last executing test programs: 13.125824827s ago: executing program 3 (id=160): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close_range(r0, 0xffffffffffffffff, 0x0) 13.063742408s ago: executing program 3 (id=162): mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc010}, 0x840) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) 12.988083289s ago: executing program 3 (id=168): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 12.94524137s ago: executing program 3 (id=171): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x2a020400) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 12.862322581s ago: executing program 3 (id=173): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/rpc\x00') fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000140), &(0x7f0000000040)='%pI4 \x00'}, 0x2a) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) exit(0xffff) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) 12.604066737s ago: executing program 3 (id=175): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}}, 0x84) 12.602706457s ago: executing program 32 (id=175): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x2000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @multicast}]}}}]}, 0x40}}, 0x84) 1.384912013s ago: executing program 1 (id=455): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r3, &(0x7f00000023c0)=ANY=[@ANYBLOB='S'], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 1.307748274s ago: executing program 5 (id=458): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x42, 0x3}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x4, 0x10000000}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000180)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40040}, 0x4) 1.280110825s ago: executing program 1 (id=460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0xfffffffffffffffd}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.198575296s ago: executing program 1 (id=462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r3, {0x10, 0xb}, {0x0, 0x4}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 978.357861ms ago: executing program 1 (id=466): sched_setscheduler(0x0, 0x5, &(0x7f0000000480)) ioprio_set$pid(0x2, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 484.0492ms ago: executing program 4 (id=472): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5ea8, 0x8, 0x2, 0x400250}, &(0x7f0000000300)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2004, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 482.366071ms ago: executing program 0 (id=482): mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) pipe2$9p(0x0, 0x0) dup(0xffffffffffffffff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r1 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r1) 479.965431ms ago: executing program 2 (id=473): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 462.594851ms ago: executing program 0 (id=474): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000340), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) 456.956481ms ago: executing program 5 (id=475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$nl_route(0x10, 0x3, 0x0) 439.159961ms ago: executing program 2 (id=476): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 437.332741ms ago: executing program 0 (id=477): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001ec0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, 0x0, &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[], 0x50) syz_open_procfs$namespace(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000300240248ff050005001200", 0x2e}], 0x1}, 0x0) 374.179933ms ago: executing program 5 (id=478): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 363.802373ms ago: executing program 4 (id=479): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 353.017413ms ago: executing program 0 (id=480): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000300)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r3, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) close(0x4) 345.906883ms ago: executing program 2 (id=481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 333.932873ms ago: executing program 0 (id=483): r0 = memfd_secret(0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ab3dc9350000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086dcf4c5a940691f9638ce34dba904483f2ed4e7a713b7eac29c5e122f1b6acd6f1da2"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r0, 0x2e, 0x4608, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r4, 0x4) 313.304224ms ago: executing program 2 (id=484): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 313.139433ms ago: executing program 0 (id=485): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x8) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 312.722924ms ago: executing program 4 (id=486): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x402) r1 = socket$unix(0x1, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r0, 0x0, 0x0) 299.907814ms ago: executing program 1 (id=487): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, 0x0, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) 299.523964ms ago: executing program 5 (id=488): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0) timer_settime(r1, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000000000000) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) socket$nl_route(0x10, 0x3, 0x0) 195.774046ms ago: executing program 5 (id=491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffdffffffffffe}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPRESSIONS={0x2c, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 178.117786ms ago: executing program 5 (id=492): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@minixdf}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, &(0x7f00000008c0)="3bf5", 0x2) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7fffeffd) 165.208096ms ago: executing program 2 (id=493): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc1103000) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{&(0x7f0000000640)=""/165, 0xa5}], 0x1, 0x180, 0x9) 113.562708ms ago: executing program 4 (id=494): ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000340)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x0, 0xf7ffffff, @private2={0xfc, 0x2, '\x00', 0x2}}, 0x1c) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 52.059949ms ago: executing program 4 (id=495): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{0x0, 0x1e, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0x3f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0x1}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f0000000540)="f2e659a0b00d26c2ee15", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0xfffffd57}, {&(0x7f0000001340)="b8", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0xfffffd70, &(0x7f0000001540)=[{&(0x7f0000000140), 0x1}, {&(0x7f0000000340)="e4", 0xfffffec2}], 0x2, 0x0, 0xffffff84}}], 0x5f, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 0s ago: executing program 1 (id=496): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/375], 0x1a, 0xa06, &(0x7f00000005c0)="$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") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, 