would overflow storage [ 53.733301][ T4455] rock: sig=0x4654, size=5, remaining=4 [ 53.743597][ T4451] netlink: 60 bytes leftover after parsing attributes in process `syz.3.327'. [ 53.811622][ T4465] loop0: detected capacity change from 0 to 512 [ 53.813738][ T4463] loop3: detected capacity change from 0 to 1024 [ 53.823843][ T4465] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 53.824972][ T4463] EXT4-fs: Invalid want_extra_isize 0 [ 53.855435][ T4465] EXT4-fs (loop0): 1 truncate cleaned up [ 53.861557][ T4465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.976493][ T4470] loop2: detected capacity change from 0 to 160 [ 53.986126][ T4470] iso9660: Unknown parameter '' [ 54.055920][ T4210] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.096262][ T4475] netlink: 348 bytes leftover after parsing attributes in process `syz.0.335'. [ 54.366384][ T4487] syz.2.340[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.366492][ T4487] syz.2.340[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.377968][ T4487] syz.2.340[4487] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 54.446648][ T4493] loop2: detected capacity change from 0 to 764 [ 54.465898][ T4493] rock: directory entry would overflow storage [ 54.472198][ T4493] rock: sig=0x4654, size=5, remaining=4 [ 54.936050][ T4500] loop3: detected capacity change from 0 to 1024 [ 54.942803][ T4500] EXT4-fs: Invalid want_extra_isize 0 [ 55.035599][ T4504] loop4: detected capacity change from 0 to 512 [ 55.042463][ T4504] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.054809][ T4504] EXT4-fs (loop4): 1 truncate cleaned up [ 55.061066][ T4504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.293058][ T3265] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.324437][ T4514] syz.4.351[4514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.324513][ T4514] syz.4.351[4514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.339374][ T4514] syz.4.351[4514] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.358217][ T3498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.444230][ T3498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.493807][ T3498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.542079][ T3498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.573258][ T4516] chnl_net:caif_netlink_parms(): no params data found [ 55.611233][ T4541] 9pnet_fd: Insufficient options for proto=fd [ 55.643645][ T4548] loop2: detected capacity change from 0 to 1024 [ 55.650801][ T4548] EXT4-fs: Invalid want_extra_isize 0 [ 55.671930][ T4541] netlink: 60 bytes leftover after parsing attributes in process `syz.4.357'. [ 55.684889][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.692036][ T4516] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.703954][ T4516] bridge_slave_0: entered allmulticast mode [ 55.707861][ T4553] loop4: detected capacity change from 0 to 160 [ 55.712437][ T4516] bridge_slave_0: entered promiscuous mode [ 55.716774][ T4553] iso9660: Unknown parameter '' [ 55.732160][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.739391][ T4516] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.751834][ T4516] bridge_slave_1: entered allmulticast mode [ 55.758438][ T4516] bridge_slave_1: entered promiscuous mode [ 55.790458][ T4516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.800876][ T3498] bridge_slave_1: left allmulticast mode [ 55.806643][ T3498] bridge_slave_1: left promiscuous mode [ 55.812409][ T3498] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.831540][ T3498] bridge_slave_0: left allmulticast mode [ 55.837782][ T3498] bridge_slave_0: left promiscuous mode [ 55.845558][ T3498] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.886774][ T4560] syz.2.361[4560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.886942][ T4560] syz.2.361[4560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.903561][ T4560] syz.2.361[4560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 55.986118][ T4566] syz.2.362[4566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 56.083316][ T3498] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.114216][ T4576] blktrace: Concurrent blktraces are not allowed on loop1 [ 56.133710][ T4580] netlink: 348 bytes leftover after parsing attributes in process `syz.3.366'. [ 56.139383][ T3498] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.173636][ T3498] bond0 (unregistering): Released all slaves [ 56.197853][ T4516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.218112][ T4583] loop0: detected capacity change from 0 to 764 [ 56.263851][ T4516] team0: Port device team_slave_0 added [ 56.271245][ T4516] team0: Port device team_slave_1 added [ 56.279519][ T3582] ================================================================== [ 56.287624][ T3582] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 56.294942][ T3582] [ 56.297279][ T3582] read to 0xffff8881044460e8 of 4 bytes by task 3479 on cpu 1: [ 56.304838][ T3582] atime_needs_update+0x261/0x3e0 [ 56.309897][ T3582] touch_atime+0x4a/0x350 [ 56.314250][ T3582] shmem_file_read_iter+0x4aa/0x550 [ 56.319470][ T3582] do_iter_readv_writev+0x394/0x450 [ 56.324793][ T3582] vfs_iter_read+0x171/0x3b0 [ 56.329413][ T3582] loop_process_work+0x79a/0x1220 [ 56.334557][ T3582] loop_rootcg_workfn+0x22/0x30 [ 56.339442][ T3582] process_scheduled_works+0x483/0x9a0 [ 56.344939][ T3582] worker_thread+0x51d/0x6f0 [ 56.349547][ T3582] kthread+0x1d1/0x210 [ 56.353651][ T3582] ret_from_fork+0x4b/0x60 [ 56.358099][ T3582] ret_from_fork_asm+0x1a/0x30 [ 56.362896][ T3582] [ 56.365236][ T3582] write to 0xffff8881044460e8 of 4 bytes by task 3582 on cpu 0: [ 56.372881][ T3582] touch_atime+0x1f3/0x350 [ 56.377328][ T3582] shmem_file_read_iter+0x4aa/0x550 [ 56.382551][ T3582] do_iter_readv_writev+0x394/0x450 [ 56.387791][ T3582] vfs_iter_read+0x171/0x3b0 [ 56.392418][ T3582] loop_process_work+0x79a/0x1220 [ 56.397476][ T3582] loop_workfn+0x31/0x40 [ 56.401753][ T3582] process_scheduled_works+0x483/0x9a0 [ 56.407250][ T3582] worker_thread+0x51d/0x6f0 [ 56.411863][ T3582] kthread+0x1d1/0x210 [ 56.415955][ T3582] ret_from_fork+0x4b/0x60 [ 56.420396][ T3582] ret_from_fork_asm+0x1a/0x30 [ 56.425185][ T3582] [ 56.427519][ T3582] value changed: 0x299b8dad -> 0x2b65512d [ 56.433248][ T3582] [ 56.435578][ T3582] Reported by Kernel Concurrency Sanitizer on: [ 56.441751][ T3582] CPU: 0 UID: 0 PID: 3582 Comm: kworker/u8:64 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 56.452362][ T3582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 56.462527][ T3582] Workqueue: loop0 loop_workfn [ 56.467333][ T3582] ================================================================== [ 56.479856][ T4583] rock: directory entry would overflow storage [ 56.486058][ T4583] rock: sig=0x4654, size=5, remaining=4 [ 56.547535][ T3498] hsr_slave_0: left promiscuous mode [ 56.556582][ T3498] hsr_slave_1: left promiscuous mode [ 56.576011][ T3498] batman_adv: batadv0: Interface deactivated: dummy0 [ 56.582954][ T3498] batman_adv: batadv0: Removing interface: dummy0 [ 56.610435][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.629545][ T3498] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.636985][ T3498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.657492][ T3498] veth1_macvtap: left promiscuous mode [ 56.663039][ T3498] veth0_macvtap: left promiscuous mode [ 56.668599][ T3498] veth1_vlan: left promiscuous mode [ 56.673903][ T3498] veth0_vlan: left promiscuous mode [ 56.778942][ T3498] team0 (unregistering): Port device team_slave_1 removed [ 56.790572][ T3498] team0 (unregistering): Port device team_slave_0 removed [ 56.826428][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.833519][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.859507][ T4516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.872779][ T4516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.879816][ T4516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.905753][ T4516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.933892][ T4516] hsr_slave_0: entered promiscuous mode [ 56.940099][ T4516] hsr_slave_1: entered promiscuous mode [ 56.946029][ T4516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.953621][ T4516] Cannot create hsr debugfs directory [ 57.427994][ T4516] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.437591][ T4516] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.447295][ T4516] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.456382][ T4516] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.500335][ T4516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.515935][ T4516] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.526427][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.533559][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.556343][ T3491] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.563938][ T3491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.628842][ T4516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.713230][ T4516] veth0_vlan: entered promiscuous mode [ 57.725610][ T4516] veth1_vlan: entered promiscuous mode [ 57.745306][ T4516] veth0_macvtap: entered promiscuous mode [ 57.754047][ T4516] veth1_macvtap: entered promiscuous mode [ 57.766973][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.777524][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.787476][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.798014][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.811518][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.823056][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.833555][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.843513][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.854001][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.863835][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.874394][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.884241][ T4516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.895050][ T4516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.909524][ T4516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.922287][ T4516] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.931078][ T4516] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.940077][ T4516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.948954][ T4516] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0