last executing test programs: 21.363154929s ago: executing program 4 (id=206): syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) 20.070192344s ago: executing program 4 (id=235): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0xe, &(0x7f0000000000)={0x40003a, 0x8, 0x4}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) 20.005850225s ago: executing program 4 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 19.918129586s ago: executing program 4 (id=241): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7c}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x8005, 0x0, 0x0, 0x15, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) 19.456662285s ago: executing program 4 (id=255): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) ptrace$pokeuser(0x6, r0, 0x358, 0x0) 18.983981995s ago: executing program 4 (id=265): r0 = syz_io_uring_setup(0x16fb, &(0x7f0000000400)={0x0, 0xb38d, 0x80, 0xfffffffe, 0x34b}, &(0x7f00000001c0)=0x0, &(0x7f00000005c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x37, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0xd}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x8, 0x0, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 18.976778065s ago: executing program 32 (id=265): r0 = syz_io_uring_setup(0x16fb, &(0x7f0000000400)={0x0, 0xb38d, 0x80, 0xfffffffe, 0x34b}, &(0x7f00000001c0)=0x0, &(0x7f00000005c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x37, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, @fallback=0xd}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x8, 0x0, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 16.070507851s ago: executing program 0 (id=316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r2, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 15.938719693s ago: executing program 0 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r2, 0x0, 0xfffffffffffffffc}, 0x18) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x20, r3, 0xc4fc9e906872338b, 0x70bd2a, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0xc7, 0x3a}}}}}, 0x20}}, 0x0) 15.871317894s ago: executing program 0 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.826208145s ago: executing program 0 (id=321): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 15.773689506s ago: executing program 0 (id=322): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x603f) 15.398168144s ago: executing program 0 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x1}]}}}}}}}, 0x0) dup(r0) 15.381323804s ago: executing program 33 (id=328): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x81, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x10, 0xca, 0x0, 0x1000, {[@window={0x3, 0x3, 0x1}]}}}}}}}, 0x0) dup(r0) 10.003794088s ago: executing program 5 (id=428): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}], 0x2, 0x48800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) shutdown(r0, 0x2) 9.936264899s ago: executing program 5 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 9.849365001s ago: executing program 5 (id=437): r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) 9.797760382s ago: executing program 5 (id=440): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000080)={0x2, 0xf8, 0x40000, {r0}}, 0x20) 9.737015343s ago: executing program 5 (id=443): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000004c0)={[{@acl}, {@barrier}, {@barrier_val}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nodelalloc}, {@acl}, {@noinit_itable}]}, 0xf8, 0x587, &(0x7f0000002100)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) 9.415815339s ago: executing program 5 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}], ['\x00']}) 9.415707519s ago: executing program 34 (id=459): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x2904c, 0x1, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}], ['\x00']}) 2.909574224s ago: executing program 7 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 2.729669238s ago: executing program 7 (id=644): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2.663135319s ago: executing program 7 (id=647): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_clone3(&(0x7f00000001c0)={0x42323080, &(0x7f00000000c0), 0x0, 0x0, {0x1c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.509444992s ago: executing program 7 (id=649): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r1, &(0x7f0000000000)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x5, 0x29) 2.021662262s ago: executing program 7 (id=653): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) 1.956628322s ago: executing program 7 (id=654): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, &(0x7f0000000480)=0x74d, 0x4) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000140)=0x3, 0x20) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f00000000c0)=@id, 0x10, 0x0}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, 0x0, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id={0x1e, 0x2}, 0x10) 1.889374164s ago: executing program 2 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) mkdir(&(0x7f0000000580)='./file0\x00', 0x92) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) 1.805648736s ago: executing program 2 (id=659): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x12) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 1.756728197s ago: executing program 2 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c4300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="02030003110000002cbd7000fcdbdf2503000900800000001cdc0dca159f68846960e56de42944af05000600000000000a00b9b60000000000000000000000000000000000000001020000000000000002000100000000000000070c0000000005000500000000000a"], 0x88}, 0x1, 0x7}, 0x0) 1.467666133s ago: executing program 6 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x9) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) 1.440839673s ago: executing program 3 (id=675): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffe}, 0x94) 1.393926534s ago: executing program 6 (id=676): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) 1.360139344s ago: executing program 2 (id=677): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0x1001f0) fallocate(r1, 0x3, 0xf00, 0x10000) 1.356530425s ago: executing program 1 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001240)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x9fc, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x7, 0x0, 0x2, 0xffffffff, 0x2, 0x810, 0x20000000, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x1000, 0xfffffffc, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0xbab, 0x0, 0x272, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x7, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x3, 0xfffffffc, 0x0, 0x0, 0xb97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0x0, 0x400000, 0x7, 0x4, 0xc, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4000d79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0xfffc, 0x6}, {0xff}, 0x0, 0x7f}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x240040c4}, 0x0) 1.344367425s ago: executing program 6 (id=679): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x4, 0x10001}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x4c, 0x0, r1, 0x0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}], 0x2}, 0x0, 0x1000}) io_uring_enter(r1, 0x47f8, 0x0, 0x0, 0x0, 0x0) 1.209573667s ago: executing program 1 (id=680): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$pptp(0x18, 0x1, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 1.137392698s ago: executing program 6 (id=681): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) capget(&(0x7f0000000200)={0x19971634}, 0x0) 1.118363179s ago: executing program 6 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r2, 0x0) 1.109765749s ago: executing program 1 (id=683): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000002c0)='+}[@\x00G5\v\x89\x89\xb2\x0e\xb7\xb4\x9a\xb3\xb9\xe1\xff@`\x87\xefy\xb7\xe0\xe6c\x91\x81ND\t3\xc4\xca\xf0\xd0Zpo\xd0\xc7\'CT') r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000006800010000000000fbdbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) 1.0930508s ago: executing program 1 (id=684): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='hrtimer_start\x00', r1}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}, 0x8080, 0x2, 0x0, 0x0, 0x7fffffff}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) 1.088586089s ago: executing program 2 (id=685): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) clock_adjtime(0x0, &(0x7f00000006c0)={0x7fff, 0xf423f, 0x0, 0x0, 0x0, 0x2c43, 0xa00, 0xb000000, 0x0, 0x300, 0x0, 0x2902, 0x20, 0x100000001, 0x0, 0x0, 0x8000000000000000}) 1.05706165s ago: executing program 3 (id=686): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x2000) r2 = fcntl$dupfd(r1, 0x0, r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x14, 0x2, 0x6, 0x303, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x300, 0x0, 0x0, 0x0}) 1.041204911s ago: executing program 1 (id=687): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)='\\Z', 0x2}], 0x1) 1.018105511s ago: executing program 3 (id=688): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a01010000000000000000010000090900010073797a3100000000380000000b0a03060000000000000000000000080900020073797a31000000000800044000000001040012800900010073797a300000000078000000160a01080000000000000000010000070900010073797a31000000000900020073797a31000000000900020073797a320000000040000380080002400000000608000140000000002c0003801400010070696d726567310000000000000000001400010070696d72656731"], 0xf8}, 0x1, 0x0, 0x0, 0x40}, 0x8880) 682.051927ms ago: executing program 3 (id=689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1, 0x0, 0xb}, 0x18) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01022dbd7000ffdbdf252100000005002000000000ec09001f0070687931000000000c000500"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 652.830858ms ago: executing program 2 (id=690): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="5f61030203030206010bb7"], 0xb) 586.400809ms ago: executing program 1 (id=691): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42", 0x12) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 556.13412ms ago: executing program 3 (id=692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xf0, 0x8f, 0xd, 0x40, 0x4b4, 0x6830, 0x86cf, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x88, 0x63, 0xc1}}]}}]}}, 0x0) 