0x0, 0x4008000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.114' (ED25519) to the list of known hosts. [ 22.765630][ T29] audit: type=1400 audit(1758585925.687:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.766490][ T3294] cgroup: Unknown subsys name 'net' [ 22.788422][ T29] audit: type=1400 audit(1758585925.687:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.815654][ T29] audit: type=1400 audit(1758585925.717:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.968236][ T3294] cgroup: Unknown subsys name 'cpuset' [ 22.974262][ T3294] cgroup: Unknown subsys name 'rlimit' [ 23.163149][ T29] audit: type=1400 audit(1758585926.087:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.186415][ T29] audit: type=1400 audit(1758585926.087:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.206937][ T29] audit: type=1400 audit(1758585926.087:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.213575][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.227253][ T29] audit: type=1400 audit(1758585926.087:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 23.256078][ T29] audit: type=1400 audit(1758585926.097:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.280871][ T29] audit: type=1400 audit(1758585926.097:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.304143][ T29] audit: type=1400 audit(1758585926.167:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.337323][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.144000][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 25.173020][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 25.198446][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 25.211136][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 25.263587][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.270657][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.278176][ T3313] bridge_slave_0: entered allmulticast mode [ 25.284613][ T3313] bridge_slave_0: entered promiscuous mode [ 25.306426][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.313572][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.320752][ T3313] bridge_slave_1: entered allmulticast mode [ 25.327013][ T3313] bridge_slave_1: entered promiscuous mode [ 25.366478][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.373558][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.381449][ T3305] bridge_slave_0: entered allmulticast mode [ 25.387772][ T3305] bridge_slave_0: entered promiscuous mode [ 25.401473][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.410577][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.417719][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.424857][ T3326] bridge_slave_0: entered allmulticast mode [ 25.431183][ T3326] bridge_slave_0: entered promiscuous mode [ 25.437853][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.444943][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.452160][ T3326] bridge_slave_1: entered allmulticast mode [ 25.458704][ T3326] bridge_slave_1: entered promiscuous mode [ 25.468925][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.475953][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.483117][ T3305] bridge_slave_1: entered allmulticast mode [ 25.489451][ T3305] bridge_slave_1: entered promiscuous mode [ 25.495601][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 25.505093][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.523737][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.530800][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.537912][ T3310] bridge_slave_0: entered allmulticast mode [ 25.544289][ T3310] bridge_slave_0: entered promiscuous mode [ 25.567019][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.574150][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.581303][ T3310] bridge_slave_1: entered allmulticast mode [ 25.587594][ T3310] bridge_slave_1: entered promiscuous mode [ 25.600229][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.616697][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.627042][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.641264][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.655656][ T3313] team0: Port device team_slave_0 added [ 25.672974][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.682546][ T3313] team0: Port device team_slave_1 added [ 25.700194][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.723453][ T3326] team0: Port device team_slave_0 added [ 25.729776][ T3305] team0: Port device team_slave_0 added [ 25.735989][ T3326] team0: Port device team_slave_1 added [ 25.750046][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.757083][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.764963][ T3307] bridge_slave_0: entered allmulticast mode [ 25.771192][ T3307] bridge_slave_0: entered promiscuous mode [ 25.782361][ T3305] team0: Port device team_slave_1 added [ 25.797334][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.804367][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.830275][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.840979][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.848052][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.855181][ T3307] bridge_slave_1: entered allmulticast mode [ 25.861515][ T3307] bridge_slave_1: entered promiscuous mode [ 25.872672][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.879644][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.905560][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.920851][ T3310] team0: Port device team_slave_0 added [ 25.927174][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.934119][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.959991][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.976085][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.983054][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.008926][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.019774][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.026695][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.052751][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.063980][ T3310] team0: Port device team_slave_1 added [ 26.088963][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.095900][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.121866][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.141949][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.148951][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.174853][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.186614][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.210473][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.217407][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.243420][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.254961][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.273363][ T3313] hsr_slave_0: entered promiscuous mode [ 26.279336][ T3313] hsr_slave_1: entered promiscuous mode [ 26.296525][ T3305] hsr_slave_0: entered promiscuous mode [ 26.302512][ T3305] hsr_slave_1: entered promiscuous mode [ 26.308355][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 26.314060][ T3305] Cannot create hsr debugfs directory [ 26.355300][ T3310] hsr_slave_0: entered promiscuous mode [ 26.361338][ T3310] hsr_slave_1: entered promiscuous mode [ 26.367138][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 26.372857][ T3310] Cannot create hsr debugfs directory [ 26.381134][ T3326] hsr_slave_0: entered promiscuous mode [ 26.387019][ T3326] hsr_slave_1: entered promiscuous mode [ 26.392855][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 26.398593][ T3326] Cannot create hsr debugfs directory [ 26.404562][ T3307] team0: Port device team_slave_0 added [ 26.413539][ T3307] team0: Port device team_slave_1 added [ 26.456118][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.463078][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.489041][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.505961][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.512942][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.538922][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.593469][ T3307] hsr_slave_0: entered promiscuous mode [ 26.599563][ T3307] hsr_slave_1: entered promiscuous mode [ 26.605264][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.611013][ T3307] Cannot create hsr debugfs directory [ 26.710246][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.723611][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.734520][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.748690][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.770878][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.780516][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.789065][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.798691][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.832801][ T3326] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.842094][ T3326] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.852611][ T3326] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.862309][ T3326] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.910397][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.922414][ T3310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.933181][ T3310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.941809][ T3310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.952345][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.960770][ T3310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.985714][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.994922][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.007555][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.014618][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.029170][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 27.040219][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.047257][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.058826][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 27.072370][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 27.082817][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.089876][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.101147][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 27.110540][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.117564][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.136795][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.164602][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.193978][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.201040][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.215613][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.222681][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.253094][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.265681][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.290714][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.304415][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.321173][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.328246][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.347338][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.354452][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.370668][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.384745][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.395215][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.422097][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.431973][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.439040][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.450111][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.461724][ T2079] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.468794][ T2079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.486452][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 27.496851][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.548690][ T3305] veth0_vlan: entered promiscuous mode [ 27.559539][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.568809][ T3305] veth1_vlan: entered promiscuous mode [ 27.614131][ T3305] veth0_macvtap: entered promiscuous mode [ 27.627386][ T3305] veth1_macvtap: entered promiscuous mode [ 27.638640][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.651725][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.661221][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.693092][ T3326] veth0_vlan: entered promiscuous mode [ 27.706315][ T2079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.728470][ T2079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.737169][ T2079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.757162][ T3310] veth0_vlan: entered promiscuous mode [ 27.764424][ T2079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.782747][ T3310] veth1_vlan: entered promiscuous mode [ 27.790441][ T3326] veth1_vlan: entered promiscuous mode [ 27.795979][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 27.795990][ T29] audit: type=1400 audit(1758585930.717:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.BXAzta/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 27.826202][ T29] audit: type=1400 audit(1758585930.717:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 27.831977][ T3313] veth0_vlan: entered promiscuous mode [ 27.848201][ T29] audit: type=1400 audit(1758585930.717:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.BXAzta/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 27.866625][ T3326] veth0_macvtap: entered promiscuous mode [ 27.878705][ T29] audit: type=1400 audit(1758585930.717:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 27.892516][ T3310] veth0_macvtap: entered promiscuous mode [ 27.906104][ T29] audit: type=1400 audit(1758585930.717:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.BXAzta/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 27.922527][ T3313] veth1_vlan: entered promiscuous mode [ 27.938394][ T29] audit: type=1400 audit(1758585930.717:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.BXAzta/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 27.947167][ T3310] veth1_macvtap: entered promiscuous mode [ 27.971102][ T29] audit: type=1400 audit(1758585930.717:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.983187][ T3326] veth1_macvtap: entered promiscuous mode [ 28.002518][ T29] audit: type=1400 