last executing test programs: 2.347617414s ago: executing program 3 (id=410): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.304105244s ago: executing program 1 (id=412): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef) 2.100414467s ago: executing program 3 (id=414): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x775, 0x0, 0x0, 'queue0\x00'}) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x2, 0xf, 0x0, 0x7, 0x8, "9afce4aeac9acbb49b00541d7d6a304eb7f873", 0xffff, 0x3}) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1e, {}, {}, @raw32}], 0xffc8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r4, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @tick=0x8, {0x0, 0x1}, {}, @result}], 0x1c) 2.075045898s ago: executing program 0 (id=415): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) open(&(0x7f0000000240)='./bus\x00', 0x20100, 0x10b) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@mb_optimize_scan}, {@nogrpid}, {@nogrpid}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r2 = open(&(0x7f0000000200)='./bus\x00', 0x187842, 0x41) preadv2(r2, &(0x7f0000000d80)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x1, 0x0, 0x0, 0x1b) 2.044742798s ago: executing program 3 (id=416): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000200)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 1.991727459s ago: executing program 3 (id=417): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) 1.980602699s ago: executing program 0 (id=427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r1, 0x0, 0x0, 0x24000080, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 1.978196929s ago: executing program 2 (id=418): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x4c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x20004870) 1.91275267s ago: executing program 1 (id=420): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) r2 = epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x60000018}) 1.823076752s ago: executing program 2 (id=421): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x10000}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r2, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) 1.714487433s ago: executing program 2 (id=422): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.523767956s ago: executing program 0 (id=426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) 1.352546449s ago: executing program 0 (id=428): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000010c0)=0x5, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800030020"], 0xfdef) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x1, 0x70bd27}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) 1.28763391s ago: executing program 0 (id=429): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x3, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0xbe02, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r3, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0}, &(0x7f0000000500), &(0x7f0000000580)}, 0x20) 1.227501731s ago: executing program 1 (id=430): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f0000000340)=[{}], 0x1, 0x1000) epoll_pwait(r3, 0x0, 0x0, 0x8, 0x0, 0x0) 1.111897162s ago: executing program 2 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) setresuid(0xee00, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x8) r3 = dup(r2) r4 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) sendfile(r3, r4, 0x0, 0x8000fffffffe) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r5, 0x0, 0xffffffffffffffff}, 0x18) 961.564904ms ago: executing program 3 (id=432): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001300)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x82}, 0x2000400c) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x900) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfdef) 775.930867ms ago: executing program 0 (id=434): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x4001, 0x8000000, 0x238, 0xf8, 0x720d, 0x148, 0xf8, 0x148, 0x1c8, 0x240, 0x240, 0x1c8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@remote, @empty, 0x0, 0x0, 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendto$inet(r3, 0x0, 0x0, 0x24000080, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000600)="f628f925", 0x4}], 0x1) 466.584962ms ago: executing program 4 (id=435): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x28}, 0x1, 0x0, 0x0, 0xc00}, 0x0) r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000004c0)=""/120, 0x78}], 0x1) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={0x4c, 0x0, 0x801, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee3390847eef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, @NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040901}, 0x10008800) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='='], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 437.403353ms ago: executing program 4 (id=436): r0 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_raw(r3, &(0x7f0000000640)={0x0, 0xfffffffffffffdee, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) 372.536994ms ago: executing program 4 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) openat$sysfs(0xffffffffffffff9c, 0x0, 0x42, 0x0) io_setup(0x20, 0x0) r2 = syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.time\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000001000), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2abfc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0155aaffffffffffff0300", "2809e85397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000000000000400", "90010000009265406c09306903d800", [0x0, 0x1]}}) 334.024094ms ago: executing program 4 (id=438): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 295.385785ms ago: executing program 2 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 162.838597ms ago: executing program 4 (id=440): socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r0, 0x0, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2, 0xc4, &(0x7f0000002500)=""/4106, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffdf8, 0x10, 0x0, 0x34, 0x0, 0x0, 0xfffffffffffffe65, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) 162.403097ms ago: executing program 2 (id=441): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x3) r2 = epoll_create1(0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000004c0)={0x60000018}) 161.260727ms ago: executing program 1 (id=442): creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 146.742817ms ago: executing program 4 (id=443): getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000001"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f00000012c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) 142.294547ms ago: executing program 1 (id=444): socket(0x10, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r3, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) 49.056349ms ago: executing program 3 (id=445): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, '\x00', "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "e900"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/104, 0x68, 