last executing test programs: 54.28416141s ago: executing program 2 (id=28): socket(0x1e, 0x2, 0x100003) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@deltaction={0x5c, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x48, 0x1, [{0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) 54.220839587s ago: executing program 2 (id=30): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0xffffffffffffff3c, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911040000000000000003c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f00000025c0)="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", 0xcb3}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c222917662028d7a01206a1990722ccef1d8f39f7c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4afb470da3656dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7921319c544d5e797f"}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a80595cd5f744fa6898fdffda5b34b19474b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a"}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae"}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) mlockall(0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) 53.47464472s ago: executing program 2 (id=43): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0xfffe, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e23, @rand_addr=0x64010102}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}) 52.452118281s ago: executing program 2 (id=51): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYRESOCT], 0x1, 0x1282, &(0x7f0000002880)="$eJzs3U1rY1UcB+B/pmmbduyLOo52QDzoRhHitAtXborMgFhQqh1QQbhjUy1Nm9KEQkScunIl+DFEXboTxC/QjRvXgiDSjctZiFfSpE7TpB2nNq0Mz7PJ5ZzzO+fce8qFW+7h7r3y5fraSr28kjXiUqEQxc3hKN5NkeJSDEXbTrxw6+dfnn7rnXdfn19YuLGY0s35t2dfTilNPvPDe598++yPjcu3vpv8fjR2p9/f+2Pu192ruzN7f30Tq/W0Wk8btUbK0u1arZHdrlbS8mp9rZzSm9VKVq+kUmeMe/Ur1drmZjNlG8sT45tblXo9ZRvNtFZppkYhNbaaKfswW91I5XI5TYwH/8XS13fzPI/I8+EYiTzP87EYj8vxSEzEZEzFdDwaj8XjcSWeiKvxZDwVM/utDvIjFzt9AAAAAAAAAAAAAAAAAAAAeEjcZ/9/oXf//+hFTxkAAAAAAAAAAAAAAAAAAAAeOkf3/xcjHuD7/wAAAAAAAAAAAAAAAAAAAMBZuM/3/4/s/3/R/n8AAAAAAAAAAAAAAAAAAAAYhFL7ZzGlUsT659tL20vt33b5/EqsRjUqcT2m4s/Y3/3f1j6++drCjetp33S8tH6nk7+zvTTUnZ8dnorpQt/8bDufuvOjMX44PxdTcaX/+HN986V4/rlW/rN2vhxT8dMHUYtqLEcUOme/n/90NqVX31gY685fa7U71tCAlwUAAADOUjn9o/f5fafTqG99u6rzfJ46LQsn/H/gyPN5Ma4VL+qsOVBvfryWVauVrVMejBzfz0h3yVin5anHKkRE1hWfHP9tsdXlaSd/ZgdD5zro8Mltjq7FTOnEDi8dWsEo/g8u5hkc/P7VoZJSDGqs4dafc0/VwQXNqq3757/rMHbyfKCXZaRf1ehJqePvGYUB3o84X/cW/aJnAgAAAAAAAAAAwIPo+/bfWET0vA/4UU/Jwevh3fHeno8f/YtzOEMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+ZgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwVQAAAP//kh3BBA==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x101000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000a80)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r5}, 0x18) 3.770493809s ago: executing program 5 (id=684): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x398fba87178c1956, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r3, 0x5, 0x4) 3.407859214s ago: executing program 3 (id=695): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xafUD\x9dA\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x8, 0x0) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x8044) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 3.087456616s ago: executing program 5 (id=686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 3.086091126s ago: executing program 3 (id=688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 2.977372077s ago: executing program 4 (id=690): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) pause() fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) 2.43773316s ago: executing program 5 (id=692): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64=r0, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") gettid() openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x109000, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) timerfd_settime(r2, 0x0, &(0x7f00000003c0), 0x0) io_submit(r3, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r2}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r1, 0x0, 0x0, 0xffffffffffffffff}]) 2.166609137s ago: executing program 1 (id=709): r0 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netpci0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x600) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) gettid() pivot_root(&(0x7f00000001c0)='.\x00', &(0x7f0000002080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.13648258s ago: executing program 3 (id=699): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 2.121001411s ago: executing program 4 (id=700): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) 2.045278739s ago: executing program 1 (id=701): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000"], &(0x7f0000000780)='GPL\x00', 0x4}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x30044f1, &(0x7f0000000800)=ANY=[@ANYRES64, @ANYRES8, @ANYRES64, @ANYRES64], 0x0, 0x23e, &(0x7f0000000bc0)="$eJzs3c9qE1EUB+AzSdqmukgWrkRwQBeuStsnSJEKYldKFupCi21BklCwEGgVQ1c+gU/ic7jxDXwAoTtdFEYmSZsWUm0wf0r9vk0uzP3NOTe5Iau5eX2n1dja3ds5/PA9yuUkCrWoJUcR1ShEbiEAgOvmV5bFUdYzWrJUmFRPAMBkXfL3f3GKLQEAE/bs+Ysnaxsb60/TtBzR+tSuJ9F77V1f24m30YztWI5KHEdkp3rjR4831qOU5qpxv9Vp1/Nk69XX/v3XfkR08ytRierw/Eracybfadfn4ka/fi3Pr0Ylbg3Prw7JR30+Htw70/9SVOLbm9iNZmxFnh3kP66k6cPs88/3L/OO83zSadcXuvMGsuLUPxwAAAAAAAAAAAAAAAAAAAAAAK6tpTRN0yz7kmVZ1jl3/k7xuHt9KT1RPX8+Ty9/0flAnTPn6yznJZLe/EG+FLdLUZrl2gEAAAAAAAAAAAAAAAAAAOCq2Ns/aGw2m9vvxjo4eax//Hf+10EU+601k4gr0E93sJj3M51ad2PEWrURS0Rh/6Bxsrsam0n8JVWe0CbJhmy/4oWp+TFVn7853lUkETF3+mb+aXIh5sb8TQEAAAAAAAAAAAAAAAAAAKZs8NDvkIuHM2gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGZg8P//Iww6/fAlUzNeIgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP+B3wEAAP//bkR7Lg==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty=0xffffff7f, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) 2.044930659s ago: executing program 3 (id=702): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000340)='sched_switch\x00', r5}, 0x18) 1.836164139s ago: executing program 5 (id=705): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f00000007c0)="b49588044419ba1896493a", 0x1002, 0xffffffffffffffff, 0x4}, 0x38) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000300)=@generic={0x0, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r4, &(0x7f0000032440)=""/102364, 0x18fdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) 1.712723222s ago: executing program 1 (id=706): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r1, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.12362945s ago: executing program 3 (id=707): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x100000074, 0x101301) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4074, 0x1a, 0xfea, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000101"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = eventfd(0x0) read$eventfd(r2, &(0x7f0000000240), 0x8) writev(r2, &(0x7f0000000080)=[{0x0}, {&(0x7f0000002180)="27a8104ce45cd4d5", 0x8}], 0x2) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x18) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) 1.12132244s ago: executing program 0 (id=718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.057241196s ago: executing program 0 (id=708): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1}, 0x18) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0x2}}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1be5ff0000000000000000000000000081000000887f1f913f10006622232319dafe4224333c304309ff5a3d75856a08e83c3dafd745f3c7bd1370cd07e1be1787b885634bc7df4f1ad73f1bf48902fb6cfed0c21ad565670034e6b694bb929fab66bfc1c31598e4b33a3edb63de8debdcff6ec44f95809a537c738180c84c2bbde0879cf726d22fb7617c60524b70dfb9", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000300)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x4, {0xa, 0x4e23, 0x8, @loopback, 0xee7}, r5}}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) close(r2) 1.056992846s ago: executing program 4 (id=710): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x6, 0x1, 0x1ff) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r5], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 1.01720447s ago: executing program 0 (id=711): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0x18) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) futimesat(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000800038004000380080005"], 0x3c}}, 0x0) 942.916537ms ago: executing program 5 (id=712): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000040)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 854.028956ms ago: executing program 0 (id=713): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x106, 0xb}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0x1, 0x204, 0xc684, 0x9}, 0x10) write$cgroup_pid(r1, &(0x7f00000004c0), 0x24) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 804.534641ms ago: executing program 4 (id=714): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 677.133874ms ago: executing program 1 (id=715): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x0, 0x290}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000e80)=""/222, 0xde}], 0x1}, 0x3}], 0x1, 0x40000001, 0x0) 676.870744ms ago: executing program 4 (id=716): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0x4, 0x4, 0xe3, 0x8000, 0x6}}}}]}, 0x4c}}, 0x44080) close_range(r2, 0xffffffffffffffff, 0x0) 275.558493ms ago: executing program 3 (id=717): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0xfe, 0x0, 0xff, 0x0, 0x0, 0x5022, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) close(r3) 272.150094ms ago: executing program 0 (id=728): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x7}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4008000) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad320fbc9b554e2a800040000ea073056a9", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 271.536783ms ago: executing program 1 (id=719): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r3}, 0x10) r4 = syz_pidfd_open(r0, 0x0) setns(r4, 0x24020000) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) 223.300338ms ago: executing program 0 (id=720): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0xf1c38fa000000000}, 0x18) semget(0x1, 0x4, 0x39c) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x9}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x100, 0x5, 0x1, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r2, &(0x7f0000000840)=""/40, 0x28) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x8, 0x8}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x400, 0x55a}) close_range(r1, 0xffffffffffffffff, 0x0) 222.972778ms ago: executing program 1 (id=721): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x1ff003, 0x81, 0xffff, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r4, &(0x7f00000001c0)="49bda8f11851b8436bebb2", 0xb) sendfile(r4, r0, 0x0, 0x3ffff) sendfile(r4, r0, 0x0, 0x7ffffffffffffffd) 0s ago: executing program 5 (id=722): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.255' (ED25519) to the list of known hosts. [ 33.032572][ T29] audit: type=1400 audit(1760836844.260:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.055745][ T29] audit: type=1400 audit(1760836844.280:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.056770][ T3301] cgroup: Unknown subsys name 'net' [ 33.083656][ T29] audit: type=1400 audit(1760836844.310:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.199892][ T3301] cgroup: Unknown subsys name 'cpuset' [ 33.206292][ T3301] cgroup: Unknown subsys name 'rlimit' [ 33.367926][ T29] audit: type=1400 audit(1760836844.590:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.391388][ T29] audit: type=1400 audit(1760836844.600:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.412159][ T29] audit: type=1400 audit(1760836844.600:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.425797][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.432543][ T29] audit: type=1400 audit(1760836844.600:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.461421][ T29] audit: type=1400 audit(1760836844.610:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.486396][ T29] audit: type=1400 audit(1760836844.610:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.504101][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 33.509711][ T29] audit: type=1400 