last executing test programs: 2.700880522s ago: executing program 3 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="3f7e000013000000140012800900010076657468000000000400028008001f0007"], 0x3c}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x2c, &(0x7f0000000100), 0x4) setsockopt$sock_attach_bpf(r2, 0x1, 0x1b, &(0x7f0000000800), 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x0) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x7fffffff, 0x3}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @remote}, @private2}}}}}}, 0x0) 2.639445087s ago: executing program 3 (id=210): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev, 'veth1_to_batadv\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b46, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'macvtap0\x00'}}, 0x1e) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdc6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x80940, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) r4 = dup(r3) ioctl$PPPIOCCONNECT(r4, 0x40047435, &(0x7f00000002c0)=0x2) 2.636214738s ago: executing program 3 (id=212): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x10, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x3, {0x41}}, 0x10, 0x0}, 0x20000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) accept4(r0, 0x0, 0x0, 0x0) 2.613418779s ago: executing program 3 (id=213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x1003, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 2.593261272s ago: executing program 3 (id=214): unshare(0x0) move_pages(0x0, 0x20000000000001ab, &(0x7f0000000000), 0x0, &(0x7f0000000000)=[0x0], 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) r1 = syz_open_pts(r0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x98}}, 0x0) r3 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) shmat(0x0, &(0x7f0000233000/0x2000)=nil, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 2.503413409s ago: executing program 0 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1", 0x8c}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3ef304ed0ffedd061941d9d022b25a4b9632856295fee3", 0xf1}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)="63c3b174ab06077f6ee67ac1310d86586b13d2c9e203a9da866b81e20e9fe5c43219396d489c1459ce9cd14fa3b43a0b9b6004118a35444790d70af5c873561aad55af7f9f8551103f694e2a22346ca675898ce02a665ecc07", 0x59}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000040)='a', 0x1}, {&(0x7f00000001c0)="6d5edb4b883e266ba8c38aa9d13a78431c9d2cb6d8f4e1e80bb8a936aa105f46c914c46487522bc58054c4b0a523eeda0c76b595b36a515b6d30e34705733bb34bda2f89e92b2a98d2edbcffad9c5ccde0d723423cf07e4ffdbd568d3e263fb3b4086af3f2db1933785e59538bfd61f138ffac9e", 0x74}, {&(0x7f00000002c0)="07030357fa3f85cd282cb9ab7e0a6d90d11f30e1bc20889d43e59a72354107b7849bc3c72e1485cca17aa5f4264f117b820688c6e25503bb54b2f6557d8b906aa997860941de528c25ca5ec78456babac034dc8cd2c4a4f078a8224b7ea2897a7f", 0x61}, {&(0x7f00000006c0)="3b645eb24aa5ebc806eab3faa6f18d93b255723549f425b3601f3c", 0x1b}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r2, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 2.456331743s ago: executing program 0 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @dev, @val={@val={0x8100}}, {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "ec7ab49f42266b558197758939c3a67064eb2413deb6d588b153902f5348321b2aa24fcea6549a091e651e6c1d3053eef4b8f189054244df8c1353433e834d4c"}}}}, 0x0) 2.435381195s ago: executing program 0 (id=218): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_open_dev$evdev(0x0, 0x10000100, 0x540) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000380)={r1, 0x0, 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000080)={0x2, {0x2, 0x200, 0x0, 0x0, 0x101}}) 2.394929209s ago: executing program 0 (id=219): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000000)) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TIOCSTI(r0, 0x5412, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000040)={0xfffffff7, 0x0, 0x0, 0xf7d, 0x0, "01040077b052072e53ebf9e0460800"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x53) 2.174012508s ago: executing program 2 (id=222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='jbd2_handle_stats\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x80000) 2.138437211s ago: executing program 2 (id=223): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f00000008c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 1.972944746s ago: executing program 2 (id=224): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) fstat(0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x4}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.855208806s ago: executing program 2 (id=225): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, 0x0, 0x4000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r3) setitimer(0x2, 0x0, 0x0) 1.80684512s ago: executing program 2 (id=227): socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002180)={0x2, 0x400000000000003, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6}, @sadb_sa={0x2}, @sadb_address={0x5, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0x90}}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="000000000000000000d50d000000006203000601e1dd661b58df28331e"], 0x54}}, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000000)="1e8292", 0xfff6}], 0x2) 1.710115939s ago: executing program 2 (id=230): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x60, 0x70, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x40}, {0xd, 0x24, 0xf, 0x1, 0x7, 0xa5f, 0x928, 0xb4}, {0x6, 0x24, 0x1a, 0x98, 0x44}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x8, 0x2, 0x48}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x9, 0x7, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x1}}}}}}}]}}, 0x0) ptrace(0x10, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x4204, r4, 0x201, &(0x7f0000000000)) 1.466740811s ago: executing program 0 (id=233): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x128, 0x17, 0x0, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x0, 0x0, 0x10001}}, 0x128}}, 0x4001) writev(0xffffffffffffffff, &(0x7f0000000780)=[{&(0x7f0000000340)="926c242c391961a74a4626bed1b678801a4f54a272558f396d554863d5a949304f37326d148810e5a7512673db03638176e60294570d475dde", 0x39}], 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 1.256415969s ago: executing program 1 (id=238): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000186000e900000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800b76551c8000000000000000000009500000000000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r1}, 0x10) open(&(0x7f0000000100)='./bus\x00', 0x1c3142, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r2 = mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxselin\x05x\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc088cf2, 0x14c, &(0x7f0000000300)={0x0, 0x1, 0x7, 0x10}) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r2, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) 1.223705492s ago: executing program 1 (id=239): socket(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.198511164s ago: executing program 1 (id=240): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201) newfstatat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r1, 0x0, 0x0) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303120008ff6000000002000020d3"]) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) timer_create(0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x3a00, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}, @IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x400000}]}}}]}, 0x44}}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 1.036982258s ago: executing program 4 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0x40086610, &(0x7f0000000180)={@id={0x2, 0x0, @b}}) pread64(r4, &(0x7f00000002c0)=""/68, 0x44, 0x8) 