last executing test programs: 21.455502418s ago: executing program 1 (id=452): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000004400)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="28a9e639", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8040) 21.399490978s ago: executing program 1 (id=454): shutdown(0xffffffffffffffff, 0x1) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x85, 0x0, &(0x7f00000000c0)) sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @link_local, 'geneve0\x00'}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000100)=0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) readv(r2, &(0x7f0000000180)=[{&(0x7f00000006c0)=""/161, 0xa1}], 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 21.304086059s ago: executing program 1 (id=457): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1403, 0xc23, 0x70bd2a, 0x25dfdc02, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) 21.268476839s ago: executing program 1 (id=458): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75e, &(0x7f0000001280)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x147040, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x10000) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0xc00, 0x0) 21.08149803s ago: executing program 1 (id=464): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0xb0}, 0x9c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004400)=[{{&(0x7f0000000280)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="28a9e639", 0x4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8040) 20.833638132s ago: executing program 1 (id=472): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0xfffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x73}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffff"], 0x5c}}, 0x0) 20.833557561s ago: executing program 32 (id=472): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0xfffc, 0x40, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x73}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000800050001040f0f080003000000080008000f00f7ffff"], 0x5c}}, 0x0) 1.739242651s ago: executing program 5 (id=1113): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 1.636402051s ago: executing program 5 (id=1114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xfffffffffffffd80, 0x40000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x200006) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000d80)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8db4afac11d875397bdb22d0080b420a1a93c5240f45f819e01177dfaff8dd4992861ac0000f800", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={'macvlan1\x00', {0x2, 0x4e23, @local}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xb0783914ddc2892c, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 1.575606272s ago: executing program 5 (id=1115): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/23, 0x17}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8", 0x40}], 0x1}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 1.501903702s ago: executing program 5 (id=1119): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="afa701ca2ac3"}, 0x14) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x80000) sync_file_range(r4, 0x7c, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_setup(0x6282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r6}, 0x90) 1.341512183s ago: executing program 2 (id=1124): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='ext4_mark_inode_dirty\x00', r4, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.312510723s ago: executing program 5 (id=1125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xffffff0c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = memfd_secret(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYRESOCT=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r4, r3, 0x2e, 0x4608, @void}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba6f32}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000003c0)='kfree\x00', r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r6}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000080)={0x0, 0x7f, 0x700}) readv(r5, &(0x7f0000001840)=[{&(0x7f0000001400)=""/227, 0xe3}, {0x0}], 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 1.271016744s ago: executing program 2 (id=1127): syz_io_uring_setup(0x353, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ffb000), &(0x7f0000ffb000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d2140000"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x0, 0x43, 0xa0, 0x90, 0x98, 0x1c0, 0x178, 0x178, 0x1c0, 0x178, 0x49, 0x0, {[{{@ip={@private, @remote, 0x0, 0x0, 'bond_slave_0\x00', 'wlan1\x00'}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0xfff}}, @common=@icmp={{0x28}, {0x0, "84a2"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2b8) r3 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4f4, &(0x7f00000008c0)="$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") r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001614f505"], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYRES16=0x0, @ANYBLOB="5ee50ddb5ee9dc9de97311f4", @ANYBLOB="700534dc0573a5de0fed636496d7214c2bd04c08a461ffc7bb1f983f975c93cb9956f39a4b446d7683c954c584ed5d9448634c177782d327cbfb1bb28c8d74a7e3a15aff19d892795ba6ce18cdaff43d83ad94d97f49d4095b446f8a34a35707f22ad06581d292921e20765f875da9", @ANYRES8=r5, @ANYRES16=r3, @ANYRESHEX=r0, @ANYRES64], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0xffff, 0x0, 0x0, 0x29, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x220, 0x0, 0x0, "bfd8a5dd2002c02142c4391145badd28fd7f0ffc0e896f38da00", "0bb10000085b2e00", {"bb3b2195c4b058706558a70864bef1f0", "524a72fc460b8cd26e095f24ab642591"}}}}}}}, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000100)=ANY=[], 0x0, 0xffffffffffffff33, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000380)='sched_switch\x00'}, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000800), 0xffffffffffffffff) r9 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000e80)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r7, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) 1.140873734s ago: executing program 0 (id=1128): pselect6(0x40, &(0x7f0000000180)={0x4, 0x7, 0xd, 0x5, 0x8000000000000000, 0x8000000000000000, 0x1, 0x1}, &(0x7f0000000300)={0x7f, 0xffffffffffffffff, 0xe, 0x3, 0x8000000000000001, 0x0, 0xfffffffffffffff7, 0x7}, 0x0, 0x0, 0x0) 1.140552954s ago: executing program 0 (id=1129): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x8}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) recvmmsg(r1, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/23, 0x17}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000340)="2bd1598df75c98a6936444aa68d948213365771a20eb8b0338634fc5b0ef9432584af949108856571424758106273e2a06a088a30c2b700286f933c1b5a338e8", 0x40}], 0x1}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) 1.140066694s ago: executing program 2 (id=1130): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{r2}, &(0x7f0000002140), &(0x7f0000002180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0), 0x1, 0x4cd, &(0x7f0000000a00)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r6, &(0x7f0000000300)='./file0\x00', r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$RTC_AIE_ON(r0, 0x7001) 1.068107304s ago: executing program 2 (id=1131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='ext4_mark_inode_dirty\x00', r6, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1.067240984s ago: executing program 0 (id=1133): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x6, 0x4) 998.544585ms ago: executing program 0 (id=1134): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000200000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000", 0x42}], 0x1) 911.069926ms ago: executing program 2 (id=1139): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x8004745a, 0x2000000c) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000400)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'cpu'}]}, 0x5) 735.874856ms ago: executing program 2 (id=1143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) personality(0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000200)=""/39, 0x27) getdents(r1, 0x0, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) r2 = io_uring_setup(0xaab, 0x0) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x3, 0x5, @l2={'ib', 0x3a, 'ip6gre0\x00'}}}}, ["", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x200040d4) close_range(r2, 0xffffffffffffffff, 0x0) 404.718528ms ago: executing program 5 (id=1155): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='ext4_mark_inode_dirty\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 302.420269ms ago: executing program 4 (id=1157): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xfffffffffffffd80, 0x40000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x200006) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000d80)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8db4afac11d875397bdb22d0080b420a1a93c5240f45f819e01177dfaff8dd4992861ac0000f800", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={'macvlan1\x00', {0x2, 0x4e23, @local}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xb0783914ddc2892c, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 241.350189ms ago: executing program 4 (id=1158): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "2130404c6bfef3a31e2587ebd76200eb3e"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 239.836639ms ago: executing program 3 (id=1159): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x74, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x10, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x74}}, 0x0) 222.666799ms ago: executing program 4 (id=1160): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x550, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x480, 0xffffffff, 0xffffffff, 0x480, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 220.248809ms ago: executing program 3 (id=1161): socket$inet6_sctp(0xa, 0x1, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x803, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x60342, 0x2c) socket$inet(0x2, 0x802, 0x1) socket$kcm(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket(0x1e, 0x2, 