audit(1760836844.670:71): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.480917][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 35.518973][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 35.532443][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.553858][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 35.566546][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 35.659123][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.666231][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.673580][ T3315] bridge_slave_0: entered allmulticast mode [ 35.680268][ T3315] bridge_slave_0: entered promiscuous mode [ 35.686662][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.693926][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.701266][ T3313] bridge_slave_0: entered allmulticast mode [ 35.707628][ T3313] bridge_slave_0: entered promiscuous mode [ 35.721703][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.728807][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.736211][ T3315] bridge_slave_1: entered allmulticast mode [ 35.743125][ T3315] bridge_slave_1: entered promiscuous mode [ 35.750182][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.757250][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.764542][ T3313] bridge_slave_1: entered allmulticast mode [ 35.771074][ T3313] bridge_slave_1: entered promiscuous mode [ 35.824036][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.831163][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.838308][ T3318] bridge_slave_0: entered allmulticast mode [ 35.844862][ T3318] bridge_slave_0: entered promiscuous mode [ 35.851521][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.858681][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.865999][ T3311] bridge_slave_0: entered allmulticast mode [ 35.872412][ T3311] bridge_slave_0: entered promiscuous mode [ 35.884936][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.895098][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.904392][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.911542][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.918890][ T3318] bridge_slave_1: entered allmulticast mode [ 35.925441][ T3318] bridge_slave_1: entered promiscuous mode [ 35.931827][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.938997][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.946366][ T3311] bridge_slave_1: entered allmulticast mode [ 35.953007][ T3311] bridge_slave_1: entered promiscuous mode [ 35.959544][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.966686][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.973965][ T3316] bridge_slave_0: entered allmulticast mode [ 35.980435][ T3316] bridge_slave_0: entered promiscuous mode [ 35.988040][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.998446][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.028032][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.035370][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.042846][ T3316] bridge_slave_1: entered allmulticast mode [ 36.049652][ T3316] bridge_slave_1: entered promiscuous mode [ 36.072397][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.093096][ T3315] team0: Port device team_slave_0 added [ 36.104490][ T3313] team0: Port device team_slave_0 added [ 36.111733][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.127460][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.137436][ T3315] team0: Port device team_slave_1 added [ 36.144164][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.154722][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.164678][ T3313] team0: Port device team_slave_1 added [ 36.186878][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.201724][ T3318] team0: Port device team_slave_0 added [ 36.227588][ T3318] team0: Port device team_slave_1 added [ 36.233621][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.240657][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.266990][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.278686][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.285780][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.312101][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.323808][ T3311] team0: Port device team_slave_0 added [ 36.340495][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.347628][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.374012][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.385209][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.392220][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.418600][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.430787][ T3311] team0: Port device team_slave_1 added [ 36.437727][ T3316] team0: Port device team_slave_0 added [ 36.466960][ T3316] team0: Port device team_slave_1 added [ 36.473222][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.481254][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.508041][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.536403][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.543450][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.569601][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.593591][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.600683][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.626982][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.643680][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.650887][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.677346][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.696440][ T3313] hsr_slave_0: entered promiscuous mode [ 36.702575][ T3313] hsr_slave_1: entered promiscuous mode [ 36.708815][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.715818][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.741876][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.754082][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.761079][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.787190][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.800297][ T3315] hsr_slave_0: entered promiscuous mode [ 36.806489][ T3315] hsr_slave_1: entered promiscuous mode [ 36.812813][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 36.818551][ T3315] Cannot create hsr debugfs directory [ 36.847880][ T3318] hsr_slave_0: entered promiscuous mode [ 36.853974][ T3318] hsr_slave_1: entered promiscuous mode [ 36.859937][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 36.865779][ T3318] Cannot create hsr debugfs directory [ 36.935623][ T3311] hsr_slave_0: entered promiscuous mode [ 36.941973][ T3311] hsr_slave_1: entered promiscuous mode [ 36.947948][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 36.953891][ T3311] Cannot create hsr debugfs directory [ 36.968854][ T3316] hsr_slave_0: entered promiscuous mode [ 36.975085][ T3316] hsr_slave_1: entered promiscuous mode [ 36.981228][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 36.987100][ T3316] Cannot create hsr debugfs directory [ 37.164190][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.173194][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.184611][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.193531][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.213459][ T3315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.229841][ T3315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.241864][ T3315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.257053][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.266114][ T3315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.279198][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.292713][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.306809][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.336562][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.346262][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.365567][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.386135][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.405240][ T3316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.414125][ T3316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.423951][ T3316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.438927][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.448675][ T3316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.481539][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.498730][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.508481][ T1801] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.515605][ T1801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.536274][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.543397][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.569230][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.590354][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.601592][ T1801] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.608747][ T1801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.619217][ T1801] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.626425][ T1801] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.661748][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.679757][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.696872][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.705626][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.715824][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.732940][ T1801] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.740076][ T1801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.749054][ T1801] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.756191][ T1801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.773528][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.780772][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.790347][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.797405][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.807408][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.823821][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.841860][ T113] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.849002][ T113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.858576][ T113] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.865738][ T113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.923547][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.952129][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.962640][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.001785][ T3313] veth0_vlan: entered promiscuous mode [ 38.036010][ T3313] veth1_vlan: entered promiscuous mode [ 38.063530][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.078347][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.102734][ T3313] veth0_macvtap: entered promiscuous mode [ 38.111407][ T3313] veth1_macvtap: entered promiscuous mode [ 38.121072][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.134422][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.148796][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.179676][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.188636][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.221268][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.241631][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 38.241648][ T29] audit: type=1400 audit(1760836849.460:81): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8V68Dg/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.260686][ T3315] veth0_vlan: entered promiscuous mode [ 38.272091][ T29] audit: type=1400 audit(1760836849.460:82): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.294315][ T3318] veth0_vlan: entered promiscuous mode [ 38.317155][ T29] audit: type=1400 audit(1760836849.470:83): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8V68Dg/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.332014][ T3318] veth1_vlan: entered promiscuous mode [ 38.342923][ T29] audit: type=1400 audit(1760836849.470:84): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.361136][ T3318] veth0_macvtap: entered promiscuous mode [ 38.371199][ T29] audit: type=1400 audit(1760836849.470:85): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8V68Dg/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.391047][ T3318] veth1_macvtap: entered promiscuous mode [ 38.403626][ T29] audit: type=1400 