237.366956ms ago: executing program 6 (id=693): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xeffffffa, 0xb, 0xfffffffc, 0xfffffffc, 0x7f, "db5909003a7f000700"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x3, 0x0, 0x0, 0x83, "001700"}) r1 = syz_open_pts(r0, 0x400) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0x2) 0s ago: executing program 3 (id=694): r0 = io_uring_setup(0x2553, &(0x7f0000000280)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) r2 = epoll_create1(0x0) dup3(r2, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xf, 0xa}, {0xf, 0xc}, {0xe, 0xd}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x5d2cef9e5d8c731f}, 0x4000c00) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.5' (ED25519) to the list of known hosts. [ 33.250300][ T29] audit: type=1400 audit(1757198940.975:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.251441][ T3293] cgroup: Unknown subsys name 'net' [ 33.273451][ T29] audit: type=1400 audit(1757198940.975:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.301466][ T29] audit: type=1400 audit(1757198941.005:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.434062][ T3293] cgroup: Unknown subsys name 'cpuset' [ 33.440449][ T3293] cgroup: Unknown subsys name 'rlimit' [ 33.572730][ T29] audit: type=1400 audit(1757198941.295:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.596725][ T29] audit: type=1400 audit(1757198941.305:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.617816][ T29] audit: type=1400 audit(1757198941.305:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.630683][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.638375][ T29] audit: type=1400 audit(1757198941.305:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.667477][ T29] audit: type=1400 audit(1757198941.315:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.688547][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.692303][ T29] audit: type=1400 audit(1757198941.315:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.724886][ T29] audit: type=1400 audit(1757198941.375:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.744462][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 34.844909][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.852083][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.859298][ T3303] bridge_slave_0: entered allmulticast mode [ 34.865885][ T3303] bridge_slave_0: entered promiscuous mode [ 34.875292][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.882490][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.889799][ T3303] bridge_slave_1: entered allmulticast mode [ 34.896366][ T3303] bridge_slave_1: entered promiscuous mode [ 34.942020][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 34.956871][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.983680][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.003913][ T3303] team0: Port device team_slave_0 added [ 35.027929][ T3303] team0: Port device team_slave_1 added [ 35.038711][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 35.047799][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.055121][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.062654][ T3307] bridge_slave_0: entered allmulticast mode [ 35.069370][ T3307] bridge_slave_0: entered promiscuous mode [ 35.078451][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.085981][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.093133][ T3307] bridge_slave_1: entered allmulticast mode [ 35.099528][ T3307] bridge_slave_1: entered promiscuous mode [ 35.131275][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.138481][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.164682][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.185464][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.194904][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.201889][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.228082][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.251975][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.308059][ T3307] team0: Port device team_slave_0 added [ 35.315137][ T3307] team0: Port device team_slave_1 added [ 35.339520][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.346652][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.354450][ T3304] bridge_slave_0: entered allmulticast mode [ 35.361004][ T3304] bridge_slave_0: entered promiscuous mode [ 35.377590][ T3303] hsr_slave_0: entered promiscuous mode [ 35.383777][ T3303] hsr_slave_1: entered promiscuous mode [ 35.389892][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.399292][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.406648][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.414178][ T3304] bridge_slave_1: entered allmulticast mode [ 35.420749][ T3304] bridge_slave_1: entered promiscuous mode [ 35.427136][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.434248][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.460351][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.471186][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 35.489668][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.496832][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.523183][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.552420][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.568186][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.626915][ T3304] team0: Port device team_slave_0 added [ 35.652441][ T3304] team0: Port device team_slave_1 added [ 35.660562][ T3307] hsr_slave_0: entered promiscuous mode [ 35.667233][ T3307] hsr_slave_1: entered promiscuous mode [ 35.673325][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 35.679074][ T3307] Cannot create hsr debugfs directory [ 35.684865][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.691944][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.699161][ T3315] bridge_slave_0: entered allmulticast mode [ 35.706020][ T3315] bridge_slave_0: entered promiscuous mode [ 35.734740][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.742211][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.749537][ T3315] bridge_slave_1: entered allmulticast mode [ 35.756190][ T3315] bridge_slave_1: entered promiscuous mode [ 35.769900][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.777061][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.784485][ T3310] bridge_slave_0: entered allmulticast mode [ 35.791022][ T3310] bridge_slave_0: entered promiscuous mode [ 35.797817][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.804993][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.831703][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.861140][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.868331][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.875749][ T3310] bridge_slave_1: entered allmulticast mode [ 35.882330][ T3310] bridge_slave_1: entered promiscuous mode [ 35.889093][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.896202][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.922483][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.961909][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.980332][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.996519][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.018981][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.037639][ T3304] hsr_slave_0: entered promiscuous mode [ 36.045056][ T3304] hsr_slave_1: entered promiscuous mode [ 36.051050][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.056873][ T3304] Cannot create hsr debugfs directory [ 36.079765][ T3315] team0: Port device team_slave_0 added [ 36.094640][ T3310] team0: Port device team_slave_0 added [ 36.110359][ T3315] team0: Port device team_slave_1 added [ 36.130396][ T3310] team0: Port device team_slave_1 added [ 36.163924][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.170995][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.197024][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.210377][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.217479][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.243861][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.257802][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.264866][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.291161][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.311423][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.318525][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.344682][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.370783][ T3303] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.381390][ T3303] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.390562][ T3303] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.411516][ T3315] hsr_slave_0: entered promiscuous mode [ 36.417908][ T3315] hsr_slave_1: entered promiscuous mode [ 36.423922][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.429902][ T3315] Cannot create hsr debugfs directory [ 36.441547][ T3303] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.487436][ T3310] hsr_slave_0: entered promiscuous mode [ 36.493513][ T3310] hsr_slave_1: entered promiscuous mode [ 36.499355][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.505227][ T3310] Cannot create hsr debugfs directory [ 36.546520][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.574146][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.596067][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.614479][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.663233][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.675279][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.694725][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.706419][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.735588][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.745213][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.755195][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.765337][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.786696][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.808072][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.835241][ T413] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.842425][ T413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.867447][ T413] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.874627][ T413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.885910][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.905794][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.916814][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.930198][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.947781][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.958820][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.968452][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.984519][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.008264][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.015358][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.025219][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.032349][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.041536][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.048615][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.073224][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.080790][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.101959][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.154267][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.166645][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.181444][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.217595][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.230383][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.250910][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.258418][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.268777][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.276053][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.286198][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.293309][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.318176][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.325370][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.348200][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.359055][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.372729][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.383179][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.423506][ T3303] veth0_vlan: entered promiscuous mode [ 37.436837][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.450783][ T3303] veth1_vlan: entered promiscuous mode [ 37.506458][ T3303] veth0_macvtap: entered promiscuous mode [ 37.521984][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.537863][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.547060][ T3303] veth1_macvtap: entered promiscuous mode [ 37.585087][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.592781][ T3304] veth0_vlan: entered promiscuous mode [ 37.611950][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.620874][ T3304] veth1_vlan: entered promiscuous mode [ 37.639152][ T315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.664184][ T315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.686389][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.726444][ T3304] veth0_macvtap: entered promiscuous mode [ 37.742061][ T3304] veth1_macvtap: entered promiscuous mode [ 37.751878][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.764957][ T3303] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.812159][ T3310] veth0_vlan: entered promiscuous mode [ 37.820523][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.831255][ T3315] veth0_vlan: entered promiscuous mode [ 37.844202][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.853649][ T3307] veth0_vlan: entered promiscuous mode [ 37.865091][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.877257][ T3307] veth1_vlan: entered promiscuous mode [ 37.885421][ T3315] veth1_vlan: entered promiscuous mode [ 37.892067][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.901214][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.910393][ T3310] veth1_vlan: entered promiscuous mode [ 37.923354][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.958368][ T3315] veth0_macvtap: entered promiscuous mode [ 37.966541][ T3307] veth0_macvtap: entered promiscuous mode [ 37.974411][ T3307] veth1_macvtap: entered promiscuous mode [ 37.983809][ T3310] veth0_macvtap: entered promiscuous mode [ 37.994665][ T3310] veth1_macvtap: entered promiscuous mode [ 38.001219][ T3315] veth1_macvtap: entered promiscuous mode [ 38.016045][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.030446][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.053004][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.062727][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.073061][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.083174][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.098729][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.116451][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.155874][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.195025][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.240917][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.259399][ T3493] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 38.266262][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 38.266276][ T29] audit: type=1400 audit(1757198945.995:115): avc: denied { create } for pid=3492 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.272478][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.348536][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.357621][ T29] audit: type=1400 audit(1757198946.075:116): avc: denied { ioctl } for pid=3492 comm="syz.1.2" path="socket:[4918]" dev="sockfs" ino=4918 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.384728][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.394296][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.429934][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.439347][ T29] audit: type=1400 audit(1757198946.085:117): avc: denied { watch watch_reads } for pid=3499 comm="syz.0.11" path="/3/file0" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 38.462464][ T29] audit: type=1326 audit(1757198946.155:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 38.485939][ T29] audit: type=1326 audit(1757198946.155:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 38.509210][ T29] audit: type=1326 audit(1757198946.155:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 38.532771][ T29] audit: type=1326 audit(1757198946.155:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 38.534714][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.556185][ T29] audit: type=1326 audit(1757198946.155:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 38.588648][ T29] audit: type=1326 audit(1757198946.155:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 38.608478][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.612434][ T29] audit: type=1326 audit(1757198946.155:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3502 comm="syz.0.12" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 38.752813][ T3503] syz.0.12 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 38.772048][ T3515] netlink: 'syz.1.18': attribute type 22 has an invalid length. [ 38.779948][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 38.805928][ T3467] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.805980][ T3515] netlink: 'syz.1.18': attribute type 22 has an invalid length. [ 38.822478][ T3515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18'. [ 38.825666][ T3467] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.876236][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.877251][ T3515] Zero length message leads to an empty skb [ 38.893536][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 38.987818][ T3529] SELinux: failed to load policy [ 39.005281][ T3533] ======================================================= [ 39.005281][ T3533] WARNING: The mand mount option has been deprecated and [ 39.005281][ T3533] and is ignored by this kernel. Remove the mand [ 39.005281][ T3533] option from the mount to silence this warning. [ 39.005281][ T3533] ======================================================= [ 39.164528][ T3548] netlink: 12 bytes leftover after parsing attributes in process `gtp'. [ 39.172984][ T3548] netlink: 4 bytes leftover after parsing attributes in process `gtp'. [ 39.215090][ T3548] bridge0: port 3(macsec1) entered blocking state [ 39.222484][ T3548] bridge0: port 3(macsec1) entered disabled state [ 39.249213][ T3553] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 39.268911][ T3548] macsec1: entered allmulticast mode [ 39.283969][ T3548] macsec1: left allmulticast mode [ 39.305430][ T3555] vhci_hcd: invalid port number 96 [ 39.310642][ T3555] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 39.637174][ T3570] loop3: detected capacity change from 0 to 8192 [ 39.651946][ T3575] netlink: 104 bytes leftover after parsing attributes in process `syz.1.45'. [ 39.796873][ T2994] udevd[2994]: worker [3296] terminated by signal 33 (Unknown signal 33) [ 39.811358][ T2994] udevd[2994]: worker [3296] failed while handling '/devices/virtual/block/loop3' [ 39.836945][ T3589] macvtap0: refused to change device tx_queue_len [ 39.865847][ T3593] loop4: detected capacity change from 0 to 512 [ 39.955474][ T3593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.017269][ T3593] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.099597][ T3611] loop3: detected capacity change from 0 to 1024 [ 40.110996][ C0] hrtimer: interrupt took 38031 ns [ 40.131509][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.174706][ T3611] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.208202][ T3611] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.221134][ T3624] tipc: Started in network mode [ 40.226324][ T3624] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 40.256305][ T3624] tipc: Enabled bearer , priority 10 [ 40.338875][ T3630] loop4: detected capacity change from 0 to 1024 [ 40.349794][ T3630] EXT4-fs: Ignoring removed bh option [ 40.374652][ T3630] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 40.423465][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 40.443912][ T3630] EXT4-fs error (device loop4): ext4_quota_enable:7128: comm syz.4.69: inode #2304: comm syz.4.69: iget: illegal inode # [ 40.475082][ T3630] EXT4-fs (loop4): Remounting filesystem read-only [ 40.481877][ T3630] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=2, err=-117, ino=2304). Please run e2fsck to fix. [ 40.499412][ T3630] EXT4-fs (loop4): mount failed [ 40.564627][ T3649] bond1: entered promiscuous mode [ 40.569729][ T3649] bond1: entered allmulticast mode [ 40.575194][ T3649] 8021q: adding VLAN 0 to HW filter on device bond1 [ 40.587364][ T3649] bond1 (unregistering): Released all slaves [ 40.617212][ T3658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 40.670283][ T3664] loop1: detected capacity change from 0 to 1024 [ 40.677281][ T3664] EXT4-fs: Ignoring removed orlov option [ 40.685050][ T3662] loop9: detected capacity change from 0 to 7 [ 40.691582][ T3662] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.707113][ T3664] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.727260][ T3662] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.735288][ T3662] loop9: unable to read partition table [ 40.741699][ T3662] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 40.741699][ T3662] ) failed (rc=-5) [ 40.757395][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.766988][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.784144][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.795605][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.804182][ T3294] Buffer I/O error on dev loop9, logical block 0, async page read [ 40.925944][ T3687] netlink: 'syz.3.94': attribute type 10 has an invalid length. [ 40.933755][ T3687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.94'. [ 40.960221][ T3691] netdevsim netdevsim2: Direct firmware load for ./file0/file1 failed with error -2 [ 41.071212][ T3687] team0: Port device geneve1 added [ 41.115956][ T3703] bond1: entered promiscuous mode [ 41.121397][ T3703] bond1: entered allmulticast mode [ 41.130886][ T3703] 8021q: adding VLAN 0 to HW filter on device bond1 [ 41.194495][ T3703] bond1 (unregistering): Released all slaves [ 41.220774][ T3708] tipc: Started in network mode [ 41.225894][ T3708] tipc: Node identity ac14140f, cluster identity 4711 [ 41.237299][ T3711] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 41.250641][ T3708] tipc: New replicast peer: 255.255.255.83 [ 41.256597][ T3708] tipc: Enabled bearer , priority 10 [ 41.292758][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.304099][ T3718] netlink: 'syz.4.108': attribute type 3 has an invalid length. [ 41.338242][ T3718] netlink: 'syz.4.108': attribute type 3 has an invalid length. [ 41.350248][ T2994] udevd[2994]: worker [3614] terminated by signal 33 (Unknown signal 33) [ 41.373014][ T1035] tipc: Node number set to 4269801488 [ 41.385688][ T2994] udevd[2994]: worker [3614] failed while handling '/devices/virtual/block/loop1' [ 41.437079][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 41.476492][ T3729] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 41.559019][ T3746] loop0: detected capacity change from 0 to 512 [ 41.610520][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.715495][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.798592][ T3767] process 'syz.0.128' launched '/dev/fd/6' with NULL argv: empty string added [ 41.824658][ T3738] loop1: detected capacity change from 0 to 32768 [ 41.849176][ T3773] netlink: 32 bytes leftover after parsing attributes in process `syz.2.133'. [ 41.864456][ T3738] loop1: p1 p2 p3 < > [ 41.868744][ T3738] loop1: p1 size 242222080 extends beyond EOD, truncated [ 41.887223][ T3738] loop1: p2 start 4294967295 is beyond EOD, truncated [ 41.941591][ T3783] loop2: detected capacity change from 0 to 1024 [ 41.989912][ T3783] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.007542][ T1035] Process accounting resumed [ 42.070566][ T3783] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.087910][ T3796] program syz.1.142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.151619][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.174942][ T3671] udevd[3671]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 42.187299][ T3712] udevd[3712]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 42.203211][ T3804] loop0: detected capacity change from 0 to 1024 [ 42.242460][ T3804] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.263027][ T3385] tipc: Node number set to 2886997007 [ 42.303779][ T3812] tipc: New replicast peer: 10.1.1.2 [ 42.309506][ T3812] tipc: Enabled bearer , priority 10 [ 42.375572][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.426378][ T3823] loop3: detected capacity change from 0 to 512 [ 42.465743][ T3823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.486959][ T3823] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.527375][ T3830] loop0: detected capacity change from 0 to 1024 [ 42.558121][ T3832] pimreg: entered allmulticast mode [ 42.603552][ T3830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.659909][ T3830] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.725521][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.824179][ T3859] 9pnet: p9_errstr2errno: server reported unknown error  [ 42.835990][ T3861] loop2: detected capacity change from 0 to 512 [ 42.858916][ T3861] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 42.880604][ T3866] atomic_op ffff888119e2d128 conn xmit_atomic 0000000000000000 [ 42.902248][ T3861] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.925047][ T3871] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 42.938839][ T3871] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 42.949830][ T3874] macvtap0: refused to change device tx_queue_len [ 42.952192][ T3861] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.168: corrupted xattr block 19: overlapping e_value [ 42.997036][ T3861] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 43.042701][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.099479][ T3883] loop4: detected capacity change from 0 to 128 [ 43.108501][ T3888] netlink: 'syz.3.180': attribute type 10 has an invalid length. [ 43.387530][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 43.387548][ T29] audit: type=1400 audit(1757198951.115:374): avc: denied { create } for pid=3919 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.391683][ T3918] IPv6: Can't replace route, no match found [ 43.407510][ T29] audit: type=1400 audit(1757198951.125:375): avc: denied { connect } for pid=3919 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.422108][ T3916] infiniband syz!: set active [ 43.439345][ T29] audit: type=1400 audit(1757198951.125:376): avc: denied { getopt } for pid=3919 comm="syz.2.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 43.464217][ T3916] infiniband syz!: added team_slave_0 [ 43.503694][ T29] audit: type=1326 audit(1757198951.225:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3923 comm="syz.2.196" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66a7d0ebe9 code=0x0 [ 43.536125][ T3916] RDS/IB: syz!: added [ 43.553744][ T3916] smc: adding ib device syz! with port count 1 [ 43.560109][ T3916] smc: ib device syz! port 1 has pnetid [ 43.623494][ T3938] program syz.1.201 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.721191][ T29] audit: type=1400 audit(1757198951.445:378): avc: denied { read } for pid=3947 comm="syz.4.206" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.745085][ T29] audit: type=1400 audit(1757198951.445:379): avc: denied { open } for pid=3947 comm="syz.4.206" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 43.956338][ T29] audit: type=1400 audit(1757198951.685:380): avc: denied { create } for pid=3953 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 44.016629][ T29] audit: type=1400 audit(1757198951.705:381): avc: denied { bind } for pid=3953 comm="syz.0.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 44.114943][ T29] audit: type=1326 audit(1757198951.845:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 44.138784][ T29] audit: type=1326 audit(1757198951.845:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3965 comm="syz.0.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f147209ebe9 code=0x7ffc0000 [ 44.432449][ T3986] netlink: 'syz.3.218': attribute type 1 has an invalid length. [ 44.482481][ T3980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.521517][ T3980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.658241][ T4004] hub 9-0:1.0: USB hub found [ 44.716863][ T4004] hub 9-0:1.0: 8 ports detected [ 44.806053][ T4011] loop0: detected capacity change from 0 to 512 [ 44.839513][ T4013] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 44.904498][ T4011] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 45.052216][ T4020] netlink: 'syz.0.234': attribute type 21 has an invalid length. [ 45.093117][ T4024] __nla_validate_parse: 10 callbacks suppressed [ 45.093131][ T4024] netlink: 100 bytes leftover after parsing attributes in process `syz.4.236'. [ 45.184972][ T4035] loop4: detected capacity change from 0 to 512 [ 45.191638][ T4035] EXT4-fs: Ignoring removed oldalloc option [ 45.229528][ T4038] loop3: detected capacity change from 0 to 512 [ 45.260560][ T4038] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.243: casefold flag without casefold feature [ 45.287999][ T4035] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 45.301162][ T4035] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 45.313364][ T4038] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.243: couldn't read orphan inode 15 (err -117) [ 45.327617][ T4038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.358529][ T4035] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 45.402683][ T4035] EXT4-fs (loop4): 1 truncate cleaned up [ 45.420496][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.447198][ T4035] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.573018][ T4035] loop4: detected capacity change from 512 to 64 [ 45.622578][ T3307] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=33619980, rec_len=46, size=1024 fake=0 [ 45.659691][ T4064] mmap: syz.0.254 (4064) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 45.840264][ T4077] netlink: 256 bytes leftover after parsing attributes in process `syz.3.260'. [ 45.855852][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.905774][ T4080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 45.953704][ T4083] netlink: 7 bytes leftover after parsing attributes in process `syz.2.262'. [ 45.979225][ T4083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.262'. [ 45.988486][ T4083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.262'. [ 45.998333][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 