0x0) socket$kcm(0xa, 0x3, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 202.965989ms ago: executing program 4 (id=1162): socket$inet6_sctp(0xa, 0x1, 0x84) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket(0x1, 0x803, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) open(&(0x7f0000007fc0)='./bus\x00', 0x60342, 0x2c) socket$inet(0x2, 0x802, 0x1) socket$kcm(0xa, 0x5, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r0}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$kcm(0xa, 0x3, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 185.762519ms ago: executing program 3 (id=1163): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fc000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 178.298099ms ago: executing program 4 (id=1164): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), 0x0}, 0x20) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='ext4_mark_inode_dirty\x00', r2, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 171.662429ms ago: executing program 0 (id=1165): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r4, 0x0) connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000007c0)='ext4_mark_inode_dirty\x00', r7, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 166.212169ms ago: executing program 3 (id=1166): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x200000, 0x0) 91.143679ms ago: executing program 4 (id=1167): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000021c0)={{r2}, &(0x7f0000002140), &(0x7f0000002180)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x890b, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='block_plug\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f00000003c0), 0x1, 0x4cd, &(0x7f0000000a00)="$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") socketpair$unix(0x1, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000031c0)={0x1}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000a40)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) r7 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) renameat2(r7, &(0x7f0000000300)='./file0\x00', r7, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r6}}, 0x20) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) ioctl$RTC_AIE_ON(r0, 0x7001) 27.2537ms ago: executing program 3 (id=1168): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x2c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "2130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 8.25885ms ago: executing program 3 (id=1169): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f00000004c0)={0x0, 0x3938700}, 0x0) 0s ago: executing program 0 (id=1170): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40000) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) remap_file_pages(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0xfffffffffffffd80, 0x40000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7, 0x86100) r5 = syz_open_dev$MSR(&(0x7f0000000000), 0x1, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000280)=""/4096, 0x1000}, {0x0}], 0x2, 0x4, 0x200006) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000d80)={r6, 0x1000, {0x2a00, 0x80010000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8db4afac11d875397bdb22d0080b420a1a93c5240f45f819e01177dfaff8dd4992861ac0000f800", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000340)={'macvlan1\x00', {0x2, 0x4e23, @local}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 19.224189][ T29] kauditd_printk_skb: 64 callbacks suppressed [ 19.224207][ T29] audit: type=1400 audit(1733365230.352:76): avc: denied { transition } for pid=3177 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.228406][ T29] audit: type=1400 audit(1733365230.352:77): avc: denied { noatsecure } for pid=3177 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.231004][ T29] audit: type=1400 audit(1733365230.352:78): avc: denied { write } for pid=3177 comm="sh" path="pipe:[421]" dev="pipefs" ino=421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 19.234230][ T29] audit: type=1400 audit(1733365230.352:79): avc: denied { rlimitinh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.237493][ T29] audit: type=1400 audit(1733365230.352:80): avc: denied { siginh } for pid=3177 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.037281][ T29] audit: type=1400 audit(1733365231.162:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. [ 27.554885][ T29] audit: type=1400 audit(1733365238.682:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.556159][ T3287] cgroup: Unknown subsys name 'net' [ 27.577670][ T29] audit: type=1400 audit(1733365238.682:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.605093][ T29] audit: type=1400 audit(1733365238.712:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.758335][ T3287] cgroup: Unknown subsys name 'cpuset' [ 27.764514][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.935411][ T29] audit: type=1400 audit(1733365239.062:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.961142][ T29] audit: type=1400 audit(1733365239.062:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.979760][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.981655][ T29] audit: type=1400 audit(1733365239.062:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.010706][ T29] audit: type=1400 audit(1733365239.062:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.031006][ T29] audit: type=1400 audit(1733365239.072:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.040754][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.055908][ T29] audit: type=1400 audit(1733365239.072:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.087980][ T29] audit: type=1400 audit(1733365239.132:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.316731][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 29.341610][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.430573][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 29.449520][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.456610][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.463952][ T3299] bridge_slave_0: entered allmulticast mode [ 29.470341][ T3299] bridge_slave_0: entered promiscuous mode [ 29.478715][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.485773][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.493263][ T3305] bridge_slave_0: entered allmulticast mode [ 29.499705][ T3305] bridge_slave_0: entered promiscuous mode [ 29.516715][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.523827][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.531225][ T3299] bridge_slave_1: entered allmulticast mode [ 29.538019][ T3299] bridge_slave_1: entered promiscuous mode [ 29.544092][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 29.552993][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.560213][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.567352][ T3305] bridge_slave_1: entered allmulticast mode [ 29.573599][ T3305] bridge_slave_1: entered promiscuous mode [ 29.593195][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.620648][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.633456][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.652813][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.679833][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.726582][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.733818][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.741087][ T3297] bridge_slave_0: entered allmulticast mode [ 29.747474][ T3297] bridge_slave_0: entered promiscuous mode [ 29.768948][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.776075][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.783245][ T3297] bridge_slave_1: entered allmulticast mode [ 29.789656][ T3297] bridge_slave_1: entered promiscuous mode [ 29.796387][ T3299] team0: Port device team_slave_0 added [ 29.805537][ T3305] team0: Port device team_slave_0 added [ 29.811400][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.818804][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.826042][ T3308] bridge_slave_0: entered allmulticast mode [ 29.832488][ T3308] bridge_slave_0: entered promiscuous mode [ 29.844027][ T3299] team0: Port device team_slave_1 added [ 29.854931][ T3305] team0: Port device team_slave_1 added [ 29.860683][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.867793][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.874908][ T3308] bridge_slave_1: entered allmulticast mode [ 29.881298][ T3308] bridge_slave_1: entered promiscuous mode [ 29.898353][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.930787][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.940965][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.954322][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.961529][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.968709][ T3309] bridge_slave_0: entered allmulticast mode [ 29.975149][ T3309] bridge_slave_0: entered promiscuous mode [ 29.981794][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.988931][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.996040][ T3309] bridge_slave_1: entered allmulticast mode [ 30.002429][ T3309] bridge_slave_1: entered promiscuous mode [ 30.009002][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.015957][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.042044][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.063111][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.077071][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.084123][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.110079][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.125659][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.132656][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.158606][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.170098][ T3297] team0: Port device team_slave_0 added [ 30.184053][ T3308] team0: Port device team_slave_0 added [ 30.190099][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.197057][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.223600][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.240396][ T3297] team0: Port device team_slave_1 added [ 30.246748][ T3308] team0: Port device team_slave_1 added [ 