audit(1760836849.470:86): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/root/syzkaller.8V68Dg/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.403658][ T29] audit: type=1400 audit(1760836849.470:87): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.423365][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.436950][ T29] audit: type=1400 audit(1760836849.530:88): avc: denied { mounton } for pid=3313 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.466064][ T1801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.487152][ T29] audit: type=1400 audit(1760836849.530:89): avc: denied { mount } for pid=3313 comm="syz-executor" name="/" dev="gadgetfs" ino=3752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.500628][ T3315] veth1_vlan: entered promiscuous mode [ 38.530112][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.541425][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.561591][ T782] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.590596][ T29] audit: type=1400 audit(1760836849.810:90): avc: denied { read write } for pid=3313 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.596628][ T3315] veth0_macvtap: entered promiscuous mode [ 38.634672][ T782] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.645316][ T782] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.662361][ T3316] veth0_vlan: entered promiscuous mode [ 38.668585][ T3315] veth1_macvtap: entered promiscuous mode [ 38.669667][ C0] hrtimer: interrupt took 45486 ns [ 38.684454][ T782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.704203][ T3316] veth1_vlan: entered promiscuous mode [ 38.756257][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.772651][ T3316] veth0_macvtap: entered promiscuous mode [ 38.781717][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.793193][ T3316] veth1_macvtap: entered promiscuous mode [ 38.802959][ T3448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.831627][ T3448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.845135][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.860655][ T3448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.870841][ T3448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.880333][ T3311] veth0_vlan: entered promiscuous mode [ 38.888469][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.910719][ T3311] veth1_vlan: entered promiscuous mode [ 38.930192][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.960210][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.992464][ T3311] veth0_macvtap: entered promiscuous mode [ 39.002631][ T3491] loop2: detected capacity change from 0 to 1024 [ 39.010041][ T3311] veth1_macvtap: entered promiscuous mode [ 39.019786][ T3491] EXT4-fs: Ignoring removed orlov option [ 39.025521][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.043225][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.054242][ T3491] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.059897][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.078726][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.091074][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.104903][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.115033][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.128648][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.205683][ T3499] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2'. [ 39.231441][ T3499] Zero length message leads to an empty skb [ 39.481941][ T3516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11'. [ 39.516960][ T3315] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.750047][ T3526] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 39.759120][ T3526] ref_ctr increment failed for inode: 0x1d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881034eb3c0 [ 39.794569][ T3526] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 39.803581][ T3526] ref_ctr decrement failed for inode: 0x1d offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff8881034eb3c0 [ 39.849181][ T3526] uprobe: syz.4.15:3526 failed to unregister, leaking uprobe [ 39.882897][ T3530] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.474227][ T3530] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.489791][ T3559] IPv6: NLM_F_CREATE should be specified when creating new route [ 40.552932][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.31'. [ 40.566041][ T3566] vlan2: entered allmulticast mode [ 40.571307][ T3566] dummy0: entered allmulticast mode [ 40.860094][ T3589] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.38'. [ 40.996128][ T3592] loop4: detected capacity change from 0 to 8192 [ 41.025563][ T3530] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.103248][ T3530] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.150560][ T3598] rdma_op ffff888119bbb180 conn xmit_rdma 0000000000000000 [ 41.172514][ T3448] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.189747][ T3448] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.205162][ T3448] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.241690][ T3448] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.535985][ T3608] loop3: detected capacity change from 0 to 128 [ 41.758166][ T3610] loop3: detected capacity change from 0 to 512 [ 41.798594][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 41.817335][ T3610] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.880643][ T3610] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.891977][ T3618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 41.942952][ T3618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 42.001208][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 42.102014][ T3618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 42.189251][ T3613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.46'. [ 42.209593][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.398473][ T3640] loop2: detected capacity change from 0 to 8192 [ 42.514986][ T3315] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 42.523832][ T3315] FAT-fs (loop2): Filesystem has been set read-only [ 42.609303][ T3315] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 42.918836][ T3672] syzkaller0: entered promiscuous mode [ 42.924416][ T3672] syzkaller0: entered allmulticast mode [ 43.085283][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.105609][ T3678] tipc: Started in network mode [ 43.110674][ T3678] tipc: Node identity 4, cluster identity 4711 [ 43.116887][ T3678] tipc: Node number set to 4 [ 43.170812][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.253939][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.297947][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.411626][ T3679] chnl_net:caif_netlink_parms(): no params data found [ 43.448345][ T3697] loop1: detected capacity change from 0 to 2048 [ 43.519792][ T29] kauditd_printk_skb: 241 callbacks suppressed [ 43.519807][ T29] audit: type=1400 audit(1760836854.750:332): avc: denied { search } for pid=3041 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.547678][ T29] audit: type=1400 audit(1760836854.750:333): avc: denied { search } for pid=3041 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.569559][ T29] audit: type=1400 audit(1760836854.750:334): avc: denied { search } for pid=3041 comm="dhcpcd" name="data" dev="tmpfs" ino=13 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.591197][ T29] audit: type=1400 audit(1760836854.750:335): avc: denied { read } for pid=3041 comm="dhcpcd" name="n26" dev="tmpfs" ino=869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.612760][ T29] audit: type=1400 audit(1760836854.750:336): avc: denied { open } for pid=3041 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.635989][ T29] audit: type=1400 audit(1760836854.750:337): avc: denied { getattr } for pid=3041 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=869 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.664006][ T37] bridge_slave_1: left allmulticast mode [ 43.669752][ T37] bridge_slave_1: left promiscuous mode [ 43.675671][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.702832][ T3697] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.718116][ T3705] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 43.718186][ T37] bridge_slave_0: left allmulticast mode [ 43.718207][ T37] bridge_slave_0: left promiscuous mode [ 43.737437][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.750600][ T29] audit: type=1400 audit(1760836854.970:338): avc: denied { ioctl } for pid=3706 comm="syz.0.72" path="socket:[5473]" dev="sockfs" ino=5473 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 43.788434][ T29] audit: type=1400 audit(1760836855.010:339): avc: denied { append } for pid=3693 comm="syz.1.70" path="/15/file1/blkio.bfq.io_merged_recursive" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.855212][ T29] audit: type=1400 audit(1760836855.080:340): avc: denied { ioctl } for pid=3693 comm="syz.1.70" path="/15/file1/blkio.bfq.io_merged_recursive" dev="loop1" ino=18 ioctlcmd=0x660b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.892434][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.902531][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.912737][ T37] bond0 (unregistering): Released all slaves [ 43.975176][ T29] audit: type=1400 audit(1760836855.200:341): avc: denied { lock } for pid=3712 comm="syz.4.74" path="socket:[6390]" dev="sockfs" ino=6390 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 43.999563][ T3707] team0: Port device team_slave_1 removed [ 44.010689][ T3708] macvlan2: entered promiscuous mode [ 44.016052][ T3708] macvlan2: entered allmulticast mode [ 44.038353][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.045537][ T3679] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.055761][ T3679] bridge_slave_0: entered allmulticast mode [ 44.063158][ T3679] bridge_slave_0: entered promiscuous mode [ 44.073693][ T37] hsr_slave_0: left promiscuous mode [ 44.089901][ T37] hsr_slave_1: left promiscuous mode [ 44.095670][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.103472][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.125312][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.132859][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.146637][ T37] veth1_macvtap: left promiscuous mode [ 44.155377][ T3720] loop3: detected capacity change from 0 to 512 [ 44.161832][ T37] veth0_macvtap: left promiscuous mode [ 44.167717][ T37] veth1_vlan: left promiscuous mode [ 44.177843][ T3720] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 44.191235][ T3720] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 44.200514][ T3720] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 44.210520][ T37] veth0_vlan: left promiscuous mode [ 44.211681][ T3717] __nla_validate_parse: 8 callbacks suppressed [ 44.211700][ T3717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.75'. [ 44.236277][ T3720] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 44.260248][ T3720] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 44.283195][ T3720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.310294][ T3720] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 44.327181][ T12] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.343165][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 44.355807][ T12] EXT4-fs (loop1): This should not happen!! Data will be lost [ 44.355807][ T12] [ 44.365656][ T12] EXT4-fs (loop1): Total free blocks count 0 [ 44.366045][ T3724] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 44.371746][ T12] EXT4-fs (loop1): Free/Dirty block details [ 44.385411][ T12] EXT4-fs (loop1): free_blocks=2415919104 [ 44.391285][ T12] EXT4-fs (loop1): dirty_blocks=8192 [ 44.396585][ T12] EXT4-fs (loop1): Block reservation details [ 44.402603][ T12] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 44.422412][ T782] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 44.437164][ T37] team0 (unregistering): Port device team_slave_1 removed [ 44.449828][ T37] team0 (unregistering): Port device team_slave_0 removed [ 44.487907][ T3714] 0ªX¹¦À: renamed from caif0 [ 44.496866][ T3714] 0ªX¹¦À: entered allmulticast mode [ 44.502533][ T3714] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 44.518695][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.525891][ T3679] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.538535][ T3679] bridge_slave_1: entered allmulticast mode [ 44.545596][ T3679] bridge_slave_1: entered promiscuous mode [ 44.557974][ T3716] bond0: (slave bond_slave_1): Releasing backup interface [ 44.593681][ T3720] team0: Port device dummy0 added [ 44.628365][ T3724] team0: Port device dummy0 removed [ 44.651692][ T3724] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 44.712117][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.723802][ T3740] netlink: 'syz.0.78': attribute type 30 has an invalid length. [ 44.731861][ T3679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.774301][ T3679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.870759][ T3679] team0: Port device team_slave_0 added [ 44.892687][ T3679] team0: Port device team_slave_1 added [ 44.909713][ T3756] loop4: detected capacity change from 0 to 1764 [ 44.930553][ T3756] usb usb1: usbfs: process 3756 (syz.4.82) did not claim interface 0 before use [ 44.999899][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.007182][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.033318][ T3679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.052257][ T3679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.059515][ T3679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.085779][ T3679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.103790][ T3779] loop3: detected capacity change from 0 to 512 [ 45.110477][ T3779] EXT4-fs: Ignoring removed nobh option [ 45.121171][ T3779] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 45.163440][ T3679] hsr_slave_0: entered promiscuous mode [ 45.182323][ T3679] hsr_slave_1: entered promiscuous mode [ 45.192140][ T3679] debugfs: 'hsr0' already exists in 'hsr' [ 45.198010][ T3679] Cannot create hsr debugfs directory [ 45.293708][ T3785] syz.3.88 uses obsolete (PF_INET,SOCK_PACKET) [ 45.514028][ T3679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 45.523866][ T3679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 45.560497][ T3679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 45.586374][ T3679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 45.798820][ T3809] process 'syz.1.92' launched '/dev/fd/8' with NULL argv: empty string added [ 46.135409][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.159539][ T3829] geneve0: entered allmulticast mode [ 46.178747][ T3679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.197904][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 46.489476][ T3854] netlink: 24 bytes leftover after parsing attributes in process `syz.4.102'. [ 46.512359][ T3679] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.567968][ T782] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.575195][ T782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.592936][ T782] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.600196][ T782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.629659][ T3679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.746911][ T3679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.779716][ T3857] mmap: syz.4.103 (3857) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 46.952163][ T3679] veth0_vlan: entered promiscuous mode [ 46.960420][ T3679] veth1_vlan: entered promiscuous mode [ 46.977867][ T3679] veth0_macvtap: entered promiscuous mode [ 46.986256][ T3679] veth1_macvtap: entered promiscuous mode [ 46.999020][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.011217][ T3679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.022846][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.032393][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.042868][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.052210][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.170999][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 47.180216][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.110'. [ 47.270976][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 47.279885][ T3906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.114'. [ 47.288709][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.114'. [ 47.301634][ T3906] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 47.310061][ T3906] tipc: Enabled bearer , priority 10 [ 47.358917][ T3910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 47.374649][ T3910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 47.395583][ T3910] vlan2: entered allmulticast mode [ 47.400871][ T3910] bond1: entered allmulticast mode [ 47.873123][ T3935] loop4: detected capacity change from 0 to 512 [ 47.883620][ T3935] EXT4-fs: Ignoring removed i_version option [ 47.889800][ T3935] EXT4-fs: Ignoring removed bh option [ 47.937198][ T3935] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.985547][ T3935] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.074522][ T3947] netlink: 'syz.3.131': attribute type 1 has an invalid length. [ 48.092242][ T3935] EXT4-fs error (device loop4): ext4_lookup:1787: inode #12: comm syz.4.127: iget: bad i_size value: 2533274857506816 [ 48.150168][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.380980][ T3965] syz.3.137 (3965) used greatest stack depth: 10160 bytes left [ 48.541101][ T3984] loop5: detected capacity change from 0 to 1024 [ 48.563399][ T3982] loop3: detected capacity change from 0 to 512 [ 48.596452][ T3984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.625987][ T3984] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.645897][ T3982] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.690646][ T3982] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.764489][ T29] kauditd_printk_skb: 603 callbacks suppressed [ 48.764507][ T29] audit: type=1400 audit(1760836859.990:945): avc: denied { ioctl } for pid=3981 comm="syz.3.142" path="/27/file1/file1" dev="loop3" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 48.816568][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.849478][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.885537][ T4002] loop3: detected capacity change from 0 to 512 [ 48.913684][ T4002] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.148: inode has both inline data and extents flags [ 48.931048][ T4002] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.148: couldn't read orphan inode 15 (err -117) [ 48.956114][ T29] audit: type=1400 audit(1760836860.170:946): avc: denied { create } for pid=4003 comm="syz.5.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.975625][ T29] audit: type=1400 audit(1760836860.170:947): avc: denied { bind } for pid=4003 comm="syz.5.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.996108][ T4002] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.056633][ T29] audit: type=1400 audit(1760836860.280:948): avc: denied { setattr } for pid=3999 comm="syz.3.148" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.122636][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.133363][ T29] audit: type=1400 audit(1760836860.360:949): avc: denied { bind } for pid=4014 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.157052][ T29] audit: type=1400 audit(1760836860.370:950): avc: denied { setopt } for pid=4014 comm="syz.4.156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.187575][ T29] audit: type=1400 audit(1760836860.410:951): avc: denied { ioctl } for pid=4014 comm="syz.4.156" path="socket:[7199]" dev="sockfs" ino=7199 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.257146][ T29] audit: type=1326 audit(1760836860.480:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4018 comm="syz.4.159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8af240efc9 code=0x0 [ 49.304268][ T4024] netlink: 'syz.5.160': attribute type 4 has an invalid length. [ 49.423952][ T29] audit: type=1400 audit(1760836860.650:953): avc: denied { read write } for pid=4027 comm="syz.3.161" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.448791][ T29] audit: type=1400 audit(1760836860.650:954): avc: denied { open } for pid=4027 comm="syz.3.161" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 49.557833][ T4039] loop5: detected capacity change from 0 to 512 [ 49.574487][ T4039] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 49.637800][ T4039] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 49.705571][ T4039] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.163: bg 0: block 248: padding at end of block bitmap is not set [ 49.743457][ T4039] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.163: Failed to acquire dquot type 1 [ 49.761252][ T4039] EXT4-fs (loop5): 1 truncate cleaned up [ 49.808580][ T4039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 49.932066][ T4052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.002940][ T4052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.133062][ T4052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.185299][ T4052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.220557][ T4074] loop4: detected capacity change from 0 to 512 [ 50.264424][ T52] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.278127][ T4039] syz.5.163 (4039) used greatest stack depth: 9120 bytes left [ 50.288705][ T52] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.297416][ T4076] __nla_validate_parse: 4 callbacks suppressed [ 50.297436][ T4076] netlink: 12 bytes leftover after parsing attributes in process `syz.3.174'. [ 50.299365][ T52] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.347637][ T4074] loop4: detected capacity change from 0 to 512 [ 50.356313][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 50.371459][ T52] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.403469][ T4074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.447630][ T4074] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.477892][ T4083] netlink: 'syz.5.175': attribute type 4 has an invalid length. [ 50.532265][ T4083] netlink: 'syz.5.175': attribute type 4 has an invalid length. [ 50.619161][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.822827][ T4100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 52.075814][ T4148] xfrm0: entered promiscuous mode [ 52.080985][ T4148] xfrm0: entered allmulticast mode [ 52.120186][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.192'. [ 52.175928][ T4152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 52.344455][ T4171] loop3: detected capacity change from 0 to 512 [ 52.374774][ T4171] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.197: error while reading EA inode 32 err=-116 [ 52.460682][ T4171] EXT4-fs (loop3): Remounting filesystem read-only [ 52.508383][ T4171] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.521550][ T4171] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 52.532040][ T4171] EXT4-fs (loop3): 1 orphan inode deleted [ 52.550201][ T4171] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.580080][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.668634][ T4189] netlink: 'syz.3.205': attribute type 4 has an invalid length. [ 52.676437][ T4189] netlink: 17 bytes leftover after parsing attributes in process `syz.3.205'. [ 53.657493][ T4237] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 53.684761][ T4237] wireguard0: entered promiscuous mode [ 53.690498][ T4237] wireguard0: entered allmulticast mode [ 53.729567][ T4235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 53.998054][ T4244] Illegal XDP return value 4294967274 on prog (id 185) dev N/A, expect packet loss! [ 54.014347][ T4248] syzkaller0: entered promiscuous mode [ 54.019961][ T4248] syzkaller0: entered allmulticast mode [ 54.073127][ T4233] Set syz1 is full, maxelem 65536 reached [ 54.178172][ T29] kauditd_printk_skb: 119 callbacks suppressed [ 54.178237][ T29] audit: type=1326 audit(1760836865.380:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.208103][ T29] audit: type=1326 audit(1760836865.380:1073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.232057][ T29] audit: type=1326 audit(1760836865.380:1074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.256060][ T29] audit: type=1326 audit(1760836865.380:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.280580][ T29] audit: type=1326 audit(1760836865.380:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.304282][ T29] audit: type=1326 audit(1760836865.380:1077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.327885][ T29] audit: type=1326 audit(1760836865.380:1078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.352470][ T29] audit: type=1326 audit(1760836865.380:1079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.376383][ T29] audit: type=1326 audit(1760836865.380:1080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.399836][ T29] audit: type=1326 audit(1760836865.380:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4251 comm="syz.4.