46.007265][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 46.028685][ T4083] netlink: 7 bytes leftover after parsing attributes in process `syz.2.262'. [ 46.035769][ T4085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.263'. [ 46.066055][ T57] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.083636][ T4083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.262'. [ 46.132845][ T57] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.174556][ T4098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4098 comm=syz.0.267 [ 46.187195][ T4098] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4098 comm=syz.0.267 [ 46.256296][ T57] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.325922][ T57] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.484770][ T4127] loop2: detected capacity change from 0 to 256 [ 46.485677][ T57] bridge_slave_1: left allmulticast mode [ 46.497147][ T57] bridge_slave_1: left promiscuous mode [ 46.503225][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.515930][ T57] bridge_slave_0: left allmulticast mode [ 46.521701][ T57] bridge_slave_0: left promiscuous mode [ 46.527789][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.655810][ T4139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4139 comm=syz.2.281 [ 46.668524][ T4139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4139 comm=syz.2.281 [ 46.695544][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.708270][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.730409][ T57] bond0 (unregistering): Released all slaves [ 46.770801][ T4143] bond1: entered promiscuous mode [ 46.775974][ T4143] bond1: entered allmulticast mode [ 46.795476][ T4143] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.852163][ T57] tipc: Disabling bearer [ 46.857779][ T57] tipc: Left network mode [ 47.070200][ T4174] random: crng reseeded on system resumption [ 47.099661][ T4173] loop1: detected capacity change from 0 to 1024 [ 47.153822][ T57] hsr_slave_0: left promiscuous mode [ 47.185266][ T57] hsr_slave_1: left promiscuous mode [ 47.191109][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.191662][ T4173] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.198673][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.233578][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.241086][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.272245][ T4173] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.285699][ T57] veth1_macvtap: left promiscuous mode [ 47.291234][ T57] veth0_macvtap: left promiscuous mode [ 47.296960][ T57] veth1_vlan: left promiscuous mode [ 47.302260][ T57] veth0_vlan: left promiscuous mode [ 47.356664][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.468246][ T57] team0 (unregistering): Port device team_slave_1 removed [ 47.483536][ T57] team0 (unregistering): Port device team_slave_0 removed [ 47.543148][ T4200] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.550496][ T4200] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.570769][ T4200] bridge0: entered allmulticast mode [ 47.579579][ T4202] bridge_slave_1: left allmulticast mode [ 47.585361][ T4202] bridge_slave_1: left promiscuous mode [ 47.591197][ T4202] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.603091][ T4202] bridge_slave_0: left allmulticast mode [ 47.608963][ T4202] bridge_slave_0: left promiscuous mode [ 47.614857][ T4202] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.679039][ T4207] sch_fq: defrate 4294967295 ignored. [ 47.691611][ T4101] chnl_net:caif_netlink_parms(): no params data found [ 47.837592][ T4101] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.845504][ T4101] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.886449][ T4101] bridge_slave_0: entered allmulticast mode [ 47.905024][ T4229] loop0: detected capacity change from 0 to 128 [ 47.915424][ T4101] bridge_slave_0: entered promiscuous mode [ 47.924912][ T4101] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.932321][ T4101] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.971848][ T4101] bridge_slave_1: entered allmulticast mode [ 48.001909][ T4101] bridge_slave_1: entered promiscuous mode [ 48.009409][ T4231] SELinux: failed to load policy [ 48.064745][ T4101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.079719][ T4101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.115689][ T4238] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4238 comm=syz.0.306 [ 48.128297][ T4238] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4238 comm=syz.0.306 [ 48.153414][ T4101] team0: Port device team_slave_0 added [ 48.166441][ T4101] team0: Port device team_slave_1 added [ 48.207408][ T4101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.214492][ T4101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.240532][ T4101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.282358][ T4101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.289985][ T4101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.316153][ T4101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.462931][ T4101] hsr_slave_0: entered promiscuous mode [ 48.479330][ T4101] hsr_slave_1: entered promiscuous mode [ 48.499325][ T4101] debugfs: 'hsr0' already exists in 'hsr' [ 48.505179][ T4101] Cannot create hsr debugfs directory [ 48.635102][ T29] kauditd_printk_skb: 128 callbacks suppressed [ 48.635119][ T29] audit: type=1326 audit(1757198956.365:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7d0ebe9 code=0x7ffc0000 [ 48.697441][ T29] audit: type=1326 audit(1757198956.365:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f66a7d0ebe9 code=0x7ffc0000 [ 48.721353][ T29] audit: type=1326 audit(1757198956.365:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7d0ebe9 code=0x7ffc0000 [ 48.745068][ T29] audit: type=1326 audit(1757198956.365:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4262 comm="syz.2.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f66a7d0ebe9 code=0x7ffc0000 [ 48.755812][ T4101] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.785588][ T4267] loop1: detected capacity change from 0 to 1024 [ 48.807531][ T4267] EXT4-fs: Ignoring removed orlov option [ 48.813480][ T4267] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.825899][ T4101] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.847561][ T4101] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.861130][ T4269] netlink: 'syz.2.312': attribute type 1 has an invalid length. [ 48.875775][ T29] audit: type=1400 audit(1757198956.605:516): avc: denied { mounton } for pid=4271 comm="syz.0.313" path="/proc/182/cgroup" dev="proc" ino=7049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 48.911405][ T4101] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 49.078479][ T4267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.102939][ T29] audit: type=1400 audit(1757198956.825:517): avc: denied { create } for pid=4266 comm="syz.1.311" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.151823][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.185468][ T4101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.218574][ T4101] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.257942][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.265116][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.317853][ T29] audit: type=1326 audit(1757198957.015:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82b13ebe9 code=0x7ffc0000 [ 49.341527][ T29] audit: type=1326 audit(1757198957.015:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82b13ebe9 code=0x7ffc0000 [ 49.365037][ T29] audit: type=1326 audit(1757198957.015:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa82b13ebe9 code=0x7ffc0000 [ 49.388531][ T29] audit: type=1326 audit(1757198957.015:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.1.318" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa82b13ebe9 code=0x7ffc0000 [ 49.417134][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.424322][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.557779][ T4101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.665398][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.745455][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.812825][ T4101] veth0_vlan: entered promiscuous mode [ 49.837737][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.858868][ T4101] veth1_vlan: entered promiscuous mode [ 49.887402][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.936039][ T4101] veth0_macvtap: entered promiscuous mode [ 49.960893][ T4349] loop2: detected capacity change from 0 to 512 [ 49.962337][ T4101] veth1_macvtap: entered promiscuous mode [ 49.983389][ T4349] EXT4-fs: Ignoring removed nomblk_io_submit option [ 50.011733][ T4349] EXT4-fs (loop2): filesystem is read-only [ 50.018012][ T12] bridge_slave_1: left allmulticast mode [ 50.023876][ T12] bridge_slave_1: left promiscuous mode [ 50.029627][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.037423][ T4349] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 50.049079][ T12] bridge_slave_0: left allmulticast mode [ 50.054965][ T12] bridge_slave_0: left promiscuous mode [ 50.060790][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.062307][ T4349] EXT4-fs (loop2): filesystem is read-only [ 50.073903][ T4349] EXT4-fs (loop2): orphan cleanup on readonly fs [ 50.085519][ T4349] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.334: iget: bad i_size value: 648518346341360424 [ 50.104996][ T4349] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.334: couldn't read orphan inode 16 (err -117) [ 50.118024][ T4349] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 50.168331][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.203281][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.214518][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.224562][ T12] bond0 (unregistering): Released all slaves [ 50.275777][ T4101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.304204][ T4101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.330119][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.389324][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.438234][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.476266][ T12] hsr_slave_0: left promiscuous mode [ 50.487084][ T12] hsr_slave_1: left promiscuous mode [ 50.498420][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.506214][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.521284][ T4375] loop1: detected capacity change from 0 to 128 [ 50.543904][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.544648][ T4375] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.551364][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.576274][ T12] veth1_macvtap: left promiscuous mode [ 50.581891][ T12] veth0_macvtap: left promiscuous mode [ 50.607513][ T4375] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.618307][ T12] veth1_vlan: left promiscuous mode [ 50.645255][ T12] veth0_vlan: left promiscuous mode [ 50.715229][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.844076][ T12] team0 (unregistering): Port device team_slave_1 removed [ 50.856998][ T12] team0 (unregistering): Port device team_slave_0 removed [ 50.865575][ T37] smc: removing ib device syz! [ 50.922321][ T31] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.941655][ T4395] vlan2: entered allmulticast mode [ 51.064485][ T4411] loop2: detected capacity change from 0 to 764 [ 51.107854][ T4411] rock: directory entry would overflow storage [ 51.114990][ T4411] rock: sig=0x4f50, size=4, remaining=3 [ 51.121225][ T4411] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 51.259018][ T4424] ALSA: seq fatal error: cannot create timer (-22) [ 51.298100][ T4334] chnl_net:caif_netlink_parms(): no params data found [ 51.483531][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.490654][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.543402][ T4334] bridge_slave_0: entered allmulticast mode [ 51.563260][ T4334] bridge_slave_0: entered promiscuous mode [ 51.589585][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.596894][ T4334] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.633579][ T4334] bridge_slave_1: entered allmulticast mode [ 51.653395][ T4334] bridge_slave_1: entered promiscuous mode [ 51.677696][ T4459] __nla_validate_parse: 21 callbacks suppressed [ 51.677716][ T4459] netlink: 24 bytes leftover after parsing attributes in process `syz.5.362'. [ 51.702575][ T4334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.731945][ T4334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.741857][ T4459] IPVS: Error connecting to the multicast addr [ 51.787781][ T4334] team0: Port device team_slave_0 added [ 51.813527][ T4334] team0: Port device team_slave_1 added [ 51.870193][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.877323][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.903423][ T4334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.942168][ T23] kernel write not supported for file /155/clear_refs (pid: 23 comm: kworker/1:0) [ 51.960768][ T4334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.967933][ T4334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.994003][ T4334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.172403][ T4334] hsr_slave_0: entered promiscuous mode [ 52.182090][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 52.201756][ T4334] hsr_slave_1: entered promiscuous mode [ 52.211639][ T4334] debugfs: 'hsr0' already exists in 'hsr' [ 52.217583][ T4334] Cannot create hsr debugfs directory [ 52.327170][ T4505] sg_write: data in/out 63015/8 bytes for SCSI command 0x7f-- guessing data in; [ 52.327170][ T4505] program syz.5.376 not setting count and/or reply_len properly [ 52.469670][ T4521] IPv6: Can't replace route, no match found [ 52.506849][ T4524] netdevsim netdevsim5: Direct firmware load for ./file0/file1 failed with error -2 [ 52.539520][ T4528] loop2: detected capacity change from 0 to 512 [ 52.561526][ T4334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.570838][ T4528] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 52.597855][ T4528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 52.624065][ T4334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.632338][ T4528] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.381: corrupted in-inode xattr: e_value size too large [ 52.655604][ T4334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.689731][ T4334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.696998][ T4528] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.381: couldn't read orphan inode 15 (err -117) [ 52.737384][ T4528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.807576][ T4334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.835875][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.856174][ T4334] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.886395][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.893535][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.928230][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.935772][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.111149][ T4334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.130460][ T4556] macvtap0: refused to change device tx_queue_len [ 53.296559][ T4569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.415992][ T4334] veth0_vlan: entered promiscuous mode [ 53.459978][ T4334] veth1_vlan: entered promiscuous mode [ 53.516470][ T4334] veth0_macvtap: entered promiscuous mode [ 53.517055][ T4586] loop2: detected capacity change from 0 to 128 [ 53.530568][ T4334] veth1_macvtap: entered promiscuous mode [ 53.567503][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.589076][ T4586] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.597057][ T4586] FAT-fs (loop2): Filesystem has been set read-only [ 53.599095][ T4334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.626965][ T4596] SELinux: policydb version 3968 does not match my version range 15-35 [ 53.638942][ T4586] syz.2.390: attempt to access beyond end of device [ 53.638942][ T4586] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 53.639537][ T1463] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.663895][ T4596] SELinux: failed to load policy [ 53.688910][ T4586] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.697190][ T4586] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 53.703548][ T1463] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.724340][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 53.724357][ T29] audit: type=1400 audit(1757198961.455:610): avc: denied { create } for pid=4598 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.743671][ T1463] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.760527][ T1463] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.762561][ T4597] syz.2.390: attempt to access beyond end of device [ 53.762561][ T4597] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.785124][ T4601] SELinux: policydb version 0 does not match my version range 15-35 [ 53.798753][ T4586] syz.2.390: attempt to access beyond end of device [ 53.798753][ T4586] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.814936][ T29] audit: type=1400 audit(1757198961.485:611): avc: denied { bind } for pid=4598 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.815115][ T4601] SELinux: failed to load policy [ 53.834196][ T29] audit: type=1400 audit(1757198961.485:612): avc: denied { write } for pid=4598 comm="syz.3.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.876448][ T4586] syz.2.390: attempt to access beyond end of device [ 53.876448][ T4586] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.900083][ T29] audit: type=1400 audit(1757198961.625:613): avc: denied { create } for pid=4605 comm="syz.6.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.903162][ T4599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 53.930539][ T4597] syz.2.390: attempt to access beyond end of device [ 53.930539][ T4597] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.944101][ T4599] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 53.955234][ T4586] syz.2.390: attempt to access beyond end of device [ 53.955234][ T4586] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.977116][ T4586] syz.2.390: attempt to access beyond end of device [ 53.977116][ T4586] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 53.992175][ T29] audit: type=1400 audit(1757198961.715:614): avc: denied { mounton } for pid=4607 comm="syz.6.399" path="/2/file0" dev="tmpfs" ino=28 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 54.017066][ T4586] syz.2.390: attempt to access beyond end of device [ 54.017066][ T4586] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.044943][ T4586] syz.2.390: attempt to access beyond end of device [ 54.044943][ T4586] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.067372][ T29] audit: type=1400 audit(1757198961.785:615): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=343 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 54.102994][ T4586] syz.2.390: attempt to access beyond end of device [ 54.102994][ T4586] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.147888][ T4616] loop6: detected capacity change from 0 to 1024 [ 54.181168][ T4620] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 54.195367][ T4616] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.210590][ T4620] vhci_hcd: invalid port number 253 [ 54.215907][ T4620] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 54.357937][ T4334] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.400375][ T4630] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 54.535042][ T4643] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 54.564255][ T29] audit: type=1326 audit(1757198962.295:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6331eebe9 code=0x7ffc0000 [ 54.587867][ T29] audit: type=1326 audit(1757198962.295:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6331eebe9 code=0x7ffc0000 [ 54.614866][ T29] audit: type=1326 audit(1757198962.295:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc6331eebe9 code=0x7ffc0000 [ 54.638725][ T29] audit: type=1326 audit(1757198962.295:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4644 comm="syz.6.414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6331eebe9 code=0x7ffc0000 [ 54.799131][ T4658] loop5: detected capacity change from 0 to 512 [ 54.817171][ T4658] journal_path: Non-blockdev passed as './bus' [ 54.824163][ T4658] EXT4-fs: error: could not find journal device path [ 54.889429][ T4665] loop1: detected capacity change from 0 to 512 [ 54.916260][ T4665] EXT4-fs: Ignoring removed nobh option [ 54.938073][ T4665] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 54.967351][ T4665] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.423: iget: bad i_size value: 38620345925642 [ 54.996353][ T4665] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.423: couldn't read orphan inode 15 (err -117) [ 55.015476][ T4665] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.099796][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.310648][ T4704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.333053][ T4704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.347859][ T4708] netlink: 'syz.6.442': attribute type 4 has an invalid length. [ 55.392400][ T4708] netlink: 'syz.6.442': attribute type 4 has an invalid length. [ 55.451426][ T4719] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 55.463622][ T4718] IPVS: stopping master sync thread 4719 ... [ 55.600577][ T4740] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 55.614845][ T4740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.622834][ T4740] team0: Port device bond0 added [ 55.641114][ T3467] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.699907][ T3467] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.716579][ T4748] loop2: detected capacity change from 0 to 512 [ 55.766502][ T3467] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.805735][ T4748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.818773][ T4748] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.844082][ T3467] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.882222][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.984123][ T3467] bridge_slave_1: left allmulticast mode [ 55.989933][ T3467] bridge_slave_1: left promiscuous mode [ 55.996045][ T3467] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.041601][ T3467] bridge_slave_0: left promiscuous mode [ 56.047484][ T3467] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.236828][ T3467] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.253651][ T3467] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.265539][ T3467] bond0 (unregistering): Released all slaves [ 56.393682][ T3467] hsr_slave_0: left promiscuous mode [ 56.420042][ T3467] hsr_slave_1: left promiscuous mode [ 56.431450][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.438951][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.456619][ T3467] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.464146][ T3467] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.520576][ T3467] veth1_macvtap: left promiscuous mode [ 56.527800][ T3467] veth0_macvtap: left promiscuous mode [ 56.538607][ T3467] veth1_vlan: left promiscuous mode [ 56.547138][ T3467] veth0_vlan: left promiscuous mode [ 56.557557][ T4822] random: crng reseeded on system resumption [ 56.674967][ T3467] team0 (unregistering): Port device team_slave_1 removed [ 56.686092][ T3467] team0 (unregistering): Port device team_slave_0 removed [ 56.710397][ T4829] loop3: detected capacity change from 0 to 2048 [ 56.726622][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.489'. [ 56.745249][ T4829] EXT4-fs (loop3): failed to initialize system zone (-117) [ 56.747111][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.482'. [ 56.753559][ T4832] netlink: 32 bytes leftover after parsing attributes in process `syz.6.489'. [ 56.773429][ T4829] EXT4-fs (loop3): mount failed [ 56.896951][ T4842] loop6: detected capacity change from 0 to 8192 [ 56.975034][ T4752] chnl_net:caif_netlink_parms(): no params data found [ 57.032335][ T4864] program syz.3.497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.051160][ T4868] loop2: detected capacity change from 0 to 512 [ 57.058771][ T4868] journal_path: Lookup failure for './file0/../file0' [ 57.065725][ T4868] EXT4-fs: error: could not find journal device path [ 57.181551][ T4884] netlink: 7 bytes leftover after parsing attributes in process `syz.2.501'. [ 57.193819][ T4752] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.201046][ T4752] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.208725][ T4752] bridge_slave_0: entered allmulticast mode [ 57.215589][ T4752] bridge_slave_0: entered promiscuous mode [ 57.230141][ T4752] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.237297][ T4752] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.249082][ T4884] netlink: 7 bytes leftover after parsing attributes in process `syz.2.501'. [ 57.253183][ T4752] bridge_slave_1: entered allmulticast mode [ 57.284079][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.289389][ T4752] bridge_slave_1: entered promiscuous mode [ 57.291630][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.304938][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.312386][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.319833][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.327266][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.334765][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.342361][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.350076][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.357714][ T3385] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 57.366276][ T3385] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 57.502363][ T4898] fido_id[4898]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.523282][ T4752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.572622][ T4752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.598948][ T4910] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 57.678418][ T4752] team0: Port device team_slave_0 added [ 57.699110][ T4752] team0: Port device team_slave_1 added [ 57.721698][ T4922] futex_wake_op: syz.1.516 tries to shift op by -1; fix this program [ 57.737749][ T4931] loop6: detected capacity change from 0 to 128 [ 57.750348][ T4752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.753771][ T4931] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 57.757556][ T4752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.795324][ T4752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.839307][ T4931] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 57.909182][ T4752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.916357][ T4752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.942332][ T4752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.965565][ T4939] syzkaller1: entered promiscuous mode [ 57.971312][ T4939] syzkaller1: entered allmulticast mode [ 58.049318][ T4752] hsr_slave_0: entered promiscuous mode [ 58.072547][ T4952] loop1: detected capacity change from 0 to 128 [ 58.082741][ T4752] hsr_slave_1: entered promiscuous mode [ 58.098671][ T4752] debugfs: 'hsr0' already exists in 'hsr' [ 58.104534][ T4752] Cannot create hsr debugfs directory [ 58.117795][ T4953] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.146003][ T4963] loop1: detected capacity change from 0 to 764 [ 58.185278][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 58.214913][ T4970] netlink: 'syz.2.534': attribute type 10 has an invalid length. [ 58.248899][ T4970] team0: Port device dummy0 added [ 58.260673][ T4970] netlink: 'syz.2.534': attribute type 10 has an invalid length. [ 58.283487][ T4970] team0: Port device dummy0 removed [ 58.292608][ T4970] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 58.630406][ T5011] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 58.639217][ T5011] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 58.671392][ T5013] loop1: detected capacity change from 0 to 164 [ 58.681874][ T5013] bio_check_eod: 4762 callbacks suppressed [ 58.681891][ T5013] syz.1.553: attempt to access beyond end of device [ 58.681891][ T5013] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 58.704055][ T5013] syz.1.553: attempt to access beyond end of device [ 58.704055][ T5013] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 58.934260][ T4752] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 58.946463][ T4752] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 58.969824][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 58.969904][ T29] audit: type=1400 audit(1757198966.695:760): avc: denied { connect } for pid=5032 comm="syz.3.564" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.997892][ T29] audit: type=1400 audit(1757198966.725:761): avc: denied { ioctl } for pid=5032 comm="syz.3.564" path="socket:[10023]" dev="sockfs" ino=10023 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 59.135663][ T29] audit: type=1400 audit(1757198966.855:762): avc: denied { map } for pid=5045 comm="syz.6.568" path="socket:[10050]" dev="sockfs" ino=10050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.158908][ T29] audit: type=1400 audit(1757198966.855:763): avc: denied { read } for pid=5045 comm="syz.6.568" path="socket:[10050]" dev="sockfs" ino=10050 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 59.229078][ T29] audit: type=1400 audit(1757198966.955:764): avc: denied { create } for pid=5047 comm="syz.6.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.263866][ T29] audit: type=1400 audit(1757198966.975:765): avc: denied { setopt } for pid=5047 comm="syz.6.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.284314][ T29] audit: type=1400 audit(1757198966.975:766): avc: denied { write } for pid=5047 comm="syz.6.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.304952][ T29] audit: type=1400 audit(1757198966.975:767): avc: denied { nlmsg_write } for pid=5047 comm="syz.6.