0x10002, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x1000000, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=446): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{0x1}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 25.754364][ T29] audit: type=1400 audit(1750250508.103:62): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.755207][ T3296] cgroup: Unknown subsys name 'net' [ 25.777087][ T29] audit: type=1400 audit(1750250508.103:63): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.804432][ T29] audit: type=1400 audit(1750250508.133:64): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.960636][ T3296] cgroup: Unknown subsys name 'cpuset' [ 25.966682][ T3296] cgroup: Unknown subsys name 'rlimit' [ 26.136064][ T29] audit: type=1400 audit(1750250508.483:65): avc: denied { setattr } for pid=3296 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.160082][ T29] audit: type=1400 audit(1750250508.483:66): avc: denied { create } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.180551][ T29] audit: type=1400 audit(1750250508.483:67): avc: denied { write } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.185785][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.200898][ T29] audit: type=1400 audit(1750250508.483:68): avc: denied { read } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.229677][ T29] audit: type=1400 audit(1750250508.493:69): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.247871][ T3296] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.254510][ T29] audit: type=1400 audit(1750250508.493:70): avc: denied { mount } for pid=3296 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.286506][ T29] audit: type=1400 audit(1750250508.563:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.356599][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 27.440779][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 27.455512][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.474057][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.481159][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.488369][ T3305] bridge_slave_0: entered allmulticast mode [ 27.494777][ T3305] bridge_slave_0: entered promiscuous mode [ 27.514099][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.521195][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.528397][ T3305] bridge_slave_1: entered allmulticast mode [ 27.534838][ T3305] bridge_slave_1: entered promiscuous mode [ 27.540930][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 27.584776][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.596739][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.649177][ T3305] team0: Port device team_slave_0 added [ 27.655747][ T3305] team0: Port device team_slave_1 added [ 27.661541][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 27.676345][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.683444][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.690615][ T3315] bridge_slave_0: entered allmulticast mode [ 27.696957][ T3315] bridge_slave_0: entered promiscuous mode [ 27.703429][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.710526][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.717708][ T3311] bridge_slave_0: entered allmulticast mode [ 27.724182][ T3311] bridge_slave_0: entered promiscuous mode [ 27.745743][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.752908][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.760337][ T3315] bridge_slave_1: entered allmulticast mode [ 27.766614][ T3315] bridge_slave_1: entered promiscuous mode [ 27.772703][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.779789][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.787064][ T3311] bridge_slave_1: entered allmulticast mode [ 27.793597][ T3311] bridge_slave_1: entered promiscuous mode [ 27.799856][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.806891][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.832790][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.848212][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.855324][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.862510][ T3313] bridge_slave_0: entered allmulticast mode [ 27.868854][ T3313] bridge_slave_0: entered promiscuous mode [ 27.875451][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.882583][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.889772][ T3313] bridge_slave_1: entered allmulticast mode [ 27.896307][ T3313] bridge_slave_1: entered promiscuous mode [ 27.911303][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.918344][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.944276][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.980738][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.990840][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.000945][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.013742][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.024107][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.034170][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.078971][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.086222][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.093481][ T3307] bridge_slave_0: entered allmulticast mode [ 28.099919][ T3307] bridge_slave_0: entered promiscuous mode [ 28.115799][ T3313] team0: Port device team_slave_0 added [ 28.122566][ T3311] team0: Port device team_slave_0 added [ 28.128803][ T3315] team0: Port device team_slave_0 added [ 28.135233][ T3311] team0: Port device team_slave_1 added [ 28.145896][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.153065][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.160360][ T3307] bridge_slave_1: entered allmulticast mode [ 28.166580][ T3307] bridge_slave_1: entered promiscuous mode [ 28.174801][ T3305] hsr_slave_0: entered promiscuous mode [ 28.180774][ T3305] hsr_slave_1: entered promiscuous mode [ 28.187177][ T3313] team0: Port device team_slave_1 added [ 28.193538][ T3315] team0: Port device team_slave_1 added [ 28.226012][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.233147][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.259201][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.270318][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.277263][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.303254][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.324224][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.331287][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.357353][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.368387][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.375399][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.401327][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.415473][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.429764][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.436748][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.462772][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.473821][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.480805][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.506841][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.522102][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.579394][ T3311] hsr_slave_0: entered promiscuous mode [ 28.585591][ T3311] hsr_slave_1: entered promiscuous mode [ 28.591445][ T3311] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.598990][ T3311] Cannot create hsr debugfs directory [ 28.606545][ T3313] hsr_slave_0: entered promiscuous mode [ 28.612633][ T3313] hsr_slave_1: entered promiscuous mode [ 28.618366][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.625928][ T3313] Cannot create hsr debugfs directory [ 28.632230][ T3307] team0: Port device team_slave_0 added [ 28.649238][ T3315] hsr_slave_0: entered promiscuous mode [ 28.655314][ T3315] hsr_slave_1: entered promiscuous mode [ 28.661081][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.668632][ T3315] Cannot create hsr debugfs directory [ 28.674774][ T3307] team0: Port device team_slave_1 added [ 28.698158][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.705168][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.731163][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.759578][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.766599][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.792632][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.839064][ T3307] hsr_slave_0: entered promiscuous mode [ 28.845095][ T3307] hsr_slave_1: entered promiscuous mode [ 28.850927][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.858455][ T3307] Cannot create hsr debugfs directory [ 28.984699][ T3305] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.996908][ T3305] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.005615][ T3305] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.015704][ T3305] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.033660][ T3313] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.047211][ T3313] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.060664][ T3313] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.070681][ T3313] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.087165][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.102535][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.111001][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.125502][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.146894][ T3311] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.156055][ T3311] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.165082][ T3311] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.176771][ T3311] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.208054][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.220597][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.232798][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.247669][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.255023][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.275276][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.282326][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.294548][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.301776][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.311551][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.352352][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.370891][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.385651][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.408239][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.415971][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.426871][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.436624][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.443876][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.471978][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.479044][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.487790][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.494836][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.504736][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.511825][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.521115][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.528208][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.548576][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.557640][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.564772][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.585785][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.596215][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.624695][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.638423][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.654844][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.661988][ T3329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.703544][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.710659][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.755193][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.781790][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.840249][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.851078][ T3305] veth0_vlan: entered promiscuous mode [ 29.859354][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.870196][ T3305] veth1_vlan: entered promiscuous mode [ 29.900026][ T3305] veth0_macvtap: entered promiscuous mode [ 29.924557][ T3305] veth1_macvtap: entered promiscuous mode [ 29.965450][ T3311] veth0_vlan: entered promiscuous mode [ 29.979688][ T3311] veth1_vlan: entered promiscuous mode [ 30.001294][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.014771][ T3313] veth0_vlan: entered promiscuous mode [ 30.027491][ T3311] veth0_macvtap: entered promiscuous mode [ 30.041584][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.048922][ T3307] veth0_vlan: entered promiscuous mode [ 30.055535][ T3311] veth1_macvtap: entered promiscuous mode [ 30.064362][ T3315] veth0_vlan: entered promiscuous mode [ 30.071008][ T3305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.079699][ T3305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.088508][ T3305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.097384][ T3305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.111679][ T3307] veth1_vlan: entered promiscuous mode [ 30.117669][ T3313] veth1_vlan: entered promiscuous mode [ 30.130415][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.138382][ T3315] veth1_vlan: entered promiscuous mode [ 30.152691][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.167554][ T3311] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.176407][ T3311] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.185129][ T3311] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.193866][ T3311] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.222054][ T3315] veth0_macvtap: entered promiscuous mode [ 30.229660][ T3313] veth0_macvtap: entered promiscuous mode [ 30.237616][ T3313] veth1_macvtap: entered promiscuous mode [ 30.238082][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.260785][ T3315] veth1_macvtap: entered promiscuous mode [ 30.272867][ T3307] veth0_macvtap: entered promiscuous mode [ 