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7fc00000 [ 54.508934][ T4266] tipc: Started in network mode [ 54.513944][ T4266] tipc: Node identity a29153c6c1bf, cluster identity 4711 [ 54.521295][ T4266] tipc: Enabled bearer , priority 0 [ 54.541837][ T4258] tipc: Resetting bearer [ 54.555278][ T4258] tipc: Disabling bearer [ 54.569890][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 54.578937][ T4263] netlink: 28 bytes leftover after parsing attributes in process `syz.3.235'. [ 54.587938][ T4271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.237'. [ 54.601562][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.609007][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.616512][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.623941][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.631366][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.638782][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.646223][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.653679][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.661259][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.668761][ T979] hid-generic 0003:0003:0800.0001: unknown main item tag 0x0 [ 54.680627][ T979] hid-generic 0003:0003:0800.0001: hidraw0: USB HID v0.07 Device [syz0] on syz1 [ 54.724888][ T4272] fido_id[4272]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 54.818380][ T4284] loop5: detected capacity change from 0 to 1024 [ 54.848006][ T4284] EXT4-fs (loop5): filesystem too large to mount safely on this system [ 54.907828][ T4283] Process accounting resumed [ 55.036483][ T4297] loop1: detected capacity change from 0 to 512 [ 55.140630][ T4297] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 55.158955][ T4297] EXT4-fs (loop1): warning: maximal mount count reached, running e2fsck is recommended [ 55.191838][ T4297] EXT4-fs error (device loop1): ext4_orphan_get:1392: comm syz.1.234: inode #15: comm syz.1.234: iget: illegal inode # [ 55.209337][ T4297] EXT4-fs (loop1): Remounting filesystem read-only [ 55.216276][ T4297] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.237043][ T4302] netlink: 20 bytes leftover after parsing attributes in process `syz.0.247'. [ 55.252180][ T4297] EXT4-fs (loop1): shut down requested (1) [ 55.360509][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.404474][ T4309] netlink: 32 bytes leftover after parsing attributes in process `syz.5.251'. [ 55.486786][ T4317] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 55.719889][ T4325] loop1: detected capacity change from 0 to 1024 [ 55.741831][ T4325] ======================================================= [ 55.741831][ T4325] WARNING: The mand mount option has been deprecated and [ 55.741831][ T4325] and is ignored by this kernel. Remove the mand [ 55.741831][ T4325] option from the mount to silence this warning. [ 55.741831][ T4325] ======================================================= [ 55.881763][ T4333] loop3: detected capacity change from 0 to 2048 [ 56.022352][ T4325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.273121][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.459706][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.262'. [ 56.468620][ T4373] netlink: 348 bytes leftover after parsing attributes in process `syz.1.262'. [ 56.477653][ T4373] netlink: 16 bytes leftover after parsing attributes in process `syz.1.262'. [ 56.486652][ T4373] netlink: 348 bytes leftover after parsing attributes in process `syz.1.262'. [ 56.577875][ T4386] 9pnet_fd: Insufficient options for proto=fd [ 56.593146][ T4390] loop1: detected capacity change from 0 to 128 [ 56.944770][ T4431] loop4: detected capacity change from 0 to 1024 [ 56.965494][ T4434] capability: warning: `syz.0.271' uses deprecated v2 capabilities in a way that may be insecure [ 57.002494][ T4431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.016541][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.271'. [ 57.121071][ T4454] netlink: 'syz.0.275': attribute type 21 has an invalid length. [ 57.131601][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.467782][ T4506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.286'. [ 57.488793][ T4506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 58.260798][ T4599] loop1: detected capacity change from 0 to 164 [ 58.364494][ T4611] ªªªªªª: renamed from vlan0 (while UP) [ 58.568849][ T4623] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: 1 [ 58.577648][ T4623] ref_ctr increment failed for inode: 0x134 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811db86d40 [ 58.623628][ T4626] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -14123, delta: -1 [ 58.632509][ T4626] ref_ctr decrement failed for inode: 0x134 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88811db86d40 [ 58.686211][ T4626] uprobe: syz.3.304:4626 failed to unregister, leaking uprobe [ 59.292798][ T4667] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 59.579198][ T4667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.747880][ T4677] tipc: New replicast peer: 255.255.255.83 [ 59.753977][ T4677] tipc: Enabled bearer , priority 10 [ 59.800913][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 59.800933][ T29] audit: type=1400 audit(1760836870.980:1237): avc: denied { write } for pid=4675 comm="syz.0.313" path="socket:[7763]" dev="sockfs" ino=7763 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 59.923038][ T29] audit: type=1400 audit(1760836871.150:1238): avc: denied { read } for pid=4679 comm="syz.1.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 60.012359][ T29] audit: type=1400 audit(1760836871.240:1239): avc: denied { read } for pid=4684 comm="syz.1.319" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.035495][ T29] audit: type=1400 audit(1760836871.240:1240): avc: denied { open } for pid=4684 comm="syz.1.319" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.105423][ T29] audit: type=1326 audit(1760836871.330:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 60.128817][ T29] audit: type=1326 audit(1760836871.330:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 60.152194][ T29] audit: type=1326 audit(1760836871.330:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 60.175898][ T29] audit: type=1326 audit(1760836871.330:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 60.199391][ T29] audit: type=1326 audit(1760836871.330:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 60.222853][ T29] audit: type=1326 audit(1760836871.330:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4688 comm="syz.3.320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 60.533051][ T4701] __nla_validate_parse: 1 callbacks suppressed [ 60.533071][ T4701] netlink: 202920 bytes leftover after parsing attributes in process `syz.5.324'. [ 60.744633][ T4705] loop5: detected capacity change from 0 to 8192 [ 60.761168][ T4714] rdma_op ffff88811f25d980 conn xmit_rdma 0000000000000000 [ 60.905097][ T4722] loop4: detected capacity change from 0 to 128 [ 61.355717][ T4744] SELinux: Context system_u:object_r:newrole_exec_t:s0 is not valid (left unmapped). [ 61.878556][ T4752] rdma_op ffff888120affd80 conn xmit_rdma 0000000000000000 [ 62.263372][ T4770] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.312081][ T4770] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.320951][ T4773] loop3: detected capacity change from 0 to 4096 [ 62.341675][ T4773] EXT4-fs: Ignoring removed nomblk_io_submit option [ 62.375843][ T4773] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.431907][ T4770] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.532465][ T4770] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.625577][ T4121] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.646356][ T4121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.704110][ T4121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.726121][ T4121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.997063][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.220569][ T4796] netlink: 64 bytes leftover after parsing attributes in process `syz.3.354'. [ 63.300193][ T4810] loop3: detected capacity change from 0 to 256 [ 64.017518][ T4835] netlink: 3 bytes leftover after parsing attributes in process `syz.4.370'. [ 64.045737][ T4835] batadv1: entered promiscuous mode [ 64.051120][ T4835] batadv1: entered allmulticast mode [ 64.132744][ T4844] loop5: detected capacity change from 0 to 128 [ 64.233028][ T4846] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.312720][ T4846] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.382967][ T4846] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.432663][ T4852] netlink: 28 bytes leftover after parsing attributes in process `{/}\…‘"ÀÒÁåXÜe†'. [ 64.442217][ T4852] netlink: 28 bytes leftover after parsing attributes in process `{/}\…‘"ÀÒÁåXÜe†'. [ 64.491534][ T4846] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.534288][ T4853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 64.543397][ T4853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 64.597511][ T4142] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.622717][ T4121] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.669147][ T4162] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.677766][ T4162] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.082586][ T4855] netlink: 96 bytes leftover after parsing attributes in process `syz.3.377'. [ 65.230228][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 65.230242][ T29] audit: type=1400 audit(1760836876.460:1455): avc: denied { connect } for pid=4875 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.266731][ T29] audit: type=1400 audit(1760836876.460:1456): avc: denied { write } for pid=4875 comm="syz.0.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 65.296338][ T29] audit: type=1326 audit(1760836876.520:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.350734][ T4879] ipvlan2: entered promiscuous mode [ 65.356221][ T29] audit: type=1326 audit(1760836876.560:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.379931][ T29] audit: type=1326 audit(1760836876.560:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.404214][ T29] audit: type=1326 audit(1760836876.560:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.427929][ T29] audit: type=1326 audit(1760836876.560:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.451403][ T29] audit: type=1326 audit(1760836876.560:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.474784][ T29] audit: type=1326 audit(1760836876.560:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.498554][ T29] audit: type=1326 audit(1760836876.560:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4878 comm="syz.5.