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 59.326844][ T4752] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 59.336437][ T4752] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 59.431159][ T4752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.461521][ T4752] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.469595][ T29] audit: type=1326 audit(1757198967.195:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3a0ebe9 code=0x7ffc0000 [ 59.493203][ T29] audit: type=1326 audit(1757198967.195:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5066 comm="syz.3.573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31a3a0ebe9 code=0x7ffc0000 [ 59.533776][ T4752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.544330][ T4752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.629995][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.637171][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.662269][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.669504][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.825565][ T4752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.975869][ T5107] netlink: 204 bytes leftover after parsing attributes in process `syz.2.578'. [ 60.111589][ T5111] loop3: detected capacity change from 0 to 8192 [ 60.121301][ T4752] veth0_vlan: entered promiscuous mode [ 60.145322][ T4752] veth1_vlan: entered promiscuous mode [ 60.180211][ T5123] program syz.6.583 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.205604][ T4752] veth0_macvtap: entered promiscuous mode [ 60.232501][ T5123] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 60.247420][ T4752] veth1_macvtap: entered promiscuous mode [ 60.281664][ T4752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.338884][ T4752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.368118][ T1463] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.427355][ T1463] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.464469][ T3467] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.483800][ T3467] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.773130][ T1035] hid-generic 0000:0000:0000.0002: hidraw0: HID v8.00 Device [syz0] on syz0 [ 60.812410][ T5162] fido_id[5162]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.245098][ T5181] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.328230][ T5187] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 61.356858][ T5187] FAT-fs (loop7): unable to read boot sector [ 61.417592][ T5192] SELinux: Context is not valid (left unmapped). [ 61.671907][ T5214] tmpfs: Bad value for 'mpol' [ 61.999074][ T5249] netlink: zone id is out of range [ 62.444687][ T5306] loop2: detected capacity change from 0 to 2048 [ 62.457598][ T5306] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.483282][ T5306] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.588025][ T5313] loop7: detected capacity change from 0 to 512 [ 62.596790][ T5313] EXT4-fs: Ignoring removed nobh option [ 62.675894][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.701979][ T5313] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.649: corrupted inode contents [ 62.715804][ T5313] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #3: comm syz.7.649: mark_inode_dirty error [ 62.728129][ T5313] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #3: comm syz.7.649: corrupted inode contents [ 62.741288][ T5313] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #3: comm syz.7.649: mark_inode_dirty error [ 62.763706][ T5313] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.649: Failed to acquire dquot type 0 [ 62.790098][ T5313] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.649: corrupted inode contents [ 62.835215][ T5313] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #16: comm syz.7.649: mark_inode_dirty error [ 62.848192][ T5313] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.649: corrupted inode contents [ 62.861763][ T5313] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #16: comm syz.7.649: mark_inode_dirty error [ 62.874844][ T5313] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.649: corrupted inode contents [ 62.911639][ T5313] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 62.925181][ T5313] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.649: corrupted inode contents [ 62.950396][ T5313] EXT4-fs error (device loop7): ext4_truncate:4666: inode #16: comm syz.7.649: mark_inode_dirty error [ 62.963832][ T5313] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 62.976403][ T5313] EXT4-fs (loop7): 1 truncate cleaned up [ 62.976988][ T5328] unsupported nla_type 52263 [ 62.982671][ T5313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.000848][ T5313] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.036835][ T5313] syz.7.649 (5313) used greatest stack depth: 9760 bytes left [ 63.046672][ T4752] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.217964][ T5347] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 63.493351][ T5381] openvswitch: netlink: Message has 6 unknown bytes. [ 63.568608][ T5385] netlink: 96 bytes leftover after parsing attributes in process `syz.1.671'. [ 63.637049][ T5400] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5400 comm=syz.6.674 [ 63.807864][ T5411] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 63.821421][ T5413] loop2: detected capacity change from 0 to 1024 [ 63.840477][ T5413] EXT4-fs: Ignoring removed orlov option [ 63.846320][ T5413] EXT4-fs: Ignoring removed nomblk_io_submit option [ 63.873009][ T5413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.974826][ T5427] loop6: detected capacity change from 0 to 128 [ 63.988817][ T29] kauditd_printk_skb: 213 callbacks suppressed [ 63.988833][ T29] audit: type=1400 audit(1757198971.715:981): avc: denied { unmount } for pid=3310 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 64.027679][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.043374][ T5427] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 64.051534][ T5427] FAT-fs (loop6): Filesystem has been set read-only [ 64.062699][ T5427] syz.6.682: attempt to access beyond end of device [ 64.062699][ T5427] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 64.068687][ T29] audit: type=1400 audit(1757198971.765:982): avc: denied { mount } for pid=5426 comm="syz.6.682" name="/" dev="loop6" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 64.098710][ T5427] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 64.098726][ T29] audit: type=1400 audit(1757198971.765:983): avc: denied { read } for pid=5432 comm="syz.3.686" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.106656][ T5427] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 64.130195][ T29] audit: type=1400 audit(1757198971.765:984): avc: denied { open } for pid=5432 comm="syz.3.686" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.143505][ T5427] syz.6.682: attempt to access beyond end of device [ 64.143505][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.162368][ T29] audit: type=1400 audit(1757198971.765:985): avc: denied { ioctl } for pid=5432 comm="syz.3.686" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 64.201621][ T29] audit: type=1400 audit(1757198971.785:986): avc: denied { read write } for pid=5434 comm="syz.1.687" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.205763][ T5427] syz.6.682: attempt to access beyond end of device [ 64.205763][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.224991][ T29] audit: type=1400 audit(1757198971.785:987): avc: denied { open } for pid=5434 comm="syz.1.687" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.240211][ T5427] syz.6.682: attempt to access beyond end of device [ 64.240211][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.262298][ T29] audit: type=1400 audit(1757198971.785:988): avc: denied { ioctl } for pid=5434 comm="syz.1.687" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 64.282306][ T5427] syz.6.682: attempt to access beyond end of device [ 64.282306][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.300576][ T29] audit: type=1400 audit(1757198971.795:989): avc: denied { create } for pid=5436 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.301278][ T29] audit: type=1400 audit(1757198971.935:990): avc: denied { write } for pid=5436 comm="syz.3.688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 64.316027][ T5427] syz.6.682: attempt to access beyond end of device [ 64.316027][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.370240][ T5427] syz.6.682: attempt to access beyond end of device [ 64.370240][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.398286][ T5427] syz.6.682: attempt to access beyond end of device [ 64.398286][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.411801][ T5427] syz.6.682: attempt to access beyond end of device [ 64.411801][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.431951][ T5427] syz.6.682: attempt to access beyond end of device [ 64.431951][ T5427] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 64.456643][ T5447] loop1: detected capacity change from 0 to 512 [ 64.466628][ T5447] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.473595][ T5447] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 64.485602][ T5447] EXT4-fs (loop1): 1 truncate cleaned up [ 64.495585][ T5447] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.529727][ T5453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.538403][ T5453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.556976][ T57] nci: nci_rsp_packet: unsupported rsp opcode 0xf21 [ 65.087182][ T5447] ================================================================== [ 65.095585][ T5447] BUG: KCSAN: data-race in page_cache_sync_ra / page_cache_sync_ra [ 65.103551][ T5447] [ 65.105928][ T5447] write to 0xffff88811cb00bdc of 4 bytes by task 5455 on cpu 0: [ 65.113596][ T5447] page_cache_sync_ra+0x4e9/0x6c0 [ 65.118691][ T5447] filemap_get_pages+0x2d0/0x1150 [ 65.123767][ T5447] filemap_splice_read+0x3a9/0x740 [ 65.129049][ T5447] ext4_file_splice_read+0x8f/0xb0 [ 65.134491][ T5447] splice_direct_to_actor+0x26f/0x680 [ 65.139902][ T5447] do_splice_direct+0xda/0x150 [ 65.144713][ T5447] do_sendfile+0x380/0x650 [ 65.149168][ T5447] __x64_sys_sendfile64+0x105/0x150 [ 65.154405][ T5447] x64_sys_call+0x2bb0/0x2ff0 [ 65.159214][ T5447] do_syscall_64+0xd2/0x200 [ 65.163778][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.169704][ T5447] [ 65.172046][ T5447] write to 0xffff88811cb00bdc of 4 bytes by task 5447 on cpu 1: [ 65.179787][ T5447] page_cache_sync_ra+0x4e9/0x6c0 [ 65.184868][ T5447] filemap_get_pages+0x2d0/0x1150 [ 65.190014][ T5447] filemap_splice_read+0x3a9/0x740 [ 65.195248][ T5447] ext4_file_splice_read+0x8f/0xb0 [ 65.200502][ T5447] splice_direct_to_actor+0x26f/0x680 [ 65.206080][ T5447] do_splice_direct+0xda/0x150 [ 65.210871][ T5447] do_sendfile+0x380/0x650 [ 65.215337][ T5447] __x64_sys_sendfile64+0x105/0x150 [ 65.220584][ T5447] x64_sys_call+0x2bb0/0x2ff0 [ 65.225304][ T5447] do_syscall_64+0xd2/0x200 [ 65.229864][ T5447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.235856][ T5447] [ 65.238204][ T5447] value changed: 0x0000000f -> 0x00000010 [ 65.244282][ T5447] [ 65.246634][ T5447] Reported by Kernel Concurrency Sanitizer on: [ 65.252901][ T5447] CPU: 1 UID: 0 PID: 5447 Comm: syz.1.691 Not tainted syzkaller #0 PREEMPT(voluntary) [ 65.262667][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 65.272899][ T5447] ================================================================== [ 65.372586][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.