30.256225][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.267078][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.300504][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.307501][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.333469][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.345321][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.352329][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.378353][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.401076][ T3305] hsr_slave_0: entered promiscuous mode [ 30.407113][ T3305] hsr_slave_1: entered promiscuous mode [ 30.418290][ T3309] team0: Port device team_slave_0 added [ 30.436927][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.443936][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.469884][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.481190][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.488166][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.514074][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.525352][ T3309] team0: Port device team_slave_1 added [ 30.538027][ T3299] hsr_slave_0: entered promiscuous mode [ 30.544124][ T3299] hsr_slave_1: entered promiscuous mode [ 30.550098][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.557693][ T3299] Cannot create hsr debugfs directory [ 30.581371][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.588486][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.614508][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.631625][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.638611][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.664677][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.708527][ T3297] hsr_slave_0: entered promiscuous mode [ 30.714588][ T3297] hsr_slave_1: entered promiscuous mode [ 30.720641][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.728366][ T3297] Cannot create hsr debugfs directory [ 30.746419][ T3308] hsr_slave_0: entered promiscuous mode [ 30.752379][ T3308] hsr_slave_1: entered promiscuous mode [ 30.758531][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.766083][ T3308] Cannot create hsr debugfs directory [ 30.804210][ T3309] hsr_slave_0: entered promiscuous mode [ 30.810439][ T3309] hsr_slave_1: entered promiscuous mode [ 30.816408][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.824050][ T3309] Cannot create hsr debugfs directory [ 30.953303][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.974608][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.987630][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.996183][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.025138][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.040145][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.051513][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.061425][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.076534][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.087375][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.098790][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.107810][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.136201][ T3297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.146893][ T3297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.155802][ T3297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.168509][ T3297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.211321][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.224294][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.233381][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.242289][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.251739][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.268809][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.281898][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.295954][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.303056][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.331794][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.338886][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.357093][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.372897][ T1863] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.380076][ T1863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.400618][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.412086][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.419201][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.435487][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.461382][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.471615][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.478787][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.499125][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.506247][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.519059][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.533008][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.563549][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.570782][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.587082][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.619521][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.626702][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.642484][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.663984][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.682573][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.706908][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.729888][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.750309][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.757517][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.778528][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.785667][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.862647][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.924184][ T3305] veth0_vlan: entered promiscuous mode [ 31.943864][ T3305] veth1_vlan: entered promiscuous mode [ 31.978021][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.987835][ T3299] veth0_vlan: entered promiscuous mode [ 32.003950][ T3308] veth0_vlan: entered promiscuous mode [ 32.021613][ T3305] veth0_macvtap: entered promiscuous mode [ 32.029346][ T3305] veth1_macvtap: entered promiscuous mode [ 32.036970][ T3299] veth1_vlan: entered promiscuous mode [ 32.044237][ T3308] veth1_vlan: entered promiscuous mode [ 32.061936][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.076567][ T3297] veth0_vlan: entered promiscuous mode [ 32.083712][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.095269][ T3308] veth0_macvtap: entered promiscuous mode [ 32.108594][ T3297] veth1_vlan: entered promiscuous mode [ 32.118585][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.127372][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.136082][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.144875][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.157108][ T3308] veth1_macvtap: entered promiscuous mode [ 32.173691][ T3297] veth0_macvtap: entered promiscuous mode [ 32.181348][ T3299] veth0_macvtap: entered promiscuous mode [ 32.191903][ T3299] veth1_macvtap: entered promiscuous mode [ 32.203230][ T3297] veth1_macvtap: entered promiscuous mode [ 32.215220][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.225828][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.236260][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.251950][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.262539][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.273010][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.284807][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.295375][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.305270][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.315724][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.327039][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.335577][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.346159][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.356005][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.366618][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.376518][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.387062][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.398544][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.398985][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.408569][ T3309] veth0_vlan: entered promiscuous mode [ 32.435316][ T3308] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.444174][ T3308] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.452962][ T3308] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.461731][ T3308] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.473130][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.483689][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.493561][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.504464][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.515130][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.524227][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.534990][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.545109][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.555595][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.565479][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.575979][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.586400][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.596076][ T3297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.604928][ T3297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.613721][ T3297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.622536][ T3297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.636845][ T3299] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.645647][ T3299] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.654561][ T3299] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.663359][ T3299] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.674827][ T3309] veth1_vlan: entered promiscuous mode [ 32.696968][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 32.696987][ T29] audit: type=1400 audit(1733365243.822:121): avc: denied { create } for pid=3437 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.723202][ T29] audit: type=1400 audit(1733365243.822:122): avc: denied { bind } for pid=3437 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.742927][ T29] audit: type=1400 audit(1733365243.822:123): avc: denied { create } for pid=3437 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.762272][ T29] audit: type=1400 audit(1733365243.822:124): avc: denied { connect } for pid=3437 comm="syz.1.6" lport=20 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.782483][ T29] audit: type=1400 audit(1733365243.822:125): avc: denied { setopt } for pid=3437 comm="syz.1.6" laddr=::1 lport=20 faddr=::1 fport=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.805303][ T29] audit: type=1400 audit(1733365243.822:126): avc: denied { write } for pid=3437 comm="syz.1.6" laddr=::1 lport=20 faddr=::1 fport=2048 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.830369][ T29] audit: type=1400 audit(1733365243.862:127): avc: denied { read write } for pid=3439 comm="syz.1.7" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.853436][ T29] audit: type=1400 audit(1733365243.862:128): avc: denied { open } for pid=3439 comm="syz.1.7" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.876392][ T29] audit: type=1400 audit(1733365243.862:129): avc: denied { ioctl } for pid=3439 comm="syz.1.7" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 32.907103][ T3309] veth0_macvtap: entered promiscuous mode [ 32.915231][ T3309] veth1_macvtap: entered promiscuous mode [ 32.929119][ T29] audit: type=1400 audit(1733365244.062:130): avc: denied { create } for pid=3444 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 32.956950][ T3445] Zero length message leads to an empty skb [ 32.971167][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.981704][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.991653][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.002128][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.012030][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.022514][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.032380][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.042831][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.056963][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.079832][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.090363][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.100227][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.110767][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.114037][ T3449] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 33.120644][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.120665][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.120675][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.120690][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.122242][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.242892][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.251730][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.260514][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.269261][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.306946][ T3460] syz.1.11 uses obsolete (PF_INET,SOCK_PACKET) [ 33.326057][ T3468] syzkaller1: entered promiscuous mode [ 33.331693][ T3468] syzkaller1: entered allmulticast mode [ 33.486256][ T3482] usb usb8: usbfs: process 3482 (syz.3.18) did not claim interface 0 before use [ 34.059641][ T3559] program syz.0.54 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 34.165231][ T3575] netlink: 16 bytes leftover after parsing attributes in process `syz.2.62'. [ 34.394367][ T3607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.405096][ T3607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.415902][ T3600] netlink: 16 bytes leftover after parsing attributes in process `syz.0.74'. [ 34.922897][ T3660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.932242][ T3660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.071671][ T3783] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 36.242244][ T3810] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 36.309965][ T3810] bond1: entered promiscuous mode [ 36.315070][ T3810] bond1: entered allmulticast mode [ 36.345738][ T3810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.613249][ T3851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.623940][ T3851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.635131][ T3855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 36.652796][ T3857] af_packet: tpacket_rcv: packet too big, clamped from 12 to 4294967272. macoff=96 [ 36.699902][ T3863] batman_adv: batadv0: Adding interface: dummy0 [ 36.706224][ T3863] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.732600][ T3863] batman_adv: batadv0: Interface activated: dummy0 [ 37.012097][ T3889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.021194][ T3889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.867073][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 37.867092][ T29] audit: type=1400 audit(1733365248.992:221): avc: denied { create } for pid=4015 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.916208][ T29] audit: type=1400 audit(1733365248.992:222): avc: denied { connect } for pid=4015 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.935728][ T29] audit: type=1400 audit(1733365248.992:223): avc: denied { bind } for pid=4015 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.954867][ T29] audit: type=1400 audit(1733365249.012:224): avc: denied { write } for pid=4015 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.974310][ T29] audit: type=1400 audit(1733365249.032:225): avc: denied { getopt } for pid=4015 comm="syz.3.258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.674535][ T4070] process 'syz.1.281' launched './file1' with NULL argv: empty string added [ 38.708145][ T29] audit: type=1400 audit(1733365249.802:226): avc: denied { create } for pid=4066 comm="syz.4.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 38.728531][ T29] audit: type=1400 audit(1733365249.822:227): avc: denied { execute_no_trans } for pid=4069 comm="syz.1.281" path="/57/file1" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.170526][ T4101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.180175][ T4101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.253684][ T29] audit: type=1400 audit(1733365250.382:228): avc: denied { map_read map_write } for pid=4108 comm="syz.1.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.719925][ T29] audit: type=1400 audit(1733365250.852:229): avc: denied { bind } for pid=4113 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.722257][ T4114] netlink: 'syz.2.300': attribute type 16 has an invalid length. [ 39.739358][ T29] audit: type=1400 audit(1733365250.852:230): avc: denied { listen } for pid=4113 comm="syz.2.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.746950][ T4114] netlink: 'syz.2.300': attribute type 17 has an invalid length. [ 39.856246][ T4119] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 40.713285][ T4175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.722350][ T4175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.198985][ T4189] netlink: 'syz.1.331': attribute type 16 has an invalid length. [ 41.206825][ T4189] netlink: 'syz.1.331': attribute type 17 has an invalid length. [ 41.861119][ T4209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.872666][ T4209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.915804][ T4212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.340'. [ 42.401365][ T4234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.410255][ T4234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.117462][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 43.117478][ T29] audit: type=1400 audit(1733365254.242:240): avc: denied { shutdown } for pid=4270 comm="syz.4.367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.362838][ T29] audit: type=1326 audit(1733365254.492:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.411671][ T29] audit: type=1326 audit(1733365254.522:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.434750][ T29] audit: type=1326 audit(1733365254.522:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.457906][ T29] audit: type=1326 audit(1733365254.522:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.480882][ T29] audit: type=1326 audit(1733365254.522:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.504080][ T29] audit: type=1326 audit(1733365254.522:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.527142][ T29] audit: type=1326 audit(1733365254.522:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.550238][ T29] audit: type=1326 audit(1733365254.522:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.573293][ T29] audit: type=1326 audit(1733365254.522:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4287 comm="syz.2.