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 65.879455][ T4894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4894 comm=syz.4.390 [ 65.892889][ T4894] netlink: 'syz.4.390': attribute type 1 has an invalid length. [ 65.925764][ T4894] bond1: (slave veth3): Enslaving as an active interface with a down link [ 65.941619][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.390'. [ 65.956606][ T4894] bond1 (unregistering): (slave veth3): Releasing active interface [ 65.976202][ T4894] bond1 (unregistering): Released all slaves [ 66.197124][ T4900] loop4: detected capacity change from 0 to 1024 [ 66.204322][ T4900] EXT4-fs: Ignoring removed bh option [ 66.213736][ T4900] EXT4-fs: Ignoring removed orlov option [ 66.219489][ T4900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.245692][ T4900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.267539][ T4900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 66.616244][ T4914] loop5: detected capacity change from 0 to 2048 [ 66.648895][ T4916] netlink: 20 bytes leftover after parsing attributes in process `syz.1.397'. [ 66.679728][ T4914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.706217][ T4920] loop3: detected capacity change from 0 to 512 [ 66.718740][ T4922] syzkaller0: entered promiscuous mode [ 66.723188][ T4914] netlink: 12 bytes leftover after parsing attributes in process `syz.5.396'. [ 66.724341][ T4922] syzkaller0: entered allmulticast mode [ 66.751196][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.774365][ T4920] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 66.802416][ T4920] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.399: inode has both inline data and extents flags [ 66.829165][ T4920] EXT4-fs (loop3): get root inode failed [ 66.834867][ T4920] EXT4-fs (loop3): mount failed [ 66.885945][ T4932] loop5: detected capacity change from 0 to 1024 [ 66.901236][ T4936] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.907256][ T4932] EXT4-fs: Ignoring removed orlov option [ 66.943318][ T4939] netlink: 'syz.3.406': attribute type 30 has an invalid length. [ 66.960875][ T4932] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 66.974411][ T4932] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 66.986773][ T4936] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.050661][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 67.062376][ T4936] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.150757][ T4936] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.222745][ T4142] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231880][ T4951] netlink: 44 bytes leftover after parsing attributes in process `syz.5.409'. [ 67.253850][ T4142] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.262155][ T4142] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.278070][ T4142] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.286551][ T4951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.409'. [ 67.295365][ T4951] netlink: 32 bytes leftover after parsing attributes in process `syz.5.409'. [ 67.335534][ T4947] netlink: 'syz.5.409': attribute type 10 has an invalid length. [ 67.357023][ T4947] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 67.449966][ T4955] loop3: detected capacity change from 0 to 1764 [ 67.463414][ T4959] loop5: detected capacity change from 0 to 1024 [ 67.475268][ T4955] usb usb1: usbfs: process 4955 (syz.3.412) did not claim interface 0 before use [ 67.497709][ T4959] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (46251!=20869) [ 67.524945][ T4959] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 67.538640][ T4959] EXT4-fs (loop5): failed to initialize system zone (-117) [ 67.547772][ T4959] EXT4-fs (loop5): mount failed [ 67.654531][ T4967] netlink: 3 bytes leftover after parsing attributes in process `syz.0.415'. [ 67.663777][ T4967] 0ªX¹¦À: renamed from caif0 [ 67.670593][ T4967] 0ªX¹¦À: entered allmulticast mode [ 67.675849][ T4967] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 68.514020][ T4976] netlink: 'syz.5.418': attribute type 30 has an invalid length. [ 68.605363][ T4982] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.628742][ T4984] loop3: detected capacity change from 0 to 2048 [ 68.643850][ T4982] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.666722][ T4984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.720954][ T4982] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.722898][ T4991] loop1: detected capacity change from 0 to 164 [ 68.740558][ T4991] Unable to read rock-ridge attributes [ 68.782618][ T4900] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.793666][ T4982] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.852503][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.990755][ T5004] netlink: 14 bytes leftover after parsing attributes in process `syz.3.431'. [ 69.010945][ T5004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.021825][ T5004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.048114][ T5004] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 69.062236][ T5007] loop1: detected capacity change from 0 to 1024 [ 69.069029][ T5004] bond0 (unregistering): Released all slaves [ 69.069288][ T5007] EXT4-fs: Ignoring removed nobh option [ 69.080775][ T5007] EXT4-fs: Ignoring removed bh option [ 69.105749][ T5007] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.393875][ T5015] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.433: Allocating blocks 497-513 which overlap fs metadata [ 69.427629][ T5019] netlink: 'syz.4.436': attribute type 30 has an invalid length. [ 69.430040][ T5015] EXT4-fs (loop1): Remounting filesystem read-only [ 69.457916][ T5015] EXT4-fs (loop1): pa ffff8881072da000: logic 128, phys. 385, len 8 [ 69.557164][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.629193][ T5025] netlink: 24 bytes leftover after parsing attributes in process `syz.1.439'. [ 70.096001][ T5044] 0ªX¹¦À: renamed from caif0 [ 70.103807][ T5044] 0ªX¹¦À: entered allmulticast mode [ 70.109046][ T5044] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 70.265019][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 70.265038][ T29] audit: type=1326 audit(1760836881.490:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.311113][ T29] audit: type=1326 audit(1760836881.520:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.334537][ T29] audit: type=1326 audit(1760836881.520:1661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.353550][ T5053] loop4: detected capacity change from 0 to 512 [ 70.358075][ T29] audit: type=1326 audit(1760836881.520:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.358104][ T29] audit: type=1326 audit(1760836881.520:1663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.358133][ T29] audit: type=1326 audit(1760836881.520:1664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.434471][ T29] audit: type=1326 audit(1760836881.520:1665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.457805][ T29] audit: type=1326 audit(1760836881.520:1666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.481078][ T29] audit: type=1326 audit(1760836881.520:1667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.504459][ T29] audit: type=1326 audit(1760836881.520:1668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5046 comm="syz.4.448" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f8af240efc9 code=0x7ffc0000 [ 70.528145][ T5049] netlink: 'syz.1.449': attribute type 30 has an invalid length. [ 70.529283][ T5053] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.553945][ T5053] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.630199][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.675351][ T5063] tipc: Started in network mode [ 70.680468][ T5063] tipc: Node identity c2adad5b6fb1, cluster identity 4711 [ 70.687920][ T5063] tipc: Enabled bearer , priority 0 [ 70.725875][ T5063] syzkaller0: entered promiscuous mode [ 70.731432][ T5063] syzkaller0: entered allmulticast mode [ 70.737988][ T5063] tipc: Resetting bearer [ 70.751599][ T5062] tipc: Resetting bearer [ 70.766076][ T5062] tipc: Disabling bearer [ 70.774317][ T5065] syzkaller0: entered promiscuous mode [ 70.779873][ T5065] syzkaller0: entered allmulticast mode [ 71.077341][ T5084] loop4: detected capacity change from 0 to 512 [ 71.086433][ T5084] EXT4-fs: Ignoring removed nobh option [ 71.097074][ T5084] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 71.336522][ T5100] loop4: detected capacity change from 0 to 1024 [ 71.415562][ T5113] __nla_validate_parse: 10 callbacks suppressed [ 71.415582][ T5113] netlink: 12 bytes leftover after parsing attributes in process `syz.5.470'. [ 71.440528][ T5113] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.450688][ T5100] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.480196][ T5113] vlan2: entered allmulticast mode [ 71.485416][ T5113] bond1: entered allmulticast mode [ 71.498345][ T5117] loop1: detected capacity change from 0 to 1024 [ 71.507365][ T5117] EXT4-fs: Ignoring removed bh option [ 71.518382][ T5117] EXT4-fs: inline encryption not supported [ 71.527949][ T5117] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 71.554888][ T5117] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.567890][ T5117] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.471: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.582970][ T5117] EXT4-fs (loop1): Remounting filesystem read-only [ 71.590132][ T5117] EXT4-fs (loop1): 1 orphan inode deleted [ 71.596564][ T5117] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.632547][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.686285][ T4136] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.705476][ T4121] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.724453][ T4121] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.740397][ T5100] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.469: Allocating blocks 449-513 which overlap fs metadata [ 71.752928][ T4121] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.767302][ T5099] EXT4-fs (loop4): pa ffff8881072da150: logic 48, phys. 177, len 21 [ 71.775433][ T5099] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 71.784388][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.473'. [ 71.804585][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 71.813779][ T5124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.473'. [ 71.846160][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.855827][ T5132] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 71.880999][ T5128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.474'. [ 71.885658][ T5132] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 71.987987][ T5140] netlink: 28 bytes leftover after parsing attributes in process `syz.5.481'. [ 72.097118][ T5148] loop5: detected capacity change from 0 to 1024 [ 72.154427][ T5148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.173142][ T5148] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.194825][ T5148] xt_hashlimit: max too large, truncated to 1048576 [ 72.226401][ T5155] netlink: 20 bytes leftover after parsing attributes in process `syz.3.485'. [ 72.242734][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.278903][ T5161] ref_ctr increment failed for inode: 0x14d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881034eed40 [ 72.291145][ T5159] loop3: detected capacity change from 0 to 512 [ 72.311049][ T5159] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 72.321209][ T5159] EXT4-fs (loop3): orphan cleanup on readonly fs [ 72.330459][ T5159] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.488: corrupted inode contents [ 72.343800][ T5159] EXT4-fs (loop3): Remounting filesystem read-only [ 72.350764][ T5159] EXT4-fs (loop3): 1 truncate cleaned up [ 72.356911][ T4114] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.367590][ T4114] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 72.379543][ T4114] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 72.418155][ T5159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 72.454783][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.470820][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.491'. [ 72.479780][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.5.491'. [ 72.488706][ T5169] netlink: 4 bytes leftover after parsing attributes in process `syz.5.491'. [ 72.504994][ T5169] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 72.513364][ T5169] tipc: Enabled bearer , priority 10 [ 72.768161][ T5178] loop4: detected capacity change from 0 to 2048 [ 73.639196][ T3419] tipc: Node number set to 1663980486 [ 74.399666][ T5331] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 74.407923][ T5331] tipc: Enabled bearer , priority 10 [ 74.500830][ T5340] loop5: detected capacity change from 0 to 2048 [ 74.715189][ T5369] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.760658][ T5369] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.820615][ T5369] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.870477][ T5369] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.900105][ T5391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 74.945843][ T4114] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.964433][ T4114] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.985487][ T4114] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.995463][ T5398] tipc: Started in network mode [ 75.000498][ T5398] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 75.015568][ T5398] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 75.023983][ T5398] tipc: Enabled bearer , priority 10 [ 75.032378][ T4114] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.367682][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 75.367702][ T29] audit: type=1400 audit(1760836886.590:2032): avc: denied { getopt } for pid=5447 comm="syz.0.