961.104905ms ago: executing program 4 (id=244): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001940)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0xffff}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff}) read(r5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) flock(r4, 0xa) 921.473059ms ago: executing program 4 (id=245): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mlockall(0x3) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000180018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="15b26f226e2966667482d50703b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5dffd691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6be", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="c9", 0x1}], 0x300}}], 0x3, 0x240080e4) 608.854756ms ago: executing program 0 (id=246): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x0, 0xa, 0xfffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4004) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 344.09736ms ago: executing program 1 (id=247): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0x6, &(0x7f00000001c0)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @ringbuf_query], &(0x7f0000000200)='syzkaller\x00', 0x7fffffff, 0x0, 0x0, 0x40f00, 0x66, '\x00', 0x0, 0x1c, r3, 0x8, &(0x7f00000002c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xa, 0xfff, 0xffff}, 0x10, 0x127af, 0xffffffffffffffff, 0x2, &(0x7f0000000ac0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x4, 0x1, 0x1, 0x8}, {0x2, 0x5, 0x3}], 0x10, 0x2, @void, @value}, 0x90) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 195.392113ms ago: executing program 3 (id=248): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) unshare(0x42000000) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x0, 0x0, @empty}, {0xa, 0x4e24, 0x3, @mcast1, 0x3}, 0x3, {[0x459, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6]}}, 0x5c) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) 183.703204ms ago: executing program 4 (id=249): syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x1, 0x40, 0x0, 0x1}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff35) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) chmod(0x0, 0x75) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 154.579226ms ago: executing program 4 (id=250): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000208060001080006040002aaaaaaaaaa00f5b75eb8725f79d8aa00ac"], 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 112.53753ms ago: executing program 4 (id=251): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r3], 0xc3ec}}, 0x8080) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) chdir(0x0) close_range(r4, 0xffffffffffffffff, 0x0) 38.377976ms ago: executing program 1 (id=252): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r3, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) write$binfmt_misc(r3, 0x0, 0x0) 0s ago: executing program 1 (id=253): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000001c0)={[{@grpid}, {@auto_da_alloc}, {@minixdf}, {@noinit_itable}, {@init_itable}]}, 0xff, 0x52e, &(0x7f0000000640)="$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") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 22.360405][ T29] audit: type=1400 audit(1726186030.035:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 24.264513][ T29] audit: type=1400 audit(1726186031.955:82): avc: denied { mounton } for pid=3201 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.265826][ T3201] cgroup: Unknown subsys name 'net' [ 24.287265][ T29] audit: type=1400 audit(1726186031.955:83): avc: denied { mount } for pid=3201 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.314651][ T29] audit: type=1400 audit(1726186031.985:84): avc: denied { unmount } for pid=3201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.512322][ T3201] cgroup: Unknown subsys name 'rlimit' [ 24.606675][ T29] audit: type=1400 audit(1726186032.295:85): avc: denied { setattr } for pid=3201 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.630018][ T29] audit: type=1400 audit(1726186032.295:86): avc: denied { create } for pid=3201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.650569][ T29] audit: type=1400 audit(1726186032.295:87): avc: denied { write } for pid=3201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.668364][ T3250] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.670998][ T29] audit: type=1400 audit(1726186032.295:88): avc: denied { read } for pid=3201 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.699818][ T29] audit: type=1400 audit(1726186032.295:89): avc: denied { mounton } for pid=3201 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.712875][ T3201] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.724604][ T29] audit: type=1400 audit(1726186032.295:90): avc: denied { mount } for pid=3201 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.898136][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 25.911816][ T3258] chnl_net:caif_netlink_parms(): no params data found [ 25.960394][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 26.000470][ T3258] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.007554][ T3258] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.014892][ T3258] bridge_slave_0: entered allmulticast mode [ 26.021286][ T3258] bridge_slave_0: entered promiscuous mode [ 26.033326][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.040434][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.047619][ T3259] bridge_slave_0: entered allmulticast mode [ 26.054447][ T3259] bridge_slave_0: entered promiscuous mode [ 26.063042][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.070169][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.077454][ T3259] bridge_slave_1: entered allmulticast mode [ 26.083816][ T3259] bridge_slave_1: entered promiscuous mode [ 26.098273][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.105479][ T3258] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.112662][ T3258] bridge_slave_1: entered allmulticast mode [ 26.118876][ T3258] bridge_slave_1: entered promiscuous mode [ 26.125189][ T3257] chnl_net:caif_netlink_parms(): no params data found [ 26.160604][ T3258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.175018][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.198076][ T3258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.207239][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.214366][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.221610][ T3260] bridge_slave_0: entered allmulticast mode [ 26.227995][ T3260] bridge_slave_0: entered promiscuous mode [ 26.237807][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.262508][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.269643][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.276988][ T3260] bridge_slave_1: entered allmulticast mode [ 26.283365][ T3260] bridge_slave_1: entered promiscuous mode [ 26.300282][ T3259] team0: Port device team_slave_0 added [ 26.306549][ T3258] team0: Port device team_slave_0 added [ 26.328601][ T3259] team0: Port device team_slave_1 added [ 26.335107][ T3258] team0: Port device team_slave_1 added [ 26.343731][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.374302][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 26.383939][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.401105][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.408082][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.434121][ T3258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.449509][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.456517][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.482492][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.505866][ T3258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.512900][ T3258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.538871][ T3258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.549704][ T3257] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.556803][ T3257] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.563989][ T3257] bridge_slave_0: entered allmulticast mode [ 26.570373][ T3257] bridge_slave_0: entered promiscuous mode [ 26.576922][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.584027][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.610014][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.625799][ T3260] team0: Port device team_slave_0 added [ 26.634028][ T3257] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.641146][ T3257] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.648426][ T3257] bridge_slave_1: entered allmulticast mode [ 26.654919][ T3257] bridge_slave_1: entered promiscuous mode [ 26.670594][ T3260] team0: Port device team_slave_1 added [ 26.705541][ T3257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.717213][ T3258] hsr_slave_0: entered promiscuous mode [ 26.723375][ T3258] hsr_slave_1: entered promiscuous mode [ 26.740936][ T3257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.761335][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.768282][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.794201][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.807112][ T3259] hsr_slave_0: entered promiscuous mode [ 26.813095][ T3259] hsr_slave_1: entered promiscuous mode [ 26.818971][ T3259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 26.827184][ T3259] Cannot create hsr debugfs directory [ 26.847096][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.854198][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.861675][ T3263] bridge_slave_0: entered allmulticast mode [ 26.868040][ T3263] bridge_slave_0: entered promiscuous mode [ 26.874790][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.881838][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.907800][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.919310][ T3257] team0: Port device team_slave_0 added [ 26.925948][ T3257] team0: Port device team_slave_1 added [ 26.931661][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.938798][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.945979][ T3263] bridge_slave_1: entered allmulticast mode [ 26.952459][ T3263] bridge_slave_1: entered promiscuous mode [ 26.988848][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.017174][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.039958][ T3263] team0: Port device team_slave_0 added [ 27.046126][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.053175][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.079154][ T3257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.096656][ T3260] hsr_slave_0: entered promiscuous mode [ 27.102800][ T3260] hsr_slave_1: entered promiscuous mode [ 27.108616][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.116194][ T3260] Cannot create hsr debugfs directory [ 27.129620][ T3263] team0: Port device team_slave_1 added [ 27.135668][ T3257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.142638][ T3257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.168626][ T3257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.204451][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.211442][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.237485][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.270105][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.277115][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.303228][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.330830][ T3257] hsr_slave_0: entered promiscuous mode [ 27.336927][ T3257] hsr_slave_1: entered promiscuous mode [ 27.343115][ T3257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.350784][ T3257] Cannot create hsr debugfs directory [ 27.412340][ T3263] hsr_slave_0: entered promiscuous mode [ 27.418461][ T3263] hsr_slave_1: entered promiscuous mode [ 27.424427][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.432037][ T3263] Cannot create hsr debugfs directory [ 27.483859][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 27.483876][ T29] audit: type=1400 audit(1726186035.175:104): avc: denied { create } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.511102][ T29] audit: type=1400 audit(1726186035.205:105): avc: denied { write } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.531670][ T29] audit: type=1400 audit(1726186035.205:106): avc: denied { read } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.557459][ T3258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.571069][ T29] audit: type=1400 audit(1726186035.265:107): avc: denied { remove_name } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.579512][ T3258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.593634][ T29] audit: type=1400 audit(1726186035.265:108): avc: denied { rename } for pid=2943 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.622568][ T29] audit: type=1400 audit(1726186035.265:109): avc: denied { create } for pid=2943 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 27.647152][ T3258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.655551][ T3258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.681992][ T3259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.692098][ T3259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.702692][ T3259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.711725][ T3259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.740693][ T3257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.749841][ T3257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.758841][ T3257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.768137][ T3257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.813884][ T3260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.831818][ T3260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.840610][ T3260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.849171][ T3260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.873641][ T3263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 27.890807][ T3263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 27.904515][ T3258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.911629][ T3263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 27.920698][ T3263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 27.947663][ T3258] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.958356][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.965448][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.978108][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.995188][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.002410][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.042259][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.052293][ T3257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.076295][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.083459][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.097304][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.104497][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.116503][ T3257] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.150300][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.177690][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.184890][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.194712][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.201795][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.225654][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.245629][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.252825][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.272166][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.280438][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.287522][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.305767][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.316953][ T3258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.349655][ T3260] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.360070][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.381545][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.390734][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.397796][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.429405][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.436510][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.451577][ T3257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.489065][ T3263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.548242][ T3259] veth0_vlan: entered promiscuous mode [ 28.558692][ T3259] veth1_vlan: entered promiscuous mode [ 28.585528][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.608365][ T3259] veth0_macvtap: entered promiscuous mode [ 28.637617][ T3259] veth1_macvtap: entered promiscuous mode [ 28.661276][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.678972][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.688489][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.704897][ T3257] veth0_vlan: entered promiscuous mode [ 28.716352][ T3259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.725208][ T3259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.734086][ T3259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.742955][ T3259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.765514][ T3257] veth1_vlan: entered promiscuous mode [ 28.786934][ T3257] veth0_macvtap: entered promiscuous mode [ 28.805645][ T3257] veth1_macvtap: entered promiscuous mode [ 28.815195][ T29] audit: type=1400 audit(1726186036.505:110): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/root/syzkaller.wGenF3/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.821831][ T3260] veth0_vlan: entered promiscuous mode [ 28.839635][ T29] audit: type=1400 audit(1726186036.505:111): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.849334][ T3260] veth1_vlan: entered promiscuous mode [ 28.874991][ T3258] veth0_vlan: entered promiscuous mode [ 28.900534][ T29] audit: type=1400 audit(1726186036.505:112): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/root/syzkaller.wGenF3/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.900565][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 28.900584][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 28.925954][ T29] audit: type=1400 audit(1726186036.505:113): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.970056][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.993192][ T3258] veth1_vlan: entered promiscuous mode [ 29.004604][ T3260] veth0_macvtap: entered promiscuous mode [ 29.019735][ T3257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.030271][ T3257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.042304][ T3257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.052764][ T3260] veth1_macvtap: entered promiscuous mode [ 29.059179][ T3257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.067983][ T3257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.076771][ T3257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.085522][ T3257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.107903][ T3258] veth0_macvtap: entered promiscuous mode [ 29.124250][ T3263] veth0_vlan: entered promiscuous mode [ 29.135887][ T3258] veth1_macvtap: entered promiscuous mode [ 29.156595][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.167151][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.177065][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.187520][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.198942][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.207594][ T3263] veth1_vlan: entered promiscuous mode [ 29.216948][ T3409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 29.229808][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.240393][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.250260][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.260699][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.272145][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.279770][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.290451][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.300337][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.310808][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.320715][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.331276][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.344241][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.352878][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.363479][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.373323][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.383865][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.393746][ T3258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.404288][ T3258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.415147][ T3258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.422948][ T3409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7'. [ 29.452449][ T3260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.461264][ T3260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.469995][ T3260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.478936][ T3260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.492277][ T3258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.501159][ T3258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.509875][ T3258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518695][ T3258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.535640][ T3416] usb usb8: usbfs: process 3416 (syz.1.8) did not claim interface 0 before use [ 29.582672][ T3263] veth0_macvtap: entered promiscuous mode [ 29.591362][ T3263] veth1_macvtap: entered promiscuous mode [ 29.616334][ T3426] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 29.621520][ T3422] tc_dump_action: action bad kind [ 29.643801][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.654307][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.664253][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.674701][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.684612][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.695134][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.705006][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.715501][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.729036][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.738048][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.749142][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.759015][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.769454][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.779363][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.789961][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.799858][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.810309][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.821755][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.847645][ T3432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 29.881105][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.888525][ T3435] loop3: detected capacity change from 0 to 512 [ 29.889872][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.904993][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.912147][ T3435] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.913895][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.926774][ T3435] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.968374][ T3435] EXT4-fs (loop3): 1 truncate cleaned up [ 29.981111][ T3435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.050423][ T3260] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.082646][ T3451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16'. [ 30.141355][ T3454] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.221427][ T3464] loop3: detected capacity change from 0 to 512 [ 30.239870][ T3466] loop0: detected capacity change from 0 to 512 [ 30.240005][ T3464] EXT4-fs error (device loop3): ext4_get_journal_inode:5740: comm syz.3.20: inode #196608: comm syz.3.20: iget: illegal inode # [ 30.265632][ T3464] EXT4-fs (loop3): Remounting filesystem read-only [ 30.272270][ T3464] EXT4-fs (loop3): no journal found [ 30.277484][ T3464] EXT4-fs (loop3): can't get journal size [ 30.291695][ T3464] EXT4-fs (loop3): failed to initialize system zone (-22) [ 30.299808][ T3464] EXT4-fs (loop3): mount failed [ 30.307901][ T3466] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.309208][ T3473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 30.330593][ T3466] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 30.436883][ T3476] pim6reg1: entered promiscuous mode [ 30.442368][ T3476] pim6reg1: entered allmulticast mode [ 30.456922][ T3479] syz.2.26[3479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.456983][ T3479] syz.2.26[3479] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.519601][ T3479] netlink: 52 bytes leftover after parsing attributes in process `syz.2.26'. [ 30.539827][ T3479] unsupported nlmsg_type 40 [ 30.556725][ T3483] loop3: detected capacity change from 0 to 128 [ 30.583709][ T3479] syz.2.26 (3479) used greatest stack depth: 11024 bytes left [ 30.597234][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.597319][ T3483] syz.3.28: attempt to access beyond end of device [ 30.597319][ T3483] loop3: rw=0, sector=121, nr_sectors = 119 limit=128 [ 30.647756][ T3487] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 30.681526][ T3491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3491 comm=syz.0.32 [ 30.694904][ T3491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3491 comm=syz.0.32 [ 30.695031][ T28] kworker/u8:1: attempt to access beyond end of device [ 30.695031][ T28] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 30.711312][ T3491] loop0: detected capacity change from 0 to 512 [ 30.728490][ T3491] ======================================================= [ 30.728490][ T3491] WARNING: The mand mount option has been deprecated and [ 30.728490][ T3491] and is ignored by this kernel. Remove the mand [ 30.728490][ T3491] option from the mount to silence this warning. [ 30.728490][ T3491] ======================================================= [ 30.793857][ T3491] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.32: iget: bad extended attribute block 1 [ 30.806472][ T3491] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.32: couldn't read orphan inode 15 (err -117) [ 30.826411][ T3491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.869151][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.889383][ T3499] loop3: detected capacity change from 0 to 2048 [ 30.896420][ T3499] ext4: Unknown parameter 'fowner<00000000000000000000' [ 30.926677][ T3501] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 30.934284][ T3501] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 31.167395][ T3507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.36'. [ 31.176402][ T3507] netlink: 32 bytes leftover after parsing attributes in process `syz.0.36'. [ 31.300439][ T3515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.40'. [ 31.524494][ T3535] loop0: detected capacity change from 0 to 128 [ 31.552204][ T3529] syz.3.50 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 32.173745][ T3549] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 32.298268][ T3553] loop2: detected capacity change from 0 to 8192 [ 32.519193][ T3563] loop0: detected capacity change from 0 to 512 [ 32.546721][ T3563] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.559555][ T3563] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.639071][ T29] kauditd_printk_skb: 158 callbacks suppressed [ 32.639088][ T29] audit: type=1400 audit(1726186040.325:272): avc: denied { mount } for pid=3569 comm="syz.2.62" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.684969][ T29] audit: type=1326 audit(1726186040.375:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3564 comm="syz.3.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f524551def9 code=0x0 [ 32.728331][ T29] audit: type=1400 audit(1726186040.405:274): avc: denied { unmount } for pid=3263 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 32.781154][ T29] audit: type=1326 audit(1726186040.455:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62ff6def9 code=0x7ffc0000 [ 32.804402][ T29] audit: type=1326 audit(1726186040.455:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62ff6def9 code=0x7ffc0000 [ 32.827615][ T29] audit: type=1326 audit(1726186040.455:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff62ff6def9 code=0x7ffc0000 [ 32.850730][ T29] audit: type=1326 audit(1726186040.455:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62ff6def9 code=0x7ffc0000 [ 32.873882][ T29] audit: type=1326 audit(1726186040.455:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62ff6def9 code=0x7ffc0000 [ 32.897042][ T29] audit: type=1326 audit(1726186040.455:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff62ff6def9 code=0x7ffc0000 [ 32.920391][ T29] audit: type=1326 audit(1726186040.455:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3572 comm="syz.2.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff62ff6def9 code=0x7ffc0000 [ 32.984531][ T3576] loop2: detected capacity change from 0 to 512 [ 32.993102][ T3576] EXT4-fs (loop2): invalid journal inode [ 32.994726][ T3257] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.088104][ T3582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.67'. [ 33.353558][ T3603] loop1: detected capacity change from 0 to 2048 [ 33.413644][ T3611] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 33.482804][ T3622] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 33.558150][ T3632] loop1: detected capacity change from 0 to 512 [ 33.565553][ T3632] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 33.574722][ T3632] EXT4-fs (loop1): blocks per group (71) and clusters per group (32768) inconsistent [ 33.657514][ T3638] GPL: port 1(erspan0) entered blocking state [ 33.663733][ T3638] GPL: port 1(erspan0) entered disabled state [ 33.677083][ T3640] loop2: detected capacity change from 0 to 2048 [ 33.680236][ T3638] erspan0: entered allmulticast mode [ 33.690949][ T3638] erspan0: entered promiscuous mode [ 33.697899][ T3640] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.88: bad orphan inode 8192 [ 33.714922][ T3640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.748892][ T3640] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.782366][ T3632] tipc: Started in network mode [ 33.787264][ T3632] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 33.794579][ T3632] tipc: Enabled bearer , priority 10 [ 33.809123][ T3632] tipc: Resetting bearer [ 33.825174][ T3649] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 33.832752][ T3649] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 33.844878][ T3632] tipc: Disabling bearer [ 34.137728][ T3681] loop2: detected capacity change from 0 to 256 [ 34.271792][ T3696] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 34.314822][ T3699] vlan2: entered promiscuous mode [ 34.320426][ T3699] syz_tun: entered promiscuous mode [ 34.331563][ T3699] team0: Port device vlan2 added [ 34.456596][ T3710] loop3: detected capacity change from 0 to 512 [ 34.465657][ T3710] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.534213][ T3719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.121'. [ 34.564168][ T3719] hsr_slave_1 (unregistering): left promiscuous