30.289954][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.298238][ T3307] veth1_macvtap: entered promiscuous mode [ 30.318500][ T3477] veth1_macvtap: left promiscuous mode [ 30.326494][ T3477] macsec0: entered promiscuous mode [ 30.334981][ T3477] veth1_macvtap: entered promiscuous mode [ 30.342141][ T3477] macsec0: entered allmulticast mode [ 30.347479][ T3477] veth1_macvtap: entered allmulticast mode [ 30.357021][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.366214][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.386115][ T3315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.395018][ T3315] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.403866][ T3315] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.412644][ T3315] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.433590][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.444740][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.469973][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.493872][ T3313] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.502737][ T3313] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.511540][ T3313] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.520390][ T3313] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.554168][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.563065][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.571788][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.580489][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.649242][ T3479] mmap: syz.1.2 (3479) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 30.734849][ T3495] only policy match revision 0 supported [ 30.734863][ T3495] unable to load match [ 30.742740][ T3496] loop2: detected capacity change from 0 to 1024 [ 30.755686][ T3496] EXT4-fs: Ignoring removed orlov option [ 30.787480][ T3496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.803729][ T29] kauditd_printk_skb: 32 callbacks suppressed [ 30.803743][ T29] audit: type=1400 audit(1750250513.153:104): avc: denied { mount } for pid=3493 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.831251][ T29] audit: type=1400 audit(1750250513.153:105): avc: denied { add_name } for pid=3493 comm="syz.2.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.851473][ T29] audit: type=1400 audit(1750250513.153:106): avc: denied { create } for pid=3493 comm="syz.2.3" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.889425][ T29] audit: type=1400 audit(1750250513.233:107): avc: denied { read open } for pid=3493 comm="syz.2.3" path="/0/bus/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.937087][ T3507] loop4: detected capacity change from 0 to 1024 [ 30.960367][ T29] audit: type=1400 audit(1750250513.243:108): avc: denied { write } for pid=3493 comm="syz.2.3" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 30.981802][ T29] audit: type=1400 audit(1750250513.293:109): avc: denied { create } for pid=3508 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.001979][ T29] audit: type=1400 audit(1750250513.293:110): avc: denied { create } for pid=3508 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 31.022394][ T29] audit: type=1400 audit(1750250513.303:111): avc: denied { write } for pid=3508 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.042612][ T29] audit: type=1400 audit(1750250513.303:112): avc: denied { read } for pid=3508 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.063481][ T3507] ======================================================= [ 31.063481][ T3507] WARNING: The mand mount option has been deprecated and [ 31.063481][ T3507] and is ignored by this kernel. Remove the mand [ 31.063481][ T3507] option from the mount to silence this warning. [ 31.063481][ T3507] ======================================================= [ 31.102646][ T3507] EXT4-fs: Ignoring removed nobh option [ 31.108231][ T3507] EXT4-fs: Ignoring removed bh option [ 31.126179][ T3507] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.203072][ T29] audit: type=1400 audit(1750250513.513:113): avc: denied { append } for pid=3506 comm="syz.4.10" path="/2/file1/blkio.throttle.io_serviced_recursive" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.290496][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.307136][ T3520] loop0: detected capacity change from 0 to 512 [ 31.384923][ T3520] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.422434][ T3520] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.459470][ T3520] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 31.476310][ T3520] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.594275][ T3535] loop3: detected capacity change from 0 to 512 [ 31.627501][ T3535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.650505][ T3535] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.813997][ T3546] netlink: 24 bytes leftover after parsing attributes in process `syz.0.23'. [ 31.979526][ T3503] syz.2.3 (3503) used greatest stack depth: 10904 bytes left [ 32.011066][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.030583][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.095652][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 32.108554][ T3565] netlink: 'syz.0.28': attribute type 1 has an invalid length. [ 32.139238][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.3.27'. [ 32.180041][ T3565] ip6erspan0: entered promiscuous mode [ 32.280923][ T3574] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 32.307612][ T3584] loop3: detected capacity change from 0 to 2048 [ 32.364890][ T3584] loop3: p1 < > p3 [ 32.370038][ T3584] loop3: p3 size 134217728 extends beyond EOD, truncated [ 32.599145][ T3619] loop3: detected capacity change from 0 to 1024 [ 32.614749][ T3619] EXT4-fs: Ignoring removed orlov option [ 32.663176][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.676132][ T3603] syz.0.36 (3603) used greatest stack depth: 10192 bytes left [ 32.734016][ T3628] netlink: 'syz.4.40': attribute type 4 has an invalid length. [ 32.748640][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 32.759535][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 32.770950][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 32.779890][ T3626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'. [ 32.789098][ T3628] netlink: 'syz.4.40': attribute type 4 has an invalid length. [ 32.982912][ T3635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.41'. [ 33.092805][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.169160][ T3669] bond0: entered promiscuous mode [ 33.174292][ T3669] bond_slave_0: entered promiscuous mode [ 33.180144][ T3669] bond_slave_1: entered promiscuous mode [ 33.319768][ T3695] netlink: 'syz.4.63': attribute type 27 has an invalid length. [ 33.369203][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.376425][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.407993][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.418019][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.453893][ T3695] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.462958][ T3695] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.471921][ T3695] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.480861][ T3695] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.523696][ T3705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.531562][ T3705] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.543628][ T3705] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 33.709430][ T3724] syzkaller0: entered promiscuous mode [ 33.715019][ T3724] syzkaller0: entered allmulticast mode [ 33.723393][ T3727] netlink: 14528 bytes leftover after parsing attributes in process `syz.4.71'. [ 33.952126][ T3740] netlink: 'syz.4.77': attribute type 1 has an invalid length. [ 33.977322][ T3740] batadv_slave_1: entered promiscuous mode [ 33.983242][ T3740] batadv_slave_1: entered allmulticast mode [ 33.995501][ T3740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.037075][ T3748] loop2: detected capacity change from 0 to 164 [ 34.044682][ T3748] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.054180][ T3748] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 34.108508][ T3748] Symlink component flag not implemented [ 34.114265][ T3748] Symlink component flag not implemented [ 34.121938][ T3748] Symlink component flag not implemented (7) [ 34.127996][ T3748] Symlink component flag not implemented (116) [ 34.256800][ T3756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.85'. [ 34.274883][ T3755] pim6reg1: entered promiscuous mode [ 34.280333][ T3755] pim6reg1: entered allmulticast mode [ 34.460077][ C0] hrtimer: interrupt took 26951 ns [ 34.648417][ T3801] $H: renamed from bond0 (while UP) [ 34.667631][ T3801] $H: entered promiscuous mode [ 34.672833][ T3801] bond_slave_0: entered promiscuous mode [ 34.678686][ T3801] bond_slave_1: entered promiscuous mode [ 34.779356][ T3807] ref_ctr increment failed for inode: 0x80 offset: 0x9 ref_ctr_offset: 0x82 of mm: 0xffff88810005f300 [ 34.792494][ T3806] uprobe: syz.2.107:3806 failed to unregister, leaking uprobe [ 34.834783][ T3809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.844956][ T3809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.918163][ T3815] loop3: detected capacity change from 0 to 512 [ 34.935353][ T3817] random: crng reseeded on system resumption [ 34.943270][ T3815] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 34.953382][ T3815] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.111: bad orphan inode 15 [ 34.966621][ T3815] ext4_test_bit(bit=14, block=18) = 1 [ 34.972089][ T3815] is_bad_inode(inode)=0 [ 34.976271][ T3815] NEXT_ORPHAN(inode)=1023 [ 34.980641][ T3815] max_ino=32 [ 34.983834][ T3815] i_nlink=0 [ 34.992991][ T3815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 35.005610][ T3815] ext2 filesystem being mounted at /14/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 35.157296][ T3834] syz_tun: entered promiscuous mode [ 35.187642][ T3834] vlan2: entered promiscuous mode [ 35.352842][ T3841] loop2: detected capacity change from 0 to 512 [ 35.411920][ T3841] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 35.511879][ T3844] vhci_hcd: invalid port number 96 [ 35.517037][ T3844] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 35.693405][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.707363][ T3841] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.737377][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.781460][ T3854] pim6reg1: entered promiscuous mode [ 35.786882][ T3854] pim6reg1: entered allmulticast mode [ 35.794191][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 35.824588][ T29] kauditd_printk_skb: 290 callbacks suppressed [ 35.824601][ T29] audit: type=1400 audit(1750250518.173:404): avc: denied { write } for pid=3849 comm="syz.4.126" path="socket:[5434]" dev="sockfs" ino=5434 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 36.066093][ T3883] pimreg: entered allmulticast mode [ 36.110935][ T3883] pimreg: left allmulticast mode [ 36.122589][ T29] audit: type=1400 audit(1750250518.473:405): avc: denied { write } for pid=3880 comm="syz.1.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 36.229766][ T29] audit: type=1400 audit(1750250518.573:406): avc: denied { module_load } for pid=3895 comm="syz.0.136" path="/39/bus" dev="tmpfs" ino=232 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 36.278210][ T3896] Invalid ELF header magic: != ELF [ 36.390729][ T3908] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 36.429705][ T29] audit: type=1400 audit(1750250518.773:407): avc: denied { create } for pid=3915 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.471382][ T3921] netlink: 'syz.0.143': attribute type 7 has an invalid length. [ 36.472551][ T29] audit: type=1400 audit(1750250518.803:408): avc: denied { bind } for pid=3915 comm="syz.2.142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.498264][ T29] audit: type=1400 audit(1750250518.803:409): avc: denied { ioctl } for pid=3915 comm="syz.2.142" path="socket:[5089]" dev="sockfs" ino=5089 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 36.527056][ T3924] netlink: 'syz.1.144': attribute type 10 has an invalid length. [ 36.536932][ T3924] dummy0: entered promiscuous mode [ 36.760751][ T29] audit: type=1400 audit(1750250519.093:410): avc: denied { accept } for pid=3990 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.780307][ T29] audit: type=1400 audit(1750250519.093:411): avc: denied { read } for pid=3990 comm="syz.4.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.858062][ T4007] Zero length message leads to an empty skb [ 36.894495][ T29] audit: type=1400 audit(1750250519.243:412): avc: denied { ioctl } for pid=4009 comm="syz.4.158" path="socket:[5110]" dev="sockfs" ino=5110 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 36.944496][ T29] audit: type=1400 audit(1750250519.283:413): avc: denied { setopt } for pid=4015 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.866868][ T4042] loop3: detected capacity change from 0 to 8192 [ 38.005380][ T4048] loop1: detected capacity change from 0 to 512 [ 38.040636][ T4048] ext4: Unknown parameter 'permit_directio' [ 38.062662][ T4048] loop1: detected capacity change from 0 to 512 [ 38.081784][ T4048] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.123533][ T4048] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 38.152650][ T4048] System zones: 0-2, 18-18, 34-34 [ 38.171073][ T4048] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.216121][ T4048] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.283650][ T4060] all: renamed from lo (while UP) [ 38.312228][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.364876][ T4066] loop1: detected capacity change from 0 to 2048 [ 38.372439][ T4065] netlink: 'syz.3.180': attribute type 13 has an invalid length. [ 38.387128][ T4054] sch_fq: defrate 2048 ignored. [ 38.432958][ T4065] gretap0: refused to change device tx_queue_len [ 38.439325][ T4065] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 38.489071][ T4073] netlink: 'syz.4.184': attribute type 3 has an invalid length. [ 38.530522][ T4066] loop1: p1 < > p4 [ 38.550937][ T4066] loop1: p4 size 8388608 extends beyond EOD, truncated [ 38.570336][ T4077] IPv4: Oversized IP packet from 127.202.26.0 [ 38.731669][ T4087] SELinux: failed to