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x50000 [ 43.878002][ T4325] netlink: 'syz.4.392': attribute type 16 has an invalid length. [ 43.885788][ T4325] netlink: 'syz.4.392': attribute type 17 has an invalid length. [ 44.346810][ T4359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.405'. [ 44.379745][ T4359] veth2: entered promiscuous mode [ 44.384849][ T4359] veth2: entered allmulticast mode [ 45.831618][ T4445] netlink: 'syz.0.446': attribute type 16 has an invalid length. [ 45.839487][ T4445] netlink: 'syz.0.446': attribute type 17 has an invalid length. [ 46.183224][ T4471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.456'. [ 46.192359][ T4471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.456'. [ 46.201330][ T4471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.456'. [ 46.220002][ T4471] netlink: 36 bytes leftover after parsing attributes in process `syz.4.456'. [ 46.251227][ T4475] loop1: detected capacity change from 0 to 2048 [ 46.280474][ T4475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.294565][ T4475] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.364157][ T4475] loop1: detected capacity change from 2048 to 64 [ 46.410100][ T3510] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.425235][ T4476] kmmpd-loop1: attempt to access beyond end of device [ 46.425235][ T4476] loop1: rw=14337, sector=512, nr_sectors = 8 limit=64 [ 46.438911][ T4476] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 46.468002][ T4501] loop3: detected capacity change from 0 to 512 [ 46.475062][ T4501] EXT4-fs: Ignoring removed bh option [ 46.499046][ T4501] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.511672][ T4501] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.532148][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.614131][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.690769][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.732695][ T4524] loop0: detected capacity change from 0 to 128 [ 46.746923][ T4524] EXT4-fs: test_dummy_encryption option not supported [ 46.758033][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.847983][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.861833][ T4514] chnl_net:caif_netlink_parms(): no params data found [ 46.909075][ T4514] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.916185][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.926163][ T4514] bridge_slave_0: entered allmulticast mode [ 46.933098][ T4514] bridge_slave_0: entered promiscuous mode [ 46.939999][ T4514] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.947187][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.954581][ T4514] bridge_slave_1: entered allmulticast mode [ 46.961083][ T4514] bridge_slave_1: entered promiscuous mode [ 47.026979][ T4548] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.049506][ T28] bridge_slave_1: left allmulticast mode [ 47.055261][ T28] bridge_slave_1: left promiscuous mode [ 47.061093][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.069036][ T28] bridge_slave_0: left allmulticast mode [ 47.074773][ T28] bridge_slave_0: left promiscuous mode [ 47.080611][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.169283][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.179131][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.189006][ T28] bond0 (unregistering): Released all slaves [ 47.204087][ T4514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.225448][ T4514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.294515][ T28] hsr_slave_0: left promiscuous mode [ 47.324564][ T28] hsr_slave_1: left promiscuous mode [ 47.354335][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.362025][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.365008][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.365032][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.375064][ T28] veth1_macvtap: left promiscuous mode [ 47.375105][ T28] veth0_macvtap: left promiscuous mode [ 47.375198][ T28] veth1_vlan: left promiscuous mode [ 47.375280][ T28] veth0_vlan: left promiscuous mode [ 47.486305][ T28] team0 (unregistering): Port device team_slave_1 removed [ 47.506467][ T28] team0 (unregistering): Port device team_slave_0 removed [ 47.533317][ T4596] loop0: detected capacity change from 0 to 128 [ 47.544924][ T4514] team0: Port device team_slave_0 added [ 47.551034][ T4570] batman_adv: batadv0: Adding interface: dummy0 [ 47.557461][ T4570] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.585314][ T4570] batman_adv: batadv0: Interface activated: dummy0 [ 47.597261][ T4583] batadv0: mtu less than device minimum [ 47.599837][ T4599] netlink: 68 bytes leftover after parsing attributes in process `syz.3.495'. [ 47.603321][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.622594][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.633330][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.644282][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.655046][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.665717][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.676561][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.687384][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.698206][ T4583] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 47.711782][ T4596] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.724735][ T4514] team0: Port device team_slave_1 added [ 47.738502][ T4596] ext4 filesystem being mounted at /104/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.770322][ T4514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.777338][ T4514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.803326][ T4514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.851483][ T4514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.858526][ T4514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.884638][ T4514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.915510][ T3297] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.928969][ T4514] hsr_slave_0: entered promiscuous mode [ 47.935950][ T4514] hsr_slave_1: entered promiscuous mode [ 48.135316][ T4514] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 48.149241][ T4514] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 48.177511][ T4514] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 48.203183][ T4514] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 48.329776][ T4514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.350977][ T4514] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.372209][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.379438][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.398831][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.405947][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.548227][ T4514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.556805][ T29] kauditd_printk_skb: 14953 callbacks suppressed [ 48.556821][ T29] audit: type=1400 audit(1733365259.682:15203): avc: denied { setopt } for pid=4680 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 48.620738][ T29] audit: type=1400 audit(1733365259.752:15204): avc: denied { wake_alarm } for pid=4701 comm="syz.2.513" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.783271][ T4514] veth0_vlan: entered promiscuous mode [ 48.797651][ T4514] veth1_vlan: entered promiscuous mode [ 48.825862][ T4514] veth0_macvtap: entered promiscuous mode [ 48.841776][ T4514] veth1_macvtap: entered promiscuous mode [ 48.853063][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.863679][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.873558][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.884051][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.893979][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.904491][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.914351][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.924875][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.950453][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.968247][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.978761][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.989095][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.999567][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.009428][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.020034][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.029903][ T4514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 49.040372][ T4514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 49.059488][ T4514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.070996][ T4514] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.079805][ T4514] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.088643][ T4514] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.097406][ T4514] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.184035][ T4757] netlink: 200 bytes leftover after parsing attributes in process `+}[@'. [ 49.194550][ T29] audit: type=1400 audit(1733365260.312:15205): avc: denied { mounton } for pid=4514 comm="syz-executor" path="/root/syzkaller.9ImTPa/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 49.277499][ T29] audit: type=1400 audit(1733365260.402:15206): avc: denied { create } for pid=4756 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.296982][ T29] audit: type=1400 audit(1733365260.402:15207): avc: denied { ioctl } for pid=4756 comm="syz.3.519" path="socket:[7943]" dev="sockfs" ino=7943 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.321552][ T29] audit: type=1400 audit(1733365260.402:15208): avc: denied { write } for pid=4756 comm="syz.3.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 49.532362][ T4796] SELinux: k[@ (4796) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 49.569582][ T29] audit: type=1326 audit(1733365260.692:15209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 49.592655][ T29] audit: type=1326 audit(1733365260.692:15210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 49.615611][ T29] audit: type=1326 audit(1733365260.692:15211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 49.638575][ T29] audit: type=1326 audit(1733365260.692:15212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4795 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 49.643644][ T4796] netlink: 'k[@': attribute type 4 has an invalid length. [ 49.671159][ T4808] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 49.683396][ T4808] loop0: detected capacity change from 0 to 512 [ 49.722016][ T4808] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.747832][ T4808] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.780818][ T4808] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 49.975346][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.092640][ T4861] loop3: detected capacity change from 0 to 4096 [ 50.117436][ T4861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.267686][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.285387][ T4885] SELinux: k[@ (4885) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 50.320300][ T4885] netlink: 'k[@': attribute type 4 has an invalid length. [ 50.369978][ T4896] loop0: detected capacity change from 0 to 512 [ 50.390018][ T4896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.423638][ T4896] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.509791][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.559882][ T4923] mmap: syz.4.568 (4923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 50.621477][ T4920] loop0: detected capacity change from 0 to 4096 [ 