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.396307][ T5452] loop3: detected capacity change from 0 to 2048 [ 75.419188][ T1036] tipc: Node number set to 2904337755 [ 75.440732][ T3304] Alternate GPT is invalid, using primary GPT. [ 75.447077][ T3304] loop3: p1 p2 p3 [ 75.450947][ T3304] loop3: partition table partially beyond EOD, truncated [ 75.468501][ T5452] Alternate GPT is invalid, using primary GPT. [ 75.475255][ T5452] loop3: p1 p2 p3 [ 75.479006][ T5452] loop3: partition table partially beyond EOD, truncated [ 75.571449][ T29] audit: type=1326 audit(1760836886.780:2033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4097465e67 code=0x7ffc0000 [ 75.595098][ T29] audit: type=1326 audit(1760836886.780:2034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f409740b099 code=0x7ffc0000 [ 75.601754][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 75.618836][ T29] audit: type=1326 audit(1760836886.780:2035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4097465e67 code=0x7ffc0000 [ 75.632947][ T3641] udevd[3641]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 75.651988][ T29] audit: type=1326 audit(1760836886.780:2036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f409740b099 code=0x7ffc0000 [ 75.663736][ T3631] udevd[3631]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 75.685076][ T29] audit: type=1326 audit(1760836886.780:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 75.718438][ T29] audit: type=1326 audit(1760836886.780:2038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 75.741937][ T29] audit: type=1326 audit(1760836886.780:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f409746efc9 code=0x7ffc0000 [ 75.770230][ T29] audit: type=1326 audit(1760836886.790:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4097465e67 code=0x7ffc0000 [ 75.793745][ T29] audit: type=1326 audit(1760836886.790:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5495 comm="syz.3.533" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f409740b099 code=0x7ffc0000 [ 76.141003][ T3406] tipc: Node number set to 1 [ 76.558770][ T5564] tipc: Bearer : already 2 bearers with priority 10 [ 76.566441][ T5564] tipc: Bearer : trying with adjusted priority [ 76.573942][ T5564] tipc: Enabled bearer , priority 9 [ 76.832904][ T5568] loop3: detected capacity change from 0 to 1024 [ 76.865391][ T5568] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.049686][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.126682][ T5570] loop4: detected capacity change from 0 to 32768 [ 77.220268][ T3304] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 77.225939][ T3304] loop4: p1 start 460800 is beyond EOD, truncated [ 77.232625][ T3304] loop4: p2 size 83886080 extends beyond EOD, truncated [ 77.252583][ T3304] loop4: p5 start 460800 is beyond EOD, truncated [ 77.259330][ T3304] loop4: p6 size 83886080 extends beyond EOD, truncated [ 77.269348][ T5570] loop4: p1 p2 p3 < > p4 < p5 p6 > [ 77.275221][ T5570] loop4: p1 start 460800 is beyond EOD, truncated [ 77.281729][ T5570] loop4: p2 size 83886080 extends beyond EOD, truncated [ 77.291679][ T5570] loop4: p5 start 460800 is beyond EOD, truncated [ 77.298318][ T5570] loop4: p6 size 83886080 extends beyond EOD, truncated [ 77.867005][ T5609] __nla_validate_parse: 16 callbacks suppressed [ 77.867061][ T5609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.555'. [ 77.980838][ T5603] loop3: detected capacity change from 0 to 1024 [ 78.133912][ T5603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.249859][ T5603] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4193: comm syz.3.565: Allocating blocks 449-513 which overlap fs metadata [ 78.276333][ T5602] EXT4-fs (loop3): pa ffff8881072da230: logic 48, phys. 177, len 21 [ 78.284463][ T5602] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 78.310328][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.501187][ T5635] loop5: detected capacity change from 0 to 2048 [ 78.550290][ T5635] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.028916][ T113] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 79.049560][ T5699] tipc: Enabled bearer , priority 10 [ 79.065711][ T113] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 79.078337][ T113] EXT4-fs (loop5): This should not happen!! Data will be lost [ 79.078337][ T113] [ 79.088157][ T113] EXT4-fs (loop5): Total free blocks count 0 [ 79.094263][ T113] EXT4-fs (loop5): Free/Dirty block details [ 79.100213][ T113] EXT4-fs (loop5): free_blocks=2415919104 [ 79.106013][ T113] EXT4-fs (loop5): dirty_blocks=8192 [ 79.111392][ T113] EXT4-fs (loop5): Block reservation details [ 79.117410][ T113] EXT4-fs (loop5): i_reserved_data_blocks=512 [ 79.203089][ T113] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 79.453330][ T5744] netlink: 24 bytes leftover after parsing attributes in process `syz.5.563'. [ 79.495481][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.5.563'. [ 79.618481][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 79.656636][ T5722] loop3: detected capacity change from 0 to 32768 [ 79.683653][ T5762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.578'. [ 79.710219][ T5722] loop3: p1 p2 p3 < > p4 < p5 p6 > [ 79.726093][ T5722] loop3: p1 start 460800 is beyond EOD, truncated [ 79.732663][ T5722] loop3: p2 size 83886080 extends beyond EOD, truncated [ 79.746168][ T5722] loop3: p5 start 460800 is beyond EOD, truncated [ 79.752713][ T5722] loop3: p6 size 83886080 extends beyond EOD, truncated [ 79.849751][ T5778] loop1: detected capacity change from 0 to 512 [ 79.858624][ T5778] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.570: error while reading EA inode 32 err=-116 [ 79.872062][ T5778] EXT4-fs (loop1): Remounting filesystem read-only [ 79.886291][ T5778] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 79.907661][ T5778] EXT4-fs (loop1): 1 orphan inode deleted [ 79.919526][ T5778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.949382][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.985574][ T5781] loop1: detected capacity change from 0 to 128 [ 80.193963][ T5784] loop4: detected capacity change from 0 to 1024 [ 80.214374][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 80.242012][ T5787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.572'. [ 80.257518][ T5784] ext3: Unknown parameter 'subj_type' [ 80.402406][ T5790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 80.546667][ T5796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.577'. [ 80.641938][ T5800] loop3: detected capacity change from 0 to 1024 [ 80.661787][ T5800] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 80.692500][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 80.692518][ T29] audit: type=1400 audit(1760836891.920:2378): avc: denied { mount } for pid=5799 comm="syz.3.580" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.733902][ T29] audit: type=1400 audit(1760836891.950:2379): avc: denied { mounton } for pid=5799 comm="syz.3.580" path="/121/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 80.756328][ T29] audit: type=1400 audit(1760836891.960:2380): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.861261][ T5796] team1: entered promiscuous mode [ 80.867249][ T5796] team1: entered allmulticast mode [ 80.900790][ T5796] 8021q: adding VLAN 0 to HW filter on device team1 [ 80.908270][ T29] audit: type=1400 audit(1760836892.010:2381): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 80.910080][ T3392] hid_parser_main: 8 callbacks suppressed [ 80.910102][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.941704][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.949196][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.956674][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.964206][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.971710][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.979630][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.987340][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 80.994784][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 81.002357][ T3392] hid-generic 0003:0003:0800.0002: unknown main item tag 0x0 [ 81.025343][ T3392] hid-generic 0003:0003:0800.0002: hidraw0: USB HID v0.07 Device [syz0] on syz1 [ 81.038198][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 81.207066][ T29] audit: type=1326 audit(1760836892.430:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 81.244326][ T5821] netlink: 24 bytes leftover after parsing attributes in process `syz.0.584'. [ 81.286805][ T29] audit: type=1326 audit(1760836892.430:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 81.310324][ T29] audit: type=1326 audit(1760836892.460:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 81.333869][ T29] audit: type=1326 audit(1760836892.460:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 81.357918][ T29] audit: type=1326 audit(1760836892.460:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 81.381962][ T29] audit: type=1326 audit(1760836892.460:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5816 comm="syz.5.596" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 81.487725][ T5828] loop3: detected capacity change from 0 to 2048 [ 81.506914][ T5829] loop1: detected capacity change from 0 to 2048 [ 81.516086][ T5828] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.312526][ T5472] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 82.350721][ T5472] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 82.363316][ T5472] EXT4-fs (loop3): This should not happen!! Data will be lost [ 82.363316][ T5472] [ 82.373031][ T5472] EXT4-fs (loop3): Total free blocks count 0 [ 82.379028][ T5472] EXT4-fs (loop3): Free/Dirty block details [ 82.385138][ T5472] EXT4-fs (loop3): free_blocks=2415919104 [ 82.390916][ T5472] EXT4-fs (loop3): dirty_blocks=8192 [ 82.396679][ T5472] EXT4-fs (loop3): Block reservation details [ 82.402715][ T5472] EXT4-fs (loop3): i_reserved_data_blocks=512 [ 82.472112][ T5472] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 82.896729][ T5931] wireguard0: entered promiscuous mode [ 82.902500][ T5931] wireguard0: entered allmulticast mode [ 82.918692][ T5890] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 83.156076][ T5943] __nla_validate_parse: 4 callbacks suppressed [ 83.156114][ T5943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.602'. [ 83.231609][ T5943] bridge_slave_1: left allmulticast mode [ 83.237394][ T5943] bridge_slave_1: left promiscuous mode [ 83.243123][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.373990][ T5943] bridge_slave_0: left allmulticast mode [ 83.380099][ T5943] bridge_slave_0: left promiscuous mode [ 83.385842][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.477126][ T5959] loop4: detected capacity change from 0 to 512 [ 83.484031][ T5959] msdos: Bad value for 'uid' [ 83.488654][ T5959] msdos: Bad value for 'uid' [ 83.649450][ T5979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.617'. [ 83.684100][ T5979] macvlan2: entered promiscuous mode [ 83.689497][ T5979] macvlan2: entered allmulticast mode [ 83.696039][ T5979] bond2: entered promiscuous mode [ 83.701682][ T5979] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 83.714980][ T5979] bond2: left promiscuous mode [ 83.888362][ T5994] netlink: 'syz.4.609': attribute type 21 has an invalid length. [ 84.872720][ T6031] bridge: RTM_NEWNEIGH with invalid ether address [ 84.893067][ T6036] netlink: 12 bytes leftover after parsing attributes in process `syz.3.615'. [ 84.906287][ T6032] loop4: detected capacity change from 0 to 2048 [ 84.958100][ T6035] Process accounting paused [ 84.987627][ T6040] wireguard0: entered promiscuous mode [ 84.993218][ T6040] wireguard0: entered allmulticast mode [ 85.028769][ T6032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.072783][ T6050] netlink: 20 bytes leftover after parsing attributes in process `syz.5.620'. [ 85.132452][ T6053] loop3: detected capacity change from 0 to 2048 [ 85.194351][ T6061] netlink: 'syz.5.624': attribute type 21 has an invalid length. [ 85.593936][ T6066] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 85.723938][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 85.723957][ T29] audit: type=1400 audit(1760836896.950:2455): avc: denied { create } for pid=6101 comm="syz.1.628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 85.771213][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.628'. [ 85.825871][ T6102] vlan2: entered promiscuous