load policy [ 38.744935][ T4093] pimreg: entered allmulticast mode [ 38.776064][ T4093] pimreg: left allmulticast mode [ 38.809913][ T4100] __nla_validate_parse: 4 callbacks suppressed [ 38.809927][ T4100] netlink: 24 bytes leftover after parsing attributes in process `syz.1.196'. [ 39.096901][ T4112] loop3: detected capacity change from 0 to 1024 [ 39.138198][ T4112] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 39.157327][ T4131] netlink: 12 bytes leftover after parsing attributes in process `syz.4.211'. [ 39.169195][ T4131] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.177949][ T4131] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.186806][ T4131] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.195509][ T4131] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 39.207149][ T4112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.202'. [ 39.217028][ T4126] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 39.271740][ T4131] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.280856][ T4131] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.290017][ T4131] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.298948][ T4131] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 39.350896][ T4146] loop2: detected capacity change from 0 to 128 [ 39.383543][ T4146] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.391482][ T4146] FAT-fs (loop2): Filesystem has been set read-only [ 39.398968][ T4146] syz.2.215: attempt to access beyond end of device [ 39.398968][ T4146] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 39.417876][ T4146] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.425757][ T4146] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 39.439234][ T4146] syz.2.215: attempt to access beyond end of device [ 39.439234][ T4146] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.468093][ T4146] syz.2.215: attempt to access beyond end of device [ 39.468093][ T4146] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.685882][ T4168] syz_tun: entered allmulticast mode [ 39.692812][ T4167] syz_tun: left allmulticast mode [ 39.709150][ T4170] bridge: RTM_NEWNEIGH with invalid ether address [ 39.732141][ T4166] tipc: Started in network mode [ 39.737114][ T4166] tipc: Node identity ac14140f, cluster identity 4711 [ 39.744923][ T4166] tipc: New replicast peer: 255.255.255.255 [ 39.751045][ T4166] tipc: Enabled bearer , priority 10 [ 39.757239][ T4174] netlink: 'syz.4.226': attribute type 10 has an invalid length. [ 39.765111][ T4174] netlink: 32 bytes leftover after parsing attributes in process `syz.4.226'. [ 39.818692][ T4186] loop4: detected capacity change from 0 to 1024 [ 39.828840][ T4186] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 39.856060][ T4186] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 39.873434][ T4186] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 39.882911][ T4186] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 2: comm syz.4.230: lblock 2 mapped to illegal pblock 2 (length 1) [ 39.897005][ T4186] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 48: comm syz.4.230: lblock 0 mapped to illegal pblock 48 (length 1) [ 39.912778][ T4186] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.230: Failed to acquire dquot type 0 [ 39.926233][ T4186] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 39.944816][ T4186] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.230: mark_inode_dirty error [ 39.957107][ T4186] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 39.967400][ T4186] EXT4-fs (loop4): 1 orphan inode deleted [ 39.974190][ T4186] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.986985][ T3965] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 40.032277][ T3965] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:12: Failed to release dquot type 0 [ 40.055353][ T4186] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.070297][ T4186] EXT4-fs error (device loop4): __ext4_get_inode_loc:4792: comm syz.4.230: Invalid inode table block 1 in block_group 0 [ 40.086905][ T4186] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 40.096906][ T4186] EXT4-fs error (device loop4): ext4_quota_off:7217: inode #3: comm syz.4.230: mark_inode_dirty error [ 40.176034][ T4217] process 'syz.0.242' launched './file1' with NULL argv: empty string added [ 40.194942][ T4186] loop4: detected capacity change from 0 to 1764 [ 40.401738][ T4233] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4233 comm=syz.0.248 [ 40.773680][ T4240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 40.804050][ T4238] loop4: detected capacity change from 0 to 8192 [ 40.830130][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 40.830145][ T29] audit: type=1326 audit(1750250523.173:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a632e929 code=0x7ffc0000 [ 40.870321][ T1034] tipc: Node number set to 2886997007 [ 40.896127][ T29] audit: type=1326 audit(1750250523.223:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f27a632e929 code=0x7ffc0000 [ 40.919557][ T29] audit: type=1326 audit(1750250523.223:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a632e929 code=0x7ffc0000 [ 40.942926][ T29] audit: type=1326 audit(1750250523.223:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a632e929 code=0x7ffc0000 [ 40.966215][ T29] audit: type=1326 audit(1750250523.223:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f27a632e929 code=0x7ffc0000 [ 40.989468][ T29] audit: type=1326 audit(1750250523.223:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.4.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a632e929 code=0x7ffc0000 [ 41.012822][ T29] audit: type=1400 audit(1750250523.233:555): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 41.124442][ T29] audit: type=1400 audit(1750250523.473:556): avc: denied { relabelfrom } for pid=4251 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.144235][ T29] audit: type=1400 audit(1750250523.473:557): avc: denied { relabelto } for pid=4251 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.287857][ T29] audit: type=1326 audit(1750250523.633:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4269 comm="syz.4.