audit(1758585930.717:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 28.025234][ T29] audit: type=1400 audit(1758585930.717:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=4639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 28.032902][ T3313] veth0_macvtap: entered promiscuous mode [ 28.055137][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.066672][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.080218][ T3313] veth1_macvtap: entered promiscuous mode [ 28.087452][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.097135][ T29] audit: type=1400 audit(1758585931.007:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 28.117839][ T3307] veth0_vlan: entered promiscuous mode [ 28.143201][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.154169][ T1052] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.166991][ T1052] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.176236][ T3307] veth1_vlan: entered promiscuous mode [ 28.186529][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.201288][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.210333][ T1052] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.230533][ T3307] veth0_macvtap: entered promiscuous mode [ 28.238460][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.245510][ C0] hrtimer: interrupt took 37936 ns [ 28.253921][ T1052] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.275833][ T1052] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.296647][ T3307] veth1_macvtap: entered promiscuous mode [ 28.306136][ T1052] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.333580][ T1052] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.343473][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.363689][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.372241][ T1052] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.422265][ T1052] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.447604][ T1052] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.474014][ T3496] loop4: detected capacity change from 0 to 1024 [ 28.481055][ T3493] bridge_slave_0: left allmulticast mode [ 28.486694][ T3493] bridge_slave_0: left promiscuous mode [ 28.492534][ T3493] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.500990][ T3496] ======================================================= [ 28.500990][ T3496] WARNING: The mand mount option has been deprecated and [ 28.500990][ T3496] and is ignored by this kernel. Remove the mand [ 28.500990][ T3496] option from the mount to silence this warning. [ 28.500990][ T3496] ======================================================= [ 28.541727][ T3493] bridge_slave_1: left allmulticast mode [ 28.547396][ T3493] bridge_slave_1: left promiscuous mode [ 28.553134][ T3493] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.572545][ T3493] bond0: (slave bond_slave_0): Releasing backup interface [ 28.581708][ T3496] EXT4-fs: Mount option(s) incompatible with ext2 [ 28.594841][ T3493] bond0: (slave bond_slave_1): Releasing backup interface [ 28.620136][ T3501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11'. [ 28.620430][ T3493] team0: Port device team_slave_0 removed [ 28.629020][ T3501] netlink: 212 bytes leftover after parsing attributes in process `syz.4.11'. [ 28.645115][ T3493] team0: Port device team_slave_1 removed [ 28.652697][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 28.660075][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 28.670101][ T3493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 28.677455][ T3493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 28.707526][ T1052] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.740989][ T1052] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.759634][ T1052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.782980][ T1052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.792364][ T1052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.802537][ T1386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.195242][ T3544] syzkaller0: entered allmulticast mode [ 29.204253][ T3544] syzkaller0 (unregistering): left allmulticast mode [ 29.250693][ T3537] syz.0.26 (3537) used greatest stack depth: 10824 bytes left [ 29.256490][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 29.272234][ T3556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.35'. [ 29.294259][ T3552] syzkaller0: entered promiscuous mode [ 29.299772][ T3552] syzkaller0: entered allmulticast mode [ 29.329449][ T3561] IPv4: Oversized IP packet from 127.202.26.0 [ 29.374111][ T3559] syz.0.36 uses obsolete (PF_INET,SOCK_PACKET) [ 29.504126][ T3572] loop4: detected capacity change from 0 to 1024 [ 29.525667][ T3572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.525930][ T3572] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 29.713385][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.781017][ T3588] TCP: tcp_parse_options: Illegal window scaling value 94 > 14 received [ 29.939699][ T3595] loop3: detected capacity change from 0 to 4096 [ 29.950407][ T3595] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 29.967484][ T3595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.001667][ T3595] capability: warning: `syz.3.50' uses deprecated v2 capabilities in a way that may be insecure [ 30.040876][ T3601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 30.049745][ T3601] netlink: 12 bytes leftover after parsing attributes in process `syz.2.52'. [ 30.081914][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.126794][ T3603] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.53'. [ 30.162057][ T3608] syz_tun: entered allmulticast mode [ 30.172139][ T3608] pimreg: entered allmulticast mode [ 30.181514][ T3607] syz_tun: left allmulticast mode [ 30.237781][ T3618] loop2: detected capacity change from 0 to 256 [ 30.257020][ T3618] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 30.282227][ T3620] loop3: detected capacity change from 0 to 128 [ 30.295932][ T3618] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 30.362438][ T3621] syz.3.58: attempt to access beyond end of device [ 30.362438][ T3621] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 30.375878][ T3621] syz.3.58: attempt to access beyond end of device [ 30.375878][ T3621] loop3: rw=2049, sector=161, nr_sectors = 8 limit=128 [ 30.389548][ T3621] syz.3.58: attempt to access beyond end of device [ 30.389548][ T3621] loop3: rw=2049, sector=177, nr_sectors = 8 limit=128 [ 30.402915][ T3621] syz.3.58: attempt to access beyond end of device [ 30.402915][ T3621] loop3: rw=2049, sector=193, nr_sectors = 8 limit=128 [ 30.419759][ T3621] syz.3.58: attempt to access beyond end of device [ 30.419759][ T3621] loop3: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 30.434714][ T3621] syz.3.58: attempt to access beyond end of device [ 30.434714][ T3621] loop3: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 30.448186][ T3621] syz.3.58: attempt to access beyond end of device [ 30.448186][ T3621] loop3: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 30.462502][ T3621] syz.3.58: attempt to access beyond end of device [ 30.462502][ T3621] loop3: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 30.476721][ T3621] syz.3.58: attempt to access beyond end of device [ 30.476721][ T3621] loop3: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 30.493451][ T3621] syz.3.58: attempt to access beyond end of device [ 30.493451][ T3621] loop3: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 30.521917][ T3626] loop2: detected capacity change from 0 to 4096 [ 30.580567][ T3626] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.629116][ T3633] netlink: 20 bytes leftover after parsing attributes in process `syz.0.63'. [ 30.648984][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.725446][ T3650] netlink: 100 bytes leftover after parsing attributes in process `syz.2.66'. [ 30.764480][ T3654] netlink: 4 bytes leftover after parsing attributes in process `syz.0.72'. [ 30.917216][ T3665] macvlan1: entered promiscuous mode [ 30.934521][ T3648] syz.4.70 (3648) used greatest stack depth: 9992 bytes left [ 30.953877][ T3665] ipvlan0: entered promiscuous mode [ 30.961015][ T3665] ipvlan0: left promiscuous mode [ 30.971018][ T3665] macvlan1: left promiscuous mode [ 31.113484][ T3681] vlan2: entered allmulticast mode [ 31.118885][ T3681] dummy0: entered allmulticast mode [ 31.137379][ T3683] netlink: 'syz.4.84': attribute type 5 has an invalid length. [ 31.168235][ T3681] Zero length message leads to an empty skb [ 31.876096][ T3725] loop3: detected capacity change from 0 to 8192 [ 32.104895][ T3746] lo speed is unknown, defaulting to 1000 [ 32.111249][ T3746] lo speed is unknown, defaulting to 1000 [ 32.117192][ T3746] lo speed is unknown, defaulting to 1000 [ 32.124095][ T3746] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 32.132067][ T3746] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 32.147541][ T3746] lo speed is unknown, defaulting to 1000 [ 32.154371][ T3746] lo speed is unknown, defaulting to 1000 [ 32.166588][ T3746] lo speed is unknown, defaulting to 1000 [ 32.173774][ T3746] lo speed is unknown, defaulting to 1000 [ 32.180160][ T3746] lo speed is unknown, defaulting to 1000 [ 32.300830][ T3762] loop3: detected capacity change from 0 to 2048 [ 32.320201][ T3762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.454617][ T3310] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.260466][ T29] kauditd_printk_skb: 518 callbacks suppressed [ 33.260481][ T29] audit: type=1400 audit(1758585936.177:609): avc: denied { mounton } for pid=3813 comm="syz.0.136" path="/30/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 33.299252][ T3818] process 'syz.2.138' launched './file0' with NULL argv: empty string added [ 33.317880][ T29] audit: type=1400 audit(1758585936.227:610): avc: denied { watch watch_reads } for pid=3816 comm="syz.2.138" path="/22/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.341216][ T29] audit: type=1326 audit(1758585936.237:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3773 comm="syz.3.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff37883eec9 code=0x7fc00000 [ 33.364451][ T29] audit: type=1400 audit(1758585936.237:612): avc: denied { execute_no_trans } for pid=3816 comm="syz.2.138" path="/22/file0" dev="tmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 33.543791][ T29] audit: type=1400 audit(1758585936.467:613): avc: denied { bind } for pid=3830 comm="syz.1.144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.676251][ T3844] __nla_validate_parse: 4 callbacks suppressed [ 33.676266][ T3844] netlink: 240 bytes leftover after parsing attributes in process `syz.0.143'. [ 33.749962][ T29] audit: type=1400 audit(1758585936.677:614): avc: denied { create } for pid=3848 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.821700][ T3850] loop0: detected capacity change from 0 to 1024 [ 33.891590][ T3862] netlink: 96 bytes leftover after parsing attributes in process `syz.1.153'. [ 33.899819][ T29] audit: type=1400 audit(1758585936.747:615): avc: denied { write } for pid=3848 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 33.920255][ T3850] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.937484][ T3850] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.151: Allocating blocks 385-513 which overlap fs metadata [ 33.968822][ T3850] EXT4-fs (loop0): pa ffff8881072360e0: logic 16, phys. 129, len 24 [ 33.976974][ T3850] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 34.040116][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.062020][ T29] audit: type=1400 audit(1758585936.977:616): avc: denied { create } for pid=3873 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.081448][ T29] audit: type=1400 audit(1758585936.977:617): avc: denied { connect } for pid=3873 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.101120][ T29] audit: type=1400 audit(1758585936.977:618): avc: denied { write } for pid=3873 comm="syz.4.157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.193757][ T3886] Driver unsupported XDP return value 0 on prog (id 140) dev N/A, expect packet loss! [ 34.205388][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 34.214333][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 34.306850][ T3898] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.381881][ T3911] loop4: detected capacity change from 0 to 512 [ 34.392124][ T3898] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.414392][ T3911] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.427518][ T3911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.450761][ T3911] EXT4-fs (loop4): 1 truncate cleaned up [ 34.456727][ T3911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.493034][ T3898] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.555378][ T3898] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.637356][ T288] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.653595][ T288] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.674515][ T288] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.686820][ T1052] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.707587][ T288] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.742235][ T1052] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.802939][ T3929] team_slave_0: entered promiscuous mode [ 34.835878][ T3929] team_slave_0: left promiscuous mode [ 34.858803][ T1052] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.910494][ T1052] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.033403][ T1052] bridge_slave_1: left allmulticast mode [ 35.039095][ T1052] bridge_slave_1: left promiscuous mode [ 35.044822][ T1052] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.057067][ T1052] bridge_slave_0: left allmulticast mode [ 35.062818][ T1052] bridge_slave_0: left promiscuous mode [ 35.068594][ T1052] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.222847][ T1052] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 35.233664][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.243848][ T1052] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 35.272102][ T1052] bond0 (unregistering): Released all slaves [ 35.366583][ T1052] hsr_slave_0: left promiscuous mode [ 35.374423][ T3979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.198'. [ 35.392203][ T1052] hsr_slave_1: left promiscuous mode [ 35.404807][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.412212][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.447088][ T1052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.454511][ T1052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 35.479466][ T3992] loop0: detected capacity change from 0 to 1024 [ 35.494020][ T1052] veth1_macvtap: left promiscuous mode [ 35.503251][ T3992] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.511475][ T1052] veth0_macvtap: left promiscuous mode [ 35.543912][ T3992] EXT4-fs error (device loop0): __ext4_new_inode:1073: comm syz.0.201: reserved inode found cleared - inode=18 [ 35.562546][ T1052] pimreg (unregistering): left allmulticast mode [ 35.569651][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.611485][ T1052] team0 (unregistering): Port device team_slave_1 removed [ 35.624426][ T1052] team0 (unregistering): Port device team_slave_0 removed [ 35.724200][ T3930] chnl_net:caif_netlink_parms(): no params data found [ 35.784362][ T3930] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.791529][ T3930] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.803490][ T3930] bridge_slave_0: entered allmulticast mode [ 35.809976][ T3930] bridge_slave_0: entered promiscuous mode [ 35.817477][ T3930] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.824708][ T3930] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.840212][ T3930] bridge_slave_1: entered allmulticast mode [ 35.852511][ T3930] bridge_slave_1: entered promiscuous mode [ 35.891567][ T3930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.902374][ T3930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.925977][ T3930] team0: Port device team_slave_0 added [ 35.934306][ T4045] 9pnet: p9_errstr2errno: server reported unknown error [ 35.955745][ T3930] team0: Port device team_slave_1 added [ 35.998811][ T3930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.005857][ T3930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.031948][ T3930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.049547][ T3930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.056566][ T3930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.082512][ T3930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.182781][ T4076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.221'. [ 36.213003][ T3930] hsr_slave_0: entered promiscuous mode [ 36.225088][ T3930] hsr_slave_1: entered promiscuous mode [ 36.233136][ T3930] debugfs: 'hsr0' already exists in 'hsr' [ 36.238947][ T3930] Cannot create hsr debugfs directory [ 36.311551][ T4088] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.367206][ T4088] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.387512][ T3930] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 36.396665][ T3930] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 36.407492][ T3930] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 36.416624][ T3930] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 36.429994][ T4088] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.475608][ T3930] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.488254][ T3930] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.496797][ T4088] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.512734][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.519814][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.528436][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.535523][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.560790][ T3930] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.578668][ T1052] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.590194][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.606461][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.622025][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.636218][ T3930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.809438][ T3930] veth0_vlan: entered promiscuous mode [ 36.824349][ T3930] veth1_vlan: entered promiscuous mode [ 36.863478][ T3930] veth0_macvtap: entered promiscuous mode [ 36.892226][ T3930] veth1_macvtap: entered promiscuous mode [ 36.914178][ T3930] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.936494][ T3930] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.950993][ T31] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.961353][ T4156] SELinux: failed to load policy [ 36.976637][ T31] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.001585][ T31] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.013531][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.046346][ T4166] netlink: 'syz.1.242': attribute type 30 has an invalid length. [ 37.055041][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.177'. [ 37.064004][ T4173] netlink: 12 bytes leftover after parsing attributes in process `syz.5.177'. [ 37.231658][ T4186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 37.240626][ T4186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.249'. [ 38.270522][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 38.270537][ T29] audit: type=1400 audit(1758585941.197:798): avc: denied { connect } for pid=4250 comm="syz.2.275" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.301275][ T29] audit: type=1400 audit(1758585941.197:799): avc: denied { write } for pid=4250 comm="syz.2.275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 38.320628][ T29] audit: type=1400 audit(1758585941.197:800): avc: denied { write } for pid=4250 comm="syz.2.275" laddr=::1 lport=6 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 38.365253][ T29] audit: type=1400 audit(1758585941.287:801): avc: denied { connect } for pid=4254 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 38.433660][ T29] audit: type=1400 audit(1758585941.357:802): avc: denied { execute } for pid=4263 comm="syz.4.281" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7573 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 38.462901][ T29] audit: type=1400 audit(1758585941.387:803): avc: denied { create } for pid=4263 comm="syz.4.281" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 38.515097][ T29] audit: type=1400 audit(1758585941.407:804): avc: denied { shutdown } for pid=4261 comm="syz.1.280" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 38.569651][ T4273] netlink: 'syz.5.285': attribute type 1 has an invalid length. [ 38.584138][ T4275] syzkaller0: refused to change device tx_queue_len [ 38.682760][ T4281] sctp: [Deprecated]: syz.4.288 (pid 4281) Use of int in maxseg socket option. [ 38.682760][ T4281] Use struct sctp_assoc_value instead [ 38.683510][ T29] audit: type=1400 audit(1758585941.607:805): avc: denied { map } for pid=4278 comm="syz.4.288" path="socket:[8501]" dev="sockfs" ino=8501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.719736][ T29] audit: type=1400 audit(1758585941.607:806): avc: denied { read accept } for pid=4278 comm="syz.4.288" path="socket:[8501]" dev="sockfs" ino=8501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 38.851897][ T4288] wg2: entered promiscuous mode [ 38.856817][ T4288] wg2: entered allmulticast mode [ 38.969954][ T4290] macvlan1: entered promiscuous mode [ 39.000079][ T4290] ipvlan0: entered promiscuous mode [ 39.020368][ T29] audit: type=1326 audit(1758585941.927:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4291 