mode [ 34.942242][ T3732] serio: Serial port ptm0 [ 34.979406][ T1324] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.037211][ T1324] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.115735][ T1324] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.165740][ T1324] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.254669][ T3735] chnl_net:caif_netlink_parms(): no params data found [ 35.307080][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.314230][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.323464][ T3735] bridge_slave_0: entered allmulticast mode [ 35.331207][ T3735] bridge_slave_0: entered promiscuous mode [ 35.356562][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.363782][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.386340][ T3735] bridge_slave_1: entered allmulticast mode [ 35.400694][ T3735] bridge_slave_1: entered promiscuous mode [ 35.456408][ T1324] bridge_slave_1: left allmulticast mode [ 35.462254][ T1324] bridge_slave_1: left promiscuous mode [ 35.468040][ T1324] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.483886][ T1324] bridge_slave_0: left allmulticast mode [ 35.489600][ T1324] bridge_slave_0: left promiscuous mode [ 35.495340][ T1324] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.609357][ T3791] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 35.619875][ T1324] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.630600][ T1324] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.641251][ T1324] bond0 (unregistering): Released all slaves [ 35.650505][ T3735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.664019][ T3735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.675706][ T3787] pim6reg1: entered promiscuous mode [ 35.681142][ T3787] pim6reg1: entered allmulticast mode [ 35.721367][ T3735] team0: Port device team_slave_0 added [ 35.728355][ T3735] team0: Port device team_slave_1 added [ 35.744362][ T3735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.751482][ T3735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.777479][ T3735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.790145][ T3735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.797164][ T3735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.823136][ T3735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.862769][ T1324] hsr_slave_0: left promiscuous mode [ 35.875547][ T1324] hsr_slave_1: left promiscuous mode [ 35.886111][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.893690][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.901423][ T1324] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.908833][ T1324] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.911078][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115ecf600: rx timeout, send abort [ 35.924174][ C0] vcan0: j1939_tp_rxtimer: 0xffff888115ecf400: rx timeout, send abort [ 35.932435][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115ecf600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 35.946765][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888115ecf400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 35.968835][ T1324] veth1_macvtap: left promiscuous mode [ 35.974387][ T1324] veth0_macvtap: left promiscuous mode [ 35.979991][ T1324] veth1_vlan: left promiscuous mode [ 35.985353][ T1324] veth0_vlan: left promiscuous mode [ 36.036091][ T3813] loop1: detected capacity change from 0 to 164 [ 36.109370][ T1324] team0 (unregistering): Port device team_slave_1 removed [ 36.120695][ T1324] team0 (unregistering): Port device team_slave_0 removed [ 36.170747][ T3815] wg2: entered promiscuous mode [ 36.175699][ T3815] wg2: entered allmulticast mode [ 36.260941][ T3735] hsr_slave_0: entered promiscuous mode [ 36.277936][ T3735] hsr_slave_1: entered promiscuous mode [ 36.302252][ T3735] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.305608][ T3834] loop4: detected capacity change from 0 to 512 [ 36.309823][ T3735] Cannot create hsr debugfs directory [ 36.337607][ T3836] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 36.354969][ T3834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.384528][ T3836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.410298][ T3834] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.415581][ T3836] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 36.469221][ T3836] syz.2.152 (3836) used greatest stack depth: 10552 bytes left [ 36.548880][ T3258] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.758403][ T3866] pim6reg1: entered promiscuous mode [ 36.763811][ T3866] pim6reg1: entered allmulticast mode [ 36.823897][ T3735] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.865091][ T3735] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.882337][ T3735] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.909426][ T3735] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.951589][ T3888] netlink: 12 bytes leftover after parsing attributes in process `syz.4.166'. [ 36.960619][ T3888] netlink: 'syz.4.166': attribute type 11 has an invalid length. [ 36.975080][ T3890] netlink: 36 bytes leftover after parsing attributes in process `syz.2.167'. [ 36.977750][ T3888] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 36.992783][ T3888] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.001555][ T3888] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.010444][ T3888] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 37.019271][ T3888] vxlan0: entered promiscuous mode [ 37.037878][ T3735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.054396][ T3735] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.066475][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.073666][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.087025][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.094160][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.112851][ T3735] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.123294][ T3735] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.219964][ T3735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.369587][ T3735] veth0_vlan: entered promiscuous mode [ 37.389334][ T3735] veth1_vlan: entered promiscuous mode [ 37.421323][ T3735] veth0_macvtap: entered promiscuous mode [ 37.436840][ T3735] veth1_macvtap: entered promiscuous mode [ 37.460266][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.470855][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.480794][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.491282][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.501148][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.511681][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.521540][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.532124][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.609734][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.622286][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.632902][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.642759][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.653263][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.663125][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.673602][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.683469][ T3735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.693956][ T3735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.705007][ T3735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.717361][ T3735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.726225][ T3735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.735161][ T3735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.743974][ T3735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.787673][ T3961] netlink: 24 bytes leftover after parsing attributes in process `syz.3.169'. [ 37.806283][ T3965] netlink: 'syz.1.170': attribute type 5 has