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f27a632e929 code=0x7ffc0000 [ 41.324551][ T4270] loop4: detected capacity change from 0 to 512 [ 41.361397][ T4270] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 41.390180][ T4270] EXT4-fs (loop4): mount failed [ 41.841268][ T4304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 41.873912][ T4304] 8021q: adding VLAN 0 to HW filter on device team1 [ 41.928530][ T4312] netlink: 24 bytes leftover after parsing attributes in process `syz.3.280'. [ 41.977413][ T4319] loop3: detected capacity change from 0 to 1024 [ 41.984367][ T4319] EXT4-fs: Ignoring removed orlov option [ 42.005097][ T4319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.032543][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.049902][ T4328] loop3: detected capacity change from 0 to 128 [ 42.070579][ T4328] syz.3.286: attempt to access beyond end of device [ 42.070579][ T4328] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 42.084035][ T4328] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 43.123728][ T4379] pim6reg1: entered promiscuous mode [ 43.129097][ T4379] pim6reg1: entered allmulticast mode [ 43.141111][ T4381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.306'. [ 43.150693][ T4381] netlink: 12 bytes leftover after parsing attributes in process `syz.2.306'. [ 43.314345][ T4396] netlink: 24 bytes leftover after parsing attributes in process `syz.4.315'. [ 43.359643][ T4396] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 43.401905][ T4409] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4409 comm=syz.2.320 [ 43.541036][ T4426] veth0: entered promiscuous mode [ 43.682416][ T4440] sch_tbf: burst 88 is lower than device veth1 mtu (1514) ! [ 44.241426][ T4499] loop4: detected capacity change from 0 to 512 [ 44.262145][ T4507] __nla_validate_parse: 6 callbacks suppressed [ 44.262163][ T4507] netlink: 24 bytes leftover after parsing attributes in process `syz.3.347'. [ 44.298087][ T4507] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 44.306815][ T4499] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.319450][ T4499] ext4 filesystem being mounted at /75/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.453091][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.732229][ T4579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.349'. [ 44.751023][ T4585] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.791254][ T4579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.349'. [ 44.827150][ T4585] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.867638][ T4599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 44.879174][ T4599] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 44.942511][ T4602] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'. [ 44.943416][ T4585] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.002949][ T4603] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 45.015087][ T4585] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.068196][ T4585] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.076901][ T4609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.373'. [ 45.093723][ T4606] loop2: detected capacity change from 0 to 512 [ 45.103247][ T4585] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.114866][ T4585] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.151945][ T4585] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.170812][ T4606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.186229][ T4606] ext4 filesystem being mounted at /76/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.412825][ T4657] Driver unsupported XDP return value 0 on prog (id 294) dev N/A, expect packet loss! [ 45.510342][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.828953][ T4669] capability: warning: `syz.0.386' uses 32-bit capabilities (legacy support in use) [ 45.856918][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 45.856931][ T29] audit: type=1326 audit(1750250528.203:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33cf2e929 code=0x7ffc0000 [ 45.956368][ T29] audit: type=1326 audit(1750250528.243:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff33cf2e929 code=0x7ffc0000 [ 45.996733][ T4701] loop2: detected capacity change from 0 to 2048 [ 46.037560][ T29] audit: type=1326 audit(1750250528.383:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d1b3e929 code=0x7ffc0000 [ 46.061237][ T29] audit: type=1326 audit(1750250528.383:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fa2d1b3e929 code=0x7ffc0000 [ 46.084626][ T29] audit: type=1326 audit(1750250528.383:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d1b3e929 code=0x7ffc0000 [ 46.107901][ T29] audit: type=1326 audit(1750250528.383:722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fa2d1b3e929 code=0x7ffc0000 [ 46.131294][ T29] audit: type=1326 audit(1750250528.383:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2d1b3e929 code=0x7ffc0000 [ 46.154517][ T29] audit: type=1326 audit(1750250528.383:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.384" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa2d1b3e929 code=0x7ffc0000 [ 46.177830][ T29] audit: type=1326 audit(1750250528.383:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4703 comm="syz.1.384" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa2d1b3e929 code=0x0 [ 46.183523][ T4711] syz.4.388 uses obsolete (PF_INET,SOCK_PACKET) [ 46.220906][ T4701] loop2: p1 < > p4 [ 46.225440][ T4701] loop2: p4 size 8388608 extends beyond EOD, truncated [ 46.244484][ T29] audit: type=1400 audit(1750250528.593:726): avc: denied { ioctl } for pid=4710 comm="syz.4.388" path="socket:[7016]" dev="sockfs" ino=7016 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.923520][ T4744] loop2: detected capacity change from 0 to 1024 [ 46.940388][ T4744] EXT4-fs: Ignoring removed nobh option [ 46.945992][ T4744] EXT4-fs: Ignoring removed bh option [ 46.962305][ T4744] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.991423][ T4749] bridge_slave_0: left allmulticast mode [ 46.997105][ T4749] bridge_slave_0: left promiscuous mode [ 47.003244][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.025136][ T4744] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4113: comm syz.2.399: Allocating blocks 497-513 which overlap fs metadata [ 47.063017][ T4749] bridge_slave_1: left allmulticast mode [ 47.068696][ T4749] bridge_slave_1: left promiscuous mode [ 47.074461][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.098228][ T4750] EXT4-fs (loop2): pa ffff888106a9b000: logic 16, phys. 321, len 12 [ 47.106311][ T4750] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 47.123063][ T4749] bond0: (slave bond_slave_0): Releasing backup interface [ 47.142779][ T4749] bond0: (slave bond_slave_1): Releasing backup interface [ 47.143462][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.166115][ T4749] team0: Port device team_slave_0 removed [ 47.178083][ T4749] team0: Port device team_slave_1 removed [ 47.185240][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.192922][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.202349][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.209831][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.323591][ T4761] loop1: detected capacity change from 0 to 512 [ 47.367631][ T4761] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.380901][ T4754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.399259][ T4754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.415613][ T4761] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.666906][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.736913][ T4806] capability: warning: `syz.1.411' uses deprecated v2 capabilities in a way that may be insecure [ 48.054760][ T4846] loop3: detected capacity change from 0 to 1024 [ 48.061800][ T4846] EXT4-fs: Ignoring removed orlov option [ 48.075638][ T4846] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.311488][ T4860] loop1: detected capacity change from 0 to 512 [ 48.329249][ T4869] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.345327][ T4867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.423'. [ 