50.644412][ T4920] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.659839][ T4934] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 50.673645][ T4934] loop2: detected capacity change from 0 to 512 [ 50.699840][ T4934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.719559][ T4934] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.732042][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 50.764589][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.778216][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.809888][ T4944] Cannot find del_set index 0 as target [ 50.866000][ T4949] loop2: detected capacity change from 0 to 512 [ 50.889537][ T4949] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.902615][ T4949] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.927211][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.962467][ T4957] loop3: detected capacity change from 0 to 4096 [ 50.973411][ T4957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.024069][ T4957] syz.3.583 (4957) used greatest stack depth: 10680 bytes left [ 51.055911][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.139432][ T4970] loop2: detected capacity change from 0 to 4096 [ 51.148925][ T4970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.203938][ T4975] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 51.226476][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.427699][ T4995] loop4: detected capacity change from 0 to 4096 [ 51.436350][ T4995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.495799][ T5000] loop5: detected capacity change from 0 to 512 [ 51.519470][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.540378][ T5000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.541523][ T5006] Cannot find del_set index 0 as target [ 51.559814][ T5000] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.592516][ T5008] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 51.593673][ T4514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.628399][ T5012] loop5: detected capacity change from 0 to 2048 [ 51.649606][ T5012] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.692094][ T4514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.838129][ T5046] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 51.945887][ T5061] loop2: detected capacity change from 0 to 2048 [ 51.958893][ T5061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.992684][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.015044][ T5074] Cannot find del_set index 0 as target [ 52.015366][ T5073] SELinux: k[@ (5073) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 52.038114][ T5073] netlink: 'k[@': attribute type 4 has an invalid length. [ 52.321043][ T5114] loop5: detected capacity change from 0 to 4096 [ 52.330421][ T5114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.373857][ T5119] loop4: detected capacity change from 0 to 4096 [ 52.383783][ T5119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.451316][ T4514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.483311][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.522719][ T5127] loop3: detected capacity change from 0 to 4096 [ 52.543086][ T5127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.655804][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.689601][ T5149] loop3: detected capacity change from 0 to 2048 [ 52.704306][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.732673][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.787056][ T5158] loop3: detected capacity change from 0 to 512 [ 52.810206][ T5158] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.829519][ T5158] ext4 filesystem being mounted at /146/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 52.861576][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.962681][ T5183] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 52.974815][ T5183] loop5: detected capacity change from 0 to 512 [ 52.989066][ T5183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.001764][ T5183] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.016982][ T5183] netlink: 8 bytes leftover after parsing attributes in process `syz.5.677'. [ 53.039642][ T4514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.144409][ T5195] loop3: detected capacity change from 0 to 4096 [ 53.152885][ T5195] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.225252][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.288854][ T5207] loop3: detected capacity change from 0 to 512 [ 53.299212][ T5207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.312122][ T5207] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.337015][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.548593][ T5227] loop2: detected capacity change from 0 to 4096 [ 53.556914][ T5227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.609202][ T5230] loop3: detected capacity change from 0 to 4096 [ 53.621824][ T5230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.633845][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.716478][ T5241] SELinux: k[@ (5241) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 53.718264][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.730636][ T29] kauditd_printk_skb: 481 callbacks suppressed [ 53.730652][ T29] audit: type=1326 audit(1733365264.872:15694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.770983][ T5241] netlink: 'k[@': attribute type 4 has an invalid length. [ 53.778971][ T29] audit: type=1326 audit(1733365264.902:15695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.802047][ T29] audit: type=1326 audit(1733365264.902:15696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.825798][ T29] audit: type=1326 audit(1733365264.902:15697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.848905][ T29] audit: type=1326 audit(1733365264.902:15698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.871853][ T29] audit: type=1326 audit(1733365264.902:15699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.894749][ T29] audit: type=1326 audit(1733365264.902:15700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.917675][ T29] audit: type=1326 audit(1733365264.902:15701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.940835][ T29] audit: type=1326 audit(1733365264.902:15702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 53.963917][ T29] audit: type=1326 audit(1733365264.902:15703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5240 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d9fdaff19 code=0x7ffc0000 [ 54.089620][ T5267] loop5: detected capacity change from 0 to 512 [ 54.103472][ T5271] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 54.114941][ T5267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.128651][ T5267] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.140847][ T5278] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 54.154942][ T5278] loop4: detected capacity change from 0 to 512 [ 54.155288][ T4514] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.182320][ T5278] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.201953][ T5278] ext4 filesystem being mounted at /124/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.220734][ T5278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 54.236701][ T5287] SELinux: k[@ (5287) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 54.270754][ T5287] netlink: 'k[@': attribute type 4 has an invalid length. [ 54.287218][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.378542][ T5303] loop3: detected capacity change from 0 to 512 [ 54.398540][ T5303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.412193][ T5308] loop2: detected capacity change from 0 to 4096 [ 54.418752][ T5303] ext4 filesystem being mounted at /168/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.438325][ T5308] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.454560][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.484978][ T5316] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 54.509791][ T5319] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 54.537548][ T5316] loop4: detected capacity change from 0 to 512 [ 54.545362][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.572463][ T5326] SELinux: k[@ (5326) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 54.579786][ T5316] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.598524][ T5316] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.623576][ T5326] netlink: 'k[@': attribute type 4 has an invalid length. [ 54.632721][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.732'. [ 54.679608][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.719818][ T5342] loop4: detected capacity change from 0 to 2048 [ 54.743918][ T5344] loop0: detected capacity change from 0 to 4096 [ 54.747383][ T5342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.774385][ T5344] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.788241][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.851378][ T3297] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.884848][ T5355] loop4: detected capacity change from 0 to 4096 [ 54.927021][ T5365] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 54.998520][ T5371] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 55.008725][ T5373] SELinux: k[@ (5373) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.025054][ T5373] netlink: 'k[@': attribute type 4 has an invalid length. [ 55.029636][ T5371] loop4: detected capacity change from 0 to 512 [ 55.054419][ T5371] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 55.070077][ T5371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 55.168983][ T5395] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 55.469306][ T5425] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 55.713484][ T5452] Cannot find del_set index 0 as target [ 55.761726][ T5459] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 55.904151][ T5470] loop2: detected capacity change from 0 to 4096 [ 56.026540][ T5483] Cannot find del_set index 0 as target [ 56.045909][ T5485] SELinux: k[@ (5485) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 56.062655][ T5485] netlink: 'k[@': attribute type 4 has an invalid length. [ 56.090012][ T5490] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 