an invalid length. [ 37.839544][ T3961] Zero length message leads to an empty skb [ 37.922300][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 37.922318][ T29] audit: type=1400 audit(1726186045.615:485): avc: denied { read } for pid=3973 comm="syz.1.175" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 37.951161][ T29] audit: type=1400 audit(1726186045.615:486): avc: denied { open } for pid=3973 comm="syz.1.175" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 38.227304][ T3987] loop0: detected capacity change from 0 to 2048 [ 38.277686][ T3987] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.305110][ T3987] netlink: 120 bytes leftover after parsing attributes in process `syz.0.180'. [ 38.321745][ T3998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.183'. [ 38.325969][ T3998] vlan2: entered promiscuous mode [ 38.326053][ T3998] syz_tun: entered promiscuous mode [ 38.328167][ T3735] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.353500][ T3998] syz_tun: left promiscuous mode [ 38.475264][ T4006] tmpfs: Unsupported parameter 'huge' [ 38.508904][ T29] audit: type=1326 audit(1726186046.195:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.548132][ T4008] loop7: detected capacity change from 0 to 16384 [ 38.548455][ T4012] loop1: detected capacity change from 0 to 1024 [ 38.562219][ T4012] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.583350][ T29] audit: type=1326 audit(1726186046.195:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.606831][ T29] audit: type=1326 audit(1726186046.195:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.609445][ T4012] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 38.630097][ T29] audit: type=1326 audit(1726186046.195:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.661707][ T29] audit: type=1326 audit(1726186046.195:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.685029][ T29] audit: type=1326 audit(1726186046.195:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.708294][ T29] audit: type=1326 audit(1726186046.195:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.731802][ T29] audit: type=1326 audit(1726186046.195:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4009 comm="syz.0.188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5203eddef9 code=0x7ffc0000 [ 38.757826][ T4012] EXT4-fs (loop1): too many log groups per flexible block group [ 38.765621][ T4012] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 38.779266][ T4012] EXT4-fs (loop1): mount failed [ 38.832075][ T4008] I/O error, dev loop7, sector 8712 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 0 [ 38.857816][ T4023] netlink: 'syz.3.192': attribute type 2 has an invalid length. [ 38.874027][ T4008] I/O error, dev loop7, sector 8712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.883583][ T4008] Buffer I/O error on dev loop7, logical block 1089, async page read [ 38.925480][ T4027] netlink: 'syz.0.193': attribute type 4 has an invalid length. [ 38.930514][ T4023] loop3: detected capacity change from 0 to 2048 [ 38.939832][ T4008] I/O error, dev loop7, sector 8712 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 38.949348][ T4008] Buffer I/O error on dev loop7, logical block 1089, async page read [ 38.980698][ T4023] loop3: p3 < > p4 < > [ 38.984891][ T4023] loop3: partition table partially beyond EOD, truncated [ 39.001343][ T4023] loop3: p3 start 4284289 is beyond EOD, truncated [ 39.014386][ T4007] I/O error, dev loop7, sector 6400 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 39.024449][ T4007] Buffer I/O error on dev loop7, logical block 800, lost async page write [ 39.033043][ T4007] Buffer I/O error on dev loop7, logical block 801, lost async page write [ 39.041638][ T4007] Buffer I/O error on dev loop7, logical block 802, lost async page write [ 39.050218][ T4007] Buffer I/O error on dev loop7, logical block 803, lost async page write [ 39.058756][ T4007] Buffer I/O error on dev loop7, logical block 804, lost async page write [ 39.067367][ T4007] Buffer I/O error on dev loop7, logical block 805, lost async page write [ 39.075929][ T4007] Buffer I/O error on dev loop7, logical block 806, lost async page write [ 39.084494][ T4007] Buffer I/O error on dev loop7, logical block 807, lost async page write [ 39.102123][ T4029] loop0: detected capacity change from 0 to 128 [ 39.115211][ T4007] I/O error, dev loop7, sector 7424 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 39.116851][ T4029] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 39.127075][ T4007] I/O error, dev loop7, sector 8448 op 0x1:(WRITE) flags 0x800 phys_seg 33 prio class 0 [ 39.134646][ T2961] loop3: p3 < > p4 < > [ 39.148236][ T2961] loop3: partition table partially beyond EOD, truncated [ 39.170361][ T2961] loop3: p3 start 4284289 is beyond EOD, truncated [ 39.173634][ T4029] syz.0.195: attempt to access beyond end of device [ 39.173634][ T4029] loop0: rw=3, sector=6950, nr_sectors = 2 limit=128 [ 39.190566][ T4029] syz.0.195: attempt to access beyond end of device [ 39.190566][ T4029] loop0: rw=2051, sector=6952, nr_sectors = 942 limit=128 [ 39.228933][ T3765] udevd[3765]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.280394][ T3765] udevd[3765]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 39.334767][ T4041] syzkaller0: entered promiscuous mode [ 39.340321][ T4041] syzkaller0: entered allmulticast mode [ 39.413059][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.0.203'. [ 39.545439][ T4053] loop3: detected capacity change from 0 to 512 [ 39.553557][ T4053] EXT4-fs (loop3): blocks per group (71) and clusters per group (20800) inconsistent [ 39.938066][ T4093] loop1: detected capacity change from 0 to 1024 [ 39.962793][ T4093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.152334][ T4101] serio: Serial port ptm1 [ 40.334140][ T4093] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 40.360228][ T4093] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 40.372626][ T4093] EXT4-fs (loop1): This should not happen!! Data will be lost [ 40.372626][ T4093] [ 40.382358][ T4093] EXT4-fs (loop1): Total free blocks count 0 [ 40.388370][ T4093] EXT4-fs (loop1): Free/Dirty block details [ 40.394367][ T4093] EXT4-fs (loop1): free_blocks=68451041280 [ 40.400208][ T4093] EXT4-fs (loop1): dirty_blocks=16 [ 40.405322][ T4093] EXT4-fs (loop1): Block reservation details [ 40.411391][ T4093] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 40.554776][ T4093] syz.1.221 (4093) used greatest stack depth: 9352 bytes left [ 40.604607][ T3259] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.617573][ T4118] syzkaller0: entered promiscuous mode [ 40.623196][ T4118] syzkaller0: entered allmulticast mode [ 40.702391][ T4122] loop1: detected capacity change from 0 to 128 [ 40.731216][ T4122] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.791574][ T4122] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 40.843114][ T4127] syzkaller0: entered promiscuous mode [ 40.848636][ T4127] syzkaller0: entered allmulticast mode [ 40.917924][ T3259] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.090596][ T4142] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 41.143405][ T4146] netlink: 'syz.4.242': attribute type 10 has an invalid length. [ 41.172210][ T4146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.185602][ T4146] team0: Port device batadv0 added [ 41.247132][ T4149] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 41.254722][ T4149] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 41.323759][ T4152] netlink: 24 bytes leftover after parsing attributes in process `syz.4.244'. [ 41.737606][ T4158] tipc: Started in network mode [ 41.742590][ T4158] tipc: Node identity ac1414aa, cluster identity 4711 [ 41.768572][ T4158] tipc: Enabled bearer , priority 10 [ 41.971593][ C0] hrtimer: interrupt took 97098 ns [ 42.279598][ T4170] pim6reg: entered allmulticast