48.362754][ T4860] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.382305][ T4860] ext4 filesystem being mounted at /77/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.394742][ T4869] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.577792][ T4869] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.703076][ T4869] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.745307][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.428'. [ 48.768229][ T4869] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.788877][ T4869] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.805558][ T4869] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.840480][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.867890][ T4869] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.107657][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.293857][ T4914] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 49.344388][ T4919] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 49.405889][ T4914] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.457782][ T4919] bond1 (unregistering): Released all slaves [ 49.653033][ T4939] loop9: detected capacity change from 0 to 7 [ 49.659462][ T4939] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.667740][ T4939] Buffer I/O error on dev loop9, logical block 0, async page read [ 49.675661][ T4939] loop9: unable to read partition table [ 49.682368][ T4939] loop_reread_partitions: partition scan of loop9 (被ڬdƤݡ [ 49.682368][ T4939] U) failed (rc=-5) [ 49.899571][ T4958] loop2: detected capacity change from 0 to 512 [ 49.933012][ T4964] loop4: detected capacity change from 0 to 1024 [ 49.941826][ T4964] EXT4-fs: Ignoring removed orlov option [ 49.943304][ T4958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.961072][ T4958] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.972243][ T4964] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.045676][ T4964] ================================================================== [ 50.053792][ T4964] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 50.062052][ T4964] [ 50.064378][ T4964] write to 0xffff888106b7f168 of 4 bytes by task 4971 on cpu 1: [ 50.072031][ T4964] writeback_single_inode+0x14a/0x3e0 [ 50.077423][ T4964] sync_inode_metadata+0x5b/0x90 [ 50.082372][ T4964] generic_buffers_fsync_noflush+0xd9/0x120 [ 50.088273][ T4964] ext4_sync_file+0x1ab/0x690 [ 50.092953][ T4964] vfs_fsync_range+0x10d/0x130 [ 50.097711][ T4964] ext4_buffered_write_iter+0x34f/0x3c0 [ 50.103250][ T4964] ext4_file_write_iter+0x383/0xf00 [ 50.108439][ T4964] iter_file_splice_write+0x5f2/0x970 [ 50.113808][ T4964] direct_splice_actor+0x156/0x2a0 [ 50.118915][ T4964] splice_direct_to_actor+0x312/0x680 [ 50.124282][ T4964] do_splice_direct+0xda/0x150 [ 50.129042][ T4964] do_sendfile+0x380/0x650 [ 50.133449][ T4964] __x64_sys_sendfile64+0x105/0x150 [ 50.138639][ T4964] x64_sys_call+0xb39/0x2fb0 [ 50.143220][ T4964] do_syscall_64+0xd2/0x200 [ 50.147711][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.153595][ T4964] [ 50.155904][ T4964] read to 0xffff888106b7f168 of 4 bytes by task 4964 on cpu 0: [ 50.163444][ T4964] __mark_inode_dirty+0x18e/0x760 [ 50.168471][ T4964] ext4_write_inline_data_end+0x3e5/0x5f0 [ 50.174195][ T4964] ext4_write_end+0x4cd/0x730 [ 50.178873][ T4964] generic_perform_write+0x312/0x490 [ 50.184149][ T4964] ext4_buffered_write_iter+0x1ee/0x3c0 [ 50.189687][ T4964] ext4_file_write_iter+0x383/0xf00 [ 50.194879][ T4964] iter_file_splice_write+0x5f2/0x970 [ 50.200246][ T4964] direct_splice_actor+0x156/0x2a0 [ 50.205352][ T4964] splice_direct_to_actor+0x312/0x680 [ 50.210717][ T4964] do_splice_direct+0xda/0x150 [ 50.215475][ T4964] do_sendfile+0x380/0x650 [ 50.219885][ T4964] __x64_sys_sendfile64+0x105/0x150 [ 50.225072][ T4964] x64_sys_call+0xb39/0x2fb0 [ 50.229652][ T4964] do_syscall_64+0xd2/0x200 [ 50.234144][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.240026][ T4964] [ 50.242337][ T4964] value changed: 0x00000038 -> 0x00000002 [ 50.248035][ T4964] [ 50.250341][ T4964] Reported by Kernel Concurrency Sanitizer on: [ 50.256486][ T4964] CPU: 0 UID: 0 PID: 4964 Comm: syz.4.443 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 50.268802][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.278846][ T4964] ================================================================== [ 50.355669][ T3313] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.476980][ T4964] ================================================================== [ 50.485102][ T4964] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 50.493109][ T4964] [ 50.495451][ T4964] write to 0xffff888106b7f254 of 4 bytes by task 4971 on cpu 1: [ 50.503079][ T4964] xas_set_mark+0x12b/0x140 [ 50.507595][ T4964] tag_pages_for_writeback+0xc2/0x290 [ 50.512972][ T4964] ext4_do_writepages+0x697/0x21c0 [ 50.518084][ T4964] ext4_writepages+0x176/0x300 [ 50.522862][ T4964] do_writepages+0x1c6/0x310 [ 50.527454][ T4964] file_write_and_wait_range+0x156/0x2c0 [ 50.533095][ T4964] generic_buffers_fsync_noflush+0x45/0x120 [ 50.539010][ T4964] ext4_sync_file+0x1ab/0x690 [ 50.543701][ T4964] vfs_fsync_range+0x10d/0x130 [ 50.548470][ T4964] ext4_buffered_write_iter+0x34f/0x3c0 [ 50.554023][ T4964] ext4_file_write_iter+0x383/0xf00 [ 50.559226][ T4964] iter_file_splice_write+0x5f2/0x970 [ 50.564619][ T4964] direct_splice_actor+0x156/0x2a0 [ 50.569743][ T4964] splice_direct_to_actor+0x312/0x680 [ 50.575132][ T4964] do_splice_direct+0xda/0x150 [ 50.579915][ T4964] do_sendfile+0x380/0x650 [ 50.584345][ T4964] __x64_sys_sendfile64+0x105/0x150 [ 50.589550][ T4964] x64_sys_call+0xb39/0x2fb0 [ 50.594147][ T4964] do_syscall_64+0xd2/0x200 [ 50.598655][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.604558][ T4964] [ 50.606887][ T4964] read to 0xffff888106b7f254 of 4 bytes by task 4964 on cpu 0: [ 50.614528][ T4964] file_write_and_wait_range+0x10e/0x2c0 [ 50.620185][ T4964] generic_buffers_fsync_noflush+0x45/0x120 [ 50.626086][ T4964] ext4_sync_file+0x1ab/0x690 [ 50.630768][ T4964] vfs_fsync_range+0x10d/0x130 [ 50.635534][ T4964] ext4_buffered_write_iter+0x34f/0x3c0 [ 50.641094][ T4964] ext4_file_write_iter+0x383/0xf00 [ 50.646301][ T4964] iter_file_splice_write+0x5f2/0x970 [ 50.651685][ T4964] direct_splice_actor+0x156/0x2a0 [ 50.656807][ T4964] splice_direct_to_actor+0x312/0x680 [ 50.662198][ T4964] do_splice_direct+0xda/0x150 [ 50.666966][ T4964] do_sendfile+0x380/0x650 [ 50.671388][ T4964] __x64_sys_sendfile64+0x105/0x150 [ 50.676599][ T4964] x64_sys_call+0xb39/0x2fb0 [ 50.681198][ T4964] do_syscall_64+0xd2/0x200 [ 50.685709][ T4964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.691609][ T4964] [ 50.693932][ T4964] value changed: 0x02000021 -> 0x04000021 [ 50.699651][ T4964] [ 50.701966][ T4964] Reported by Kernel Concurrency Sanitizer on: [ 50.708108][ T4964] CPU: 0 UID: 0 PID: 4964 Comm: syz.4.443 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(voluntary) [ 50.720536][ T4964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.730609][ T4964] ================================================================== [ 50.853574][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.