56.105084][ T5490] loop2: detected capacity change from 0 to 512 [ 56.139879][ T5490] ext4 filesystem being mounted at /155/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.501321][ T5541] loop3: detected capacity change from 0 to 512 [ 56.524983][ T5541] ext4 filesystem being mounted at /187/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 56.736165][ T5568] SELinux: k[@ (5568) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 56.755172][ T5568] netlink: 'k[@': attribute type 4 has an invalid length. [ 57.244162][ T5594] loop3: detected capacity change from 0 to 4096 [ 57.390899][ T5601] loop3: detected capacity change from 0 to 4096 [ 57.449177][ T5604] loop2: detected capacity change from 0 to 4096 [ 57.601502][ T5617] loop2: detected capacity change from 0 to 4096 [ 57.733985][ T5624] loop5: detected capacity change from 0 to 128 [ 57.745864][ T5624] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 57.758612][ T5628] futex_wake_op: syz.2.856 tries to shift op by -1; fix this program [ 57.980379][ T5647] loop4: detected capacity change from 0 to 4096 [ 58.122763][ T5657] __nla_validate_parse: 7 callbacks suppressed [ 58.122781][ T5657] netlink: 16 bytes leftover after parsing attributes in process `syz.0.869'. [ 58.194385][ T5661] SELinux: k[@ (5661) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.221719][ T5661] netlink: 'k[@': attribute type 4 has an invalid length. [ 58.240487][ T5665] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 58.271048][ T5671] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 58.283763][ T5671] loop0: detected capacity change from 0 to 512 [ 58.299910][ T5671] ext4 filesystem being mounted at /164/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.312878][ T5671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.876'. [ 58.380307][ T5686] loop0: detected capacity change from 0 to 512 [ 58.399789][ T5686] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.439316][ T5689] loop4: detected capacity change from 0 to 4096 [ 58.522525][ T5700] SELinux: k[@ (5700) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.539398][ T5700] netlink: 'k[@': attribute type 4 has an invalid length. [ 58.628449][ T5711] Cannot find del_set index 0 as target [ 58.660735][ T5714] loop0: detected capacity change from 0 to 512 [ 58.666556][ T5715] loop4: detected capacity change from 0 to 2048 [ 58.681862][ T5714] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.755034][ T5733] SELinux: k[@ (5733) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 58.769942][ T29] kauditd_printk_skb: 415 callbacks suppressed [ 58.769956][ T29] audit: type=1326 audit(1733365269.902:16119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 58.801791][ T5733] netlink: 'k[@': attribute type 4 has an invalid length. [ 58.841056][ T29] audit: type=1326 audit(1733365269.942:16120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 58.842323][ T5736] loop4: detected capacity change from 0 to 4096 [ 58.864082][ T29] audit: type=1326 audit(1733365269.942:16121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 58.893549][ T29] audit: type=1326 audit(1733365269.942:16122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 58.916477][ T29] audit: type=1326 audit(1733365269.942:16123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 58.939594][ T29] audit: type=1326 audit(1733365269.942:16124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 58.962522][ T29] audit: type=1326 audit(1733365269.942:16125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 58.985464][ T29] audit: type=1326 audit(1733365269.942:16126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff84e521e37 code=0x7ffc0000 [ 59.008350][ T29] audit: type=1326 audit(1733365269.942:16127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 59.031302][ T29] audit: type=1326 audit(1733365269.942:16128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5732 comm="k[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff84e51ff19 code=0x7ffc0000 [ 59.091448][ T5749] loop5: detected capacity change from 0 to 4096 [ 59.269340][ T5774] loop4: detected capacity change from 0 to 2048 [ 59.375292][ T5788] loop5: detected capacity change from 0 to 4096 [ 59.455637][ T5802] loop0: detected capacity change from 0 to 4096 [ 59.520191][ T5803] loop3: detected capacity change from 0 to 4096 [ 59.597638][ T5816] loop4: detected capacity change from 0 to 2048 [ 59.666019][ T5824] loop0: detected capacity change from 0 to 4096 [ 59.932501][ T5848] loop0: detected capacity change from 0 to 4096 [ 60.180257][ T5882] loop7: detected capacity change from 0 to 7 [ 60.190937][ T5882] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.200087][ T5882] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.208078][ T5882] loop7: unable to read partition table [ 60.219534][ T5882] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 60.219534][ T5882] ) failed (rc=-5) [ 60.340562][ T5893] loop4: detected capacity change from 0 to 512 [ 60.361547][ T5893] ext4 filesystem being mounted at /179/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.389733][ T5901] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 60.402961][ T5901] loop5: detected capacity change from 0 to 512 [ 60.424045][ T5901] ext4 filesystem being mounted at /89/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.443238][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.5.970'. [ 60.580399][ T5922] loop5: detected capacity change from 0 to 4096 [ 60.593772][ T5925] loop7: detected capacity change from 0 to 7 [ 60.601181][ T5925] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.610633][ T5925] Buffer I/O error on dev loop7, logical block 0, async page read [ 60.618610][ T5925] loop7: unable to read partition table [ 60.624585][ T5925] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 60.624585][ T5925] ) failed (rc=-5) [ 60.687948][ T5929] loop2: detected capacity change from 0 to 512 [ 60.722680][ T5938] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 60.727998][ T5940] Cannot find del_set index 0 as target [ 60.735533][ T5938] loop4: detected capacity change from 0 to 512 [ 60.741042][ T5929] ext4 filesystem being mounted at /178/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.765980][ T5938] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 60.785485][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz.4.984'. [ 60.920785][ T5954] netlink: 80 bytes leftover after parsing attributes in process `syz.4.990'. [ 61.039147][ T5961] loop0: detected capacity change from 0 to 4096 [ 61.063988][ T5969] Cannot find del_set index 0 as target [ 61.090588][ T5971] loop5: detected capacity change from 0 to 2048 [ 61.130267][ T5975] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 61.131243][ T5974] loop2: detected capacity change from 0 to 512 [ 61.143826][ T5975] loop3: detected capacity change from 0 to 512 [ 61.160277][ T5974] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.176800][ T5975] ext4 filesystem being mounted at /222/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 61.189718][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 61.255686][ T5988] loop2: detected capacity change from 0 to 4096 [ 61.451943][ T6003] Cannot find del_set index 0 as target [ 61.608078][ T6010] loop2: detected capacity change from 0 to 4096 [ 61.688113][ T6013] loop2: detected capacity change from 0 to 2048 [ 61.893859][ T6029] loop4: detected capacity change from 0 to 4096 [ 62.197929][ T6046] loop5: detected capacity change from 0 to 2048 [ 62.237844][ T6046] loop5: p1 < > p2 p3 < p5 > p4 [ 62.242840][ T6046] loop5: partition table partially beyond EOD, truncated [ 62.250100][ T6046] loop5: p1 start 4278190080 is beyond EOD, truncated [ 62.256970][ T6046] loop5: p2 start 16908800 is beyond EOD, truncated [ 62.264399][ T6046] loop5: p4 start 11326 is beyond EOD, truncated [ 62.270928][ T6046] loop5: p5 start 16908800 is beyond EOD, truncated [ 62.284102][ T6046] netlink: 'syz.5.1023': attribute type 10 has an invalid length. [ 62.295522][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.317070][ T6046] loop7: detected capacity change from 0 to 16384 [ 62.376108][ T6046] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x80700 phys_seg 3 prio class 0 [ 62.388814][ T6046] I/O error, dev loop7, sector 11520 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 62.399027][ T6046] I/O error, dev loop7, sector 11264 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.400312][ T6055] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 62.408653][ T6046] Buffer I/O error on dev loop7, logical block 1408, async page read [ 62.433628][ T6055] loop0: detected capacity change from 0 to 512 [ 62.443883][ T6056] loop3: detected capacity change from 0 to 4096 [ 62.459923][ T6055] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.471562][ T6055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1027'. [ 62.626525][ T6045] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 62.636347][ T6045] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 62.644834][ T6045] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 62.653366][ T6045] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 62.661765][ T6045] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 62.670176][ T6045] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 62.682471][ T6045] I/O error, dev loop7, sector 1024 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 62.699434][ T6045] I/O error, dev loop7, sector 2048 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 62.712554][ T6045] I/O error, dev loop7, sector 3072 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 62.725890][ T6045] I/O error, dev loop7, sector 4096 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 62.739047][ T6045] I/O error, dev loop7, sector 5120 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 62.753507][ T6045] I/O error, dev loop7, sector 6144 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 62.923459][ T6084] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 62.935369][ T6084] loop0: detected capacity change from 0 to 512 [ 62.949367][ T6084] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 62.960605][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1038'. [ 62.991223][ T6089] loop4: detected capacity change from 0 to 4096 [ 63.069055][ T6093] loop0: detected capacity change from 0 to 4096 [ 63.235157][ T6106] loop7: detected capacity change from 0 to 7 [ 63.241539][ T6106] loop7: unable to read partition table [ 63.247265][ T6106] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 63.247265][ T6106] ) failed (rc=-5) [ 63.428923][ T6120] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 63.441178][ T6120] loop0: detected capacity change from 0 to 512 [ 63.459418][ T6121] loop5: detected capacity change from 0 to 4096 [ 63.470593][ T6120] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.482210][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1051'. [ 63.592129][ T6133] loop3: detected capacity change from 0 to 4096 [ 63.615094][ T6134] loop0: detected capacity change from 0 to 4096 [ 63.717675][ T6144] loop0: detected capacity change from 0 to 512 [ 63.724679][ T6144] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 63.737941][ T6144] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 63.765948][ T6144] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 63.779266][ T6144] EXT4-fs (loop0): 1 truncate cleaned up [ 63.789084][ T29] kauditd_printk_skb: 209 callbacks suppressed [ 63.795310][ T29] audit: type=1400 audit(1733365274.922:16338): avc: denied { read append open } for pid=6143 comm="syz.0.1058" path="/215/bus/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.820861][ T29] audit: type=1400 audit(1733365274.952:16339): avc: denied { write } for pid=6143 comm="syz.0.1058" name="memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.848588][ T29] audit: type=1400 audit(1733365274.982:16340): avc: denied { map } for pid=6143 comm="syz.0.1058" path="/215/bus/memory.events" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 63.920905][ T6153] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 63.932752][ T6153] loop4: detected capacity change from 0 to 512 [ 63.949059][ T6153] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.960367][ T6153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1063'. [ 64.485381][ T6177] loop0: detected capacity change from 0 to 512 [ 64.496662][ T6177] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 64.514643][ T6178] loop3: detected capacity change from 0 to 4096 [ 64.522301][ T6177] EXT4-fs (loop0): 1 truncate cleaned up [ 64.621296][ T6186] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 64.640215][ T6186] loop5: detected capacity change from 0 to 512 [ 64.674413][ T6186] ext4 filesystem being mounted at /108/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 64.685800][ T6186] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1075'. [ 64.759654][ T6202] loop3: detected capacity change from 0 to 4096 [ 64.837976][ T6210] loop2: detected capacity change from 0 to 4096 [ 65.007464][ T6224] loop3: detected capacity change from 0 to 4096 [ 65.178560][ T6243] loop3: detected capacity change from 0 to 4096 [ 65.325276][ T6257] loop7: detected capacity change from 0 to 7 [ 65.336478][ T6257] buffer_io_error: 1405 callbacks suppressed [ 65.336493][ T6257] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.350588][ T6257] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.358567][ T6257] loop7: unable to read partition table [ 65.364289][ T6257] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 65.364289][ T6257] ) failed (rc=-5) [ 65.494037][ T29] audit: type=1326 audit(1733365276.622:16341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10fdff19 code=0x7ffc0000 [ 65.517724][ T29] audit: type=1326 audit(1733365276.622:16342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10fdff19 code=0x7ffc0000 [ 65.541262][ T29] audit: type=1326 audit(1733365276.622:16343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8d10fde880 code=0x7ffc0000 [ 65.564847][ T29] audit: type=1326 audit(1733365276.622:16344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10fdff19 code=0x7ffc0000 [ 65.588882][ T29] audit: type=1326 audit(1733365276.622:16345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d10fdff19 code=0x7ffc0000 [ 65.612786][ T29] audit: type=1326 audit(1733365276.622:16346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6266 comm="syz.4.1107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7f8d10fdff19 code=0x7ffc0000 [ 65.636917][ T29] audit: type=1326 audit(1733365276.682:16347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6268 comm="syz.3.1106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1785cff19 code=0x7ffc0000 [ 65.846156][ T6285] loop7: detected capacity change from 0 to 7 [ 65.852449][ T6285] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.860422][ T6285] Buffer I/O error on dev loop7, logical block 0, async page read [ 65.868276][ T6285] loop7: unable to read partition table [ 65.874045][ T6285] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 65.874045][ T6285] ) failed (rc=-5) [ 65.962335][ T6293] loop0: detected capacity change from 0 to 512 [ 65.984483][ T6293] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.120673][ T6309] loop2: detected capacity change from 0 to 4096 [ 66.123891][ T6306] loop0: detected capacity change from 0 to 4096 [ 66.235957][ T6316] loop7: detected capacity change from 0 to 7 [ 66.236181][ T6317] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 66.242302][ T6316] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.257325][ T6317] loop2: detected capacity change from 0 to 512 [ 66.259513][ T6316] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.273186][ T6316] loop7: unable to read partition table [ 66.279070][ T6316] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 66.279070][ T6316] ) failed (rc=-5) [ 66.279287][ T6317] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.308854][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 66.349454][ T6327] loop2: detected capacity change from 0 to 512 [ 66.359540][ T6327] ext4 filesystem being mounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.468308][ T6339] loop2: detected capacity change from 0 to 4096 [ 66.554864][ T6348] loop4: detected capacity change from 0 to 4096 [ 66.585043][ T6350] loop3: detected capacity change from 0 to 4096 [ 66.669601][ T6356] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 66.684706][ T6356] loop4: detected capacity change from 0 to 512 [ 66.699238][ T6356] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.701816][ T6360] loop3: detected capacity change from 0 to 512 [ 66.711686][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1140'. [ 66.752644][ T6360] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 66.789685][ T6370] loop7: detected capacity change from 0 to 7 [ 66.795924][ T6370] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.804159][ T6370] Buffer I/O error on dev loop7, logical block 0, async page read [ 66.812054][ T6370] loop7: unable to read partition table [ 66.817914][ T6370] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 66.817914][ T6370] ) failed (rc=-5) [ 67.000824][ T6390] loop4: detected capacity change from 0 to 4096 [ 67.145378][ T6397] loop5: detected capacity change from 0 to 4096 [ 67.179499][ T6402] loop7: detected capacity change from 0 to 7 [ 67.185767][ T6402] Buffer I/O error on dev loop7, logical block 0, async page read [ 67.193802][ T6402] Buffer I/O error on dev loop7, logical block 0, async page read [ 67.201659][ T6402] loop7: unable to read partition table [ 67.207442][ T6402] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 67.207442][ T6402] ) failed (rc=-5) [ 67.331598][ T6416] loop4: detected capacity change from 0 to 4096 [ 67.407590][ T6422] loop0: detected capacity change from 0 to 4096 [ 67.431356][ T6425] loop4: detected capacity change from 0 to 512 [ 67.476814][ T6425] ext4 filesystem being mounted at /224/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.491221][ T3297] ================================================================== [ 67.499346][ T3297] BUG: KCSAN: data-race in __find_get_block / has_bh_in_lru [ 67.506665][ T3297] [ 67.509008][ T3297] read-write to 0xffff888237d2ba28 of 8 bytes by task 6425 on cpu 1: [ 67.517077][ T3297] __find_get_block+0x434/0x8a0 [ 67.521945][ T3297] find_inode_bit+0x167/0x320 [ 67.526636][ T3297] __ext4_new_inode+0xb5e/0x2230 [ 67.531614][ T3297] ext4_mkdir+0x27f/0x740 [ 67.535960][ T3297] vfs_mkdir+0x1f4/0x320 [ 67.540234][ T3297] do_mkdirat+0x12f/0x2b0 [ 67.544600][ T3297] __x64_sys_mkdirat+0x4e/0x60 [ 67.549383][ T3297] x64_sys_call+0x1b6f/0x2dc0 [ 67.554157][ T3297] do_syscall_64+0xc9/0x1c0 [ 67.558676][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.564597][ T3297] [ 67.566924][ T3297] read to 0xffff888237d2ba28 of 8 bytes by task 3297 on cpu 0: [ 67.574482][ T3297] has_bh_in_lru+0x35/0x1f0 [ 67.579008][ T3297] smp_call_function_many_cond+0x2d5/0xc20 [ 67.584832][ T3297] on_each_cpu_cond_mask+0x3c/0x90 [ 67.589961][ T3297] invalidate_bh_lrus+0x2a/0x30 [ 67.594826][ T3297] invalidate_bdev+0x42/0x70 [ 67.599426][ T3297] ext4_put_super+0x571/0x840 [ 67.604123][ T3297] generic_shutdown_super+0xe5/0x220 [ 67.609421][ T3297] kill_block_super+0x2a/0x70 [ 67.614120][ T3297] ext4_kill_sb+0x44/0x80 [ 67.618464][ T3297] deactivate_locked_super+0x7d/0x1c0 [ 67.623847][ T3297] deactivate_super+0x9f/0xb0 [ 67.628535][ T3297] cleanup_mnt+0x268/0x2e0 [ 67.632958][ T3297] __cleanup_mnt+0x19/0x20 [ 67.637381][ T3297] task_work_run+0x13a/0x1a0 [ 67.642003][ T3297] syscall_exit_to_user_mode+0xa8/0x120 [ 67.647580][ T3297] do_syscall_64+0xd6/0x1c0 [ 67.652088][ T3297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.658002][ T3297] [ 67.660325][ T3297] value changed: 0xffff888117231c30 -> 0xffff888105080478 [ 67.667441][ T3297] [ 67.669761][ T3297] Reported by Kernel Concurrency Sanitizer on: [ 67.675919][ T3297] CPU: 0 UID: 0 PID: 3297 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00025-gfeffde684ac2 #0 [ 67.686770][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 67.696834][ T3297] ================================================================== [ 67.733860][ T6433] loop7: detected capacity change from 0 to 7 [ 67.740254][ T6433] loop7: unable to read partition table [ 67.745945][ T6433] loop_reread_partitions: partition scan of loop7 (被xڬdƤݡ [ 67.745945][ T6433] ) failed (rc=-5)