mode [ 42.294381][ T4157] ================================================================== [ 42.302491][ T4157] BUG: KCSAN: data-race in mem_cgroup_iter / mem_cgroup_iter [ 42.303047][ T4170] pim6reg: left allmulticast mode [ 42.309884][ T4157] [ 42.309892][ T4157] read-write to 0xffff888115bc2e68 of 4 bytes by task 4156 on cpu 0: [ 42.325374][ T4157] mem_cgroup_iter+0x28e/0x380 [ 42.330156][ T4157] shrink_node+0x74a/0x1d40 [ 42.331095][ T4156] syz.0.246 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 42.334668][ T4157] do_try_to_free_pages+0x3c6/0xc50 [ 42.345629][ T4156] CPU: 0 UID: 0 PID: 4156 Comm: syz.0.246 Not tainted 6.11.0-rc7-syzkaller-00093-gfdf042df0463 #0 [ 42.350708][ T4157] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 42.361270][ T4156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 42.367144][ T4157] try_charge_memcg+0x2bc/0x810 [ 42.377190][ T4156] Call Trace: [ 42.382012][ T4157] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 42.382043][ T4157] __read_swap_cache_async+0x2b7/0x520 [ 42.382071][ T4157] swap_cluster_readahead+0x276/0x3f0 [ 42.385360][ T4156] [ 42.391403][ T4157] swapin_readahead+0xe4/0x760 [ 42.396871][ T4156] dump_stack_lvl+0xf2/0x150 [ 42.402221][ T4157] do_swap_page+0x3da/0x1ef0 [ 42.405149][ T4156] dump_stack+0x15/0x20 [ 42.409884][ T4157] handle_mm_fault+0x8cb/0x2a30 [ 42.414453][ T4156] dump_header+0x83/0x2d0 [ 42.419017][ T4157] exc_page_fault+0x3b9/0x650 [ 42.423159][ T4156] oom_kill_process+0x341/0x4c0 [ 42.427984][ T4157] asm_exc_page_fault+0x26/0x30 [ 42.432294][ T4156] out_of_memory+0x9af/0xbe0 [ 42.436967][ T4157] [ 42.436975][ T4157] read to 0xffff888115bc2e68 of 4 bytes by task 4157 on cpu 1: [ 42.441799][ T4156] ? __rcu_read_unlock+0x4e/0x70 [ 42.446634][ T4157] mem_cgroup_iter+0x93/0x380 [ 42.451221][ T4156] mem_cgroup_out_of_memory+0x13e/0x190 [ 42.453530][ T4157] shrink_node+0x74a/0x1d40 [ 42.461059][ T4156] try_charge_memcg+0x51b/0x810 [ 42.465973][ T4157] do_try_to_free_pages+0x3c6/0xc50 [ 42.470640][ T4156] mem_cgroup_swapin_charge_folio+0x107/0x1a0 [ 42.476158][ T4157] try_to_free_mem_cgroup_pages+0x1f3/0x4f0 [ 42.480648][ T4156] __read_swap_cache_async+0x2b7/0x520 [ 42.485478][ T4157] try_charge_memcg+0x2bc/0x810 [ 42.490665][ T4156] swap_cluster_readahead+0x276/0x3f0 [ 42.496738][ T4157] obj_cgroup_charge_pages+0xbd/0x1a0 [ 42.503249][ T4156] swapin_readahead+0xe4/0x760 [ 42.508682][ T4157] __memcg_kmem_charge_page+0x9d/0x170 [ 42.508708][ T4157] __alloc_pages_noprof+0x1bc/0x360 [ 42.508740][ T4157] __vmalloc_node_range_noprof+0x6c5/0xec0 [ 42.513564][ T4156] ? __filemap_get_folio+0x420/0x5b0 [ 42.518916][ T4157] bpf_map_area_alloc+0xd8/0x110 [ 42.524267][ T4156] ? save_fpregs_to_fpstate+0x102/0x160 [ 42.529010][ T4157] bloom_map_alloc+0x1a9/0x2a0 [ 42.534457][ T4156] ? swap_cache_get_folio+0x77/0x210 [ 42.539629][ T4157] map_create+0x83c/0xb90 [ 42.545434][ T4156] do_swap_page+0x3da/0x1ef0 [ 42.550694][ T4157] __sys_bpf+0x667/0x7a0 [ 42.555613][ T4156] ? hrtimer_start_range_ns+0x53d/0x580 [ 42.561141][ T4157] __x64_sys_bpf+0x43/0x50 [ 42.565887][ T4156] ? hrtimer_try_to_cancel+0x106/0x1d0 [ 42.571152][ T4157] x64_sys_call+0x2625/0x2d60 [ 42.575552][ T4156] ? __rcu_read_lock+0x36/0x50 [ 42.580122][ T4157] do_syscall_64+0xc9/0x1c0 [ 42.584348][ T4156] ? pte_offset_map_nolock+0x124/0x1d0 [ 42.589878][ T4157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.594277][ T4156] handle_mm_fault+0x8cb/0x2a30 [ 42.599714][ T4157] [ 42.599719][ T4157] value changed: 0x000000f3 -> 0x000000f4 [ 42.604385][ T4156] exc_page_fault+0x3b9/0x650 [ 42.609115][ T4157] [ 42.609120][ T4157] Reported by Kernel Concurrency Sanitizer on: [ 42.613602][ T4156] asm_exc_page_fault+0x26/0x30 [ 42.619037][ T4157] CPU: 1 UID: 0 PID: 4157 Comm: syz.0.246 Not tainted 6.11.0-rc7-syzkaller-00093-gfdf042df0463 #0 [ 42.624919][ T4156] RIP: 0033:0x7f5203f05820 [ 42.629743][ T4157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 42.632053][ T4156] Code: 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b c3 66 2e 0f 1f 84 00 00 00 00 00 <64> 48 8b 04 25 10 00 00 00 8b 90 08 03 00 00 48 8d b8 08 03 00 00 [ 42.637747][ T4157] ================================================================== [ 42.642400][ T4156] RSP: 002b:00007ffea4f5f3d8 EFLAGS: 00010246 [ 42.715327][ T4156] RAX: 0000000000000000 RBX: 00007f5204095f80 RCX: 00007f5203f0ffe5 [ 42.723332][ T4156] RDX: 00007ffea4f5f420 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.731302][ T4156] RBP: 00007f5204097a80 R08: 0000000000000000 R09: 7fffffffffffffff [ 42.739345][ T4156] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000a606 [ 42.747337][ T4156] R13: 00007ffea4f5f550 R14: 0000000000000032 R15: ffffffffffffffff [ 42.755317][ T4156] [ 42.759879][ T4156] memory: usage 307180kB, limit 307200kB, failcnt 175 [ 42.767578][ T4156] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 42.775529][ T4156] kmem: usage 307080kB, limit 9007199254740988kB, failcnt 0 [ 42.782854][ T4156] Memory cgroup stats for /syz0: [ 42.795130][ T4156] cache 94208 [ 42.803530][ T4156] rss 0 [ 42.806297][ T4156] shmem 0 [ 42.809315][ T4156] mapped_file 94208 [ 42.813172][ T4156] dirty 94208 [ 42.814430][ T4176] loop1: detected capacity change from 0 to 512 [ 42.816454][ T4156] writeback 0 [ 42.816464][ T4156] workingset_refault_anon 3 [ 42.816474][ T4156] workingset_refault_file 0 [ 42.835374][ T4156] swap 192512 [ 42.838746][ T4156] swapcached 8192 [ 42.840176][ T3333] tipc: Node number set to 2886997162 [ 42.842409][ T4156] pgpgin 10016 [ 42.851171][ T4156] pgpgout 9991 [ 42.854594][ T4156] pgfault 14358 [ 42.858051][ T4156] pgmajfault 4 [ 42.861601][ T4156] inactive_anon 8192 [ 42.865498][ T4156] active_anon 0 [ 42.869018][ T4156] inactive_file 94208 [ 42.873032][ T4156] active_file 0 [ 42.876501][ T4156] unevictable 0 [ 42.879963][ T4156] hierarchical_memory_limit 314572800 [ 42.885422][ T4156] hierarchical_memsw_limit 9223372036854771712 [ 42.891660][ T4156] total_cache 94208 [ 42.895555][ T4156] total_rss 0 [ 42.898922][ T4156] total_shmem 0 [ 42.902586][ T4156] total_mapped_file 94208 [ 42.906953][ T4156] total_dirty 94208 [ 42.910944][ T4156] total_writeback 0 [ 42.914752][ T4156] total_workingset_refault_anon 3 [ 42.919778][ T4156] total_workingset_refault_file 0 [ 42.924837][ T4156] total_swap 192512 [ 42.928641][ T4156] total_swapcached 8192 [ 42.932847][ T4156] total_pgpgin 10016 [ 42.936747][ T4156] total_pgpgout 9991 [ 42.937427][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 42.937448][ T29] audit: type=1400 audit(1726186279.523:633): avc: denied { mounton } for pid=4174 comm="syz.1.253" path="/41/file0" dev="tmpfs" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 42.940648][ T4156] total_pgfault 14358 [ 42.940659][ T4156] total_pgmajfault 4 [ 42.977874][ T4156] total_inactive_anon 8192 [ 42.982713][ T4156] total_active_anon 0 [ 42.986689][ T4156] total_inactive_file 94208 [ 42.991349][ T4156] total_active_file 0 [ 42.995340][ T4156] total_unevictable 0 [ 42.999470][ T4156] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz0,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.246,pid=4156,uid=0 [ 43.014400][ T4156] Memory cgroup out of memory: Killed process 4156 (syz.0.246) total-vm:89164kB, anon-rss:740kB, file-rss:16180kB, shmem-rss:0kB, UID:0 pgtables:116kB oom_score_adj:1000 [ 43.043739][ T4176] Quota error (device loop1): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 43.053963][ T4176] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 43.064225][ T4176] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.253: Failed to acquire dquot type 1 [ 43.112697][ T4176] EXT4-fs (loop1): 1 truncate cleaned up [ 43.118935][ T4176] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.132786][ T4176] ext4 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.146965][ T4176] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.