comm="syz.0.294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49037ceec9 code=0x50000 [ 39.188424][ T4290] ipvlan0: left promiscuous mode [ 39.195265][ T4290] macvlan1: left promiscuous mode [ 39.475299][ T4311] binfmt_misc: register: failed to install interpreter file ./file2 [ 39.504686][ T4311] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 39.614966][ T4316] loop2: detected capacity change from 0 to 1024 [ 39.672792][ T4316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.965284][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.068718][ T4345] geneve2: entered promiscuous mode [ 40.074007][ T4345] geneve2: entered allmulticast mode [ 40.079585][ T4342] loop2: detected capacity change from 0 to 2048 [ 40.099034][ T4342] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.117383][ T4342] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.129138][ T4342] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.194067][ T4352] syz_tun: entered allmulticast mode [ 40.209159][ T4351] syz_tun: left allmulticast mode [ 40.246122][ T4358] mmap: syz.1.318 (4358) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 40.484555][ T4372] loop5: detected capacity change from 0 to 128 [ 40.581061][ T4386] loop2: detected capacity change from 0 to 2048 [ 40.600675][ T4386] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a842c018, mo2=0002] [ 40.612065][ T4386] System zones: 0-7 [ 40.619032][ T4386] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 40.645074][ T4393] netlink: 2048 bytes leftover after parsing attributes in process `syz.5.333'. [ 40.654163][ T4393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.333'. [ 40.670030][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 40.894015][ T4414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.344'. [ 40.902966][ T4414] netlink: 212 bytes leftover after parsing attributes in process `syz.4.344'. [ 40.963627][ T4410] loop0: detected capacity change from 0 to 128 [ 40.991453][ T4418] binfmt_misc: register: failed to install interpreter file ./file2 [ 41.012458][ T4418] siw: device registration error -23 [ 41.046704][ T4422] macvlan1: entered promiscuous mode [ 41.071252][ T4422] ipvlan0: entered promiscuous mode [ 41.094680][ T4422] ipvlan0: left promiscuous mode [ 41.106086][ T4422] macvlan1: left promiscuous mode [ 41.127374][ T4428] SELinux: security_context_str_to_sid () failed with errno=-22 [ 41.246488][ T4440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 41.273167][ T4440] team1: entered promiscuous mode [ 41.278452][ T4440] team1: entered allmulticast mode [ 41.304925][ T4445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 41.396692][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 41.405514][ T4452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 41.496930][ T4462] @: renamed from vlan0 (while UP) [ 41.527149][ T4468] wg2: entered promiscuous mode [ 41.532099][ T4468] wg2: entered allmulticast mode [ 41.553914][ T4470] lo speed is unknown, defaulting to 1000 [ 41.567294][ T4472] pim6reg1: entered promiscuous mode [ 41.572773][ T4472] pim6reg1: entered allmulticast mode [ 41.594933][ T4470] lo speed is unknown, defaulting to 1000 [ 41.603672][ T4470] lo speed is unknown, defaulting to 1000 [ 41.610529][ T4470] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 41.624441][ T4470] lo speed is unknown, defaulting to 1000 [ 41.631133][ T4470] lo speed is unknown, defaulting to 1000 [ 41.637201][ T4470] lo speed is unknown, defaulting to 1000 [ 41.690834][ T4470] lo speed is unknown, defaulting to 1000 [ 41.699515][ T4523] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4523 comm=syz.1.374 [ 41.712017][ T4523] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4523 comm=syz.1.374 [ 41.738330][ T4470] lo speed is unknown, defaulting to 1000 [ 41.803223][ T4544] loop5: detected capacity change from 0 to 128 [ 41.912974][ T4551] loop1: detected capacity change from 0 to 512 [ 41.947097][ T4551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.978540][ T4551] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.032728][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.137398][ T4544] syz.5.377: attempt to access beyond end of device [ 42.137398][ T4544] loop5: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 42.162527][ T4560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.383'. [ 42.721885][ T4595] loop2: detected capacity change from 0 to 512 [ 42.750628][ T4595] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.392: bad orphan inode 11862016 [ 42.768944][ T4595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.784043][ T4595] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.878666][ T3326] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.917489][ T4606] loop5: detected capacity change from 0 to 512 [ 42.929428][ T4606] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 42.937353][ T4606] EXT4-fs (loop5): orphan cleanup on readonly fs [ 42.944130][ T4606] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.960378][ T4606] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 42.968393][ T4606] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.394: bg 0: block 40: padding at end of block bitmap is not set [ 42.982989][ T4606] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 42.992336][ T4606] EXT4-fs (loop5): 1 truncate cleaned up [ 42.999548][ T4606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.032674][ T3930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.138405][ T4621] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 43.257141][ T4634] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4634 comm=syz.4.406 [ 43.269618][ T4634] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4634 comm=syz.4.406 [ 43.282544][ T4632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4632 comm=syz.2.405 [ 43.294200][ T4624] syzkaller0: entered promiscuous mode [ 43.300335][ T4624] syzkaller0: entered allmulticast mode [ 43.331639][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 43.331649][ T29] audit: type=1326 audit(1758585946.257:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.361277][ T29] audit: type=1326 audit(1758585946.257:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.387240][ T29] audit: type=1326 audit(1758585946.257:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.410576][ T29] audit: type=1326 audit(1758585946.257:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.433857][ T29] audit: type=1326 audit(1758585946.257:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.457222][ T29] audit: type=1326 audit(1758585946.257:1109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5f0a960de7 code=0x7ffc0000 [ 43.480551][ T29] audit: type=1326 audit(1758585946.257:1110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.503848][ T29] audit: type=1326 audit(1758585946.257:1111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.527263][ T29] audit: type=1326 audit(1758585946.257:1112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.550571][ T29] audit: type=1326 audit(1758585946.257:1113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4635 comm="syz.1.407" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f0a95eec9 code=0x7ffc0000 [ 43.556256][ T4640] loop1: detected capacity change from 0 to 512 [ 43.589309][ T4642] loop4: detected capacity change from 0 to 128 [ 43.615631][ T4640] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 43.668358][ T4640] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 43.690179][ T4642] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.699350][ T4640] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 43.716756][ T4642] ext4 filesystem being mounted at /82/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.718315][ T4640] EXT4-fs (loop1): 1 truncate cleaned up [ 43.766937][ T3313] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.782315][ T4640] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.848106][ T4640] lo speed is unknown, defaulting to 1000 [ 44.152367][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.423988][ T4703] team_slave_0: entered promiscuous mode [ 44.431169][ T4703] ipvlan0: entered promiscuous mode [ 44.436883][ T4703] ipvlan0: left promiscuous mode [ 44.472392][ T4703] team_slave_0: left promiscuous mode [ 44.721590][ T4723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 44.728828][ T4723] IPv6: NLM_F_CREATE should be set when creating new route [ 44.736691][ T4723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 44.743925][ T4723] IPv6: NLM_F_CREATE should be set when creating new route [ 44.985944][ T4734] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4734 comm=syz.4.447 [ 45.024151][ T4735] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 45.347137][ T4739] loop5: detected capacity change from 0 to 512 [ 45.353982][ T4739] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 45.384791][ T4739] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.451: invalid indirect mapped block 4294967295 (level 0) [ 45.417601][ T4739] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.451: invalid indirect mapped block 4294967295 (level 1) [ 45.460518][ T4739] EXT4-fs (loop5): 1 orphan inode deleted [ 45.466316][ T4739] EXT4-fs (loop5): 1 truncate cleaned up [ 45.480627][ T4739] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.663548][ T4739] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 45.814566][ T3930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.031800][ T4756] __nla_validate_parse: 6 callbacks suppressed [ 46.031871][ T4756] netlink: 176 bytes leftover after parsing attributes in process `syz.4.459'. [ 46.133204][ T4761] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.154626][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.462'. [ 46.166339][ T4762] loop4: detected capacity change from 0 to 512 [ 46.191112][ T4762] EXT4-fs: quotafile must be on filesystem root [ 46.595639][ T4779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.469'. [ 46.644443][ T4779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.651686][ T4779] IPv6: NLM_F_CREATE should be set when creating new route [ 46.683154][ T4779] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 46.690382][ T4779] IPv6: NLM_F_CREATE should be set when creating new route [ 46.766437][ T4762] Set syz1 is full, maxelem 65536 reached [ 46.895220][ T4797] $Hÿ: renamed from bond0 (while UP) [ 46.904255][ T4797] $Hÿ: entered promiscuous mode [ 46.909528][ T4797] bond_slave_0: entered promiscuous mode [ 46.915347][ T4797] bond_slave_1: entered promiscuous mode [ 47.017120][ T4818] loop5: detected capacity change from 0 to 1024 [ 47.036733][ T4818] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 47.047737][ T4818] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 47.061374][ T4818] JBD2: no valid journal superblock found [ 47.067152][ T4818] EXT4-fs (loop5): Could not load journal inode [ 47.091380][ T4818] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 47.136263][ T4831] loop5: detected capacity change from 0 to 512 [ 47.147280][ T4831] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.163381][ T4831] EXT4-fs (loop5): 1 truncate cleaned up [ 47.170125][ T4831] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.258542][ T4841] ================================================================== [ 47.266654][ T4841] BUG: KCSAN: data-race in xas_find_marked / xas_set_mark [ 47.273782][ T4841] [ 47.276097][ T4841] write to 0xffff88811a4586e4 of 4 bytes by task 4831 on cpu 1: [ 47.283717][ T4841] xas_set_mark+0x12b/0x140 [ 47.288230][ T4841] __folio_start_writeback+0x1dd/0x440 [ 47.293688][ T4841] ext4_bio_write_folio+0x5ad/0x9f0 [ 47.298884][ T4841] mpage_process_page_bufs+0x4a1/0x620 [ 47.304331][ T4841] mpage_prepare_extent_to_map+0x786/0xc00 [ 47.310126][ T4841] ext4_do_writepages+0xa05/0x2750 [ 47.315230][ T4841] ext4_writepages+0x176/0x300 [ 47.319976][ T4841] do_writepages+0x1c3/0x310 [ 47.324551][ T4841] filemap_write_and_wait_range+0x144/0x340 [ 47.330438][ T4841] ext4_file_write_iter+0xe04/0xf00 [ 47.335630][ T4841] iter_file_splice_write+0x666/0xa60 [ 47.340984][ T4841] direct_splice_actor+0x156/0x2a0 [ 47.346080][ T4841] splice_direct_to_actor+0x312/0x680 [ 47.351434][ T4841] do_splice_direct+0xda/0x150 [ 47.356181][ T4841] do_sendfile+0x380/0x650 [ 47.360586][ T4841] __x64_sys_sendfile64+0x105/0x150 [ 47.365771][ T4841] x64_sys_call+0x2bb0/0x2ff0 [ 47.370433][ T4841] do_syscall_64+0xd2/0x200 [ 47.374927][ T4841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.380802][ T4841] [ 47.383107][ T4841] read to 0xffff88811a4586e4 of 4 bytes by task 4841 on cpu 0: [ 47.390630][ T4841] xas_find_marked+0x5dc/0x620 [ 47.395388][ T4841] find_get_entry+0x5d/0x380 [ 47.399962][ T4841] filemap_get_folios_tag+0x92/0x210 [ 47.405233][ T4841] mpage_prepare_extent_to_map+0x320/0xc00 [ 47.411025][ T4841] ext4_do_writepages+0xa05/0x2750 [ 47.416123][ T4841] ext4_writepages+0x176/0x300 [ 47.420869][ T4841] do_writepages+0x1c3/0x310 [ 47.425446][ T4841] file_write_and_wait_range+0x156/0x2c0 [ 47.431069][ T4841] generic_buffers_fsync_noflush+0x45/0x120 [ 47.436946][ T4841] ext4_sync_file+0x1ab/0x690 [ 47.441604][ T4841] vfs_fsync_range+0x10a/0x130 [ 47.446354][ T4841] ext4_buffered_write_iter+0x34f/0x3c0 [ 47.451891][ T4841] ext4_file_write_iter+0xdbf/0xf00 [ 47.457081][ T4841] iter_file_splice_write+0x666/0xa60 [ 47.462438][ T4841] direct_splice_actor+0x156/0x2a0 [ 47.467534][ T4841] splice_direct_to_actor+0x312/0x680 [ 47.472888][ T4841] do_splice_direct+0xda/0x150 [ 47.477637][ T4841] do_sendfile+0x380/0x650 [ 47.482045][ T4841] __x64_sys_sendfile64+0x105/0x150 [ 47.487230][ T4841] x64_sys_call+0x2bb0/0x2ff0 [ 47.491906][ T4841] do_syscall_64+0xd2/0x200 [ 47.496400][ T4841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.502279][ T4841] [ 47.504586][ T4841] value changed: 0x0a000021 -> 0x00000021 [ 47.510282][ T4841] [ 47.512591][ T4841] Reported by Kernel Concurrency Sanitizer on: [ 47.518730][ T4841] CPU: 0 UID: 0 PID: 4841 Comm: syz.5.492 Not tainted syzkaller #0 PREEMPT(voluntary) [ 47.528343][ T4841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 47.538380][ T4841] ================================================================== [ 47.563479][ T4843] loop1: detected capacity change from 0 to 1764 [ 47.976430][ T4841] syz.5.492 (4841) used greatest stack depth: 9008 bytes left [ 47.991923][ T3930] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.