mode [ 85.831036][ T6102] bond2: entered promiscuous mode [ 85.836209][ T6102] vlan2: entered allmulticast mode [ 85.841387][ T6102] bond2: entered allmulticast mode [ 85.870745][ T5489] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 85.891516][ T6102] bond2: (slave geneve2): refused to change device type [ 85.898804][ T5489] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 85.911356][ T5489] EXT4-fs (loop4): This should not happen!! Data will be lost [ 85.911356][ T5489] [ 85.921152][ T5489] EXT4-fs (loop4): Total free blocks count 0 [ 85.927195][ T5489] EXT4-fs (loop4): Free/Dirty block details [ 85.933127][ T5489] EXT4-fs (loop4): free_blocks=2415919104 [ 85.938869][ T5489] EXT4-fs (loop4): dirty_blocks=6064 [ 85.944248][ T5489] EXT4-fs (loop4): Block reservation details [ 85.950287][ T5489] EXT4-fs (loop4): i_reserved_data_blocks=379 [ 85.989376][ T5489] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 86.142591][ T6138] 9pnet_fd: Insufficient options for proto=fd [ 87.069907][ T29] audit: type=1326 audit(1760836898.300:2456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.095365][ T29] audit: type=1326 audit(1760836898.300:2457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.145281][ T29] audit: type=1326 audit(1760836898.370:2458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.169107][ T29] audit: type=1326 audit(1760836898.370:2459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.179050][ T6220] syzkaller0: entered promiscuous mode [ 87.192665][ T29] audit: type=1326 audit(1760836898.380:2460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.198115][ T6220] syzkaller0: entered allmulticast mode [ 87.227493][ T29] audit: type=1326 audit(1760836898.390:2461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.251345][ T29] audit: type=1326 audit(1760836898.390:2462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.275339][ T29] audit: type=1326 audit(1760836898.390:2463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.299143][ T29] audit: type=1326 audit(1760836898.390:2464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6210 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f524b90efc9 code=0x7ffc0000 [ 87.473524][ T6234] netlink: 4 bytes leftover after parsing attributes in process `syz.5.642'. [ 87.527591][ T6234] team0: Port device team_slave_1 removed [ 88.111276][ T6252] loop4: detected capacity change from 0 to 1024 [ 88.169543][ T6252] EXT4-fs: Ignoring removed bh option [ 88.195568][ T6252] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.219450][ T6252] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 88.279603][ T6252] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 88.301373][ T6252] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.648: lblock 2 mapped to illegal pblock 2 (length 1) [ 88.319124][ T6252] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.648: lblock 0 mapped to illegal pblock 48 (length 1) [ 88.345477][ T6252] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.648: Failed to acquire dquot type 0 [ 88.370493][ T6252] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 88.380136][ T6252] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.648: mark_inode_dirty error [ 88.409238][ T6252] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 88.422385][ T6252] EXT4-fs (loop4): 1 orphan inode deleted [ 88.428565][ T6252] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.441443][ T5472] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:47: lblock 1 mapped to illegal pblock 1 (length 1) [ 88.476596][ T5472] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:47: Failed to release dquot type 0 [ 88.660056][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.669673][ T3311] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 88.696203][ T3311] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 88.719234][ T3311] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 90.005375][ T6307] loop3: detected capacity change from 0 to 1024 [ 90.012507][ T6307] EXT4-fs: Ignoring removed bh option [ 90.018377][ T6307] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.027419][ T6307] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.040122][ T6307] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0100] [ 90.064052][ T6307] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.666: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.090766][ T6307] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.666: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.111049][ T6307] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.666: Failed to acquire dquot type 0 [ 90.152894][ T6307] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 90.187059][ T6307] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.666: mark_inode_dirty error [ 90.207629][ T6304] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 90.224645][ T6307] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 90.234919][ T6307] EXT4-fs (loop3): 1 orphan inode deleted [ 90.241471][ T6307] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.254218][ T4159] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.279605][ T4159] EXT4-fs error (device loop3): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 90.330100][ T3318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.339548][ T3318] EXT4-fs error (device loop3): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 90.363443][ T6322] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.373947][ T3318] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 90.383529][ T3318] EXT4-fs error (device loop3): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 90.440376][ T6322] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.548382][ T6322] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.640034][ T6322] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.665315][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz.5.678'. [ 90.711881][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.724066][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.842946][ T6342] vlan2: entered promiscuous mode [ 90.848064][ T6342] bond2: entered promiscuous mode [ 90.853264][ T6342] vlan2: entered allmulticast mode [ 90.858408][ T6342] bond2: entered allmulticast mode [ 90.872874][ T6346] bond2: (slave geneve2): refused to change device type [ 90.882336][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.920073][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.972685][ T29] kauditd_printk_skb: 65 callbacks suppressed [ 90.972703][ T29] audit: type=1326 audit(1760836902.200:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.020986][ T29] audit: type=1326 audit(1760836902.200:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.022429][ T6352] loop5: detected capacity change from 0 to 4096 [ 91.044507][ T29] audit: type=1326 audit(1760836902.200:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.063318][ T6352] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.074441][ T29] audit: type=1326 audit(1760836902.200:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.104420][ T29] audit: type=1326 audit(1760836902.200:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.127945][ T29] audit: type=1326 audit(1760836902.200:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.151555][ T29] audit: type=1326 audit(1760836902.200:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.174881][ T29] audit: type=1326 audit(1760836902.200:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2e66a8efc9 code=0x7ffc0000 [ 91.198301][ T29] audit: type=1326 audit(1760836902.200:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f2e66a8f003 code=0x7ffc0000 [ 91.221483][ T29] audit: type=1326 audit(1760836902.220:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6351 comm="syz.5.684" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2e66a8da7f code=0x7ffc0000 [ 91.253462][ T6352] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.517924][ T6360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.685'. [ 91.672867][ T3679] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.328956][ T6388] loop5: detected capacity change from 0 to 128 [ 92.355634][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'. [ 92.417937][ T6391] vlan0: entered promiscuous mode [ 92.423137][ T6391] bond3: entered promiscuous mode [ 92.428450][ T6391] vlan0: entered allmulticast mode [ 92.433798][ T6391] bond3: entered allmulticast mode [ 92.464443][ T6391] bond3: (slave geneve2): refused to change device type [ 92.512946][ T6396] syz.5.692: attempt to access beyond end of device [ 92.512946][ T6396] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 92.712065][ T6413] loop1: detected capacity change from 0 to 256 [ 93.698037][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.4.710'. [ 93.708526][ T6437] SELinux: Context system_u:object_r:netutils_exec_t:s0 is not valid (left unmapped). [ 93.751385][ T6433] vlan0: entered promiscuous mode [ 93.756483][ T6433] bond1: entered promiscuous mode [ 93.761742][ T6433] vlan0: entered allmulticast mode [ 93.766978][ T6433] bond1: entered allmulticast mode [ 93.808805][ T6443] bond1: (slave geneve2): refused to change device type [ 94.473050][ T6464] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.510034][ T6467] loop1: detected capacity change from 0 to 128 [ 94.520845][ T6464] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.561403][ T6464] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.611249][ T6464] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.667806][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.710169][ T4159] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.718449][ T4159] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.727961][ T4159] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.814038][ T6467] ================================================================== [ 94.822218][ T6467] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 94.830491][ T6467] [ 94.832832][ T6467] write to 0xffff888119d04728 of 4 bytes by task 6473 on cpu 1: [ 94.840493][ T6467] writeback_single_inode+0x150/0x3f0 [ 94.845930][ T6467] sync_inode_metadata+0x5b/0x90 [ 94.851045][ T6467] __generic_file_fsync+0xf8/0x140 [ 94.856185][ T6467] fat_file_fsync+0x49/0x100 [ 94.860814][ T6467] vfs_fsync_range+0x10d/0x130 [ 94.865608][ T6467] generic_file_write_iter+0x1b8/0x2f0 [ 94.871102][ T6467] iter_file_splice_write+0x666/0xa60 [ 94.876507][ T6467] direct_splice_actor+0x156/0x2a0 [ 94.881657][ T6467] splice_direct_to_actor+0x312/0x680 [ 94.887058][ T6467] do_splice_direct+0xda/0x150 [ 94.891855][ T6467] do_sendfile+0x380/0x650 [ 94.896322][ T6467] __x64_sys_sendfile64+0x105/0x150 [ 94.901554][ T6467] x64_sys_call+0x2bb4/0x3000 [ 94.906274][ T6467] do_syscall_64+0xd2/0x200 [ 94.910821][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.916742][ T6467] [ 94.919085][ T6467] read to 0xffff888119d04728 of 4 bytes by task 6467 on cpu 0: [ 94.926670][ T6467] __mark_inode_dirty+0x191/0x750 [ 94.931751][ T6467] fat_update_time+0x1ec/0x200 [ 94.936578][ T6467] touch_atime+0x148/0x340 [ 94.941041][ T6467] filemap_splice_read+0x6ba/0x740 [ 94.946403][ T6467] splice_direct_to_actor+0x26f/0x680 [ 94.951807][ T6467] do_splice_direct+0xda/0x150 [ 94.956595][ T6467] do_sendfile+0x380/0x650 [ 94.961134][ T6467] __x64_sys_sendfile64+0x105/0x150 [ 94.966386][ T6467] x64_sys_call+0x2bb4/0x3000 [ 94.971096][ T6467] do_syscall_64+0xd2/0x200 [ 94.975688][ T6467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.981621][ T6467] [ 94.984051][ T6467] value changed: 0x00000070 -> 0x00000002 [ 94.989802][ T6467] [ 94.992134][ T6467] Reported by Kernel Concurrency Sanitizer on: [ 94.998409][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.1.721 Not tainted syzkaller #0 PREEMPT(voluntary) [ 95.008167][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 95.018249][ T6467] ================================================================== [ 95.164871][ T6473] syz.1.721: attempt to access beyond end of device [ 95.164871][ T6473] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 95.178283][ T6473] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 95.209479][ T6473] syz.1.721: attempt to access beyond end of device [ 95.209479][ T6473] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 95.223550][ T6473] Buffer I/O error on dev loop1, logical block 128, lost async page write